Security blog / local business briefings

THREATS MOVE.BUSINESS ADAPTS.

Plain-English updates on exploited vulnerabilities, active scams, and security incidents affecting small and local businesses—plus practical steps owners can take next.

01Public Sector Security

Oregon public-sector cyber incidents: stolen records, water controls, and email disruption

McMinnville and an unnamed Oregon water provider show different security failures. A 2018 state email incident adds a lesson about trusted domains and service continuity.

Read security update
02AI Security

The Hugging Face attack: what autonomous agents exposed about security boundaries

An October 2026 update on the July intrusion, the later independent investigation, and practical controls for organizations adopting AI agents.

Read security update
03Identity

Identity is the control plane

Cloud and SaaS security converge on one question: who can do what, from where, and how quickly can that access be contained?

Read security update
04Exposure

Your attack surface is a living system

Assets drift, credentials accumulate, and temporary services become permanent. Continuous context beats an annual inventory.

Read security update
05Resilience

Breach readiness is a design problem

The strongest incident response plan starts long before the alert: in identity design, logging, ownership, and practiced decisions.

Read security update