Knowledgebase

Viewing articles tagged 'hacked'

"Too Many Connections" and Rate Limit Errors The server is limiting how much your client is doing at once.WHAT CAUSES ITA mail client opening... A Maintenance Plan Description You Can Adapt Wording for what you sell.WHAT IS INCLUDEDCore, theme and plugin updates, applied monthly after a... A Maintenance Routine for a VPS What to do, and how often.WEEKLYApply security updates Check disk space Check backups ran and... A Realistic First Year as a Reseller What to expect.MONTHS ONE TO THREEReseller plan set up, nameservers configured, packages created... A Security Routine What to do regularly.WEEKLYApply security updates Check for unexpected user accounts Check... A Simple Website Maintenance Routine What to do, and how often.MONTHLYApply updates, having backed up Test the contact form from an... A Yearly Email Review for Your Business Once a year, spend an hour on this.MAILBOXESWhich exist, and are they all still needed Which... Access Levels and Permissions Giving the minimum necessary.THE PRINCIPLEEach person has the lowest level of access that allows... Actuators and Control Acting on the physical world.WHAT ACTUATORS DOConvert a signal into physical action: switching,... Adding Users and Understanding WordPress Roles Give every person their own account and the smallest role that lets them do their job. Sharing... Administrative Roles and Privileged Access Who can do what.WHAT ROLES PROVIDEDefined sets of administrative permissions.WHAT TO... After Installing: The First Ten Minutes What to do before building anything.SECURITYChange any default administrator credentials Delete... AI-Enabled Threats You Should Know About What attackers do with these tools.CONVINCING PHISHINGWell-written, personalised, in any... Apple's Security Architecture How the platform protects itself.WHAT THE LAYERS AREHardware: a dedicated secure element storing... Applying System Updates The single most important ongoing maintenance task.WHYMost server compromises exploit known... Arranging Ongoing Maintenance After the project ends.WHAT MAINTENANCE INVOLVESApplying updates Monitoring the site Backups... Assessing Your Own Exposure Where to start.WHAT TO ESTABLISHWhat devices exist What accounts exist What data you hold and... Assessing Your Own Risk What you have to lose.WHAT TO CONSIDERWhat data you hold What a compromise would cost in lost... Attacks That Target Money Directly Financial compromise.WHAT THEY LOOK LIKEA request to change payment details An invoice that... Auditing Who Has Access The regular review.HOW OFTENQuarterly.WHAT TO REVIEWEvery user account on your site Every FTP... Auto-Forwarding to Personal Addresses: The Risks Staff forwarding business mail to a personal Gmail account is common and usually a bad idea.WHY... Azure Networking Connecting resources.WHAT A VIRTUAL NETWORK ISAn isolated network in which your resources... Azure Security Practices Protecting cloud resources.WHAT TO CONFIGURE FIRSTMulti-factor authentication for every... Backing Up Databases Separately from Files Why splitting them makes sense.WHY SPLITDatabases change constantly and are small. Files change... Backing Up Your Business Online What you cannot afford to lose.WHAT MATTERS MOSTYour customer records and order history Your... Backing Up Your Email Mail is the business record people most often realise too late they have lost.WHAT IS AT... Backup and Disaster Recovery for Windows Environments Protecting infrastructure.WHAT TO BACK UPDomain controller system state File servers and their... Backup Considerations for Online Shops Where data loss costs money directly.WHY SHOPS ARE DIFFERENTThe database changes constantly.... Backup Infrastructure Systems that protect data.WHAT A BACKUP ISA separate copy, from a point in time, that the live... Backup Strategy for a VPS On a VPS, backups are entirely your responsibility unless you have bought them.WHAT TO BACK... Backups and Disaster Recovery for SaaS Surviving the worst case.WHAT MUST BE RECOVERABLEThe database Customer files Configuration... Backups as a Security Control A tested backup turns a compromise from a crisis into an inconvenience. It is the most valuable... Backups as Security The measure that saves you.WHY BACKUPS ARE SECURITYThey are what lets you recover from anything:... Backups of Infrastructure Not only data.WHAT TO BACK UPApplication data Databases Uploaded files Configuration The... Before You Restore Anything Steps that prevent making things worse.TAKE A COPY OF THE CURRENT STATEWhatever is wrong now, the... Biometric Technology Authenticating by physical characteristics.WHAT IS USEDFingerprints Face geometry Iris patterns... Blocking Execution in Upload Directories A single measure that prevents a class of attack.THE ATTACKAn attacker finds a way to upload a... Bundling Hosting With Other Services Where the margin actually is.THE PRINCIPLEHosting alone is thin. Hosting as part of something... Business Systems: Everything That Matters, Briefly The summary.PROTECT EMAIL FIRSTIt controls password resets for everything else. Whoever holds it... Buying Security Services Sensibly What to buy and what you already have.WHAT IS INCLUDED WITH HOSTINGFree SSL through AutoSSL... Cash on Delivery Common, and it carries risk.WHY OFFER ITFor many Nigerian customers it is the most trusted... Certificate Security and Transparency Preventing misissuance.WHAT MISISSUANCE ISA certificate issued for a name to someone not entitled... Changing Credentials After a Compromise What to change.WHAT TO CHANGEHosting account password Site administrator passwords, all of them... Changing Passwords Safely Doing it properly.WHEN TO CHANGE ONEYou suspect it is compromised It was reused elsewhere A... Changing Your Email Password What to update.WHERE TO CHANGE ITcPanel, Email Accounts.Or webmail, in some configurations.WHAT... Checking Blacklists When your server or domain is listed.WHAT A BLACKLIST ISA published list of addresses or domains... Checking Cron Jobs and Scheduled Tasks Where persistence hides.WHY THIS MATTERSAttackers use scheduled tasks to reinstate themselves... Checking Whether You Have Been Compromised Verification.WHAT TO CHECKYour user list, for accounts you do not recognise Files modified... Checking Your Sending Reputation Knowing where you stand.WHAT TO CHECKBlacklists, for your domain and sending addresses Your... Choosing a Domain for a Nigerian Business Which extension, and why it matters locally.THE OPTIONS.com.ng: the standard Nigerian commercial... Choosing a Good Domain Name You will live with this choice for years, and changing it later costs traffic and rankings.WHAT... Choosing a Theme for Your Store The theme decides how much work everything else becomes.WHAT TO LOOK FORExplicit WooCommerce... Choosing a Wallet Selecting how to hold assets.WHAT TO DECIDE FIRSTWhether you want custody, or want a service to... Choosing and Storing Strong Passwords Most account compromises begin with a guessed, reused or stolen password rather than a clever... Choosing Between an Addon Domain and a Separate Account Where to host a second site.ADDON DOMAINSame account, shared resources, one login, one... Choosing the Right Domain Extension .com, .com.ng, .ng and others..COMThe international default. Frequently taken for any short or... Choosing WooCommerce Extensions Wisely Every extension is code running on every page load.BEFORE INSTALLING ANYTHINGAsk whether the