What is MTTR? Ask three engineers and you may get three different answers, because the acronym covers four separate metrics. Two providers can quote the same MTTR and measure different things. This guide defines the four meanings of MTTR, shows how each is calculated, and explains what the number means when the thing that failed […]
Proxmox published advisory PSA-2026-00043-1 on 1 September 2026, and the way it came to light says as much as the flaw itself: not through internal testing, but through independent reports of servers being encrypted and held for ransom. A vulnerability of this severity, discovered because people were already being breached, is precisely the situation where […]
A server fails at two in the morning. The question that matters most in that moment was never answered in the moment. Someone answered it weeks earlier, when they decided how much data the business could afford to lose and how long it could survive being down. RPO and RTO are the two numbers that […]
The NIS2 Directive in the EU is the most significant expansion of European cybersecurity law in a decade, and as of July 2026 it is finally reaching the point where it changes what organisations must actually do. It replaces an earlier directive from 2016, widens the range of sectors covered, and, for the first time, […]
A freshly provisioned dedicated server is not a secure server. It is a blank machine with an operating system, a root password, and an open SSH port, exposed to the internet from the moment it receives a public IP address. Most server compromises do not involve sophisticated attacks. They involve automated bots scanning the internet […]
Not all traffic to a website comes from human visitors. A significant proportion, in many cases the majority, comes from internet bots: automated programs that traverse the web performing specific tasks without human interaction. Some of these bots are beneficial and necessary. Others consume server resources, distort analytics, and degrade the experience of legitimate users. […]
What is server hardening? It is the process of reducing a server’s attack surface by eliminating unnecessary services, tightening access controls, applying security configurations, and establishing ongoing practices that keep the server resistant to compromise over time. A freshly provisioned server is not a secure server. Default configurations prioritise accessibility and compatibility over security, designers […]
Every dedicated server connected to the internet receives automated login attempts continuously. SSH, the Secure Shell protocol used to administer Linux servers remotely, is the primary target. Automated tools scan the internet for servers with open SSH ports and attempt to log in using lists of common usernames and passwords, running thousands of attempts per […]
A network firewall controls who can connect to your server. A web application firewall controls what those connections are allowed to do once they arrive. The distinction matters because most modern attacks do not try to bypass your network perimeter, they arrive through ports 80 and 443, the same ports your legitimate users use, carrying […]
Every server connected to the internet receives traffic from every direction simultaneously: legitimate user requests, automated scanning tools probing for open ports, bots attempting to guess credentials, and connections from IP addresses with known malicious histories. None of this traffic announces its intentions. Without a mechanism to examine and filter it, all of it reaches […]
A server crash is rarely a dramatic event in the moment it happens. One second the server is processing requests normally. The next, it is not. Connections drop, applications stop responding, users see errors, and somewhere in a log file, if the system had time to write one, a record of what went wrong is […]
A website can be perfectly built, well-optimised, and running on excellent infrastructure, and still become completely unreachable. A Distributed Denial of Service attack does not need to find a vulnerability in your code, steal your credentials, or breach your database. It simply needs to send more traffic than your infrastructure can handle, until legitimate users […]