
The Small Business
Cyber Security Guy
Welcome to my blog and podcast, where I share brutally honest views, sharp opinions, and lived experience from four decades in the technology trenches. Whether you're here to read or tune in, expect no corporate fluff and no pulled punches.
Everything here is personal. These are my thoughts, not those of my employer, clients, or any poor soul professionally tied to me. If you’re offended, take it up with me, not them.
What you’ll get here (and on the podcast):
Straight-talking advice for small businesses that want to stay secure
Honest takes on cybersecurity trends, IT malpractice, and vendor nonsense
The occasional rant — and yes, the occasional expletive
War stories from the frontlines (names changed to protect the spectacularly guilty)
I've been doing this for over 40 years. I’ve seen genius, idiocy, and everything in between. Some of it makes headlines, and most of it should.
This blog and the podcast is where I unpack it all. Pull up a chair.

Tata Technologies Ransomware Attack: 1.4TB of Data Gone Walkabout
Tata Technologies hit by ransomware attack, exposing 1.4TB of sensitive client data linked to Airbus, Ford, Jaguar and Honda. Learn what happened and how supply chain security failures put everyone at risk.

Over 4,000 ISP Networks Hacked Because People Still Use ‘admin123’ as a Password — WTF?
More than 4,000 ISP networks got hacked because they left their admin passwords set to 'password123' — and shockingly, that didn’t work out well. Cybercriminals brute-forced their way into routers, servers, and management systems, planting infostealers, cryptominers, and enough malware to make an antivirus cry. This wasn’t some elite state-sponsored operation; it was basic-level script kiddie shit that worked because ISPs still treat security like a hobby. Find out how it happened, why your broadband might be slower than a fax machine, and how these companies left the front door wide open for hackers.

The Impact of 5G on Cyber Security: What Small Businesses Need to Know
5G promises faster speeds and endless connectivity, but for small businesses, it’s also a cyber security minefield. More connected devices means more targets for hackers, and 5G’s speed amplifies every attack. This article explores how 5G is rewriting the cyber risk playbook — and what small businesses need to do to avoid becoming easy prey.

YouTube Phishing Scam – Deepfake CEO Videos Hijacking Creators’ Accounts
Hackers are using deepfake videos of YouTube’s CEO to phish creators into handing over their accounts. In this absurd cybercrime twist, scammers send fake YouTube monetization emails featuring a realistic AI-generated video of Neal Mohan, urging creators to “confirm policy updates” via a phishing link disguised as YouTube Studio. The result? Stolen credentials, hijacked channels, and another WTF moment in cybersecurity. This scam is shockingly effective because it uses YouTube’s own private video sharing to appear legitimate. Find out how the scam works, how YouTube is responding, and what every creator (and business) must do to avoid getting scammed by a CEO who doesn’t even know he’s in the video.

Google’s Latest Android Fuck-Up: How Your Lock Screen Became an Optional Suggestion
How did Serbian police and Cellebrite turn Android phones into unlocked treasure chests? Google’s latest vulnerabilities handed over the keys, and now over a billion devices are exposed. Read why your lock screen is about as secure as a garden gate — and why forensic tools are the new hacker goldmine.

Cyber Essentials Is Changing in April 2025 — Here’s What You Need to Know (Before It Bites You)
Big changes are coming to Cyber Essentials from April 2025, and they are not just cosmetic. From embracing passwordless logins to treating remote workers' devices like company kit, the new rules mean businesses need to sharpen up their security game — fast. Whether you are managing firewalls, updating browser extensions, or figuring out how to patch a vulnerability with no patch, this update raises the bar. Ignore it at your peril.

Quantum Computing and the Future of Cyber Attacks: Preparing for the Next Digital Apocalypse
Quantum computing is coming — and when it does, today’s encryption won’t stand a chance. This article breaks down how quantum computers will change cyber security forever, why small businesses should care, and what steps you can take now to prepare for the next digital arms race.

Implementing Zero Trust Security: A Step-by-Step Guide for Small Businesses
Trust no one — not even your own staff. That’s the heart of Zero Trust security, the modern approach that treats every device, user, and login as suspicious until proven safe. This guide walks small businesses through the why, what, and how of Zero Trust, helping you lock down your network before cyber criminals stroll right in.

The US Just Bent Over for Putin — And They’ve Left Every UK SMB Holding Its Own Arse in the Wind
In a move that defies logic, common sense, and basic self-preservation, the US just ordered its cyber defenders to stop investigating Russian attacks. Why should UK businesses care? Because when the world's cyber watchdog leaves the door wide open, every UK SMB becomes an easier target. This isn’t politics — this is your business continuity on the line.

Cyber Security in the Age of Remote Work: How to Survive Working from Your Sofa
Remote work is great for flexibility — but terrible for cyber security. With staff logging in from cafes, spare bedrooms, and dodgy home Wi-Fi, businesses need a whole new security playbook. This guide explains why remote work is a hacker’s dream and how small businesses can fight back.

Gmail Scams 2025: Nutty Cyber Squirrel Survival Guide
Gmail users face a fresh wave of scams in 2025. Cybercriminals now use artificial intelligence, Google Calendar invites, and fake shared Docs to trick you. Learn how to spot the latest tricks and protect your inbox in this tongue-in-cheek survival guide.

Data Theft: Why Hackers Don’t Bother Locking Your Files Anymore – They Just Steal Them
Ransomware attacks have changed — and the price for protecting your stolen data now averages £475,000. Hackers are skipping the hassle of file encryption and instead stealing data directly, then demanding payment to keep it private. This shift makes it even clearer that prevention, through schemes like Cyber Essentials, is far cheaper than paying criminals after the fact. In this article, we explore why data theft is the new normal, why small businesses are at risk, and what every company should be doing to stay out of the hackers’ crosshairs.

Apple vs. The UK Government: A Petty Breakup Over Encryption
The UK government and Apple are in a messy breakup, and—spoiler alert—it’s not mutual. Apple has yanked Advanced Data Protection (ADP) from the UK faster than a politician dodging accountability, all because the government wants a sneaky backdoor into everyone’s iCloud. Apple’s response? “Yeah, no.”
The Investigatory Powers Act (IPA) 2016—affectionately nicknamed the Snooper’s Charter—gives the UK authorities the power to demand weaker encryption, which, as every cybersecurity expert knows, is about as smart as setting your password to “password123.” Apple, not one to be bullied, packed up and left, meaning UK users are now stuck with less protection and more vulnerability.
So, who wins? Not the everyday user, who now gets to live in constant fear that their private data is an all-you-can-eat buffet for cybercriminals. But hey, at least the UK government can pat itself on the back for really sticking it to privacy. Welcome to 2025—where security is optional, surveillance is mandatory, and Apple just swiped left on Britain.
⚠️ Full Disclaimer
This is my personal blog. The views, opinions, and content shared here are mine and mine alone. They do not reflect or represent the views, beliefs, or policies of:
My employer
Any current or past clients, suppliers, or partners
Any other organisation I’m affiliated with in any capacity
Nothing here should be taken as formal advice — legal, technical, financial, or otherwise. If you’re making decisions for your business, always seek professional advice tailored to your situation.
Where I mention products, services, or companies, that’s based purely on my own experience and opinions — I’m not being paid to promote anything. If that ever changes, I’ll make it clear.
In short: This is my personal space to share my personal views. No one else is responsible for what’s written here — so if you have a problem with something, take it up with me, not my employer.