Practical IT for business.
Plain-English articles on managed IT, security, privacy and AI, from a team that’s been doing this since 1990.
Business email compromise: how the fake-invoice scam works
A vendor emails to say their bank details have changed. The invoice looks right, the email thread looks real, and the money…
Microsoft Entra: why it works for a small business
Microsoft Entra gives a small business one sign-in, one place to grant and remove access, and stronger protection for every account. Here…
Why we added Cloudflare for our clients, and what it does for you
We now put client domains and websites behind the Cloudflare network. Here is what it is in plain English, how it cuts…
Sophos Endpoint levels, explained: Endpoint, EDR, XDR and MDR
Intercept X, XDR, MDR Essentials, MDR Complete: Sophos has renamed a lot. A plain-English guide to what each Sophos endpoint level is…
Sophos Synchronized Security, explained simply
What happens when one laptop in your office gets infected? A plain-English guide to Sophos Synchronized Security: the Security Heartbeat, automatic isolation,…
We trusted specialists with our websites. Here’s what we found.
We hired a company that specialized in websites to look after two of ours. Years later we checked, and found malware, attacker-created…
Is your website your weakest link?
Your website is always online, always public and often the least-watched system your business runs. Here is how business websites get compromised…
Still on Windows 10? Your options after end of support
Windows 10 support has ended, and the first year of paid business security updates ends October 13, 2026. What to upgrade, what…
How ransomware gangs pressure victims, and how to reduce your risk
Modern ransomware is more than locked files. Criminals steal data, harvest passwords, disable security tools and then apply pressure. Here is how…
Gmail, Docs and Drive: why we advise businesses to avoid them
Gemini now reads the inbox and the shared drive, and Google's settings let that data shape other Google products. Why we advise…
Windows updates: timely, not rushed
Skipping updates leaves known holes open. Installing every patch the minute it ships invites a different kind of trouble. How a managed…
Social media and keyloggers: a two-part threat to your business
Social media gives attackers the information, AI voice cloning adds a convincing voice, and keyloggers and password stealers do the rest. Why…