56 articles
Attacks target small and mid-sized businesses first: less protected, they pay more often. The good news is that a handful of well-applied measures stops the vast majority of attacks.
Our engineers share what they deploy for their clients: priorities, common mistakes, rollout order and legal obligations. Practical guides to decide quickly and well.
Cybersecurity · 6 November 2026 · 9 min read
Private school or university in Morocco: hijacked mailboxes, ransomware, student data and Law 09-08. The measures to put in place first.
Cybersecurity · 5 November 2026 · 10 min read
Law firm or notary office in Morocco: professional secrecy, bank detail fraud, remote signing, archives, backups. The measures to take first.
Compliance & regulation · 5 November 2026 · 11 min read
GDPR and Moroccan companies: Article 3, EU representative, processor contracts, standard contractual clauses, Law 09-08. See what applies to you and how to prepare.
Networks & firewalls · 5 November 2026 · 10 min read
Business VLANs: which zones to create, addressing plan, flow matrix, trunks, firewall filtering and phased migration. Our method for SMBs in Morocco.
Endpoints, mobility & remote work · 5 November 2026 · 10 min read
Windows 10 end of support for businesses: how to decide PC by PC between Windows 11, ESU and replacement, with official dates and the traps to avoid.
Cybersecurity · 4 November 2026 · 8 min read
Morocco’s 2023 DNSSI from the DGSSI: who it applies to, its 14 chapters, the key rules (logs, backups, access, suppliers, incidents) and a compliance plan.
Cybersecurity · 4 November 2026 · 8 min read
PCI DSS 4.0.1 in Morocco: who is in scope, which SAQ to complete (A, A-EP, B-IP, C-VT, D), the payment page script requirements and a practical action plan.
Security alerts · 4 November 2026 · 5 min read
WordPress vulnerability CVE-2026-119977: CISA confirms exploitation of a flaw in the core upgrade process. Fixed versions, maCERT bulletin and checks to run.
Cybersecurity · 3 November 2026 · 11 min read
ISO 27001 for SMBs in Morocco: the 2022 version, 93 Annex A controls, scope, risk assessment, Statement of Applicability and certification audits.
Cybersecurity · 2 November 2026 · 8 min read
IT acceptable use policy (charte informatique) in Morocco: what it must contain, link with internal rules, law 09-08 and the DNSSI, template outline and 7-step rollout.
Cybersecurity · 2 November 2026 · 9 min read
Shadow IT and generative AI: data leak risks, Morocco’s law 09-08, personal accounts, approved tools, usage rules and technical controls for an SMB.
Cybersecurity · 1 November 2026 · 8 min read
USB sticks and external drives: risks (malware, data leaks), usage policy, blocking with Intune or Kaspersky, BitLocker To Go encryption. A guide for SMBs in Morocco.
Cybersecurity · 31 October 2026 · 8 min read
Passkeys for business: how they work, synced vs device-bound, Microsoft Entra, Google Workspace, Microsoft’s SMS retirement and a rollout plan for SMBs.
Cybersecurity · 30 October 2026 · 8 min read
DNS filtering for businesses: how it works, solutions (FortiGate, WatchGuard DNSWatch, Microsoft Defender), DoH bypass and deployment steps in Morocco.
Security alerts · 30 October 2026 · 4 min read
Veeam fixes CVE-2026-108142, a critical unauthenticated flaw in Backup & Replication 13, and an MFA bypass in Veeam ONE. Affected versions, fixes and checks.
Cybersecurity · 29 October 2026 · 8 min read
BitLocker for business: required editions, TPM or TPM + PIN, automatic device encryption, recovery keys in Entra ID or Active Directory, step-by-step rollout.
Cybersecurity · 29 October 2026 · 9 min read
Business email compromise (BEC): the signs of a hacked mailbox, hidden forwarding rules, step-by-step remediation and the payment procedure that stops wire fraud.
Cybersecurity · 29 October 2026 · 7 min read
Business printer and MFP security: admin password, firmware, protocols to disable, badge release printing, Windows Print Spooler, secure disk wipe before recycling.
Cybersecurity · 29 October 2026 · 7 min read
Cloudflare for business: proxied or DNS-only records, Full (strict) SSL mode, WAF, DDoS protection, DNSSEC and protecting the origin server, step by step.
Cybersecurity · 29 October 2026 · 7 min read
Incident response plan for SMBs in Morocco: first-hour actions (isolate without shutting down, preserve evidence, alert), roles and a one-page checklist.
Cybersecurity · 29 October 2026 · 7 min read
IP camera and video surveillance security for business: passwords, firmware, VLAN, remote access without open ports, NVR accounts and CNDP declaration in Morocco.
Cybersecurity · 29 October 2026 · 8 min read
Patch management for SMBs in Morocco: inventory, prioritisation with CISA KEV and EPSS, Intune deployment rings, servers, firewalls and compliance checks.
