Security
Website Security Headers: Useful Browser-Side Protection Explained
HTTP security headers allow a website to tell browsers how certain content and connections should be handled.
News | Blog
Updates, news and developments from hosting, security and Internet infrastructure.
Security
Security
Security
Backups Are Security Assets: Why Attackers Must Not Be Able to Delete Them
A backup is useful only if it survives the incident it is supposed to recover from. If production credentials can also delete every backup…
Security
Least Privilege in Web Hosting: Give Every Account Only What It Needs
The principle of least privilege limits each user, process or application to the access it actually needs.
Security
Malware Persistence: Why Deleting the Visible Malicious File May Not Be Enough
Website compromises often involve more than one malicious file. Attackers may leave backdoors, scheduled tasks, unauthorized administrators…
Security
Why Security Patching Cannot Always Wait for the Next Maintenance Window
Maintenance windows are useful for orderly operations, but not every vulnerability can safely wait.
Security
Brute-Force Attacks: How Hosting Accounts Can Be Better Protected
Automated login attempts remain common against hosting panels, CMS logins, SSH services and mailboxes.
Security
CISA Adds Citrix and Git Flaws to KEV: Why Active Exploitation Changes Patch Priority
On 25 August 2025 CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog: two Citrix Session Recording flaws and a Git…
Security
Why Logs Matter During a Security Incident
The aim is to connect the technology with everyday operational decisions. Logs provide a timeline of requests, authentication events, errors and system activity.
Security
Cisco ISE Vulnerabilities Added to CISA's Exploited-Vulnerability Catalog
This article is based on a real 2025 incident or official security disclosure. On 28 July 2025 CISA added CVE-2025-20281 and CVE-2025-20337 affecting Cisco Identity Services Engine to its Known Exploited Vulnerabilities catalog…
Security
A Backup Is Not an Archive: Understanding the Difference
The aim is to connect the technology with everyday operational decisions. Backups are primarily designed to restore systems after deletion, corruption, failure or compromise.
Security
Apple and TP-Link Vulnerabilities Added to CISA's KEV Catalog in June 2025
This article is based on a real 2025 incident or official security disclosure. On 16 June 2025 CISA added CVE-2025-43200 affecting multiple Apple products and CVE-2023-33538 affecting TP-Link routers to its Known Exploited…
Security
Web Application Firewalls: What They Can and Cannot Stop
The aim is to connect the technology with everyday operational decisions. A WAF evaluates HTTP requests and can block many malicious patterns before they reach an application.