Your MFA won't save you from BlueKit
BlueKit is Phishing-as-a-Service that streams real M365 login pages from attacker browsers. MFA won't stop it. Only FIDO2 hardware keys can.
Read moreLatest Posts
Blog
Browse the latest cybersecurity guidance from the team.
Cyber Weekly: FortiBleed, cPanel, and Ubiquiti hit SMBs
Last week was one of those weeks where the threats landed in layers. First the FortiGate story broke with numbers that made everyone stop. Then cPanel. Then Ubiquiti. By Thursday you couldn't ignore the pattern: attackers had figured out that the easiest way into a small business is through the infrastructure it relies on every day. Here's what happened, what it actually means, and the one thing you should check before you finish this post.
Read moreBusiness Email Compromise: The $2.77B Attack You Ignore
When people picture a cyberattack, they think hooded hackers and dramatic ransomware screens. The reality that's quietly draining the most money looks far more ordinary: a plain email asking you to update a payment detail.
Read moreCyber Weekly: Supply chains under siege
If you run a small or medium business and you've been treating cybersecurity as a big company problem, this week should change your mind. We had a Fortinet credential leak exposing 74,000+ devices, a WordPress plugin supply chain attack backdooring paying customers, a critical Splunk bug being exploited in the wild, and a Salesforce OAuth breach that started with one vendor's old password. The common thread? None of these required sophisticated, nation-state-level attacks. They required a forgotten admin account, an auto-update you trusted, and an exposed VPN. Here's what happened, what it means, and what to do about it.
Read moreHow We Work
A practical model designed for momentum.
See how we scope engagements to reduce risk quickly while keeping delivery predictable.