The Small Business Microsoft 365 Security Review: What to Check, in Plain English
Ten Microsoft 365 settings a small firm can check in an hour: who can create groups, buy apps, consent to apps, and sign in the risky ways.
SMB
Read article
Founder & Principal Security Practitioner
Kfir Yair
CISSP-certified security practitioner with a decade of cybersecurity experience across security operations, identity protection, endpoint security, cloud security, digital forensics, and compliance work.
Provenance spans the Israel Defense Forces, the Israeli Government Tax Authority as Production Technical Lead, Deloitte in Digital Forensics & Risk Analytics, Varonis as a Cyber Security Architect, Cypress Creek Renewables as a Cloud Security Analyst, and TEKRiSQ as Director of Security Solutions.
Today he architects security for a large enterprise. Obsidian Ridge reflects a simple operating philosophy: direct operator access, plain-language guidance, and security work that reduces real risk instead of generating shelfware.
Kfir Yair founded Obsidian Ridge to deliver cybersecurity help that feels practical, direct, and accountable. The practice works across three audiences: individuals and families who need plain-language protection from scams and account compromise, growing businesses that need managed security and compliance support, and enterprise teams that need focused depth in architecture, hardening, or response.
Across that work, the focus has ranged from security architecture and Zero Trust implementation to endpoint security, identity protection, compliance support, and incident response preparation. That includes hands-on experience with NIST, ISO 27001, PCI-DSS, and HIPAA-aligned programs — and work supporting organizations that needed security outcomes they could actually operate, not just approve on paper.
Obsidian Ridge is intentionally hands-on. Clients work with a real operator who can translate technical risk into decisions, priorities, and next steps without relying on fear, jargon, or bloated reporting.
CISSP • CCFH (CrowdStrike) • ZDTA (Zscaler) • CySA+ (CompTIA) • Security+ (CompTIA) • Network+ (CompTIA) • CC (ISC²)
Provenance
Where the depth comes from
The Obsidian Ridge practice is informed by direct operational work across military cyber, national-government security, big-four consulting, enterprise security engineering, and the small-to-mid-market practice the firm serves today.
Present
Founder & Principal Security Practitioner · Obsidian Ridge
Hands-on managed cybersecurity for individuals, SMBs, and lean security teams. CISSP-led managed detection and response on a 24/7 SOC-monitored platform, identity threat detection, security awareness training, managed SIEM, and compliance program support.
Present (concurrent engagement)
Security Architect · Large enterprise
Architects security for a large enterprise, alongside running Obsidian Ridge.
Prior
Cyber Security Architect · Varonis Systems
Security architecture across the Varonis data security platform: identity, data classification, and access governance for enterprise environments.
Prior
Cloud Security Analyst · Cypress Creek Renewables
Cloud security analysis for an independent power producer in the renewable energy sector: identity, posture management, and operational security across the production cloud estate.
Prior
Director of Security Solutions · TEKRiSQ
Led security solution design and delivery for small and mid-market organizations across the United States: cyber-risk assessments, control program design, and managed security packaging.
Prior
Digital Forensics & Risk Analytics · Deloitte
Digital forensics and risk analytics consulting for enterprise clients across financial services, healthcare, and government.
Prior
Production Technical Lead · Israeli Government Tax Authority
Production technical lead for national tax-agency systems: operational availability, identity, and access for a critical-function government environment.
Early career
Service · Israel Defense Forces (IDF)
Practice focus
Where the practice spends its time
- Managed Detection & Response (MDR) and 24×7 security operations
- Identity Threat Detection & Response (ITDR) for Microsoft 365, Entra ID, and Google Workspace
- Zero Trust architecture and rollout: workforce identity, conditional access, and browser-tier enforcement
- Endpoint Detection & Response (EDR), endpoint hardening, agent deployment
- Compliance program support: SOC 2, HIPAA Security Rule, ISO 27001, PCI DSS, NIST CSF 2.0
- Cyber-insurance readiness and renewal evidence packaging
- Incident response preparation and tabletop exercises
Writing
Field notes & technical guides
Articles by Kfir Yair. Cybersecurity is a YMYL topic. Every piece is sourced against vendor documentation, primary regulatory text, and the author's own engagements.
Device code phishing on Microsoft 365, explained
A short code typed into Microsoft's own sign-in page can hand an attacker your mailbox. How device code phishing works, and how to block it.