shop... Church, School and Organisation Websites Common requirements for community organisations.WHAT THEY USUALLY NEEDInformation: about,... Cleaning a Compromised Application Removing an infection properly.THE ORDEROpen a ticket so we can check the account... Cleaning a Hacked Website Step by Step Work in this order. Cleaning while the site is still being re-infected wastes the effort.1.... Cleaning the Database Compromises that live in data.WHY CHECK ITSome compromises inject content into the database... Cleaning Up Your Hosting Account Recovering space and reducing clutter.WHAT TO REMOVEBackup archives you have downloaded Old site... Common Backup Mistakes The ones that leave people with nothing.STORING BACKUPS ON THE SAME SERVERLost in the same event... Common Misconceptions Widely held beliefs that are wrong.THAT BLOCKCHAIN MAKES DATA TRUEIt makes records... Common Mistakes With Installed Applications The ones that cause real problems.NULLED SOFTWAREThe most common cause of compromised sites we... Common Questions from New Resellers Short answers.HOW MANY CLIENTS DO I NEED?Enough that recurring revenue covers your costs and... Common Security Mistakes What goes wrong.NOT UPDATINGThe largest cause of compromise.REUSED PASSWORDSA breach elsewhere... Common Social Media Mistakes What goes wrong.CREATING ACCOUNTS EVERYWHEREAnd maintaining none. An abandoned account is worse... Common Types of Malware on Shared Hosting Knowing what you are looking at helps you judge the severity.SEO SPAMHidden links or entire pages... Common VPS Mistakes The ones that cause real damage.NOT SECURING IT BEFORE GOING LIVEAutomated attacks find new... Compliance and Audit Trails Records of what happened.WHY KEEP THEMTo investigate incidents To demonstrate control To meet... Compromises That Hide Themselves Why you might not notice.WHAT ATTACKERS DO TO AVOID DETECTIONShow the compromise only to search... Configuration and Secrets Management Keeping settings out of code.WHAT BELONGS OUTSIDE THE CODECredentials API keys Endpoints... Configuring a Firewall Controlling what can reach your server.THE PRINCIPLEDeny everything by default, then permit only... Containing an Incident Stopping it spreading.WHAT CONTAINMENT MEANSPreventing further harm while you establish what... Control Panel Infrastructure The management layer.WHAT A CONTROL PANEL PROVIDESAccount provisioning File, database and mail... Creating Users and Managing Permissions Not everything should run as root.WHY IT MATTERSRoot can do anything, including destroying the... Cron Jobs and Security Scheduled work as a risk.WHAT TO BE CAREFUL WITHScripts with credentials in them Jobs running... Cron Jobs: Everything That Matters, Briefly The whole category in one page.THE MOST IMPORTANT POINT ON OUR SERVERSHTTP wp-cron is blocked... Custody and Institutional Infrastructure Holding assets at scale.WHAT INSTITUTIONS REQUIRESegregation of assets Insurance Audited controls... Cyber Security Myths Worth Discarding Common misconceptions."WE ARE TOO SMALL TO BE TARGETED"Attacks are automated and... Cyber Security: Everything That Matters, Briefly The whole category in one page.WHAT ACTUALLY CAUSES INCIDENTSSomething out of date, a reused... Data Centre Security Controls Protecting the facility and its systems.WHAT PHYSICAL CONTROLS COVERPerimeter, building, zone,... Data Protection Obligations Handling customer information.WHAT YOU HOLDCustomer names, contact details, addresses, order... Data Security: Everything That Matters, Briefly The summary.START BY KNOWING WHAT YOU HOLDYou cannot protect data you have not identified. Most... Database Backups Versus Full Backups Knowing which you need.A DATABASE BACKUPThe content, settings, users and orders. Small, fast, and... Database Was Modified by an Attacker Recovering from a compromise affecting data.WHAT IT LOOKS LIKESpam links injected into post... Databases on Shared Hosting MySQL and MariaDB databases are available on every plan, managed through cPanel.CREATING... Decentralised Applications Software without an operator.WHAT ONE ISAn application whose logic runs on a network rather than... Deceptive Site Ahead A phishing warning on your domain.WHAT IT MEANSContent resembling a phishing page was found on... Deciding When to Take on Debt Deliberate compromise.WHEN IT IS DEFENSIBLEA genuine deadline where being late costs more... Deciding Whether to Take the Site Offline A judgement call.WHEN TO TAKE IT DOWNIt is redirecting visitors somewhere harmful It is... Dedicated IPs and Email Sending Reputation This is one of the two genuine reasons to hold a dedicated IP.THE PROBLEM ON A SHARED IPOutbound... Deploying on cPanel: Everything That Matters, Briefly The summary.NEVER UPLOAD A LARAVEL PROJECT INTO THE PUBLIC DIRECTORY AS IT STANDSEverything... Designing Character Progression Growth over time.WHAT PROGRESSION SYSTEMS DECIDEWhat improves How improvement is earned Whether... Designing With Brand Constraints Working within an identity.WHAT BRAND PROVIDESColours Typefaces Tone Recognisable elementsWHAT IT... Detecting Compromise Noticing intrusion.WHAT TO WATCH FORUnexpected processes Unexpected network connections,... Device Identity and Provisioning Getting devices into service.WHAT IDENTITY REQUIRESA unique identifier per device Credentials... Digital and Data Risks Technology exposure.WHAT CAN HAPPENA compromised website Loss of customer data Ransom demands... Disabling the WordPress Theme and Plugin File Editor The built-in editor under Appearance and Plugins lets anyone with administrator access write PHP... Disaster Recovery Planning for a VPS What you do when the server is gone.THE SCENARIOSHardware failure A compromise requiring a... DNS Best Practices Habits worth adopting.RECORD WHERE EVERYTHING LIVESRegistrar, DNS provider, and who has access.... DNS Emergencies and What to Do When something is seriously wrong.THE DOMAIN DOES NOT RESOLVE AT ALLCheck expiry first. An... DNS Security Considerations Protecting your domain's records.WHAT AN ATTACKER GAINS FROM CONTROLLING YOUR DNSThe ability to... DNS Security Threats What goes wrong.CACHE POISONINGInjecting false data into a resolver's cache, directing users... Document Roots for Framework Projects A common misconfiguration.THE PROBLEMMany frameworks expect the web root to point at a public... Documenting What You Have Installed The record that makes maintenance possible.WHAT TO RECORDApplication name and versionWhere it is... Documenting Your Own Processes Making the business repeatable.WHAT TO DOCUMENTCreating a new client account, step by step... Email Deliverability Getting mail accepted.WHAT DETERMINES WHETHER MAIL ARRIVESThe sending address's reputation The... Email in Microsoft 365 Exchange Online in practice.WHAT IT PROVIDESMailboxes, calendars and contacts Shared mailboxes,... Email Infrastructure: Everything That Matters, Briefly The summary.REJECT AT THE TRANSACTION RATHER THAN ACCEPTING AND BOUNCINGAccepting then bouncing... Email Reputation on a Shared IP What sharing an address means for your mail.HOW RECEIVING PROVIDERS JUDGE MAILThey weigh the... Email Security on Devices Protecting your mail.WHAT TO DOLock every device Keep them updated Use encrypted connection... Email Sending Limits Across Your Accounts One compromised mailbox can damage the sending reputation of every account you host.WHERE TO SET... Email Sending Limits and Our Spam Policy Shared hosting enforces hourly sending limits. They protect