Blog

Plain-English cybersecurity articles on scams, Microsoft 365, AI risks, and staying secure without a big IT team.

Threats

WordPress under attack: why your website is a favourite target

The plugins, logins and updates that expose WordPress sites.

AI

Staff are pasting client data into ChatGPT: the risk nobody is talking about

Why convenience is quietly creating a data-leak problem.

Business Email Compromise

Anatomy of a BEC attack: from phishing email to drained bank account

A step-by-step walk through a real Business Email Compromise attack chain — and the specific controls that break it at each stage.

Trends

Why cybercriminals increasingly target small businesses, not big ones

The economics that make SMEs the easy, profitable target, and what it means for your business.

Compliance

The ACSC Essential Eight: Australia's practical cybersecurity baseline

The eight mitigation strategies every Aussie SME should know to defend against the scams and attacks of today.

Cybersecurity

Cybersecurity Made Simple - Focus on What Matters Most

Cybersecurity doesn't need to be complicated. In fact, it boils down to three things: users, computers, and data. Nail these, and you're ahead of the…

Microsoft 365

How to reach a 75% Microsoft Secure Score (and why that is the sweet spot)

A realistic, prioritised path to a strong, sustainable Microsoft 365 Secure Score, and why 75% is the number worth aiming for rather than chasing a perfect one.

Microsoft 365

The Copilot Control System: what Microsoft's new AI governance layer means for you

Explain Microsoft's built-in controls for governing Copilot and third-party AI inside your tenant.

Threats

Phishing explained: the number one way businesses get breached

Understand the attack behind most incidents and how to spot it.

Infrastructure

Cloud Hosting Guide for Small Businesses

The infrastructure your website and apps run on is only as safe as who's managing it. A no-fluff guide to virtual servers, Docker containers, VLANs and managed hosting — without the enterprise price tag or the jargon.

Data Protection

Backups & Encryption Guide for Small Businesses

According to Veeam's Ransomware Trends Report, only one in six businesses properly test whether their backups can actually restore data. A practical guide covering the backup strategies that actually protect small businesses.

AI

Are You AI? (Artificially Ignorant)

AI is already in your business, the risk isn't the technology, it's artificial ignorance. A plain-English look at why that matters and what to do about it.

Trends

The cybersecurity trends shaping small business in the year ahead

A forward look at the risks and shifts SMEs should watch.

AI

AI in the workplace: three guardrails every business should have in place

The practical controls that let staff use AI safely. As Microsoft rolls out Copilot across Word, Excel and more, businesses need to put guardrails around AI adoption before it becomes a liability.

AI

Microsoft Copilot Control System: Putting Guardrails Around AI Before It Puts Your Data at Risk

Staff can unintentionally move sensitive data outside approved systems. Here's how the Copilot Control System protects your organisation without blocking productivity.

Fraud

Payroll Diversion Fraud: When the 'New Bank Details' Email Is a Thief

The email that looks like it came from your employee contains a bank account that belongs to a criminal. Here is how payroll diversion fraud works and what stops it.

Business Email Compromise

What Is Business Email Compromise, and Why Is It the Costliest Threat for SMEs?

The quiet attack that drains bank accounts without breaking in. Here is what BEC really is, how it works against small businesses, and what actually stops it.

Microsoft 365

Your Microsoft 365 Secure Score Explained: What the Number Really Means

The single number that summarises your M365 security posture. Most businesses don't know what it means, let alone how to improve it. Here's a plain-English breakdown.

Cybersecurity

Securing Microsoft 365 in 2026 - A Comprehensive Guide

An in-depth look at the cybersecurity landscape for Microsoft 365 environments in 2026, covering Copilot Control Centre, threat detection, and compliance requirements.

Microsoft 365

Cybersecurity in the Modern Digital Landscape - Microsoft 365, Copilot, and Beyond

An in-depth look at cybersecurity across Microsoft 365, Copilot Control Centre, Google Workspace, WordPress, and financial institutions — what's working, what isn't, and how to stay ahead.

