Practical guides, threat reports, and field notes from the takedown desk. Everything we publish is grounded in cases we actually worked.
PHP's 21 October 2026 Security Release: How to Tell If Your Website Is Exposed
PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that can let an unauthenticated attacker run code on your server. Which versions are safe, how to check your site, and why an old-looking version number is not always a problem.
Q1 2026 Threat Report: Financial-Services Impersonation in EMEA
Sector data on phishing campaigns targeting UK and EU banks in Q1 2026, with median takedown times by the kind of company we acted through, and where the delays build up.
SPF Flattening Explained: Fixing the 10-Lookup Limit Without Breaking Mail
SPF flattening rewrites your Sender Policy Framework record so its include chains become plain server addresses, keeping it under the ten-lookup limit set by RFC 7208. How it works, when to use it, and the trade-offs to watch.
SPF Softfail Explained: What ~all Means and When It's Fine
SPF softfail (~all) is often reported as a mistake, but it is frequently the right choice. What softfail does to mail that fails your Sender Policy Framework check, when it fits, and when to tighten it to hardfail.
Why Protecting Your Email Authentication Matters
Attackers can send email that appears to come from your domain until DMARC, the rule for mail that fails your SPF and DKIM checks, is set to block. Why that takes more than publishing the records once.
Brand Impersonation: How to Detect, Respond, and Remove Fake Websites (2026 Guide)
Learn how to detect brand impersonation, respond quickly, and remove phishing websites using a proven takedown and monitoring workflow.
How to Remove a Phishing Website Quickly (Step-by-Step Guide)
Learn how to remove a phishing website quickly using a proven step-by-step workflow, including evidence collection, reporting, and takedown strategies.
How Long Does a Phishing Takedown Take? Timelines Explained (2026)
Learn how long phishing takedowns take, what affects response time, and how to speed up removal with better reporting and monitoring.
How to Detect Phishing Websites: Common Tactics Used by Attackers (2026 Guide)
Learn how attackers hide phishing websites and how to spot them using practical checks, before anyone types in a password.
How to report a malicious website (step-by-step)
Learn how to report a malicious website with a step-by-step checklist, including gathering evidence, where to send it, and checking the page has gone.
What Is Dark Web Monitoring? How It Works and Why It Matters for Businesses
Learn what dark web monitoring is, how it works, and how it helps you spot stolen logins, phishing campaigns, and brand impersonation early.
The same brief our analysts read on Mondays. No marketing fluff, no third-party retargeting.
Occasional updates on threats, takedowns, and product news. No spam.
One-click unsubscribe. We never share your address.