Blog
Threats & defence
Phishing, ransomware, payment fraud, impersonation: how attacks unfold in local businesses, and the measures that actually stop them.
Brand Impersonation: How to Spot and Take Down a Fake Website
Look-alike domains, cloned websites, fake Facebook pages: how to detect brand impersonation targeting your business and get a fake site taken down.
5 min read
Business Email Compromise and CEO Fraud: How to Stop It
Fake CEO, fake supplier, diverted payroll: how business email compromise works, what it costs Canadian small businesses and the simple controls that stop it.
5 min read
Business IoT Security: Cameras, Alarms and Smart Devices
Cameras, alarms, thermostats: default passwords, firmware, network segmentation, cloud accounts and vendor remote access. A practical small business guide.
5 min read
Business Travel Cybersecurity: What to Do Before You Leave
Public Wi-Fi, border device searches, MFA abroad, lost laptops: the cybersecurity rules to follow before, during and after every business trip.
5 min read
Business Wi-Fi Security: WPA3, Guest Networks and 802.1X
WPA2 or WPA3, Personal or Enterprise mode, guest networks and smart devices: a step-by-step guide to business Wi-Fi security for Canadian small businesses.
5 min read
Clicked a Phishing Link? What to Do in the Next 15 Minutes
Clicked on a phishing link? The steps to take right now, depending on what happened next: a click, a typed password, an opened attachment or bank details.
5 min read
Deepfake Voice Fraud: How to Protect Your Business
A call from the 'CEO' demanding an urgent wire transfer? Call-backs to known numbers, code words and dual approval: how to stop deepfake voice fraud at work.
5 min read
Generative AI Data Leaks: A Business Guide to ChatGPT and Copilot
How generative AI data leaks really happen with ChatGPT and Copilot, what Quebec's Law 25 requires, and a usage policy checklist your business can adopt.
5 min read
How to Deploy a Business Password Manager, Step by Step
Selection criteria, shared vaults, a pilot group, the master passphrase and employee offboarding: a practical plan to deploy a business password manager.
5 min read
How to Secure Your Business Social Media Accounts
Hijacked Facebook page, an ex-employee still on LinkedIn, an agency with too much access: how to secure your small business's social media accounts.
5 min read
How to Secure Your Business WordPress Site: The Checklist
Plugin updates, two-factor authentication, a web application firewall, tested backups: a practical checklist to secure your small business WordPress site.
6 min read
How to Spot a Phishing Email: 5 Canadian Examples Decoded
Fake CRA e-Transfers, Canada Post parcel fees, Hydro-Québec refunds: five phishing examples broken down, plus the warning signs to check before you click.
6 min read
Microsoft Copilot Oversharing: What to Fix Before You Deploy
Copilot respects your permissions, even overly broad ones. SharePoint reports, Restricted Content Discovery, sensitivity labels, Law 25: 8 steps before rollout.
5 min read
Passkeys for Business: A Practical Deployment Guide
Microsoft 365 or Google Workspace: how to roll out passkeys in your small business step by step, from pilot group to recovery, without locking anyone out.
5 min read
Patch Management Policy for Small Businesses: SLAs That Work
Patch deadlines by severity, how to prioritize exploited flaws, handling exceptions and tracking results: a practical patch management policy for SMBs.
5 min read
Phishing-Resistant MFA: Why SMS Codes Are No Longer Enough
Text codes, push prompts, FIDO2 keys or passkeys? Compare multi-factor authentication methods and choose phishing-resistant MFA that attackers can't relay.
5 min read
QR Code Phishing (Quishing): How to Spot It and Stay Safe
Fake QR codes on parking machines, emails that say 'scan to reactivate your MFA': how to recognize quishing and protect your small business and your staff.
5 min read
Ransomware Attack on a Small Business: Anatomy, Step by Step
From a forgotten VPN account to Friday-night encryption: how a ransomware attack on a small business really unfolds, and where to stop it at each stage.
6 min read
Ransomware: What to Do in the First 24 Hours, Hour by Hour
Hit by ransomware? What to do in the first 24 hours: isolate, call your insurer, preserve evidence and notify the right people, in the right order.
5 min read
Remote Work Security for Businesses: A Practical Guide
Devices, remote access, home Wi-Fi, fraud and Quebec's Law 25: the concrete steps that keep remote work security tight in a hybrid small business.
5 min read
SPF, DKIM and DMARC Explained for Small Businesses
SPF, DKIM and DMARC explained in plain English, with real DNS record examples, the Gmail, Yahoo and Outlook sender rules, and a rollout plan for your domain.
5 min read
The 3-2-1-1-0 Backup Rule: Backups That Survive Ransomware
Three copies, two media, one offsite, one immutable, zero errors: the 3-2-1-1-0 backup rule explained for small businesses that need to survive ransomware.
5 min read
Vendor Banking Change Fraud: How It Works and How to Stop It
A supplier emails new banking details? What to do if the payment already went out, how vendor banking change fraud works and the simple process that stops it.
5 min read
Windows 10 End of Support: What Businesses Should Do in 2026
Windows 10 support ended on October 14, 2025. Extended Security Updates, real costs and the move to Windows 11: a practical 2026 plan for small businesses.
5 min read
Zero Trust for Small Business, Explained Without the Jargon
What zero trust really means for a small business: the NIST and Cyber Centre principles in plain English, plus a five-step roadmap you can start this quarter.
5 min read