Compliance

Cyber Essentials Explained: What UK Certification Means for Your Business

Cyber Essentials is the UK's flagship cybersecurity certification from the NCSC. This jargon-free guide explains what it requires, why it matters for SMEs, and how Secure365 helps you achieve and maintain it.

Cybersecurity

Small Business Owners - When was the last time you thought about the technology your business uses?

Your business relies heavily on technology. It is your duty to protect sensitive data, prevent cyber attacks, and ensure business continuity for you,…

"Fraud & BEC"

The Next Generation of Scams Don't Look Like Scams

Rewind to a few weeks back, I received an email from a ‘lawyer’ stating that a third party was about to register my UK business name as a trademark,…

Threats

If you can't tell me who controls your company domain name, you should probably read this

Your company domain name serves as a portal to interact with your clients and advertise your services, and you've likely spent the majority of your…

AI

Three guardrails every company should have in place to protect against AI

If you've been waiting for the right moment to think about AI governance in your business, that moment is very much now. Between mid-June and mid-July,…

Cybersecurity

Do BYOD's damage your client's experience?

Bringing your own computer to the workplace has been a game-changer for many businesses and their staff. However, there is growing evidence that BYOD's…

Cybersecurity

Best Cybersecurity Practices for Startups

We always get frustrated by blogs and newsletters that are too technical, so here it is - no fluff, no jargon, no A.I., just straight-talking cyber…

Cybersecurity

A worthy consideration to bolster your cybersecurity & earn client trust

The majority of you reading this article will face increasing pressure to demonstrate robust cybersecurity practices, if not already. One of the most…

"Fraud & BEC"

Invoice fraud: General reminders that stop six‑figure mistakes

Perhaps one of the most significant and damaging types of cyber incidents doesn’t involve ransomware, malware, or services going offline because a…

"Fraud & BEC"

Hackers are using more than fake leads to steal your data

I’ve talked a lot recently about the cyber-risks associated with ‘fake leads’, and since then have received a lot of feedback from clients and…

"Fraud & BEC"

Fake Sales Leads Are Targeting Companies, and They’re Getting Harder to Spot

Cybercrime has become a trillion-dollar industry. By the end of 2026, it is estimated that nearly half of global organisations will have experienced…

Compliance

Cybersecurity Certifications – A powerful first step in protecting your business (and earning client trust)

The majority of businesses are facing increasing pressure to demonstrate robust cybersecurity practices, whether this is from regulators, auditors, or…

AI

A warning for those looking to proactively automate day‑to‑day workflows

We are currently in a time when new technologies are being adopted in days and weeks, rather than months and years. This has been demonstrated with the…

Trends

2025 Cybersecurity Roundup and Action Plans for 2026

Thank you for being part of our journey this year. Whether we’ve been helping you to protect your business, collaborating as partners, or supporting…

Cybersecurity

The Cost of Doing Nothing: Why Cybersecurity Inaction Is the Biggest Risk of All

If you're a business owner or a key decision-maker, you're already familiar with the inherent risks of running a company. But when it comes to…

AI

The Hidden Dangers of AI Generated Content - What Business Owners Need to Know

We live in a wonderful time of convenient access to information. In almost every workflow, we are seeing AI streamline, optimise, and in a lot of cases…

fraud

The gift card scam that keeps catching out small business staff

Microsoft 365

What Is Microsoft Secure Score and Why Should You Care?