SMB
Read articleCybersecurity for a small investment adviser: Reg S-P, Reg S-ID and state exams
Which cybersecurity rules a solo or two-person advisory firm answers to: Regulation S-P, Regulation S-ID, state rules and the FTC Safeguards Rule.
SMB
Read articleAI security assessments for small businesses compared
Compare AI discovery tools, cloud AI security, a managed assessment and a free self-check by scope, price and who acts on findings.
SMB
Read articleManaged security for small businesses using Google Workspace
Compare Google Workspace controls, Huntress ITDR and Obsidian Ridge on identity coverage, response, cost, term and minimum.
SMB
Read articleManaged SIEM for HIPAA and cyber-insurance evidence
Compare five SIEM options on evidence, retention, response, pricing, contract terms and minimums for a small practice.
SMB
Read articleManaged cybersecurity cost for a dental or medical practice
Monthly costs for 5, 10 and 20 people, with onboarding, contract terms and the work a medical or dental practice still needs.
SMB
Read articleAI usage policy for law firms and dental offices
A copyable staff AI policy, plus browser and device controls to manage client data, approved tools and incident reporting.
SMB
Read articleChoosing dental security before cyber-insurance renewal
Nine checks for a dental security provider: devices, accounts, HIPAA responsibilities, response, evidence, backups and the full price.
SMB
Read articleCPA firm WISP and FTC Safeguards: a practical guide
What a tax practice should put in its WISP, the evidence to retain and the FTC notification rule, with IRS and FTC sources.
SMB
Read articleSmall law firm cybersecurity: duties, costs and choices
A three-attorney cost example, ABA duties, provider questions and the evidence a small law firm should ask for.
SMB
Read articleBest MDR providers for small businesses (2026)
Compare seven small-business security options by response ownership, published prices, terms, minimums, identity coverage and insurance evidence.
SMB
Read articleWhat managed detection and response costs for a 5, 10, or 25 person business (2026)
MDR costs for 5, 10, 25 and 50 devices: Ridge Watch's $15/device business rate, onboarding, the Huntress seat floor and Ridge Core's identity coverage.
SMB
Read articleManaged ITDR for Microsoft 365 and Google Workspace compared
Compare five identity-security options for Microsoft 365 and Google Workspace by coverage, who responds, pricing model, contract term and minimum.
SMB
Read articleWhat DMARC Is and Why Your Dental Practice Needs It
DMARC in plain English for dental offices: what it does, why most local practices we checked don't have it, and how to add it without breaking reminders.
SMB
Read articleSecurity awareness training providers for companies under 100 employees compared (2026)
Six awareness-training options under 100 seats, compared on what each publishes: simulation, managed or self-serve, reporting, price, term, seat minimum.
SMB
Read articleManaged cybersecurity providers in the Research Triangle: an honest comparison (2026)
Seven Triangle providers, compared only on what each one publishes: HQ, pricing model, contract term, SOC model, compliance focus. One publishes a price.
SMB
Read articleBest MDR providers for dental practices compared (2026)
Six MDR options for a dental practice, compared on what each vendor publishes: HIPAA fit, identity coverage, price, term, seat minimum, who responds.
SMB
Read articleHow to lock down a parent's Windows computer against remote-access scams
Six steps to lock down a parent's Windows computer against remote-access scams, and one family rule. Plain steps, honest limits, and when to get help.
Individuals
Read articleHow Scammers Abuse Remote-Access Tools Like AnyDesk and TeamViewer
AnyDesk, TeamViewer, and ScreenConnect are real tools scammers misuse. Learn how the refund scam works, warning signs, and how to protect your family.
Individuals
Read articleTravelers' MFA Supplement, Question by Question
Every question on Travelers' Multi-Factor Authentication Supplement (CYB-14306), what a true Yes takes, and the evidence to have ready before you sign.
SMB
Read articleWho Signs a Cyber Insurance Application?
Who signs a cyber insurance application, what the signature represents, and why the signer must check the security answers with IT first.
SMB
Read articleThat 'Microsoft' pop-up is fake: what to do right now
That pop-up warning is fake. Do not call the number. A plain guide for older adults: how to close it safely, what to do next, and how to prevent it.
Individuals
Read articleYour firm has MFA. Here is how attackers sign in anyway.
Attackers steal the session cookie your browser gets after the MFA prompt. What adversary-in-the-middle phishing is, and what stops it.