the server's mail reputation for... Email Troubleshooting: Missing or Deleted Mail Mail that was there and now is not.FIRST, SEARCH PROPERLYSearch the whole mailbox rather than the... Email, Privacy and the NDPR If you hold customer correspondence, you hold personal data.WHAT THIS MEANS IN PRACTICEMailboxes... Embedded Security Protecting devices in the field.WHAT TO ASSUMEThe device is physically accessible to an attacker... Errors That Are Not Actually Errors Messages that look alarming and are not.DEPRECATION NOTICESA warning that something will be... File Management: Everything That Matters, Briefly The whole category in one page.THE MOST IMPORTANT THING TO UNDERSTANDAnything in public_html is... Finding the Entry Point The step people skip.WHY IT MATTERS MOSTCleaning without closing the entry point means it returns... Firewall Rules Worth Having A practical baseline.THE DEFAULTDeny all incoming. Permit all outgoing, unless you have a reason... Firmware Update and Recovery Changing software in the field.WHY IT IS DIFFICULTDevices may be inaccessible, unattended,... Fraud Prevention: Everything That Matters, Briefly The whole category in one page.THE CONTROL THAT PREVENTS THE MOST DAMAGENo change to payment... Fraud Risk Management Protecting the business and its customers.WHAT THE CATEGORIES AREFirst-party fraud, where the... Free Versus Paid Plugins The comparison.FREE PLUGINS FROM THE DIRECTORYReviewed before listing Community support... Free Versus Paid Themes The honest comparison.FREE THEMES FROM THE OFFICIAL DIRECTORYReviewed before listing Usually... Getting Access to a Client's Hosting Safely Doing this properly protects both of you.WHAT TO ASK FORTheir own cPanel credentials, ideally... Giving a Developer Access Safely Handing over your main cPanel login gives one person total control of every site, mailbox and... Glossary: The Terms That Matter Most The short list.IF YOU LEARN ONLY TEN, LEARN THESEPUBLIC_HTMLAnything here is publicly... Google Cloud Security Practices Protecting cloud resources.WHAT TO CONFIGURE FIRSTMulti-factor authentication for every account... Guest Networks Access for visitors.WHAT IT ISA separate wireless network, isolated from your business... Handling a Compromised Client Site When one gets hacked.IMMEDIATE PRIORITIESContain it, so other accounts are not affected Establish... Handling a Server Incident When something breaks.THE ORDEREstablish what is affectedContain, if something is actively... Handling Abuse and Compromised Accounts Responding to problems on your network.WHAT ABUSE LOOKS LIKEOutbound mail floods Phishing pages... Handling Abuse Complaints About Client Sites When a client causes a problem.WHAT ARRIVESA notice from us about spam, malware, phishing or... Handling Abuse Complaints About Clients When a client causes problems.WHAT MIGHT ARISESpam sent from their account A compromised site... Handling an Abuse Report About a Client We forward abuse reports concerning your accounts to you. Acting quickly protects your other... Handling File Uploads Securely One of the most exploited features in any application.THE RULESValidate the file type on the... Handling Security Incidents in Support When something is compromised.WHAT TO RECOGNISEReports of unexpected messages sent from a user's... Hardening Servers Reducing exposure.WHAT TO DOInstall only what is needed Disable services not in use Restrict... Hiding Configuration and Sensitive Files Files that must never be publicly reachable.WHAT MUST NOT BE PUBLICConfiguration files containing... Hiding Sensitive Files from Public Access Anything inside public_html is reachable by anyone who guesses the URL, whether or not you linked... Hosting More Than One Website on a Single Account If your plan permits multiple domains, you can run several completely separate websites from one... Hosting Multiple Sites on One Server Managing several.WHAT YOU NEEDWeb server configuration per site A separate database per site... How Exchanges Work Where assets are traded.WHAT A CENTRALISED EXCHANGE ISA company matching buyers and sellers,... How Fraudsters Choose Targets Understanding selection.WHAT MAKES A BUSINESS ATTRACTIVEVisible online, with named staff and... How HTTPS Works in Plain Terms A simplified account of what happens when a visitor loads a secure page.THE SEQUENCEThe browser... How Long to Keep Backups Retention, and why short retention fails.THE PROBLEM WITH THREE DAYSA site compromised with SEO... How Networks Are Structured Topology and segmentation.WHAT A SIMPLE NETWORK LOOKS LIKEA router, a switch, and devices... How Sites Actually Get Compromised The common routes.OUT-OF-DATE SOFTWAREThe most common by a wide margin.A vulnerability is... How TLS Works Encrypting connections.WHAT IT PROVIDESConfidentiality: traffic cannot be readIntegrity: traffic... How to Buy Scripts and Addons Additional software and services.WHAT IS AVAILABLEzillionkinghost.com/billing/cart.php?gid=4A... How to Buy SiteLock Website Security Malware scanning and protection.WHAT IT DOESScans your website for malware and vulnerabilities,... How to Clean a Compromised Site The proper process.THE PRINCIPLERemove the compromise and close the entry point.Doing only the... HTTPS and Encrypted Connections Protecting data in transit.WHAT HTTPS DOESEncrypts traffic between visitor and server.WHAT THAT... I Received a Manual Action Notice Search Console reports a penalty.WHAT IT MEANSA human reviewer determined your site violates... Identity, Privacy and Security: Everything That Matters, Briefly The summary.IDENTIFICATION, AUTHENTICATION AND AUTHORISATION ARE THREE DIFFERENT THINGSConflating... If You Have Been Defrauded What to do afterwards.WHAT TO DO FIRSTStop sending money, immediately, whatever is... If Your Mailbox Has Been Compromised Act quickly, because a compromised mailbox is usually being used within hours.IMMEDIATE... If Your Mailbox Is Sending Spam A compromised mailbox is one of the most common abuse incidents we handle. The password was... Impersonation of People You Know When the message appears to come from a colleague.WHAT HAPPENSA message appears to come from a... Incident Response: Everything That Matters, Briefly The summary.THE FIRST HOURContain: disconnect affected devices.Establish scope. Change... Individual Accounts, Not Shared Logins The principle.WHY IT MATTERSActions are attributable Access can be removed for one person A... Infrastructure Security: Everything That Matters, Briefly The summary.WHOEVER CONTROLS THE PIPELINE CONTROLS PRODUCTIONProtect it as tightly as production... Insurance and Liability as a Reseller Thinking about what could go wrong.THE EXPOSURESA client's site down for an extended period,... Internet and Advanced Infrastructure: Everything That Matters, Briefly The whole category in one page.ROUTING IS POLICY BEFORE IT IS GEOGRAPHYThe commercially preferred... Internet of Things: Everything That Matters, Briefly The whole category in one page.DATA NOBODY ACTS ON PRODUCES NOTHINGEstablish what decision... Interoperability Between Networks Moving between chains.WHY IT MATTERSAssets and applications exist on many networks, which do not... Investigating What Happened Establishing the facts.WHAT TO ESTABLISHHow access was obtained What was accessed or taken When... Invoice Fraud and Business Email Compromise A costly fraud that targets businesses through email.HOW IT WORKSAn attacker gains access to a... IoT Device Management: Everything