Cybersecurity
Practical cybersecurity for teams that have to defend real environments, not slideware. Our analysts and advisors write about what actually moves risk — 24×7 detection and response, zero-trust architecture, identity and privileged access, exposure management, and the compliance frameworks your customers and auditors expect. Expect specifics you can act on, not vendor talking points.
What cybersecurity covers
Detection & response
24×7 SOC monitoring, managed detection and response (MDR/XDR), threat hunting, and incident response that contains threats instead of just alerting on them.
Zero trust & identity
Identity-first access, privileged access management, and segmentation that assume breach — plus the SIEM and analytics that make it visible.
Compliance & exposure
SOC 2, ISO 27001, HIPAA, and PCI DSS programs, penetration testing, and continuous vulnerability and attack-surface management.
Latest cybersecurity articles
CybersecurityAI-Accelerated Ransomware: What Actually Changed, and What To Do About It
Ransomware volume is up sharply and AI is part of why. Which parts of the attack got cheaper, which did not, and the controls that still decide outcomes.
CybersecurityCisco Catalyst SD-WAN Manager Authentication Bypass: What to Patch and What to Check
CVE-2026-76504 gives unauthenticated attackers admin on Catalyst SD-WAN Manager, with no workaround. The fixed releases, and the log string to hunt for.
CybersecurityOne Provider, 495 Customers: Concentration Risk After the IDC Frontier Ransomware Attack
Ransomware at one Japanese cloud provider took 495 customer organisations offline. What concentration risk looks like, and what to ask your provider.
CybersecurityFixing the Refrigeration Attack: A Remediation Plan for Danfoss AK-SM and AK-SC Sites
A step-by-step fix for the October 2026 refrigeration attack: find the controllers, cut internet exposure, patch to R4.3.1, isolate end-of-life units.
- Cybersecurity
Three Edge Appliance Zero-Days in Two Weeks: Why Patching Is Not Enough
FortiMail, Ivanti and Cisco SD-WAN Manager were all exploited before patches shipped. The fixed versions, and what to do when the patch arrives late.
CybersecurityWarlock Ransomware and SharePoint ToolShell: Why Patching Alone Leaves You Exposed
Warlock still hits on-premises SharePoint via ToolShell. Patching does not evict the attacker — you have to rotate the ASP.NET machine keys too.
CybersecurityEnterprise OT Security Architecture: How to Secure Connected Operational Systems at Scale
A reference architecture for OT across many sites: asset discovery, zone segmentation, an IT/OT DMZ, privileged remote access and passive monitoring.
CybersecurityFrench Grocery Store Refrigeration Hack Shows the Growing Risk of OT Cyberattacks
Attackers forced refrigeration into defrost at ~700 French supermarkets. Why internet-exposed controllers allowed it, and what US operators should do.
CybersecurityLow-Cost OT & IoT Security Guide for Small and Mid-Sized Businesses
A low-cost way to secure refrigeration, HVAC, cameras and other connected equipment: VLAN segmentation, firewall rules, and safe vendor remote access.
InfrastructureCall Recording and Consent: What California Businesses Need to Get Right
California requires all-party consent to record a confidential communication. What that means for a business phone system, how the rules interact across state lines, and the controls that actually implement them.
- Cybersecurity
California Privacy Law: What a Business Actually Has to Do
Thresholds, consumer rights, the sale-and-sharing distinction that catches advertising pixels, and the operational work of honouring a deletion request across every system that holds the data.
CybersecurityCMMC Level 2: What Defence Suppliers Actually Have to Do
If your contracts involve controlled unclassified information, assessed CMMC is becoming a condition of award rather than a promise to comply. The practical shape of Level 2 readiness.
CybersecurityStarting Data Loss Prevention Without Blocking the Business
DLP projects fail in one of two ways: nothing is ever enforced, or enforcement blocks legitimate work and gets switched off. The deployment order that avoids both.
Managed ITIT for a Dental Practice: The Things That Actually Cause Problems
Practice management software, imaging, HIPAA and a schedule with no room for downtime. What matters in a dental practice's IT, from people who have had to fix it mid-morning.
InfrastructureE911 on a Cloud Phone System: The Obligations Most Businesses Miss
Two federal laws set specific requirements for multi-line phone systems: direct 911 dialling without a prefix, notification to a central point, and dispatchable location. What that means in practice.
- Cybersecurity
Email Security Beyond the Spam Filter
The attacks that cost money now arrive from real accounts with no attachment and no link. Authentication, mailbox rule monitoring and a verbal verification step do more than better filtering.
CybersecurityA Conditional Access Baseline That Won't Lock You Out
Microsoft Entra Conditional Access is the most useful security control most organisations own and never configure properly. A starting policy set, in the order to deploy it, with the break-glass account that keeps you in.
- Cybersecurity
The FTC Safeguards Rule Applies to More Businesses Than Think It Does
Auto dealers, tax preparers, mortgage brokers, debt collectors and many others are covered financial institutions under the Safeguards Rule. The nine required elements, in plain terms.
CybersecurityGLBA for Smaller Financial Firms: The IT Obligations
Advisers, brokers and lenders handle customer financial information under the Gramm-Leach-Bliley Act. The privacy notice is the part everyone does; the safeguards are the part regulators examine.
InfrastructureFax Is Still Here: Doing It Properly Under HIPAA
Healthcare still runs on fax, and the machine in the corridor is one of the most common sources of avoidable PHI disclosure. What cloud fax changes, what it doesn't, and the controls that matter.
CybersecurityProtecting Company Data on Personal Phones Without Managing the Phone
Full device management on an employee's own phone is intrusive, unpopular and often unnecessary. App protection policies secure the data instead of the device — here's where the line falls.
Managed ITIT Security for Law Firms: Confidentiality Is a Professional Obligation
Client confidentiality, conflict walls, retention that spans decades, and clients who now audit their outside counsel. What a firm's IT has to get right, and where firms usually fall short.
InfrastructureThe Phone System Is a HIPAA System: Configuring It That Way
Voicemails, call recordings, transcripts, appointment reminders and the answering service all carry protected health information. Where practices get the configuration wrong.
- Cybersecurity
Offboarding That Actually Revokes Access
Disabling the account is the part everyone does. The access that survives is in the places nobody owns: shared credentials, personal devices, API tokens and the applications IT never knew about.
Whether you’re planning a new initiative, hardening what you already run, or troubleshooting something that’s breaking, intSignal’s engineers own the tooling and the analysis so the outcome is measurable rather than best-effort. These articles reflect how we actually work with clients on cybersecurity — no vendor fluff, just what moves the needle. Explore the related services above, or talk to our team to scope a project or request an assessment.