Most of the businesses I’ve watched go through a security incident have said a version of the same thing afterwards: “why would anyone bother with us?” It’s the right question with a slightly deflating answer. Nobody did bother with you. Nobody sat at a desk and picked your company. A program went looking for a […]

Updated October 2026: revised for the OWASP Top 10:2025, the latest Australian Signals Directorate threat report, and what we see attacking real websites every day. Most websites that get broken into were found by software, which tries the same handful of weaknesses on millions of sites a day and pays attention to the ones that […]

In an era of sophisticated AI-driven attacks, evolving malware, and increasingly organised cybercriminals, website security has become a critical business imperative. Whether you’re running an e-commerce platform, corporate website, or custom business application, a security breach can result in significant financial losses, devastating reputational damage, and regulatory penalties that can cripple operations. Many business leaders […]

In July 2023, AWS started sending out warnings to anyone using their Simple Email Service (SES) who had been identified as having TLS 1.0 or TLS 1.1 connections. These warnings flagged that the accounts must be updated to TLS1.2 or higher in order to maintain AWS connectivity. On September 15, 2023, AWS will begin deploying […]