You’re flat out running your business, your team is busy, and everything you rely on lives in Microsoft 365. Your emails, files, collaboration tools,…

Cybersecurity

If cybersecurity keeps slipping down your to-do list, or has fallen off entirely, you’re not alone

In recent conversations we’ve had with firms of all sizes, we’ve seen business leaders focus on hitting year-end targets in areas such as revenue,…

Threats

From Beer to Cars: Lessons from Global Cyber Attacks

What do beer orders in Japan, manufacturing cars in England, and accounting software in the US have in common? They all recently came to a grinding…

Cybersecurity

The Cost of Doing Nothing: Why Cybersecurity Inaction Is the Biggest Risk of All

Not spending money is great; you get to save it, or use it somewhere that is needed. If you're a business owner, you already know that risk is part of…

Threats

How to prevent the most common cybersecurity breaches

Most of us are aware of the traditional types of invasive attacks, such as computer viruses and malware. But these merely touch the surface. Email…

Trends

Why Wealth Management Firms need to Digitise their Value Chain

In the current landscape, the need for widespread digital transformation within the wealth management industry has become a necessity. The number of…

Trends

4 Ways Digital Transformation Will Improve Your Financial Services Business

Digital transformation is no longer optional; it is a critical component of development strategies for any wealth management business. This…

Compliance

How to Stay Ahead of Cybersecurity Changes from Financial Regulators in 2025 and 2026

The regulatory landscape for financial institutions is evolving rapidly. The process has shifted from discussions to comprehensive questionnaires…

Cybersecurity

Stay Safe from Malicious Online Tools: A Growing Concern

The FBI Denver field office has issued a warning about a rising scam involving free online document converter tools. I thought it best to take the…

Trends

The Future of Cloud Computing: Trends to Watch in 2025

As we move further into 2025, cloud computing continues to evolve, offering new opportunities and challenges for businesses. The rapid advancements in…

"Fraud & BEC"

Beware of Online File Converter Scams: Protect Your Business

The FBI Denver field office has issued a warning about a rising scam involving free online document converter tools. I thought it best to take the…

Cybersecurity

Cyber Security tips for Businesses - by Jordan Gall

Cyber security continues to shape the tech landscape, especially for small and medium businesses.

Threats

3 Tech Essentials to Keep Your Business Safe(r) from Hackers in 2025

Modern businesses rely on technology more than ever to operate and engage with clients. As we progress through 2025 and the next tech evolution with…

Microsoft 365

Microsoft Secure Score - Is Your Guard on Duty?

Would you rather have a security guard for your business who is vigilant, well-trained and knows what to look out for and how to respond to different…

Cybersecurity

Jordan's Top Tips for Protecting Your Business (Audio Clip)

As a cyber security professional, I often get asked this question.

Trends

2025 Technology Trends: Key Predictions for a More Secure Future

After a busy 2024 and an accelerated shift toward agile working, I have been looking ahead with the Buchanan Technology team at at the developments…

Cybersecurity

Hey, Jordan - What are your top cyber security tips?

As a cyber security professional, I often get asked this question

Threats

Don't be part of the 95% of cyber breaches that are caused by human error

For years, human error has been the Achilles' heel of cybersecurity, with 95% of all successful breaches being caused by user error and negligence,…

Threats

Stay ahead of bot attacks with smart cybersecurity

Bot attacks don’t discriminate—they target any business, regardless of size or industry. These automated cyber threats crawl the internet, find…

Compliance

We're not sure why the UK National Cyber Security Centre doesn't require this key feature

Cyber Essentials, the UK government-backed certification that's highly recommended for financial institutions to use as a starting reference point for…

Threats

Think Your Company Devices are Protected Because You Have Anti-Virus Installed? Think Again!

Many businesses rely heavily on anti-virus software as their primary line of defense against cyber threats. However, this alone is not sufficient to…

Cybersecurity

Reduce Your Digital Carbon Footprint (Yes, that’s actually a thing)

Many of us are aware of the environmental impact of our daily activities and strive to reduce it through recycling, managing electricity consumption,…

AI

Boost Your Microsoft 365 Copilot Security in 5 Steps

If your organisation utilises the Microsoft Office 365 (O365) ecosystem in any capacity, do you recall the last time you performed a security audit on…

"Fraud & BEC"

Protecting Our Loved Ones from Scammers

Scammers are increasingly targeting the elderly, leading to significant financial losses. It's crucial to educate and protect our loved ones from these…

// Get the monthly cyber briefing

One short email a month.

Real threats, real fixes, no spam.