SMB
Read articleHuntress ITDR vs Defender for Identity: same name, different problem
Defender for Identity installs sensors on domain controllers. If your business has no on-premises Active Directory, there is nothing for it to watch.
SMB
Read articleHuntress vs ThreatLocker: block everything, or watch everything
ThreatLocker blocks what is not on the list. Huntress watches what gets through. Most businesses comparing them are asking the wrong question.
SMB
Read articleHuntress vs Todyl: are you buying a layer or a whole stack?
Todyl sells a six-module platform including the network layer, channel-only, with no published pricing. Huntress sells a layer and publishes its rates.
SMB
Read articleHuntress vs Blackpoint Cyber: two MDR models, two ways to buy
Both run a 24/7 SOC for small businesses. Huntress publishes its prices and sells direct. Blackpoint publishes none and sells mainly through MSPs.
SMB
Read articleHuntress vs Microsoft Defender for Business: you already own EDR
If you pay for Microsoft 365 Business Premium you already have EDR. The question is who reads the alerts — and Microsoft will not sell you that service.
SMB
Read articleHuntress vs CrowdStrike Falcon Go: the dollar that isn't the difference
Falcon Go is $7.99 per device and contains no EDR. Huntress Managed EDR is $7.99 at 100 endpoints and includes a 24/7 SOC. Price is not the difference.
SMB
Read articleThe SIG Lite questionnaire: what it is and how to answer it
What the SIG Lite questionnaire is, who sends it, how it differs from SIG Core, and how a small business answers it honestly without a security team.
SMB
Read articleHuntress pricing 2026: buying direct vs buying managed
Huntress publishes its prices and requires a 50-seat minimum to buy direct. Through an MSP there is no minimum. The math, including where direct wins.
SMB
Read articleHuntress vs Arctic Wolf: which MDR model fits a small business
Arctic Wolf integrates the security tools you already own. Huntress brings the detection layer with it.
SMB
Read articleThe Small Business Google Workspace Security Review: What to Check, in Plain English
A practical Google Workspace security review for small businesses. Eight checks, one hour, no jargon. What to fix, what to skip, and when to get help.
SMB
Read articleYour IT Company Is Not Your Security Team: What CPA Firms Actually Need
Filing season concentrates the exposure. What IT covers, what a security operation covers, and the reporting path the IRS walks after a preparer breach.
SMB
Read articleYour IT Company Is Not Your Security Team: What Dental Practices Actually Need
For a dental practice, downtime is revenue. Why the PMS server needs a security operation of its own, and what to ask before the schedule empties.
SMB
Read articleYour IT Company Is Not Your Security Team: What Law Firms Actually Need
Confidentiality is a bar duty before it is an IT one. What your IT provider owns, what a security operation owns, and how MR 5.3 applies to the vendor.
SMB
Read articleMDR vs. Antivirus: What Your Cyber Insurance Application Actually Asks For
Cyber insurance carriers stopped accepting 'we have antivirus' years ago. Here is what they ask about endpoint protection and how each term maps.
SMB
Read articleEmail Security for SMBs in 2026: Gateway vs API vs Built-In (Defender)
Plain-English 2026 buyer guide to the three email-security architectures small businesses actually pick between: built-in Defender or Google Workspace.
SMB
Read articleControl #15 Deep-Dive: Link Protection and Sandboxing for Inbound Mail
A hands-on deep-dive on cyber-insurance control #15 — link rewriting, time-of-click URL analysis, and attachment sandboxing.
SMB
Read articleCyber Insurance Renewal Calendar: What to Fix 90, 60, and 30 Days Before Renewal
A practical 90/60/30-day cyber insurance renewal calendar for small businesses that need cleaner answers, better evidence, and fewer last-minute surprises.
SMB
Read articleBackups Are Not Recovery: How to Prove You Can Restore Before Ransomware
Prove a backup works by restoring real data and recording who ran it, how long it took and what failed: the evidence an underwriter can ask to see.
SMB
Read articleThe Family Fraud Fire Drill: What Everyone Should Decide Before the Scam Call Comes
A practical family fraud fire drill for urgent scam calls, fake bank alerts, AI voice-cloning attempts, and money requests that need a calm second check.
Individuals
Read articleWhat to Do If Your Parent Let a Scammer Remote Into Their Computer
A calm, numbered checklist for families: cut the internet, call the bank, change passwords from a clean device, report it. Steps for the first hour.
