New · Season 1

Five new series, every Monday

Each series runs a 10-episode Season 1, published one episode a week. Episodes link here as they go live; Behind the Breach continues every Friday.

Series 1 · Season 1 · 10 episodes

Security in 5 Minutes

Practical how-tos you can finish in one sitting.

  1. 01 Passkeys vs. SMS and authenticator codes: what to switch to first Coming soon
  2. 02 Securing your home router Coming soon
  3. 03 Password managers: choosing one and migrating safely Coming soon
  4. 04 Backups that survive ransomware (3-2-1-1-0) Coming soon
  5. 05 Reading a suspicious email: headers, links, attachments Coming soon
  6. 06 Locking down your Google or Microsoft account Coming soon
  7. 07 Protecting your phone number from SIM swapping Coming soon
  8. 08 Turning on automatic updates everywhere (and what to check) Coming soon
  9. 09 After a breach: the first five things to change Coming soon
  10. 10 Safe travel: laptops, phones and hotel Wi-Fi Coming soon
Series 2 · Season 1 · 10 episodes

Threat of the Week

One attack technique explained, mapped to MITRE ATT&CK, with detection tips.

  1. 01 MFA fatigue (push bombing): how it works and how to detect it Coming soon
  2. 02 OAuth consent phishing Coming soon
  3. 03 QR-code phishing (quishing) Coming soon
  4. 04 Adversary-in-the-middle phishing kits and session theft Coming soon
  5. 05 Software supply-chain attacks: typosquatting and dependency confusion Coming soon
  6. 06 Business email compromise Coming soon
  7. 07 Infostealer malware and stolen browser sessions Coming soon
  8. 08 Living off the land: attackers using your own tools Coming soon
  9. 09 Deepfake voice and video scams Coming soon
  10. 10 Credential stuffing Coming soon
Series 3 · Season 1 · 10 episodes

Playbook Monday

Step-by-step defender checklists for when something goes wrong.

  1. 01 Phishing triage: the first 15 minutes Coming soon
  2. 02 Account takeover response checklist Coming soon
  3. 03 Ransomware first-hour checklist for small teams Coming soon
  4. 04 Lost or stolen laptop response Coming soon
  5. 05 Vendor breach notification: what to do when a supplier is hit Coming soon
  6. 06 A secret or API key leaked in a public repository Coming soon
  7. 07 Employee offboarding without leaving access behind Coming soon
  8. 08 Isolating an infected endpoint Coming soon
  9. 09 Responding to a DDoS attack Coming soon
  10. 10 A one-page tabletop exercise for small teams Coming soon
Series 4 · Season 1 · 10 episodes

Myth vs Reality

Common security beliefs, fact-checked.

  1. 01 "Incognito mode makes me anonymous" Coming soon
  2. 02 "Macs and phones don't get malware" Coming soon
  3. 03 "A strong password is enough" Coming soon
  4. 04 "Public Wi-Fi is always dangerous" (and when it actually is) Coming soon
  5. 05 "I'm too small to be a target" Coming soon
  6. 06 "A VPN makes me secure" Coming soon
  7. 07 "Antivirus is all I need" Coming soon
  8. 08 "The HTTPS padlock means a site is safe" Coming soon
  9. 09 "Deleting a file erases it" Coming soon
  10. 10 "Change your password every 90 days" Coming soon
Series 5 · Season 1 · 10 episodes

Tool Spotlight

Free and open-source security tools: what they do and where they fall short.

  1. 01 Wireshark basics for spotting suspicious traffic Coming soon
  2. 02 Have I Been Pwned and breach-monitoring tools Coming soon
  3. 03 Sysmon for endpoint visibility on Windows Coming soon
  4. 04 Nmap for checking your own network exposure Coming soon
  5. 05 YARA and Sigma rules: writing a first detection Coming soon
  6. 06 CyberChef for decoding and analysing data Coming soon
  7. 07 VirusTotal: using it well and its limits Coming soon
  8. 08 Process Explorer and Autoruns for finding persistence Coming soon
  9. 09 OWASP ZAP for testing your own web app Coming soon
  10. 10 Wazuh: open-source monitoring for a small network Coming soon