Threat Intelligence and Advanced Persistent Threats
How nation-state advanced persistent threats, cybercriminals, hacktivists and insiders operate, how threat intelligence informs defence, and how MITRE ATT&CK maps attacker behaviour end to...
Secure Software Development Practices
The OWASP Top 10, shift-left thinking, secure coding practices — why building security into software from day one costs a fraction of trying to...
Cryptography and PKI Fundamentals
The essentials of modern cryptography in plain English: symmetric vs asymmetric encryption (AES, RSA), hashing, digital signatures, TLS and PKI — and where each...
Password Security and Passphrases
Passwords are the first line of defence on every account you hold. Why weak and reused passwords cause most compromises, how to build strong...
QR Code Phishing (Quishing)
QR code phishing — 'quishing' — bypasses traditional email security by hiding a malicious URL inside a QR image. How the attack works, why...
Social Engineering Attacks
Attackers don't usually hack computers — they hack people. Phishing, vishing, pretexting, tailgating, BEC and baiting explained, plus the 'verify before you act' habit...
Browser Security and Extensions
Your web browser is one of the most used — and most attacked — applications on your computer. How to keep it secure, spot...
Safe Internet Browsing
How to browse the web safely — spot secure connections, recognise fake websites, avoid drive-by downloads and pop-up scams, and stay clear of the...
Ransomware: What It Is and How to Avoid It
How ransomware attacks work, how to prevent them with offline backups, patching and MFA — and why paying the ransom is almost always the...