Individuals
Read articleDo You Need CMMC? A Small Manufacturer's Guide to the 2026 Rules
If you make anything for the defense supply chain — even as a sub-tier subcontractor — CMMC may now gate your contracts.
SMB
Read articleDo Auto Dealers Have to Comply with the FTC Safeguards Rule? (2026)
Most dealerships that arrange financing are 'financial institutions' under the FTC Safeguards Rule — which means a specific.
SMB
Read articleGLBA, the SEC, and Your Small Advisory: Which Cybersecurity Rules Actually Apply
RIAs, insurance agencies, and small advisory firms sit under overlapping cybersecurity rules — the FTC/GLBA Safeguards Rule and, for registered firms.
SMB
Read articleCybersecurity for Nonprofits on a Budget: Donor Data, Grants, and What Actually Matters
Nonprofits face the same attacks as any business on a fraction of the budget. There's no nonprofit-specific cyber law.
SMB
Read articleCybersecurity for Property Management: Tenant Data, Rent Fraud & FCRA in 2026
Property managers hold tenant SSNs and bank details, pull credit reports under FCRA, and move owner money.
SMB
Read articleHIPAA Cybersecurity for Senior Care & Assisted Living: What's Required in 2026
Skilled nursing and home health are HIPAA covered entities; assisted living often handles PHI too. What senior-care operators must protect.
SMB
Read articleDoes a Small Store Have to Be PCI Compliant? PCI DSS 4.0 in Plain English
x requirements became mandatory in 2025. What that means for a small merchant, plain-English, without the jargon.
SMB
Read articleWire Fraud, Title Companies, and the GLBA Rule You Didn't Know Applied (2026)
Closing-wire fraud is the costliest cyberattack in real estate, and most title and settlement firms miss that the FTC Safeguards Rule already covers them.
SMB
Read articleIs Pet Data Covered by HIPAA? Cybersecurity for Veterinary Practices in 2026
No — HIPAA doesn't cover pets, and there's no federal law requiring vets to safeguard animal health records.
SMB
Read articleBeyond the Safeguards Rule: The Cyberattacks That Actually Hit Car Dealerships
Compliance is one thing; the attack that stops a dealership is another. Ransomware on the DMS, F&I identity data.
SMB
Read articleWhy Contractors Are a Top Ransomware Target — and How to Protect Your Payments and Projects (2026)
Contracting services were the second-most-reported non-critical sector in the FBI's 2025 ransomware data.
SMB
Read articleRansomware on the Factory Floor: Protecting Production for Small Manufacturers
For a small manufacturer, the expensive cyberattack isn't data theft — it's the ransomware that stops the line.
SMB
Read articleCMMC compliance for small defense contractors: costs, timeline, and Level 2 steps
A plain-English CMMC guide for small defense contractors covering what Level 2 means in 2026, what actually drives cost, how the rollout works.
SMB
Read articleNIST 800-171 self-assessment: how to score your SPRS and close gaps
A plain-English guide for defense contractors on how the NIST SP 800-171 self-assessment score works, what SPRS actually stores.
SMB
Read articleNorth Carolina data breach notification law: what small businesses must do
A plain-English guide to North Carolina's data breach notification law for small businesses, including who must notify, what the notice must say.
SMB
Read articlePCI DSS 4.0.1 for small merchants: which SAQ you need and what changed
A plain-English PCI DSS 4.0.1 guide for small merchants covering how to choose the right SAQ, what changed in the v4.0.1 SAQ set.
SMB
Read articleVendor and third-party risk for SMBs: how to vet your software supply chain
A plain-English vendor risk guide for small and midsize businesses covering how to classify suppliers, what to ask software vendors before purchase.
SMB
Read articleAffordable EDR for small business: options with transparent monthly pricing
A plain-English guide to small-business EDR options that actually publish pricing, with official vendor numbers normalized into monthly cost.
SMB
Read articleBest managed EDR for Microsoft Defender users
A hands-on comparison of the best managed EDR options for small businesses already running Microsoft Defender.
SMB
Read articleThe cheapest MDR for small business: real 2026 pricing by endpoint count
A pricing-first look at small-business MDR in 2026, using only public vendor pricing and showing how endpoint minimums change the math.
SMB
Read articleBest password manager for seniors in 2026
A plain-English guide to the best password managers for seniors in 2026, focused on ease of use, caregiver recovery.