That Matters, Briefly The summary.UNIQUE CREDENTIALS PER DEVICE, ALWAYSA shared credential means compromising one... IoT Security: Everything That Matters, Briefly The summary.A COMPROMISED SENSOR LEAKS INFORMATION; A COMPROMISED ACTUATOR CAUSES EVENTSWhich is... Is a VPS Still Right for You? A question worth revisiting annually.THE HONEST QUESTIONSAre you applying updates promptly, or is... Isolating Client Sites on a VPS Hosting for other people on a server you manage.WHY ISOLATION MATTERS MORE HEREYou are... Isolating Sites and Applications Preventing one compromise becoming several.THE PROBLEMIf every site on your server runs as the... Job Boards and Application Systems Receiving applications online.WHAT IT INVOLVESPosting positions Receiving applications, usually... Keeping a Server Updated The maintenance that matters most.WHY IT MATTERSMost compromises exploit known vulnerabilities... Keeping a Website Going Long Term What happens over years.WHAT DEGRADESContent goes out of date Software becomes vulnerable if... Keeping Applications Updated The single most important ongoing task.WHYOut-of-date software is the leading cause of... Keeping Client Sites Off Nulled Software Protecting your allocation.THE PROBLEMClients install nulled themes and plugins because the... Keeping Client Sites Updated The maintenance problem.THE PROBLEMUnmaintained client sites get compromised. That becomes your... Keeping Software Patched on a VPS The discipline that prevents most compromises.WHAT NEEDS PATCHINGThe operating system and its... Keeping Track of Multiple Applications Managing several installations.THE PROBLEMThree applications across two domains, installed at... Keeping Your Email Address Off Spam Lists Reducing the volume you receive starts with where the address is published.WHERE ADDRESSES ARE... Keeping Your Website Software Updated Out-of-date software is the leading cause of hacked websites on shared hosting. Attacks are... Keeping Your Website Updated Maintenance that prevents problems.WHAT NEEDS UPDATINGThe platform itself Themes Plugins and... Knowing When to Escalate to Us Working with your host.WHEN TO ESCALATEServer-level problems affecting several accounts Anything... Knowing When to Get Professional Help Where the line is.DO IT YOURSELFEditing text and images Adding pages Applying updates Basic... Learning From a Compromise What to take from it.WHAT TO ESTABLISHHow it happened How long it went unnoticed What it cost... Learning to Manage Your Own Site What you should be able to do.WHAT TO LEARNUpdate text on a page Add a page or a product Upload... Mac Command Line Tools and Services Non-graphical software.WHAT COMMAND LINE TOOLS AREExecutables run from a terminal, without an... Mail Server Operations Running mail reliably.WHAT TO MONITORQueue size and age Deferred mail Rejection rates... Malware detected in your account A scanner found something.WHAT IT MEANSEither our server-side scanning or ImunifyAV identified... Malware Scanning Checking for infection.WHAT SCANNING FINDSKnown malicious code Modified core files Suspicious... Managed Versus Unmanaged VPS The most important decision you will make about a VPS.UNMANAGEDYou get the machine and root... Managing a Product Backlog Ordering what to build.WHAT IT ISAn ordered list of everything wanted, with the most important... Managing Access Across Business Systems Who can do what.THE PRINCIPLEEach person has their own account with the minimum access their work... Managing Administrator Access to Your Store Who can do what, and why it matters.THE PRINCIPLEGive each person the lowest role that lets them... Managing Backups Securely Backups as both protection and risk.WHY BACKUPS ARE BOTHThey are what saves you.They also contain... Managing Browser Security Where most risk arrives.WHY THE BROWSER MATTERSMost compromise arrives through it.WHAT TO DOKeep... Managing Configuration and Secrets Keeping settings out of code.WHAT COUNTS AS CONFIGURATIONDatabase details API keys File paths... Managing Dependencies on Open Source Relying on others' code.WHAT THE RISKS AREAbandonment Breaking changes Security vulnerabilities... Managing Dependencies Safely Third-party code is most of your application.THE PRINCIPLEEvery dependency is code you did not... Managing Distributed Edge Estates Operating many small locations.WHAT THE CHALLENGE ISMany locations, few or no staff, variable... Managing Email Effectively Handling a mailbox.WHAT CAUSES MOST PROBLEMSTreating the inbox as a task list, a filing system... Managing Environment Configuration Keeping settings out of your code.THE PRINCIPLECode is the same in every environment.... Managing Environments Development, testing and production.WHAT ENVIRONMENTS ARE NEEDEDLocal development A shared... Managing Extensions and Plugins Safely Third-party code running on your site.BEFORE INSTALLINGWhen was it last updated? Anything... Managing Files Across Multiple Sites When you host several.KEEPING THEM SEPARATEEach site in its own directory Each with its own... Managing Files and Archives Efficiently Command line file work that saves real time.UPLOADING A SITEZip it locally, upload the single... Managing Keys and Secrets Protecting credentials to move money.WHAT SECRETS EXIST IN PAYMENT SYSTEMSProvider interface keys... Managing Many Domains in One Account Keeping track.WHAT TO DOCUMENTEvery domain on the accountIts type: main, addon, subdomain,... Managing Network Security in a Facility Protecting connectivity.WHAT TO SEPARATECustomer networks from each other Management networks... Managing Passwords Practically Credentials you can actually use.THE CORE PROBLEMUnique passwords everywhere are impossible to... Managing Secrets in Google Cloud Credentials and keys.WHAT THE SECRET MANAGER PROVIDESStorage for secrets, with versioning, access... Managing Stakeholders The people with an interest.WHO THEY AREUsers The people paying Managers accountable for the... Managing Who Has Access Accounts and permissions.THE PRINCIPLEEach person has their own account, with the minimum access... Markets and Exchanges: Everything That Matters, Briefly The summary.ASSETS HELD ON AN EXCHANGE ARE A CLAIM ON THE EXCHANGEExchanges have failed, been... Microsoft 365 Security Configuration Protecting the tenant.WHAT TO ENABLE FIRSTMulti-factor authentication for every account.WHYIt... Microsoft 365: Everything That Matters, Briefly The summary.ENABLE MULTI-FACTOR AUTHENTICATION FOR EVERY ACCOUNTIt prevents the large majority of... Microsoft Technology in Practice: Common Mistakes What goes wrong repeatedly.NO EMERGENCY ACCESS ACCOUNTA policy then locks out every... Migrating a Site You Did Not Build Inheriting someone else's work.WHAT TO ESTABLISH FIRSTWhere the domain is registered, and whether... Missing or Disappeared Email When mail vanishes.WHAT TO CHECK FIRSTWebmail. That shows what is actually on the server.IF IT IS... Mobile Application Security Fundamentals What is different on a device.WHAT TO ASSUMEThe device may be compromised or rooted The... Monitoring Account Activity Noticing problems early.WHAT TO MONITORSuccessful logins, and from where Failed login attempts... Monitoring Device Fleets Knowing what is happening.WHAT TO MONITOR PER DEVICELast contact time Battery or power status... Monitoring DNS for Changes Noticing when something changes.WHYAn unexpected nameserver or record change is a serious signal:... Monitoring for Changes Knowing when something happens.WHAT