Free Daily Podcast Summary
The Small Business Cyber Security Guy | Cybersecurity for SMB & Startups: Daily Summaries Delivered
by The Small Business Cyber Security Guy
The UK’s leading small business cybersecurity podcast, helping SMEs protect against cyber threats without breaking the bank.Join cybersecurity veterans Noel Bradford (CIO at Boutique Security First MSP) and Mauven MacLeod (ex-UK Government Cyber Analyst) as they translate enterprise-level security expertise into practical, affordable solutions for UK small businesses.🎯 WHAT YOU’LL LEARN:Cyber Essentials certification guidanceProtecting against ransomware & phishing attacksGDPR compliance for small businessesSupply chain & third-party security risksCloud security & remote work protectionBudget-friendly cybersecurity tools & strategies🏆 PERFECT FOR:UK small business owners (5-50 employees)Startup founders & entrepreneursSME managers responsible for IT securityProfessional services firmsAnyone wanting prac
Latest Episodes
The most recent episodes — sign up to get AI-powered summaries of each one.
- 6 days ago36 min
Why the next attack on your business will start at somebody else's
In 2027, the incident most likely to stop a small UK business trading will start at a supplier or customer it relies on. This first episode of a nine-part series examines how supply chain compromise has become the dominant cyber risk for small firms, even when their own security is in good order. Lucy Harper and Noel Bradford analyse three emerging threats: being knocked over by a compromised customer, the trusted supplier whose email turns against you, and the freelancer who isn’t what they claim. Drawing on the October 2025 breach of a widely used backup tool, the 2025 Jaguar Land Rover attack that touched five thousand organisations, and new NCSC warnings about state-aligned IT workers posing as freelancers, the episode provides a practical five-and-five exercise to map your most critical relationships. Recorded as the Cyber Security and Resilience Bill reaches its final stages in Parliament, this episode includes no jargon, no percentages taken out of context, and a clear action plan for Tuesday morning. https://www.securityforum.org/resource/threat-horizon-2028/ https://www.gov.uk/government/statistics/cyber-security-breaches-survey-2025 https://www.ncsc.gov.uk/collection/annual-review-2025 https://www.gov.uk/government/news/uk-likely-to-face-cyber-attack-if-global-tensions-escalate https://www.ConnectWise.com/ https://www.microsoft.com/en-us/security/blog/ https://www.fortra.com/ https://www.legislation.gov.uk/ https://sbcsg.co.uk/blog/we-got-the-cyber-headline-wrong https://sbcsg.co.uk/blog/dont-worship-the-green-tick https://sbcsg.co.uk/blog/if-your-msp-says-all-good-can-they-prove-it
- 1 weeks ago29 min
PHP2Shell, Fortinet Updates and When Your Backup Service Goes Offline
PHP2Shell, Fortinet Updates and When Your Backup Service Goes Offline A critical PHP vulnerability prompted emergency fixes and a wave of opportunistic sales pitches. Meanwhile, Fortinet announced urgent security updates across multiple products, ConnectWise Cloud Backup users faced service interruption during an incident response, and the Ahsay backup story required revisiting after further patches. Noel Bradford and Lucy Harper examine what business owners should ask when headlines break, when unsolicited rescue offers arrive, and when the service they depend on for recovery becomes unavailable. The episode defends honest questions about unfamiliar technology, challenges vendors charging premium prices to demonstrate their security record, and separates patching status from incident investigation. Practical guidance covers checking PHP exposure without guessing from website appearance, understanding the difference between automated updates and engineer-led maintenance windows, reviewing application credentials alongside human accounts, and planning recovery scenarios when normal backup routes are closed. No marketing exaggeration, no sneering at gaps in knowledge, just the evidence-based conversation that helps small businesses make sound decisions under pressure. Chapters Cold Open A serious PHP vulnerability hits the news. Websites go offline. Business owners ask whether they are affected. Parts of the security industry respond by mocking someone for admitting what he did not know, while Noel’s inbox fills with offers to save websites from a threat many senders have not properly diagnosed. Welcome Noel Bradford and Lucy Harper introduce the episode and its sponsor, GRCBolt. The agenda covers PHP2Shell, Fortinet updates, the Ahsay backup story revisited, and ConnectWise Cloud Backup service interruption. The