top of page
Resource Hub
Large Organisations and PHP2Shell: Applying the NCSC's Active Exploitation Timelines
For large and multi-site estates, PHP2Shell was a test of discovery and governance as much as patching. How to apply the NCSC's 24-hour active exploitation timeline, find shadow PHP, and keep Cyber Essentials and Cyber Essentials Plus scope intact.
5 days ago3 min read
SMEs After PHP2Shell: Building a Patch Process That Beats the 14-Day Deadline
PHP2Shell exposed the gap between having a patching policy and having a patching process. A practical blueprint for small and medium-sized businesses to hit 7 days routinely, act in hours when it matters, and evidence it for Cyber Essentials.
5 days ago3 min read
Sole Traders and Micro Businesses: A 10-Minute Check for the PHP Vulnerability
No IT department? You can still check whether your website is protected from the PHP vulnerability in about ten minutes. A simple walkthrough for sole traders and micro businesses, plus a ready-to-send email for your web host.
5 days ago3 min read
Law Firms and PHP2Shell: Protecting Client Confidentiality When Your Website Is the Weak Point
A law firm's website is often where new client enquiries, ID documents and payment details first arrive. PHP2Shell put many of those sites at risk. What solicitors, chambers and legal aid providers should check, and why Cyber Essentials matters.
5 days ago3 min read
PHP2Shell for IFAs, Brokers and Wealth Managers: Patching Isn't Enough, Rotate Your Secrets Too
One of the PHP2Shell flaws can leak server memory, including passwords, tokens and API keys. For financial advisers and brokers, patching closes the door but may not undo what already left. Here's the follow-up work, and how it ties into Cyber Essentials.
5 days ago3 min read
Schools, Colleges and Moodle: Responding to the PHP2Shell Vulnerability
School websites, Moodle and parent portals commonly run on PHP, often spread across a trust with different suppliers. A system-by-system guide for schools, colleges and multi-academy trusts after PHP2Shell, with the Cyber Essentials angle.
5 days ago3 min read
Charity Websites and the PHP Vulnerability: A Plain-English Guide for Trustees and Volunteers
Many charity websites were built by a volunteer years ago and quietly left running. PHP2Shell shows why that's now a real risk. A jargon-free guide for trustees on what to ask, what to fix and how Cyber Essentials helps.
5 days ago3 min read
PHP Vulnerability: Five Questions Every Accountancy Practice Should Ask Its Web and Portal Suppliers
Accountancy practices hold exactly the data attackers want, and many client portals and practice websites run on PHP. Here are the five questions to put to your suppliers after PHP2Shell, and what the answers mean for Cyber Essentials.
5 days ago3 min read
MSPs Hold the Keys: Patching Your Own Systems and Every Client's After PHP2Shell
Attackers go after managed service providers because one breach unlocks every client. PHP2Shell showed how little time there is. Here's how MSPs should prioritise their own estate, their clients' systems and the Cyber Essentials evidence trail.
5 days ago4 min read
PHP2Shell: Why the Cyber Essentials 14-Day Patching Rule Is a Maximum, Not a Target
Two critical PHP flaws took government websites offline and drew attacks within minutes of the fix. Here's what PHP2Shell means for the Cyber Essentials 14-day patching rule, and why hours now matter.
5 days ago6 min read
Cyber Essentials Marking Only vs Supported: Which Service Is Right for You?
Marking Only or Supported? Both lead to the same Cyber Essentials certificate. The real difference is how much risk you want to carry. Here's what each service includes, how marking turnaround works, and how to choose.
6 days ago5 min read
Securing Your Business with Online Cyber Assurance and Cyber Assistance Services
In today’s digital world, your business’s security is more important than ever. Cyber threats are evolving fast. You need to stay ahead to protect your data, your clients, and your reputation. That’s where cyber assistance services come in. They help you build strong defences and keep your business safe online. Cyber assurance is not just about technology. It’s about trust. When you secure your systems, you show your customers and partners that you take security seriously. Th
Oct 193 min read
Expert Tips for Certification Success: Guaranteed Cyber Essentials Pass
Getting Cyber Essentials certified is a smart move. It protects your business from common cyber threats and opens doors to government and private sector contracts. But the process can feel tricky if you’re new to it. Don’t worry! This guide breaks down expert tips to help you pass Cyber Essentials certification first time, with confidence. Understand the Basics of Cyber Essentials Certification Success Tips Before diving into the nitty-gritty, you need to understand what Cybe
Oct 193 min read
Account Separation for Cyber Essentials: Don't Forget Your Cloud Services
Separate admin accounts aren't just for Windows. Here's why Cyber Essentials account separation applies to every cloud service, with guidance for Facebook and Instagram (Meta Business Suite), Microsoft 365 and Google Workspace.
Oct 1610 min read
Downloading Your Cyber Essentials Logo: How to Add It to Your Email Signature and Website
Looking to download your Cyber Essentials logo? Here's why it comes as a BlockMark smart badge rather than an image file, and how to add the Cyber Essentials logo to your email signature and website.
Oct 87 min read
Duplicate Cyber Essentials Certificates: How to Certify Group Companies and Other Legal Entities
Need Cyber Essentials certificates for a parent company and its subsidiaries? Here's which legal entities can share a certification, what to enter at A1.1 and A1.6.1, and how to buy £10 additional certificates under the Danzell question set.
Oct 54 min read
The UK Cyber Essentials Scheme: What You Need to Know
Cybersecurity is more important than ever. Every business, from sole traders to large enterprises, faces risks online. The UK Government created a simple but effective way to help you protect your organisation. It’s called the Cyber Essentials Scheme. This scheme sets out clear steps to improve your cyber defences and prove your commitment to security. If you want to win government contracts or reassure your clients, getting certified is a smart move. Let’s dive into what the
Oct 54 min read
Cyber Essentials Certification Basics: Your Guide to Certification
In today’s digital world, protecting your business from cyber threats is more important than ever. Cyber attacks can cause serious damage, from financial loss to reputational harm. That’s why many UK organisations are turning to Cyber Essentials certification. It’s a straightforward way to show you take cybersecurity seriously. This guide will walk you through everything you need to know about getting certified. Understanding Cyber Essentials Certification Basics Cyber Essent
Sep 283 min read
How to Obtain Cyber Essentials Certification Easily
Getting Cyber Essentials certified is a smart move for any business. It shows you take cybersecurity seriously. It also helps you win contracts, especially in the UK government supply chain. But how do you get certified without stress? This guide will walk you through the process step-by-step. You’ll learn what to expect, how to prepare, and how to pass with ease. How to Obtain Cyber Essentials Certification: The Basics First, let’s cover the basics. Cyber Essentials is a UK
Sep 283 min read
Your Guide to Setting Up BlockMark After Cyber Essentials Certification
A step-by-step guide to setting up your BlockMark account after Cyber Essentials certification, downloading your certificate, and adding your certification badge to your website and email signature.
Sep 267 min read
Explore the latest in cyber security news uk through our comprehensive blog. From certification guidance to vital updates, we provide actionable insights to keep you informed and secure. Stay ahead in the digital landscape with our expert-driven content, tailored for businesses of all sizes, ensuring you never miss a beat in the world of cyber security news uk.
bottom of page