Individuals
Read articleDo I need an MSSP or just an MSP? A decision guide for North Carolina SMBs
A plain-English guide for North Carolina small businesses deciding whether general IT support is enough, or whether they need an MSSP.
SMB
Read articleHow much does it cost to outsource cybersecurity for a small business?
A plain-English pricing guide to outsourced cybersecurity for small businesses, including endpoint-only coverage, managed programs, identity monitoring.
SMB
Read articleIs antivirus enough for my small business? Why ransomware walks past it
A plain-English small-business guide to what antivirus still does well, where ransomware bypasses it, and what controls have to sit around it.
SMB
Read articleAI voice-cloning scams: how to protect your family with a safe word
How AI voice-cloning scams fake a family emergency call, why a familiar voice proves nothing, and the safe-word rule that stops a panicked payment.
Individuals
Read articleDo you really need a VPN? An honest 2026 answer
A plain-English guide to whether most people actually need a VPN in 2026, what a VPN really does, when it helps, and what it does not protect you from.
Individuals
Read articleGovernment impersonation scams: when the IRS, SSA, or Medicare calls
A plain-English guide to government impersonation scams, including IRS, Social Security, Medicare, and FTC fake-contact schemes.
Individuals
Read articleHow to freeze your credit for every family member in 30 minutes
A practical step-by-step guide to freezing credit for adults, kids, and aging parents, with what a freeze actually blocks, what it does not.
Individuals
Read articleHow to tell if your email or password was leaked in a data breach
A plain-English guide to checking whether your email or password was exposed in a data breach and the exact steps to take next if it was.
Individuals
Read articleIdentity theft protection: what to do in the first 24 hours
A plain-English first-day response guide for suspected identity theft, covering the federal recovery steps that matter most before more accounts.
Individuals
Read articleInvestment and crypto scams: how fake trading platforms steal retirement savings
A plain-English guide to modern investment and crypto scams, how fake trading platforms create the illusion of profits.
Individuals
Read articleThe most common scams targeting seniors in 2026
A plain-English guide to the scams hitting older adults hardest in 2026, and the single response rule that prevents most of the losses.
Individuals
Read articleOnline shopping scams during the holidays: how to spot fake deals before you click
A plain-English holiday shopping scam guide covering fake online stores, scam ads, package-text tricks.
Individuals
Read articlePhishing explained: how to recognize a scam email or text in 30 seconds
A plain-English guide to spotting phishing emails and texts fast, what the common red flags actually look like.
Individuals
Read articlePublic Wi-Fi safety: what's actually risky and what isn't
Public Wi-Fi in 2026: what is still risky, what is outdated fear, and the habits that make airport, hotel and café networks safer to use.
Individuals
Read articleRomance scams: warning signs and how to help someone who's being targeted
A practical guide to the warning signs of romance scams and how to help someone who may already be emotionally involved.
Individuals
Read articleSmart home security: how to lock down cameras, doorbells, and speakers
A plain-English guide to securing smart home devices in 2026, with the practical steps that matter most for cameras, video doorbells, smart speakers.
Individuals
Read articleStrong passwords vs passkeys: what to use in 2026
A plain-English guide to passkeys versus passwords in 2026, when passkeys are better, where passwords still matter.
Individuals
Read articleWhat is multi-factor authentication and why it stops most account takeovers
A plain-English MFA explainer: what multi-factor authentication is, why it blocks many password-based account takeovers.
Individuals
Read articleWhat is ransomware? A plain-English guide for non-technical people
A plain-English explanation of ransomware: how it spreads, what attackers actually want, and what to do first if you think you have been hit.
IndividualsSMB
Read articleEmail security for small business: stopping BEC and phishing on a budget
A plain-English small-business email security guide focused on the cheap controls that cut business email compromise and phishing risk first.
SMB
Read articleHIPAA risk assessment: how to use the free HHS SRA Tool and when to get help
A plain-English guide to using the free HHS and ASTP/ONC Security Risk Assessment Tool for HIPAA Security Rule work, including what the tool does well.
SMB
Read articleSmall Business Cybersecurity Basics: 10 Things to Do This Week
A plain-English small business cybersecurity checklist — the ten controls most worth doing first, before you spend a dollar on tools you may not need yet.
SMB
Read articleWhat Controls Do Cyber Insurers Require in 2026? The 10 That Decide Your Application
The 10 security controls cyber insurers actually score in 2026 — what carriers ask, what passes, and the quiet answers that get applications declined.
