Holiday Bonus Phishing: Check Unexpected Microsoft Sign-In Codes
A holiday bonus message can lead to a real Microsoft sign-in and still expose a business account. Learn what employees and owners should check.
Published
Read the guideResources
Practical cybersecurity guidance for business owners.
Browse recent guidance for small businesses, including freight, agriculture, manufacturing, and accounting teams. Find the questions worth asking before a deeper security review.
Free planning template
Know who to call before something goes wrong.
Get the free 18-page plan. Add your contacts, prepare for common incidents, and practice with your team.
Get the Incident Response PlanWeekly team practice
Turn useful guidance into a habit.
For enrolled teams, each employee receives a private email link to one short cybersecurity challenge each week, with practical feedback on safer responses. Plans start at $49/month.
Browse guides
Find guidance for your business.
Filter by industry or browse general security topics. Check when each guide was published or updated.
10 guides · Most recently updated first
Cyber Insurance Readiness Checklist for Small Businesses
A plain-language guide to checking your safeguards, gathering evidence, and preparing to answer a cyber insurance application.
Published
Read the guideThe Boss Needs Gift Cards: Holiday Payment Scams Targeting Small Businesses
Spot holiday gift-card requests, fake approvals, and supplier payment scams. Use a practical verification checklist to protect your small business in 2026.
Published
Read the guide10 Holiday Scams Small Businesses Should Watch for in 2026
Prepare your small business for 2026 holiday scams. Learn how to spot suspicious payment, delivery, Microsoft 365, payroll, and remote-access requests.
Published · Updated
Read the guideFree Small Business Incident Response Plan Template
Free 18-page incident response plan PDF for small businesses. Includes ransomware and payment-fraud checklists, industry add-ons, and a practice exercise.
Published
Get the free templateScreenConnect Scams: Who's in Control?
Learn how scammers misuse ScreenConnect and other remote-support tools, and how to protect your staff, payments, and business computers.
Published
Read the guideA Real Microsoft Login Can Still Expose Your Business Email
Learn how Microsoft 365 device code phishing can expose business email, with agriculture and trucking examples, staff warning signs, and practical IT checks.
Published
Read the guideA Customer Asked for an Independent Security Assessment. What Do You Need?
A customer wants an independent security assessment. Learn how to clarify the scope, prepare evidence, and choose the right review before buying an assessment.
Published
Read the guideIs Your Business Website Serving Indonesian Gambling Ads?
A recent external exposure review flagged a subdomain serving unrelated gambling content. Here’s why business owners should check beyond their main website.
Published
Read the guideYour Business Email Server Can Be Attacked Before Anyone Opens the Message
A new Exchange Server flaw shows why small-business email infrastructure can be attacked before anyone clicks – and what to verify now.
Published
Read the guideReady to check your own business?
Start with what the public internet can see.
The free Zero-Access Business Exposure Review examines public signals around your email, domains, websites, and internet-facing services. No passwords or internal access are required.
Start the free exposure review