Attacks, defences, NIS2 explained and the first hours after an incident.
Remote support, shared accounts, programs installed years ago and never removed. Supplier access is one of the most exploited ways in. How to list it, limit it, log it and close it.
12 October 2026
A public grant lowers the cost, but it does not make the choices for the company. Here are the schemes that fund cybersecurity, what they really cover and the questions to ask the supplier before you sign.
6 August 2026Many intrusions leave traces outside the company before they show any sign inside: credentials for sale, domains imitating the brand, suppliers that have been hit. Which signals to check and what to do when they appear.
5 August 2026There are already campaigns in which an artificial intelligence agent did most of the attacker’s work. What it really speeds up, which containment steps can kick in on their own and which must stay with a person.
29 July 2026The price of a penetration test depends on scope, approach, manual work, documentation and retesting. How to read a quote, what the rules require and what should be left once the test is over.
22 July 2026In late April 2026 a critical cPanel flaw put a huge share of web servers at risk. Updating and restoring are not enough. What to look for, what to ask your hosting provider and why you need forensic analysis.
5 May 2026Backup repairs damage that has already been done. It does not stop anyone getting in, and it does not tell you who did. Here are the three pillars of basic defence, and the quarterly review to run with IT and management.
22 April 2026An imaginary story told from the attacker’s side. Targets are not chosen, they are found. We look at the three signals that make an attacker move on, and at how they become concrete rules in a company.
9 April 2026After an incident the questions are always the same. Who got in, when, from where, and what did they touch? The log files answer them, if they still exist. Here is which logs to collect, how long to keep them and where.
28 March 2026
The serviceCybersecurityTesting carried out the way an attacker would (penetration tests), incident management, business continuity and support in meeting NIS2 requirements, suppliers included.
Working together
A first confidential conversation with someone who knows the subject. Together we work out the problem, who needs to be involved and whether there is work to be done.