common thread: what can a provider actually show you when they say they are protecting your business? PHP Has Entered the Chat PHP is a programming language used to run websites and web applications. Two critical vulnerabilities prompted emergency fixes on 21 October. Lucy and Noel explain the difference between affected software, exploitation attempts and confirmed compromise, and what business owners should ask their providers about patching, verification and responsibility. The Crime of Saying I Did Not Know BBC cyber correspondent Joe Tidy attracted ridicule after saying he had not known about PHP before the story broke. Noel defends honest questions and criticises the sneering pile-on, arguing that mocking gaps in knowledge undermines the security culture we claim to want and discourages the early reporting businesses need. Emergency Expertise Next Day Delivery Noel describes his inbox filling with urgent PHP2Shell warnings and rescue offers, many diagnosing technology his websites do not use. He contrasts engineers doing the actual work with noise merchants creating confusion, and explains how to handle unsolicited warnings without turning a mailing list into a purchase order. Premium Prices Familiar Questions Fortinet announced urgent security updates across several products, including FortiOS, FortiManager and FortiAnalyzer, citing AI-assisted testing that found critical and high severity vulnerabilities. Noel argues that premium pricing creates expectations the engineering record has not consistently met, citing historical examples of hardcoded credentials and questioning what the vendor has learned. Who Pays for the Maintenance Window Lucy clarifies that a current standalone FortiGate can automate routine patch upgrades when the feature is available and enabled, while Noel emphasises that legitimate maintenance work belongs in the price comparison. The discussion covers upgrade workload variation, the difference between marketing diagrams and rehearsal, and the importance of verifying success after scheduled updates. GRCBolt Sponsor Message A done-for-you policy service for small businesses that need to get governance, risk and compliance organised without breaking the bank. GRCBolt creates a tailored policy pack from information about your business, providing a practical starting point for documenting how your company works and who takes responsibility. Ahsay The Promise We Need to Keep Huntress reported attackers exploiting two Ahsay CBS vulnerabilities together from 7 October, bypassing authentication and gaining code execution. The patch position changed, with version 10.3.4 remaining vulnerable despite earlier reporting. Ahsay released further hotfixes on 12 October. The discussion distinguishes patching from incident investigation and emphasises that recovery plans must consider the backup management system being unavailable or untrusted. ConnectWise The Service You Need to Recover ConnectWise Cloud Backup service interruption followed unauthorised access to application c
- 3 weeks ago38 min
Twenty-Eight Arrests and Four Million Scams: Why Your Callback Rule Matters
Twenty-Eight Arrests and Four Million Scams: Why Your Callback Rule Matters On 13 October 2025, the UK’s National Crime Agency announced the results of Joint Disruption Week: 28 arrests across Ghana and Nigeria, 117 people rescued from suspected scam compounds, and 3.7 million fraudulent accounts removed by Meta. It sounds like a win—and for those rescued, it was. But for Gary, a 12-person building firm owner who opened an email from his plasterboard supplier asking him to pay a new bank account, none of those arrests stopped his Tuesday going wrong. This episode unpacks what actually happened during the NCA’s operation, who was in the room, and why invoice redirection and CEO fraud weren’t the scams being targeted. We walk through the new mandatory reimbursement rules (and why Gary probably isn’t covered), the per-head cost of recent retail data breaches, and why GDPR still matters even when ‘everyone’s data is already out there’. Plus: French supermarket freezers sabotaged via outdated refrigeration controllers, Microsoft’s largest-ever Patch Tuesday (over 1,400 fixes), and the OpenAI engineer allegedly caught planting a listening device wrapped in toilet roll. The solution isn’t waiting for more arrests. It’s a one-line rule, signed by the boss, that every bank detail change requires a phone call to a number you already hold. We cover what to report, where to report it, and why every scam you flag—even the ones you spotted—feeds the intelligence that takes down networks. Chapters Cold Open A police raid in Ghana and an email to a builder in the UK: two ends of the same industry, only one made the news. Welcome Introduction to the episode and a note on schedule changes. What Actually Happened The NCA’s Joint Disruption Week results: 28 arrests, 117 people rescued, 3.7 million accounts removed, and $11 million in potentially freezable funds. Who Was in the Room Fifteen law enforcement agencies and fifteen tech firms convened at the NCA’s London headquarters, funded by the Home Office Integrated Security Fund. Why Your Inbox Didn’t Get Any Quieter The operation targeted social media scams aimed at the public, not the invoice redirection emails hitting small business accounts. The Bill Invoice and mandate scams cost £41.3 million in 2025, with only 48 per cent of losses returned to victims. New reimbursement rules don’t cover most small firms. Gary’s Tuesday How a fake supplier email lands, why the callback rule works, and the two-sentence policy that protects payment approvers. Every Report Counts Why reporting scams you didn’t fall for feeds intelligence that takes down networks. Where to report and how the system changed. The Bigger Picture The new Online Crime Centre, Ofcom’s incoming scam advert rules, and why platforms need to carry more of the burden. The Retail Run TFG London (Hobbs, Whistles, Phase Eight) spotted a cyber incident; H&M investigates data breach claims. Both follow the ASOS breach covered last episode. Is GDPR Pointless? Per-head fines look small, but breaches supply the raw material for scams. Why GDPR reporting duties matter and how the Cyber Security and Resilience Bill might close gaps. The Fridge That Went Rogue Hundreds of French supermarkets had freezers switched to defrost overnight via outdated refrigeration controllers. Fixes existed; nobody installed them. The Patch Pile Microsoft’s largest-ever Patch Tuesday: over 1,400 fixes, including one already being exploited. Windows 11 version 24H2 Home and Pro reached end of support. The Bug in the Boardroom A US Department of Justice complaint alleges an OpenAI engineer hid an audio recorder behind a conference room television, wrapped in toilet paper. This Week Six practical actions: write the callback rule, turn on MFA, update reporting contacts, ring your bank and IT supplier, audit networked devices, and check data protection complaint routes. Close Twenty-eight arrests won’t stop the next fake invoice. The callback rule will. Links https://www.nationalcrimeagency.gov.uk/news/nca-hosts-international-law-enforcement-and-tech-industry-crackdown-on-fraud-and-scams https://www.justice.gov/opa/pr/justice-department-announces-results-international-week-action-against-online-fraud https://about.fb.com/news/2025/10/combating-fraud-during-joint-disruption-week/ <a href="https://www.ukfinance.org.uk/policy-and-guidance/reports-and-publications/annual-f
- 3 weeks ago34 min
ASOS Breach: When Attackers Use Your Voice to Message Customers
ASOS Breach: When Attackers Use Your Voice to Message Customers When ASOS customers received a push notification announcing the company had been hacked, it came through ASOS’s own app. The attackers had gained access to third-party communication platforms via social engineering and used them to address customers directly. Whilst card details and passwords appear unaffected, names, contact information and search histories may have been compromised. The incident raises an uncomfortable question for every business with customer communication systems: if somebody steals one login, can they impersonate you to everyone on your list? Noel Bradford and Lucy Harper examine what small businesses can learn from this case, from limiting account permissions and implementing proper multi-factor authentication to rehearsing incident response when nobody knows who holds the off switch. The episode also addresses why ‘basic’ customer data isn’t harmless when stacked together, how to communicate during an ongoing investigation without promising certainty you don’t have, and the critical difference between changing a password and actually revoking access. Sponsored by GRCBolt, the episode closes with a preview of the Ahsay CBS backup console vulnerability being actively exploited since 7 October 2024. GRCBolt is a done-for-you AI policy pack for UK small businesses. It is not open yet, but the waitlist is: https://grcbolt.co.uk Chapters Cold Open An ASOS customer receives a ransomware notification through the company’s own app, addressed to ‘ASOS DPO and IT’. The attackers have used ASOS’s platform to message customers directly, raising questions about trust and control. Welcome Introduction to the episode and the central question: if somebody gets into the account that talks to your