TO MONITORFile changes New user accounts Failed and... Monitoring for Fraud What to check regularly.WHAT TO CHECK WEEKLYUnusual orders Failed payment patterns Pending orders... Monitoring for Intrusion Noticing a compromise rather than being told by someone else.WHAT TO WATCHFailed and successful... Monitoring Identity and Responding to Incidents Watching for compromise.WHAT TO MONITORSign-in logs, including failures Audit logs of directory... Monitoring Network Infrastructure Watching the fabric.WHAT TO MONITORLink status and utilisation Error, discard and retransmission... Monitoring Your Network Noticing problems.WHAT TO WATCH FORDevices you do not recognise Unusual traffic volumes Slowness... My Database Was Corrupted or Emptied Data loss without file loss.WHAT YOU SEEError establishing a database connection Missing content... My Site Was Hacked Recovering from a compromise.THE ORDEROpen a ticket so we can check the account server-side.Take... My Site Was Hacked and Search Traffic Collapsed The most damaging thing that can happen to a site's search presence.WHAT HAPPENEDSearch engines... My Site Was Suspended Access removed, data intact.FIRST, READ THE NOTICEIt states the reason. The right action depends... Naming a SaaS Product Choosing what to call it.WHAT A NAME MUST DOBe sayable Be spellable after hearing it Be findable... Network Segmentation Separating traffic.WHY IT MATTERSFlat networks allow anything to reach anything, so one... Networking for Digital Displays and Media Screens and streaming.WHAT IT CONSUMESContinuous download, particularly for video.WHAT TO PLAN... Never Use Pirated Software Nulled themes and plugins.WHAT NULLED MEANSA paid theme or plugin distributed free with its... Nulled and Pirated Software: Why Not To The most common cause of compromised sites we clean.WHAT IT ISPremium themes, plugins or... Offering Security Hardening and Cleanup Two related services.HARDENINGApplied once: permissions, admin protection, two-factor, removing... Outbound Mail Abuse Control Preventing your servers becoming a source.WHY IT MATTERS MOST TO A HOSTING PROVIDEROne... Password and Access Policy for a Small Business Writing it down.WHAT TO STATEIndividual accounts only, no sharing Unique passwords, through a... Paying for Professional Services Some work falls outside standard support and is quoted separately.INCLUDED IN STANDARD... Payment Redirection Fraud The most damaging attack.WHAT HAPPENSA message appears to come from a supplier, a client, or a... Payment Security: Everything That Matters, Briefly The summary.BROKEN OBJECT-LEVEL AUTHORISATION IS THE COMMONEST SERIOUS FAULTAuthenticating a... Phishing Content Found on Your Account Phishing pages are treated as the most urgent category of abuse after child protection, because... Planning a Multilingual Project Before building.WHAT TO DECIDEWhich languages Which content gets translated Who translates it Who... Planning for Long-Term Maintenance What you are committing to.WHAT EVERY INSTALLED APPLICATION REQUIRESRegular updates, indefinitely... Playbook: Email Not Working The most frequent request.ESTABLISH FIRSTSending, receiving, or both? All recipients or specific... Playbook: I Think I Have Been Hacked Security incidents.ESTABLISH FIRSTWhat did they notice? When? What have they already done?WHAT TO... Plugins and Security The main route of compromise.THE FACTSOutdated plugins are the most common way WordPress sites... Port Forwarding and Exposing Services Making something reachable.WHAT IT ISConfiguring your router to send inbound connections on a... Portfolio and Creative Sites Showing work.WHAT MATTERSImage quality, balanced against page weight Fast loading, since visitors... Preparing Your Site for Migration Cleaning up first.WHY BOTHERMoving a bloated site moves the bloat.A migration is a natural point... Preventing Card Skimming on Checkout The most damaging compromise a shop can suffer.WHAT IT ISJavaScript injected into your checkout... Preventing It Happening Again Closing the loop.WHAT TO DO IMMEDIATELYUpdate everything Remove anything unmaintained Remove... Preventing Malicious File Uploads Where attacks get in.THE RISKA form allowing file uploads, exploited to upload an executable... Preventing Reinfection Why cleaned sites get compromised again.THE FOUR CAUSESA backdoor was missed. Attackers plant... Protecting Against Common Server Attacks What actually happens.BRUTE FORCE ON REMOTE ACCESSContinuous automated password guessing.Defeated... Protecting Against Email Compromise When your account is used against you.WHAT HAPPENSSomeone gains access to a business email... Protecting Configuration and Credentials Secrets.WHAT COUNTSDatabase credentials API keys Encryption keys Mail credentials Anything... Protecting Configuration Files Files containing credentials.WHAT THEY AREwp-config.php for WordPress Similar files for other... Protecting Mailboxes from Being Compromised A compromised mailbox is used to send spam, and is one of the most common incidents we handle.HOW... Protecting Online Stores and Payment Pages If you take payments, the security expectations are higher and the consequences of a compromise... Protecting Your Accounts From Takeover Account security against fraud.WHICH ACCOUNTS ARE TARGETEDEmail Hosting Domain registrar Payment... Protecting Your Website's Admin Area The login page of any content management system is attacked constantly by automated tools. These... Quick Reference: The Rules That Matter Most The short list.UPDATESAutomatic, everywhere. This prevents more than anything... Ransomware and Extortion Being locked out of your own data.WHAT HAPPENSFiles are encrypted and payment is demanded to... Rebuilding Rather Than Cleaning When to start again.WHEN REBUILDING MAKES SENSEThe compromise is extensive You cannot be... Recognising Invoice Fraud and Business Email Compromise A common and costly fraud: someone monitors business email, then sends a message at the right... Recognising Phishing in Your Inbox Phishing messages are designed to look routine.COMMON FORMS"Your mailbox is full, click to... Recognising That Something Is Wrong Early signs.ON A DEVICEUnexpected slowness Programs you did not install Security software... Recovering a Store After a Problem When something has gone badly wrong.FIRST, STOP THE DAMAGEIf checkout is broken, say so on the... Recovering an Application from Backup Restoring after something went wrong.BEFORE RESTORINGTake a copy of the current state. It may... Recovering Email Reputation When spam was sent from your account.WHAT HAPPENSA compromised site sends spam.Your server... Recovering From a Compromised VPS The hardest situation to handle well.IMMEDIATE ACTIONSIsolate the server. Restrict network... Recovering From a Hack: Everything That Matters, Briefly The whole category in one page.THE FIRST HOURBack up the compromised state Establish scope Change... Recovering From Compromise When keys are exposed.WHAT TO DO IMMEDIATELYMove remaining assets to a new wallet, created on a... Recovering Reputation After a Problem Getting delivery back.WHAT DAMAGES REPUTATIONSpam sent after a compromise A large send to an old... Recovering Systems and Accounts Getting back to normal.WHAT ORDER TO WORK INClose the entry point Change every credential Restore... Removing a Google Security Warning or Blacklisting If Google flags your site, browsers show a red warning page and your traffic stops almost... Removing a Subdomain or