For small teams & solo IT managers
Everything security-related in one readable page.
Notices, patch windows, short checklists and a public status board — no dashboard to learn, no account required.
- 6 live notices
- Reviewed every Monday morning.
- 6 checklists
- Each one fits in under 15 minutes.
- Weekly email
- One note, or incidents only.
Security notices
A short, curated feed of advisories, patch notes and habits worth keeping. Newest first.
6 published
- Patch noteHigh2026-02-16
Apply Chrome 137 before Monday's rollout window
Chrome 137 fixes a same-origin policy bypass affecting SSO login flows. Two older policies are also deprecated, so check any in-house dashboards that embed Google sign-in.
- Update managed laptops through the normal update channel.
- Confirm SSO still redirects correctly on the internal dashboard.
- AdvisoryModerate2026-02-13
Windows LAPS password rotation moved to 30 days
The default LAPS rotation interval changed. Devices that stay offline for more than 30 days will prompt for a new local password on next check-in.
- Note which kiosks or shared carts sit offline for long stretches.
- Schedule a check-in for those devices before the next patch Tuesday.
- Best practiceHigh2026-02-10
Stop shipping a shared admin account for the whole team
Shared admin logins make incident triage guesswork. Individual accounts with a documented fallback are faster to audit and much easier to recover.
- Give each person their own named account.
- Keep one break-glass account in an encrypted vault, not in a wiki page.
- Best practiceCritical2026-02-06
Enable MFA on the email forwarding rule editor
Most business email compromise starts with a forwarding rule created by a compromised account. Protecting the rule editor closes that path early.
- Turn on MFA for every mailbox that forwards to an external address.
- Review existing forwarding rules once a quarter.
- AdvisoryModerate2026-02-02
TLS 1.0 and 1.1 removed from the default browser profile
Older TLS versions are gone from the current browser baseline. Legacy scanners and on-prem print servers may need a manual trust update.
- Test the internal print portal on one workstation first.
- Update any appliance still pinned to TLS 1.0.
- Patch noteHigh2026-01-28
Rotate the API token used by the sync script
The long-lived token for the backup sync script now expires after 90 days. Automate the rotation so it does not fail silently over a weekend.
- Set a calendar reminder 7 days before expiry.
- Store the token in the team vault, not in a plain text file.
Checklist library
Short, doable lists. Search by what you are fixing right now.
- 1Enable full-disk encryption on the account login.
- 2Set a 10+ character passphrase and require it on wake.
- 3Turn on automatic updates for OS and browser.
- 4Remove unused apps that were pre-installed by the vendor.
- 5Add the workstation to the backup schedule.
- 6Verify the screen locks after 5 minutes idle.
Weekly security reminders
One email per week: pending patch windows, expiring certificates and the two or three habits worth acting on. Switch to incidents only if you prefer fewer, shorter notes.
- Plain text, readable on a phone.
- Unsubscribe link in every message.
- No attachments, no tracking pixel.
Public status
Planned maintenance, patch windows and the latest incident notes. No login needed.
- Mail gatewayoperational
No planned downtime
Latest pass completed at 06:40 with 12 of 12 checks green.
- File sync servicemaintenance
Thursday 21:00 - 21:30
Storage tier bump. Expect a short read-only period.
- Monitoring dashboarddegraded
Until Wednesday close
Chart history limited to 7 days while the index rebuilds.
- Identity provideroperational
No planned downtime
Health checks every 60 seconds, all responding.
Recent incident notes
Feb 16, 07:10
Sync service restored after storage tier rebalance. No data loss.
Feb 12, 18:45
Expired TLS certificate on the print portal replaced during the evening window.
Feb 4, 09:05
Brief login slowdown after an identity provider update. Resolved in 9 minutes.