customers, who can actually stop them? What We Actually Know Timeline and verified facts from the ASOS incident. Push notification sent 6 October claiming Snowflake compromise. ASOS confirms unauthorised third-party platform access via impersonation attack. Names, contact details and account information accessed, but not passwords or card details. Snowflake denies platform vulnerability. They Borrowed Your Voice How compromised communication platforms undermine customer trust. When messages come from genuine accounts through familiar channels, traditional verification advice breaks down. The danger of inherited permissions and shared logins in marketing and booking systems. The MFA Question Why ‘they should have had MFA’ oversimplifies the problem. Different types of multi-factor authentication offer different protections. The NCSC now recommends passkeys where supported. Emphasis on checking actual account configurations, not policy documents. Basic Information Isn’t Harmless Why names and contact details become dangerous when combined with context like shopping behaviour and search history. How attackers use ‘basic’ data to craft convincing follow-up scams. The importance of telling customers how you will and won’t contact them. GRCBolt Sponsor message for GRCBolt, a done-for-you policy service helping small businesses create tailored governance, risk and compliance documentation. Friday Afternoon Incident response scenario: a customer reports receiving a suspicious message that looks legitimate. Who can stop more messages going out? The gap between IT support scope and marketing platform access. The need for pre-agreed emergency procedures and authority to act. Are They Actually Out? Why changing a password isn’t enough. How active sessions, connected apps and secondary accounts can persist. Microsoft’s guidance on session revocation limitations. The importance of audit logs and knowing what to check after a compromise. Can I Trust the Next Message? Communicating with customers during an ongoing investigation. How to provide updates without overpromising certainty. The need for a separate, secured channel customers can verify. Distinguishing between ‘no evidence found’ and ‘definitely didn’t happen’. Tomorrow Morning Three practical steps: find it (identify systems and access routes), limit it (test containment procedures), rehearse it (run a fifteen-minute tabletop scenario). Focus on one customer-facing system at a time. Identify named owners, backup contacts and emergency procedures. Closing and Ahsay Teaser Summary of key lessons and preview of next episode covering the Ahsay CBS backup console vulnerability actively exploited since 7 October 2024. Huntress reports web shells and cryptocurrency miners being deployed, with version 10.3.4 confirmed affected. Links https://www.bbc.co.uk/news/articles/cy4g8g8g8g8g <a href="https://www.theregister.com/2024/10/08/asos_breac
- Oct 5, 202633 min
Your Security Kit Is their Way In
Your Security Kit Is the Way In The things you bought to keep attackers out are how they’re getting in. Citrix, Fortinet, forgotten WordPress backups, fake ChatGPT adverts, and the AI in your business that nobody owns. Some time in early September, somebody found a way through a door that thousands of businesses use to let their staff in from home. The owners didn’t know. Then the emergency fix arrived, patched boxes started rebooting, and that turned out to be another hole attackers were already using. This week Noel Bradford, Lucy Harper, and Graham Falkner follow one thread through every story: something was trusted, and nobody was in charge of checking that trust. Citrix NetScaler zero-days exploited for weeks before disclosure. A FortiMail flaw with fixes still pending, and Noel’s long-running grievance with Fortinet’s track record. Forgotten WordPress backups handing over email and cloud passwords. Microsoft’s Digital Defense Report showing phishing back as the front door. And fake ChatGPT adverts on Google that walk staff straight into installing a remote access tool. Then the conversation turns to the AI in your business that nobody owns. Prompted by John Wernfeldt’s LinkedIn post on AI teams and governance teams talking past each other, the hosts translate the problem for Gary Mott’s twelve-person building firm and land on three conditions that take twenty minutes to agree. Noel also announces GRCBolt, his own AI policy pack for UK small businesses, now taking waitlist sign-ups. What to do this week Email your IT provider and anyone who holds your data. Ask whether they run Citrix NetScaler or Fortinet FortiMail, and whether they’ve patched and checked for signs of compromise. For Citrix, ask whether