Addon Domain Taking one down properly.BEFORE REMOVING ANYTHINGBack up the site and its database.Removing a... Removing What You Do Not Use Reducing exposure.WHY IT MATTERSEvery installed component is potential exposure.Unused ones are... Repeat Abuse and Account Termination We prefer to resolve issues and keep customers. Termination is a last resort, but it does... Reseller Account Security Protecting what you are responsible for.WHY IT MATTERS MORE FOR YOUA compromise of your reseller... Reselling Microsoft Services Offering Microsoft 365 to customers.WHAT THE PARTNER ARRANGEMENT PROVIDESThe ability to sell... Resolving Disputes Without Going to Court Practical resolution.WHYLegal action is slow and expensive, and frequently costs more than it... Resource Sharing Between Sites in One Account One account, several sites.WHAT IS SHAREDDisk space Bandwidth CPU and memory limits Inode count... Responding to a Data Breach When information is exposed.WHAT COUNTSUnauthorised access to personal data Accidental disclosure... Responding to IoT Security Incidents When devices are compromised.WHAT TO ESTABLISH FIRSTScope: which devices, and what they can... Restoring Files and Databases with JetBackup JetBackup holds scheduled server-side backups of your account and lets you restore them... Restoring Only Part of a Site Selective recovery.WHY IT IS USUALLY BETTERRestoring everything rolls back everything. If one... Restoring Your Site After Cleaning Getting back to normal.WHAT TO DO IN ORDERVerify the site is clean Remove any maintenance page... Revoking Access When Staff or Contractors Leave Old credentials that were never revoked are a frequent route into hosting accounts, sometimes... Revoking and Reissuing a Certificate When a certificate must be invalidated.WHEN TO REVOKEThe private key has been exposed A... Rewards and Referral Ethics Where referrals qualify, how you go about it matters.RECOMMEND HONESTLYSay why you host with us,... Running a Hosting Platform: Everything That Matters, Briefly The summary.PER-ACCOUNT LIMITS ARE WHAT MAKE SHARED HOSTING WORKWithout them one site under load... Running Artisan Commands on Your Hosting The command-line tool in production.WHERE TO RUN ITTerminal access in cPanel.WHAT TO SPECIFYThe... Running Exim An alternative transfer agent.WHAT IT ISA transfer agent with a single configuration file and a... Safe Handling of Email Attachments Attachments are the most common delivery route for malware.BEFORE OPENING ANYTHINGWere you... Scanning Applications for Malware Finding what should not be there.IMUNIFYAVcPanel > ImunifyAV. Scan the full home directory... Scanning for Malware with ImunifyAV in cPanel ImunifyAV scans your hosting account for malware, backdoors and injected code at the server... Scanning Your Account for Malware with ImunifyAV ImunifyAV scans your whole hosting account for malware, backdoors and injected code,... Secure Coding Basics for Custom Websites If your site is custom-built rather than a packaged application, these are the issues that... Securing a New Server The essentials.THE FIRST HOURApply all updates Change default credentials Create a non-root user... Securing Active Directory Protecting the directory.WHY IT MATTERS MOSTCompromise of the directory is compromise of... Securing and Managing Maps API Keys Preventing unauthorised use.WHY IT MATTERS MOST HEREA key in a public web page is visible to... Securing Any Web Application Principles that apply regardless of platform.THE ESSENTIALSKeep everything updated: core, themes,... Securing Business Email The account that controls everything.WHY IT MATTERS MOSTEmail controls password resets for nearly... Securing Data in Transit and at Rest Protecting information.WHAT TO USE FOR EVERY CONNECTIONEncryption, throughout, without... Securing Dependencies and the Supply Chain Risk from code you did not write.WHERE IT COMES FROMLibraries you install Their dependencies... Securing Device Communications Protecting data in transit.WHAT TO USEEncrypted transport, always.WHAT CONSTRAINED DEVICES MAY... Securing Device Identity Proving which device is which.WHAT IS REQUIREDA unique identity per device Credentials that... Securing File Uploads Where attacks get in.THE RISKA form accepting files, exploited to upload something... Securing File Uploads on Your Website A form that lets visitors upload files is one of the most commonly exploited features on any... Securing Infrastructure Secrets Credentials at scale.WHAT THE PROBLEM ISSecrets needed by servers, pipelines and applications, in... Securing IoT Networks Protecting the surrounding environment.WHAT TO SEPARATEDevice networks from other... Securing Keys and Recovery Phrases Protecting what cannot be recovered.WHAT TO DO WITH A RECOVERY PHRASEWrite it on paper or stamp... Securing Social Media and Public Accounts Your public presence.WHY THEY MATTERA compromised business account is used to defraud your... Securing the Computer You Manage Your Site From Server-side security cannot protect you from malware on your own machine. If your laptop is... Securing the Device Itself Physical and local protection.WHAT TO DISABLE BEFORE SHIPPINGDebug and programming interfaces... Securing the Devices You Log In From The other half of access security.WHY IT MATTERSYour accounts are only as secure as the device... Securing Third-Party Integrations Connections to other systems.WHAT TO ESTABLISH FOR EACHWhat data is sent What is received How it... Securing Your Admin Area Protecting the control panel.WHAT TO DOA strong unique password Two-factor authentication Limit... Securing Your Own Computer Where credentials are stolen.WHY IT MATTERSYour site is only as secure as the machine you... Securing Your Social Accounts Protecting what you built.WHY IT MATTERSA compromised business account can be used to impersonate... Securing Your Web Applications on a VPS The server is only as secure as what runs on it.WHY THIS MATTERS MORE ON A VPSOn shared hosting,... Securing Your Website and Hosting Accounts The business presence.WHAT TO PROTECTYour hosting account Your domain registrar account Your site... Security for Online Shops Selling online.WHAT YOU HOLDCustomer names, addresses, contact details, order history.WHAT YOU... Security for Shared and Family Devices Devices used by more than one person.THE PRINCIPLEBusiness accounts do not belong on a device... Security for Sites You Manage for Others Client site responsibility.WHAT TO ESTABLISHWho is responsible for updates Who holds the... Security of Static Sites Less to attack.WHY THEY ARE SAFERNo database No application processing input No plugins to become... Security Practices for Organisations Protecting institutional holdings.WHAT TO ESTABLISH FIRSTWho may authorise a transfer What limits... Security Responsibilities as a Reseller You sit between us and your clients, and you carry obligations in both directions.PROTECTING YOUR... Security Terms Explained Threats and defences.MALWARESoftware intended to cause harm.BACKDOORCode left behind allowing an... Selling Maintenance Plans The most valuable thing alongside hosting.WHAT IT INCLUDESCore, theme and plugin updates Backup... Sending Backups to Cloud Storage Getting copies off the server automatically.THE OPTIONSGoogle Drive, Dropbox, OneDrive, or object... Sending limit exceeded Outgoing mail refused after a threshold.WHAT IT MEANSShared hosting enforces an hourly sending... Sending Volume and Consistency Patterns that