What Happened at Asahi What we do  know: On September 29, 2025 , Asahi Group Holdings (Japan’s largest brewer) suffered a cyber-attack...

A Brief History of LockBit LockBit is one of the most persistent and high-impact ransomware families operating today. It began in 2019...

What CVE-2025-10585 Is Here’s what we know so far (as of mid-September 2025): The vulnerability is a zero-day, meaning attacks are...

A Quick Recap of the Attack On 16 September 2025, attackers exploited a GitHub Actions injection vulnerability to steal Nx’s NPM...

If you're part of a charity team, whether a founder, trustee, or operations lead, you already know how tight budgets and time are. But...

Password managers are a great tool. They help teams avoid reusing weak passwords, keep track of dozens (sometimes hundreds) of logins,...

This is a cautionary tale for founders and GRC leads: DaVita, a major kidney dialysis provider, was hit by a ransomware attack that...

Imagine a hacker buying a genuine .gov or .police email account for as little as $40 and using it to trick your team into opening malware...

You might be familiar with Blacksuit , the successor to royal, who defrauded 450 victims of over $370m since mid 2023 via Ransomware ....

This week, the U.S. Cybersecurity and Infrastructure Security Agency (CISA)  released Thorium , a powerful open-source platform for...

🚨 Heads up: Microsoft is enforcing DMARC policies by 5th May 2025. If you don't want your emails being delivered to the junk folder,...

If you run a small business or startup, you know that cybersecurity is important—but hiring a full-time Chief Information Security...

The most common questions I'm asked by small business or startups thinking about ISO 27001 certification are of course: how long will it...

I've recently delivered an awareness session for a client on how to prevent social engineering. Social engineering is one of my all time...

Hello there! If you’re reading this, you’re probably on the exciting (and sometimes daunting) journey of ISO 27001 compliance. Whether...

Hey there, fellow startup innovators! 🚀 At Steel FYI, we know that navigating the world of information security can feel overwhelming,...

Security is a solved problem. We broadly know the things we need to do. We've seen what technology works and what doesn't (spoiler alert,...