they’ve applied the second fix released on Sunday 4 October. Find out who looks after your website. Ask them to clear old backup files out of public folders, update WordPress, and change the email password stored in your contact form plugin. Turn on passkeys for the accounts that matter most: whoever runs Microsoft 365 or Google Workspace, and whoever approves payments. Both platforms include passkeys at no extra charge. Forcing everyone to use them needs an extra licence on some Microsoft plans. Tell everyone one rule. No genuine website will ever ask you to press the Windows key and R, then paste something in. Agree three things about AI: which tools are allowed, which data never goes in, and who checks the output before a client sees it. Put a name next to each. Chapters 00:00 Cold open 00:56 Welcome 01:33 The doors you don’t own: Citrix NetScaler and Fortinet FortiMail 10:15 The back door you forgot: WordPress backups leaking passwords 13:36 Borrowed trust: Microsoft’s report and fake ChatGPT adverts 19:13 The AI nobody owns 23:00 Introducing GRCBolt 25:03 Your Monday morning actions 26:57 Close Sources Citrix NetScaler NCSC: Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Gateway Citrix security bulletin for CVE-2026-88771 to CVE-2026-88778, including indicators of compromise Sophos: Citrix NetScaler vulnerabilities in active exploitation The Hacker News: Mandiant and Google Threat Intelligence on the NetScaler campaign Cyber Security News: NetScaler appliances rebooting after the zero-day patch BleepingComputer: Citrix patches NetScaler SAML zero-day exploited in attacks Fortinet FortiMail Help Net Security: Critical FortiMail zero-day exploited in the wild watchTowr: FortiMail CVE-2026-104286 FAQ Radical Notion: Fortinet CVE report card (third-party aggregator) MazeHQ: 2025 known exploited vulnerabilit
- Sep 28, 202628 min
When AI Finds the Switch You Forgot: Attacks for Pocket Change
Imagine waking on a Tuesday to discover an invisible army has been testing your doors for six days. It doesn’t need fancy zero-days or cinematic cleverness — just agents that can scan, read, adapt and move on. In this episode, we follow a financially motivated attacker using open-source AI tools to run 105 probing projects in under a week, harvesting card data and compromising organisations while the cost of each reconnaissance run averages just a few dollars. From Gambit Security’s reconstruction of a scaled campaign to New Zealand’s National Cyber Security Centre warning that frontier models accelerate reconnaissance, the story threads together into one uncomfortable observation: the problem isn’t a lack of security technology, it’s the gap between owning features and operating them. A critical TeamCity flaw with a published patch and known exploitation shows how a fixed vulnerability becomes a real ransomware entry when change processes stall and nobody can say for sure what is exposed. We even wind up in the optical spine of fiber broadband, where Quark’s Lab’s deep dive into passive optical networks exposes a familiar theme — standards and features can support strong protections, but optional choices and careless deployments turn capability into illusion. Whether it’s MFA, backups, EDR or encryption, a green tick on a dashboard is not the same as a control that will actually stop an attacker in the middle of the night. AI doesn’t need to be a brilliant mastermind. It just needs to cheaply and persistently test the weak signals you left lying around. That changes the economics: the marginal cost of trying the next company collapses, and opportunistic compromise scales. Small businesses aren’t suddenly interesting; they’re suddenly cheap to probe, and automation can take an exploit much further than old scanners ever could. But this isn’t fatalism — it’s a practical wake-up call. The defence that works is less about buying another product and more about operational discipline: know what your external world can reach, test whether MFA actually prompts for a second factor, restore a backup for real, and rehearse the decision pathways for critical patches. Ask: if someone could attack us cheaply tomorrow, what would make them stop? We tell the story through people and processes — the helpdesk pressured to reset accounts, the admin on leave, the server thought to be internal but quietly facing the internet — and pull tools into the background. The episode walks you through real moments where security features exist but controls don’t, then hands you a simple, evidence-first checklist to start closing those gaps today. By the end you’ll see the same pattern in different disguises: AI makes probing trivial, technology contains the answers, and operations decide whether those answers are actually used. It’s bleak, fixable, and urgent — because the next probe might be the one that finds the switch you forgot to turn on. Find our Skool community here - https://www.skool.com/small-biz-cyber-guy-2008
