Blog
-
What to Ask a Software Vendor AfterThey Report a Data Breach
Article Summary: Confirm that the notice is genuine, then ask whether your business was affected, what information was exposed, when the breach happened, and whether any passwords, access tokens, or connected systems need attention. Keep written records of the vendor’s answers and involve your IT provider, insurer, or legal adviser when needed. You’ve just found…
-
How to Make Sure Your Business Owns Its Domain Name
Article Summary: Your business should control the account where its domain is registered. The registration details, recovery methods, billing information, renewal settings, and DNS access should not depend on one employee, contractor, web designer, or IT provider. Once your website and email are working, the domain name rarely needs day-to-day attention. Renewal may happen automatically,…
-
How Hackers Keep Access to Your Email After You Change the Password
Summary: Changing the password blocks someone from signing in with the old password. However, they may still have an active session, a forwarding rule, access through a connected app, mailbox permissions, or a recovery method they added. When someone gets into a business email account, changing the password should happen immediately. Once that is done,…
Archived posts
-
Micro-SaaS Vetting: The 5-Minute Security Check for Browser Add-ons
Browser add-ons have a funny reputation. They feel “small”. A quick install. A tiny productivity boost. A harmless little helper that lives in your toolbar. But in practice, a browser extension is more like a micro-SaaS vendor sitting inside your browser session. It can see what you see, interact with the pages you open, and…
-
LinkedIn “Social Engineering”: Protecting Your Staff from Fake Recruitment Scams
A fake recruiter message is one of the cleanest social engineering tricks around because it doesn’t look like a trick. That’s why LinkedIn recruitment scams work so well inside real businesses. They don’t arrive as malware. They arrive as a normal conversation that nudges someone toward one small action: click this link, open this file,…
-
“Clean Desk” 2.0: Securing Your Home Office from Physical Data Leaks
In the traditional office, a “Clean Desk” policy was a simple habit: shred the sensitive stuff, lock it away, and don’t leave passwords where someone can see them. In 2026, the same idea still matters but the “desk” has changed. For many teams, the home office is now the default workspace, and that means physical…