Helping build cyber security awareness.
Technical breakdowns of real attacks, how the defences work, and what the response teams are doing about it — written for students and practitioners alike.
Latest posts
- The UK Cyber Security and Resilience (Network and Information Systems) Bill
What every business needs to know Cyber security legislation in the UK is undergoing its biggest transformation since the introduction of the Network and Information Systems - Tracking vehicle movements
If you talk to most people about the ability to be tracked, the default tech that most people will mention is their mobile phone, and - The Swiss cheese effect
One of the topics I teach about in regular training sessions is the one of Defence in Depth Defence in Depth is a cybersecurity strategy - Yellow & Green should never be seen*
The YellowKey and GreenPlasma Zero-Days: Rethinking Windows Security and BitLocker Encryption *I know the adage is Blue & Green. but it didn’t fit the title! - Op Silent Canvas – An image-based, multi-stage PowerShell malware campaign
In the ever-evolving cyber landscape, threat actors are continuously finding new ways to bypass our defences to gain access to the systems we use. Researchers - It’s official – Ditch the password – time to start using passkeys
I’ve written about the use of passkeys in favour of passwords a few times over the last couple of years (see below), and this week - Microsoft finally update RDP connections
Microsoft have pushed out a number of updates in their April 2026 release, and one of them has been a long time coming – An - NCA 2026 National Strategic Assessment of Serious Organised Crime
The UK’s National Crime Agency (NCA) published its 2026 National Strategic Assessment of Serious and Organised Crime (SOC) in March, and the message is unequivocal:
Enterprise & technical security
Architecture, tooling and hardening for real environments.
Read more →Critical infrastructure & real-world attacks
Case studies from the incidents that made headlines.
Read more →Human factors, AI & cyber awareness
Where people, process and machine learning intersect.
Read more →A resource for cyber security education
Cyber security is a complex, often complicated world for many to understand. This site aims to reduce that complexity — analysing the hot topics of the day with technical insight into how attacks happen, how technology works, and what response teams across the world are doing to fight back.
From student resources to recommended reading, self-hosting write-ups, and hundreds of blog posts — everything here is dedicated to raising cyber security awareness.
Start with 365 days of blogsStudying for CISSP, SSCP or CEH?
Course resources and reading suggestions to help you get there.
View courses