- Sep 21, 202637 min
When Laws Lag and Attacks Sprint: The 10-Hour Cyber Reckoning
Three headlines—an EU law delay, an AI-accelerated intrusion that went from weeks to hours, and a UK bill about to bring hundreds of IT providers under direct regulation—sound like stories from different podcasts. They aren’t. By the end of this episode, they meet in a single, worrying place: the gap between assumption and evidence. Follow Noel Bradford, Lucy Harper and Corrine Jefferson as they trace that gap through vivid scenes: a quiet lawroom in Brussels that postponed some deadlines but switched major penalties on; a Unit 42 investigation where one attacker, helped by AI, compressed reconnaissance, exploitation and extortion into under ten hours; and Westminster’s Cybersecurity and Resilience Bill that could force managed service providers to register, report incidents quickly, and face heavy fines. Along the way, the podcast lights up small, human details—a heating engineer’s paperwork, a builder’s son who inherited the IT, a host who reads breach reports like gas bills—to show how ordinary businesses get dragged into extraordinary risk. They don’t just explain the problems; they show how the threads tie together. The EU’s AI Act makes clear obligations for providers of large models but only if you can first answer the simple question: what AI do you actually use? The attack demonstrates the lethal value of time—alerts that wait in an inbox are useless when an attacker finishes a campaign before most people have their second cup of coffee. The UK bill exposes who truly owns the decision when an outsourced provider goes dark: legal reporting may hit the MSP, but operational pain lands with the client. Alongside sharp investigations into LG TV privacy claims and a cunning "click-to-fix" browser-cache exploit, the episode turns practical. It hands you three urgent morning-after questions to take to your board: what AI does your business use (and who owns it), could you detect and respond within ten hours, and is your IT provider positioned to be regulated? If you can’t answer those now, this episode will make it impossible to shrug them off. Listen for clear, actionable steps—visibility, speed and ownership—that every small business needs before the clocks of law, crime and regulation collide.
- Sep 14, 202630 min
Why a 0% Phishing Click Rate Might Be Lying to You
They put a fat green 0% on the slide and everyone nodded like it meant victory. Gary, a builder with plasterboard and vans on his mind, sips his tea and wonders why cyber security suddenly sounds like someone else’s problem — until the hosts pull that cheerful number apart. What looks like perfect protection can be a mirage: a workforce trained to pass one test but not to spot the real, messy tricks criminals use when a delivery is late or an invoice changes. In this episode, Noel and Morvan walk Gary — and you — through the slow unravelling of that comforting 0%. We follow a year of simulated attacks from a vendor’s dataset and watch a story unfold: clicks fall, then spike, and finally settle — not because people got stupider, but because the tests got harder and started catching the vulnerabilities that easier simulations missed. Through vivid examples (the parcel everyone waits for, Dave who closes a window and hopes no one noticed, and a frantic phone call that saves the company money), the hosts tease out the real lessons. Clicks are not binary verdicts; they are one link in a chain that includes credential submission, MFA failures, and the crucial moment when someone chooses to report the suspicious message. Reporting becomes the episode’s hero: a single employee who says “this looks odd” can protect an entire team. The conversation turns practical — one big, easy-to-press button, quick acknowledgement, and a culture that thanks people for coming forward instead of shaming them. The narrative pivots from blaming individuals to building systems that survive human error. By the end you’ll see why insurers and dashboards obsessed with a single percentage get a dangerously incomplete picture, and why better metrics — credential leaks, reporting rates, testing difficulty, and report speed — reveal a healthier story. The episode closes with four concrete steps Gary can take on Monday morning and a rallying cry: don’t chase perfect green ticks; build processes that turn your people into the sensors that actually keep you safe.
