Home / Insights and Resources
Insights and Resources
Practical cybersecurity advice for small and medium-sized businesses
Weekly articles on the latest security news and innovation, plus guides, checklists and plain-English explainers on Zero Trust, cloud security, identity and AI security.
Article / 1 Nov 2026
A compromised laptop, 50 pre-signed Ethereum authorisations and a race against stablecoin freezes. A plain-English deep dive into the largest crypto theft on record, and what it teaches small businesses.
Article / 1 Nov 2026
Security researchers reported dozens of attacks driven by AI agents last month. Here is what actually changed, and why the basics still decide who gets breached.
Article / 1 Nov 2026
A backup app credential gave attackers a path into live mailboxes and files across many businesses. Third-party app access is now one of the biggest blind spots in Microsoft 365.
Article / 1 Nov 2026
The Australian Cyber Security Centre issued two critical alerts last month. If you run a NetScaler gateway or any PHP website, these are the steps to take.
Article / 1 Nov 2026
Attackers are now going after the API keys that power your AI tools. A popular AI library shipped a credential stealer for about 100 minutes in October.
Zero Trust
You do not need an enterprise budget to start Zero Trust. Here is the order we roll out controls for teams of 10 to 200.
Cloud Security
Many licences already include strong protections. These are the ones we enable first on almost every engagement.
AI Security
Copilot can surface any file a user can access. Fix oversharing and labelling first so AI does not expose what it should not.
Identity
Attackers now steal MFA codes in real time. Phishing-resistant methods like passkeys close that gap.
Network Security
How VLANs and a properly tuned firewall stop one compromised laptop from reaching your finance server.
Zero Trust
A plain-English comparison of Security Service Edge and Secure Access Service Edge for growing teams.
Guides
Who to call, what to isolate and what not to delete in the first hour of a cyber incident.
Cloud Security
Ransomware targets backups first. Here is how to make yours immutable, tested and separated from admin accounts.
Guides
A prioritised path through the ACSC Essential Eight for organisations without a full-time security team.
Article / 1 Nov 2026
A compromised laptop, 50 pre-signed Ethereum authorisations and a race against stablecoin freezes. A plain-English deep dive into the largest crypto theft on record, and what it teaches small businesses.
Article / 1 Nov 2026
Security researchers reported dozens of attacks driven by AI agents last month. Here is what actually changed, and why the basics still decide who gets breached.
Article / 1 Nov 2026
A backup app credential gave attackers a path into live mailboxes and files across many businesses. Third-party app access is now one of the biggest blind spots in Microsoft 365.
Article / 1 Nov 2026
The Australian Cyber Security Centre issued two critical alerts last month. If you run a NetScaler gateway or any PHP website, these are the steps to take.
Article / 1 Nov 2026
Attackers are now going after the API keys that power your AI tools. A popular AI library shipped a credential stealer for about 100 minutes in October.
Zero Trust
You do not need an enterprise budget to start Zero Trust. Here is the order we roll out controls for teams of 10 to 200.
Zero Trust
A plain-English comparison of Security Service Edge and Secure Access Service Edge for growing teams.
Cloud Security
Many licences already include strong protections. These are the ones we enable first on almost every engagement.
Cloud Security
Ransomware targets backups first. Here is how to make yours immutable, tested and separated from admin accounts.
AI Security
Copilot can surface any file a user can access. Fix oversharing and labelling first so AI does not expose what it should not.
Identity
Attackers now steal MFA codes in real time. Phishing-resistant methods like passkeys close that gap.
Network Security
How VLANs and a properly tuned firewall stop one compromised laptop from reaching your finance server.
Guides
Who to call, what to isolate and what not to delete in the first hour of a cyber incident.
Guides
A prioritised path through the ACSC Essential Eight for organisations without a full-time security team.
Turn advice into action
Want this applied to your business?
Glacyn can assess your environment against these guides and implement the fixes for you.