build reputation.WHAT AFFECTS REPUTATIONSudden changes in volume Long gaps followed... SEO for Nigerian Businesses Specifically Considerations particular to this market.DOMAIN CHOICEA .com.ng or .ng domain signals local... Server Maintenance Routine What to do regularly.WEEKLYCheck for and apply security updates Review monitoring alerts Check... Servers and Provisioning: Everything That Matters, Briefly The summary.SECURE ACCESS BEFORE ANYTHING ELSEA new server is scanned within minutes of... Servers and VPS: Everything That Matters, Briefly The whole category in one page.BEFORE BUYING ONEName the specific thing you cannot do on shared... Setting Account Quotas and Limits Limits protect your allocation and, more importantly, protect your clients from each other.WHERE... Setting Boundaries and Avoiding Burnout The part nobody plans for.THE PROBLEMHosting is a business where something can break at any hour,... Setting File Permissions What must be writable.WHAT NEEDS TO BE WRITABLEThe storage directory and its contents The... Setting Support Expectations What clients can expect from you.WHAT TO STATE CLEARLYYour support hours How to reach you... Setting Up Email on Android Android varies by manufacturer, but the fields are always the same.THE STEPSOpen Gmail or your... Shared Hosting Architecture How shared hosting is built.WHAT IT ISMany customers' sites served from one machine, isolated... Shared IP Blacklisting: What We Do If the server's shared address is listed, it affects everyone on it, and it is ours to... Sharing Your Referral Link Responsibly Where referrals earn, how you go about it matters.RECOMMEND HONESTLYSay why you host with us,... Signs That Your Website Has Been Hacked Compromises are often quiet by design. These are the signals worth watching for.VISIBLE SIGNSYour... Signs Your Site Has Been Compromised What to look for.WHAT VISITORS MIGHT SEERedirects to another site Pages you did not create... Software Engineering: Everything That Matters, Briefly The whole category in one page.WHAT SEPARATES ENGINEERING FROM PROGRAMMING IS TIME AND OTHER... Spam Pages Appeared on My Site Injected content, usually from a compromise.WHAT IT LOOKS LIKEPages you did not create,... Spotting Files That Should Not Be There Recognising compromise.WHAT TO LOOK FORPHP files in directories that should contain only images... Storing and Sharing Credentials Safely Where passwords live.WHERE TO STORE THEMA password manager.WHERE NOT TOA note on your phone A... Supply Chain and Third-Party Risk Risk you inherit.WHAT IT MEANSA compromise reaching you through something you use or someone you... Symptom: Account Suspended or Over Quota Limits and suspensions.WHAT CAUSES SUSPENSIONNon-paymentAbuse: spam, malware, or a... Symptom: Cannot Log In to the Site Administration access lost.WHAT TO ESTABLISHIs the password wrong, or is the page failing?FOR A... Symptom: Email Missing or Disappeared Mail that is not there.WHAT TO CHECK FIRSTWebmail. That shows what is actually on the server.IF... Symptom: Not Receiving Email Incoming failures.WHAT TO ESTABLISHAll senders or specific ones? Does webmail show it? When did... Technical Debt in Backend Codebases Accumulated compromise.WHAT IT ISConsequences of decisions taken for speed, now costing time.WHAT... Technical Debt: Everything That Matters, Briefly The summary.ONLY DELIBERATE, RECORDED COMPROMISE IS ACTUALLY DEBTConflating it with everything... Technical Support: Everything That Matters, Briefly The summary.RESOLVE THE ACTUAL PROBLEM, NOT THE REPORTED SYMPTOMAnd know when to stop and... Telling Customers About a Compromise Communication.WHEN YOU MUSTCustomer data was accessed Payment information was involved Customers... The 3-2-1 Principle Applied to Websites A simple rule that covers most scenarios.THE RULEThree copies of your data On two different types... The Backup Is From the Wrong Date Discovering the copy predates or postdates what you need.TOO RECENTThe backup already contains... The Kinds of Fraud Businesses Face An overview.FRAUD AGAINST YOUR SALESStolen card payments producing chargebacks Fake bank transfer... The Main Categories of Cyber Risk An inventory.ACCOUNT COMPROMISESomeone gaining access to an account you control.DEVICE... The Security Basics Everyone Needs The essential list.KEEP EVERYTHING UPDATEDCore software, plugins, themes.The single most... The Trilemma and Its Trade-Offs Why every network compromises.WHAT THE THREE PROPERTIES AREDecentralisation Security... The True Cost of Running Your Own Server What it actually takes.THE MONEYThe server itself Backups, if not included Monitoring, if not... Third-Party and Supply Chain Risk Risk you inherit.WHERE IT COMES FROMDependencies in your code Base images Build tools and... This account has been flagged for abuse A notice about content or activity.WHAT IT MEANSWe received a report, or our monitoring detected... Training Staff to Spot Email Attacks Half an hour of training is worth more than most technical controls.WHAT TO SHOW THEMReal... Two-Factor Authentication The measure that stops most attacks.WHAT IT ISA second step beyond your password: a code from an... Types of Wallet Where keys are held.WHAT A WALLET ISSoftware or hardware managing keys and constructing... Understanding Backdoors and Web Shells A backdoor is code left behind so an attacker can return without needing the original... Understanding Certificate Pinning An advanced technique with real risks.WHAT IT ISConfiguring a client to accept only a specific... Understanding Data Breaches When information is exposed.WHAT COUNTSUnauthorised access to data Accidental disclosure Loss of... Understanding Email Sending Limits Shared hosting enforces an hourly limit on outgoing mail.WHY IT EXISTSEvery account on a server... Understanding Encrypted Connections What the padlock means.WHAT ENCRYPTION IN TRANSIT DOESPrevents traffic being read between you and... Understanding Malicious Software What it does.WHAT IT ISSoftware intended to cause harm or gain unauthorised access.WHAT IT... Understanding Microsoft Intune Cloud device management.WHAT IT PROVIDESEnrolment of devices into management Configuration... Understanding Technical Debt The metaphor and its limits.WHAT IT ISThe future cost of a decision taken for short-term... Uninstalling WordPress and Starting Over Cleanly Sometimes a fresh start is faster than repairing a badly broken or compromised site. Before you... Unusual activity or login from a new location A security notification.WHAT TO DO IMMEDIATELYIf it was not you, change the password for that... Updating Plugins Keeping them current.WHY UPDATESecurity fixes, primarily.Outdated plugins are the most common... Using Downloads in the Client Area Support > Downloads holds files we make available: guides, configuration templates, software... Using Leech Protection on Password-Protected Areas Leech protection detects when one login is being shared widely, which typically means a member... Using Public Wi-Fi Safely Networks you do not control.WHAT THE RISK ISTraffic potentially observable Networks impersonating... Using the Internet Well: Everything That Matters, Briefly The summary.THE BROWSER SKILLS THAT SAVE MOST TIMEFinding text within a page, reopening a closed... Using Version Control in Web Projects Tracking changes.WHAT TO COMMITSource code Configuration examples Documentation Dependency... Verifying the Site Is Clean Confirming the cleanup worked.WHAT TO CHECKRun