SMB
Read articleHow to protect aging parents from online scams without overwhelming them
A practical guide for adult children who want to reduce scam risk for aging parents without treating them like children or burying them in security advice.
Individuals
Read articleWhat to do in the first 24 hours after a small business ransomware scare
A practical first-24-hours ransomware checklist for small businesses: isolate systems, preserve evidence, call the right parties.
SMB
Read articleCyber Insurance for Accounting Firms: The Controls Underwriters Are Asking About in 2026
What cyber insurance for CPA and tax firms actually covers in 2026, the underwriting questionnaire controls carriers review.
SMB
Read articleCyber Insurance for First-Time SMB Buyers: What the 2026 Questionnaire Actually Asks and How to Pass It
A practical walkthrough of cyber insurance for first-time SMB buyers in 2026 — what the policy covers, what the questionnaire asks.
SMB
Read articleCyber Insurance Questionnaire 2026: The 22 Controls Underwriters Are Asking About
The 22 controls cyber insurers verify in 2026: what each application question asks, why underwriters care, and the evidence behind a yes.
SMB
Read articleMulti-location DSO M365 consolidation: a four-quarter security program walkthrough
A scenario walkthrough of a DSO with multiple M365 tenants and no central detection, brought to consolidated identity coverage in four quarters.
SMBEnterprise
Read articleIRS Publication 4557 & FTC Safeguards Rule for CPA Firms: What You Actually Have to Do in 2026
What IRS Publication 4557 and the FTC Safeguards Rule actually require of CPA firms in 2026 — the safeguards, the written program, and where firms slip.
SMB
Read articleThe IRS WISP Template for Solo and Small CPA Firms (12 Pages, Not 60)
What an IRS Publication 4557-aligned Written Information Security Plan (WISP) actually has to contain for a small CPA firm in 2026.
SMB
Read articleMDR vs EDR vs MSSP vs SOC-as-a-Service: An Operator's Decision Tree for Small Business
MDR, EDR, MSSP, and SOC-as-a-service compared honestly for small business buyers — what each delivers, what each costs.
SMBEnterprise
Read articleSecuring Lacerte, Drake, CCH Axcess, UltraTax, and ATX: A Practical Hardening Guide for Small Tax Firms
Field-tested hardening guide for the tax software CPA firms actually use — Lacerte, Drake, CCH Axcess, UltraTax, and ATX.
SMB
Read article1Password vs Bitwarden vs Apple Passwords: What a CISSP Actually Uses at Home (2026)
A vendor-neutral comparison of 1Password Families, Bitwarden, and Apple Passwords for household password management in 2026.
Individuals
Read articleLifeLock vs Norton 360 with LifeLock — and why we withdrew our Aura recommendation (2026 update)
LifeLock vs Norton 360 with LifeLock for identity theft protection in 2026, plus why we withdrew the Aura recommendation in May 2026.
Individuals
Read articleThe Complete 2026 Guide to Personal Cybersecurity for Families
What actually matters for personal and family cybersecurity in 2026 — identity protection, password managers, MFA, browser protection, device protection.
Individuals
Read articleGuardio vs Bitdefender vs Malwarebytes: Browser-Layer Protection Compared (2026)
A vendor-neutral comparison of Guardio, Bitdefender Total Security, and Malwarebytes Plus for browser-layer and endpoint protection in 2026.
Individuals
Read articleWire Fraud and Client-Trust Compromise: The BEC Pattern That's Costing Accounting Firms Six Figures
How BEC and wire-fraud unfold in CPA firms — refund redirect, payroll wire interception, vendor payment scams.
SMB
Read articleDental practice BEC and mailbox-rule wire fraud: a scenario walkthrough
A scenario walkthrough of an adversary-in-the-middle phish on a dental practice, an inbox rule staged for wire fraud, and the ITDR chain that broke it.
SMB
Read articleLaw-firm Akira ransomware: a Friday-night scenario walkthrough
A scenario walkthrough of an Akira ransomware chain, Pikabot delivery, and the host auto-isolation that cut the attacker's access.
SMB
Read articleTax Season Ransomware: Why CPA Firms Get Hit Between February and April
Why ransomware operators target accounting firms during tax season, the attack chains that work, the recovery timelines firms cannot afford.
SMB
Read articleWhat do the ABA rules require of a law firm's cybersecurity?
