Practical cybersecurity insights for South African business - written by the people doing the work, not a marketing team.
Most SA companies publish email records that don't stop anyone forging their name. That is the default their mail host shipped, and outsourced IT rarely touches it. Why it lands in your inbox, and why fixing DNS alone wouldn't save you.
Read postSection 19 of POPIA is short on detail and long on consequences. We unpack what the Regulator's recent enforcement notices reveal about the technical and operational controls they consider reasonable - and what happens when you don't have them.
Read post82% of ransomware targets companies under 1,000 staff. We walk through the exact chain we see most often - initial access via phishing, lateral movement via legacy AD, exfiltration before encryption - and the three interventions that break it.
Read post