a malware scan Load the site logged out, from a... Version Control: Everything That Matters, Briefly The summary.SET UP THE IGNORE FILE BEFORE THE FIRST COMMITOnce a secret is committed it remains... VPS Security Fundamentals The basics, in priority order.THE ESSENTIALSSSH keys rather than passwords, with root login... Wallet and Phishing Attacks Stealing access directly.WHAT PHISHING TARGETSRecovery phrases Wallet connections Exchange... Wallet Security Practices Reducing exposure.WHAT TO SEPARATEHoldings held long term, in cold storage Small amounts for... Warming Up a New Sending Domain Building reputation gradually.THE PROBLEMA domain with no sending history that suddenly sends to... Website Security: Everything That Matters, Briefly The whole category in one page.THE THING TO UNDERSTAND FIRSTAttacks are automated and... Websites for Creative Professionals Photographers, designers, artists, writers.WHAT THE SITE IS FORShowing work, and making it easy... What a Cleanup Should Cost Reasonable expectations.WHAT AFFECTS THE COSTSite complexity How long the compromise persisted... What an Addon Domain Is Hosting a second website.WHAT IT DOESLets a separate domain serve a separate website from the... What Could Stop Your Business Operating The honest inventory.WHAT PEOPLE PLAN FORFire, flood, theft.WHAT ACTUALLY HAPPENS MORE... What Cyber Security Actually Means for a Small Business Scope and proportion.WHAT IT COVERSProtecting your devices, accounts, data and people from... What Happens When a Site Is Compromised The consequences.WHAT ATTACKERS DOInsert hidden links or redirects Upload files used to send spam... What Makes a Password Strong Length over complexity.WHAT ACTUALLY MATTERSLength, more than anything else.A long simple... What Plugins Do and What They Cost Understanding the trade-off.WHAT THEY DOAdd functionality WordPress does not include: forms,... What Reseller Hosting Is and Who It Suits Reseller hosting gives you a WHM account from which you create and manage individual cPanel... What Root Access Actually Means Control and responsibility.WHAT IT GIVES YOUThe ability to install any software Change any... What to Do After a Fraud Attempt Whether or not it succeeded.IF IT FAILEDRecord what happened Tell staff what to watch for Check... What to Do If Your Hosting Account Is Compromised Act in this order. Speed matters, because a compromised account is usually being used for... What to Do If Your WordPress Site Is Hacked Work through these steps in order. Do not skip step 1 — cleaning a site while it is still serving... What to Do in the First Hour Immediate steps.DO NOT PANICMost compromises are recoverable.STEP ONE: TAKE A BACKUPEven of the... What to Do When Credentials Are Compromised Responding.WHAT COUNTS AS COMPROMISEDYou entered them on a suspicious page A device was infected... What to Do When Delivery Suddenly Drops Diagnosing a change.FIRST, CONFIRM ITCompare open rates over several sends. A single poor send is... What Two-Factor Authentication Does Why it matters most.WHAT IT ISA second step beyond your password.Usually a code from an app,... What We Do and What You Must Do After a Compromise Cleaning up is a shared responsibility. Knowing the split avoids delays.WHAT WE... When a Client Account Is Compromised A compromised client account threatens your other clients, not just that one.IMMEDIATE... When an Application Is No Longer Maintained The project has been abandoned.HOW TO TELLNo release in a year or more The project site is... When Emails Appear to Come From Your Domain but Did Not Receiving a bounce or a complaint about mail you never sent does not necessarily mean your... When Someone Forges Your Email Address Receiving bounces for mail you never sent does not necessarily mean a compromise.TWO DIFFERENT... When to Ask Your Host for Help What we can do.WHAT WE CAN DOCheck server-side logs Identify whether other accounts are affected... When to Get Professional Help Bringing someone in.WHEN TO CONSIDER ITYou cannot find the entry point The compromise returns... When Two-Factor Is Not Enough Its limits.WHAT IT DOES NOT STOPA compromised device, where the attacker has the codes too An... Where Reseller Businesses Go Wrong The patterns that cause failure.UNDERPRICING AT THE STARTThe single most common cause. Difficult... Where to Store Backups The decision that determines whether a backup is useful.THE RULENot only on the server being... Who Should Own Your Hosting Account control.THE ANSWERYou, with your own account.WHYYou can grant access to a developer.You... Why Backups Matter More Than Anything Else The single most valuable thing you can do for a website.WHAT BACKUPS PROTECT AGAINSTA compromise... Why Emails Land in Spam The main causes, in order.AUTHENTICATION FAILURESSPF, DKIM or DMARC missing or misconfigured.The... Why Everything Belongs in Version Control The foundation.WHAT TO COMMITApplication code Configuration structure and examples Database... Why Hacked Sites Get Reinfected A site cleaned but not hardened is usually compromised again within days. There are four usual... Why Hosting Accounts Get Suspended Suspension is not arbitrary. These are the reasons, roughly in order of how often they... Why IoT Security Is Different The distinctive risks.WHAT MAKES IT HARDERDevices are physically accessible They are numerous and... Why Password Reuse Is the Biggest Risk The most common failure.WHAT HAPPENSA service you used is breached.Your email address and... Why Use Email on Your Own Domain An address at your own domain is included with your hosting and is worth setting up on the first... Why Version Control Matters The foundation of collaboration.WHAT IT PROVIDESA complete history of every change The ability to... Why You Should Never Use Nulled Themes and Plugins "Nulled", "cracked" or "GPL-free" copies of premium plugins are widely advertised as a way to... Wildcard Certificates Explained Covering all subdomains with one certificate.WHAT IT COVERS*.yourdomain.com covers any... Windows Server and Active Directory: Everything That Matters, Briefly The summary.DOMAIN MEMBERS MUST USE INTERNAL DNSPointing them at public servers breaks... Wireless Network Security Wi-Fi specifically.WHAT TO SETA strong unique wireless password Current encryption A network name... WordPress Plugins: Everything That Matters, Briefly The whole category in one page.THE CORE PRINCIPLEEvery plugin must earn its place.Each adds code,... WordPress Security Hardening Checklist Work through this list on every site you host with us. Most compromises we see come from skipping... Working With Others' Devices Borrowed and shared equipment.WHAT TO ESTABLISHWhose device it is, and what is acceptable.WHAT TO... Working With Your Host After an Incident What we can help with.WHEN TO CONTACT USSpam sent from your account Your site compromised or... Writing a Continuity Plan What the document contains.WHAT TO INCLUDEWhat the business depends on What could fail What to do... Writing an Email Policy for Staff A short document that prevents most problems.WHAT TO COVERThat business mail is a business... Your account has been suspended Access removed.FIRST, READ THE NOTICEIt states the reason. The correct response depends entirely... Your First Hour With a New VPS Do these before anything else.THE ORDERLog in and change the root password to something long and...
Back

Are you happy with your experience? Leave us a review on Trustpilot.


Trustpilot