What ABA Model Rule 1.6(c), Formal Opinions 477R and 483, and the NC State Bar’s 2011 FEO 6 and 2024 FEO 1 ask of a law firm’s security.
SMB
Read articleCyber Insurance for Dental Practices: The Controls Underwriters Are Asking About in 2026
What dental cyber insurance actually covers in 2026, the underwriting questionnaire controls carriers review.
SMB
Read articleCyber Insurance for Law Firms: The Controls Underwriters Are Asking About in 2026
What law firm cyber insurance actually covers in 2026, the underwriting questionnaire controls carriers review.
SMB
Read articleHIPAA Cybersecurity for Dental Practices: What the Security Rule Actually Requires
What the HIPAA Security Rule actually requires of dental practices in 2026 — risk analysis, administrative safeguards, MFA, encryption, breach response.
SMB
Read articleMulti-Location Dental & DSO Cybersecurity: The Consolidation Problem
Why DSO and multi-location dental groups inherit the worst cybersecurity posture of their weakest practice.
SMBEnterprise
Read articleMulti-Office Law Firm Cybersecurity & Cyber Diligence in Legal M&A: The Consolidation Problem
Why multi-office firms and acquiring firms inherit the worst cybersecurity posture of their weakest office.
SMBEnterprise
Read articleProtecting Privileged Communications and Sealed Court Records: The Confidentiality Stack Every Small Law Firm Should Build
How small law firms actually protect attorney-client privileged communications, work product, and sealed court records in 2026.
SMB
Read articleSecuring Dentrix, Eaglesoft, and Open Dental: A Practical Hardening Guide
A field-tested hardening guide for Dentrix, Eaglesoft, and Open Dental — server isolation, account hygiene, backup strategy, audit logging.
SMB
Read articleSecuring NetDocuments, iManage, Clio, MyCase, ProLaw, and PracticePanther: A Hardening Guide for Small Law Firms
A field-tested hardening guide for the document management and practice management systems law firms actually use.
SMB
Read articleBusiness Email Compromise in Dental Offices: The $50k Wire-Fraud Pattern
How BEC and wire fraud actually unfold in a dental practice — the supplier-impersonation pattern, the inbox-rule trick, the controls that catch it.
SMB
Read articleDental Ransomware in 2026: Why Practice Management Systems Are the Number-One Target
Why ransomware operators target dental practices, how attacks land on Dentrix and Eaglesoft, what a real incident week looks like.
SMB
Read articleBusiness Email Compromise in Law Firms: The Closing-Wire-Fraud Pattern That Keeps Costing Firms Millions
How BEC and closing-wire-fraud actually unfold in a law firm — the impersonation pattern, the inbox-rule trick, the controls that catch it.
SMB
Read articleLaw Firm Ransomware in 2026: Why Mid-Size Firms Are the New Sweet Spot for Ransomware Operators
Why ransomware operators target law firms specifically, how the attack chain works against a typical practice, what a real incident week looks like.
SMB
Read articleIntune for small businesses: when it is enough and when it is not
A practical SMB guide to where Microsoft Intune is enough on its own, where it falls short, and how to decide without overspending.
SMB
Read articlePhishing training program for small business: what works
Learn how to build a phishing training program for small business employees with realistic simulations, easy reporting, and metrics that matter.
SMB
Read articleHuntress vs SentinelOne for SMBs: what actually changes operationally
A hands-on comparison of Huntress and SentinelOne for small businesses, focused on operations, staffing, response ownership.
SMB
Read articleThe 3 a.m. alert: anatomy of an ITDR save before payroll Monday
A scenario walkthrough of what Identity Threat Detection & Response should catch when an attacker tries to redirect payroll wires over a long weekend.
SMB
Read articleSOC 2 readiness for small businesses: what founders should do first
A practical guide to SOC 2 readiness for small businesses, including what founders should do first, what to avoid.
SMB
Read articleEDR vs MDR vs XDR: A 2026 buyer's guide for small businesses
A practical 2026 buyer's guide to EDR, MDR, and XDR for small businesses, with honest recommendations, tradeoffs, and staffing realities.
SMBEnterprise
Read articleDirect access to Kfir
Talk to Kfir, not a queue
Briefings are direct. No SDR layer, no demo theatre. Thirty minutes, an honest read on your situation, and a clear next step, or a clear “you don't need us.”