October is Cyber Security Awareness Month, and we'll be using it to publish something more useful than most of what the month typically produces.
Throughout October, we're posting a series of short, practical pieces covering real classes of security issue - the kinds of problems we encounter consistently across infrastructure, application, and social engineering assessments. Each one will be explained plainly, with a concrete fix attached. No inflated risk language, no vendor positioning, no advice that stops at 'patch your systems'.
Our view is straightforward: awareness is only worth something if it leads to action. That means understanding what the actual exposure is, what control addresses it, and whether that control is working. That's what testing is for.
Follow Nanorisk over the coming weeks if you want security content grounded in practice rather than perception.