Get The Small Business Cyber Security Guy | Cybersecurity for SMB & Startups summaries in your inbox
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
You Might Also Like
Podcasts in similar categories.
48 Hours
Investigates compelling crime and justice cases through in-depth reporting, interviews, and evidence analysis.
Dateline NBC
True-crime mysteries, documentaries, and in-depth investigations from NBC News.
The Jamie Kern Lima Show
Entrepreneur Jamie Kern Lima interviews experts and celebrities about overcoming self-doubt and building self-belief.
Raging Moderates with Scott Galloway and Jessica Tarlov
Two political opposites analyze current events from a moderate perspective, challenging extremism on both sides.
This American Life
True stories exploring weekly themes with emotional depth, humor, and narrative twists, capturing the complexities of contemporary life.
All-In with Chamath, Jason, Sacks & Friedberg
Four tech investors discuss technology, markets, politics, and poker with candid, in-depth analysis.
Coffeez with Joe Shalaby
Conversations with entrepreneurs, investors, and cultural figures reveal the real strategies, struggles, and costs behind success.
The Megyn Kelly Show
Provocative conversations with influential figures in politics, law, and culture, featuring candid and fearless dialogue.
About The Small Business Cyber Security Guy | Cybersecurity for SMB & Startups
The UK’s leading small business cybersecurity podcast, helping SMEs protect against cyber threats without breaking the bank.Join cybersecurity veterans Noel Bradford (CIO at Boutique Security First MSP) and Mauven MacLeod (ex-UK Government Cyber Analyst) as they translate enterprise-level security expertise into practical, affordable solutions for UK small businesses.🎯 WHAT YOU’LL LEARN:Cyber Essentials certification guidanceProtecting against ransomware & phishing attacksGDPR compliance for small businessesSupply chain & third-party security risksCloud security & remote work protectionBudget-friendly cybersecurity tools & strategies🏆 PERFECT FOR:UK small business owners (5-50 employees)Startup founders & entrepreneursSME managers responsible for IT securityProfessional services firmsAnyone wanting prac
Customized Recaps
AI-powered recaps with compact key takeaways, quotes, and insights.
Straight to Your Inbox
Get key takeaways from The Small Business Cyber Security Guy | Cybersecurity for SMB & Startups in a 5-minute read.
Save Hours Every Week
Stay current on your favorite podcasts without falling behind.
Frequently Asked Questions
What is Podzilla's The Small Business Cyber Security Guy | Cybersecurity for SMB & Startups daily summary?
It's a free AI-powered email that summarizes new episodes of The Small Business Cyber Security Guy | Cybersecurity for SMB & Startups as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
How does the The Small Business Cyber Security Guy | Cybersecurity for SMB & Startups podcast summary work?
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
Is this an official The Small Business Cyber Security Guy | Cybersecurity for SMB & Startups product?
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by The Small Business Cyber Security Guy.
Can I get summaries of other podcasts too?
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
How often does The Small Business Cyber Security Guy | Cybersecurity for SMB & Startups release new episodes?
The Small Business Cyber Security Guy | Cybersecurity for SMB & Startups publishes weekly. Our AI generates a summary within hours of each new episode.
What topics does The Small Business Cyber Security Guy | Cybersecurity for SMB & Startups cover?
The Small Business Cyber Security Guy | Cybersecurity for SMB & Startups covers topics including News, Business, Management, Entrepreneurship. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Start getting The Small Business Cyber Security Guy | Cybersecurity for SMB & Startups summaries tomorrow morning.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.