Cybersecurity · 29 October 2026 · 7 min read
Ransomware recovery for SMBs: hunting the attacker, rebuild order, clean backups, passwords and krbtgt, and a staged restart under close monitoring.
Cybersecurity · 29 October 2026 · 6 min read
Securing a business WordPress website: updates, plugins, accounts and two-factor authentication, wp-config.php, file permissions, web application firewall, backups.
Cybersecurity · 29 October 2026 · 7 min read
Securing RDP access: why Remote Desktop open to the internet attracts ransomware, and the safe alternatives (VPN, ZTNA, RD Gateway, MFA) plus internal hardening.
Security alerts · 29 October 2026 · 4 min read
CISA confirms exploitation of CVE-2026-41709, which lets an administrator act on ESX without leaving a trace. Fixed versions, interim measures and checks.
Cybersecurity · 29 October 2026 · 8 min read
WAF and web application firewall: what it blocks, what it misses, cloud WAF, appliance or server module, OWASP CRS rules and rolling it out without breaking the site.
Cybersecurity · 28 October 2026 · 9 min read
Active Directory hardening for SMBs in Morocco: tiering, Protected Users, SMB and LDAP signing, Print Spooler, krbtgt, gMSA and auditing, per Microsoft.
Cybersecurity · 28 October 2026 · 8 min read
Accounting firm or fiduciary in Morocco: email, SIMPL and DAMANCOM access, bank detail fraud, mobile laptops, backups, law 09-08. The measures to take first.
Cybersecurity · 28 October 2026 · 8 min read
Microsoft Defender for Business for SMBs in Morocco: features, licensing (standalone or in Business Premium), servers, step-by-step deployment and settings per Microsoft.
Cybersecurity · 28 October 2026 · 8 min read
Business password policy in Morocco: length, no more periodic changes, banned passwords, multi-factor authentication and a shared business password manager.
Cybersecurity · 28 October 2026 · 9 min read
Build a phishing awareness training program in an SMB in Morocco: framing, report button, simulations, short training modules, metrics and the mistakes to avoid.
Cybersecurity · 28 October 2026 · 8 min read
Admin account management for SMBs in Morocco: separate accounts, emergency access accounts, Windows LAPS, PIM, access vault and rights reviews, per Microsoft.
Cybersecurity · 28 October 2026 · 7 min read
SIEM for SMBs in Morocco: what a SIEM does, which logs to collect, open-source Wazuh, Microsoft Sentinel, FortiAnalyzer, sizing and mistakes to avoid.
Cybersecurity · 24 October 2026 · 9 min read
SPF, DKIM and DMARC explained simply: what each one does, DNS records for Microsoft 365 and Google Workspace, a gradual move to reject, mistakes to avoid.
Cybersecurity · 18 October 2026 · 8 min read
IT security audit in Casablanca: scoping, audit agreement, interviews, technical tests, gap sheets, report and action plan. The process step by step.
Cybersecurity · 15 October 2026 · 8 min read
Antivirus, EDR or XDR, Microsoft Defender for Business, Kaspersky, WatchGuard, Fortinet and others: console, monitoring and criteria to choose your business antivirus.
Cybersecurity · 15 October 2026 · 8 min read
Free FortiClient VPN or FortiClient EMS, the end of SSL VPN tunnel mode, IPsec over port 443, FortiToken MFA and ZTNA: our remote work guide for FortiGate.
Cybersecurity · 15 October 2026 · 8 min read
Fortinet PSIRT advisories, the official upgrade path, mature releases, configuration backup and maintenance windows: our method for upgrading a FortiGate.
Cybersecurity · 15 October 2026 · 9 min read
Kaspersky Next EDR Foundations, EDR Optimum or XDR Expert: features, cloud or on-premises console, mobiles, licensing and renewal. Our guide for Morocco.
Cybersecurity · 15 October 2026 · 8 min read
Enrolment, inventory, apps, remote lock and wipe, BYOD, Android Enterprise, Apple Business, Intune, Kaspersky and law 09-08: the MDM guide for Moroccan businesses.
Cybersecurity · 15 October 2026 · 10 min read
Morocco’s cybersecurity law 05-20: who it covers, obligations for public bodies, critical infrastructure and service providers, and the role of the DGSSI.
Cybersecurity · 15 October 2026 · 8 min read
Sophos Intercept X, now Sophos Endpoint, or Kaspersky Next for an SMB in Morocco: editions, EDR, MDR, cloud or on-premises console, smartphones. An honest comparison.
Cybersecurity · 15 October 2026 · 8 min read
WatchGuard AuthPoint MFA explained: push, QR code, OTP and passkeys, MFA on Firebox VPN, Microsoft 365 via Entra ID and the Logon app for Windows. Partner guide.
Cybersecurity · 15 October 2026 · 9 min read
WatchGuard EPDR is now Endpoint Security 360: Basic, Prime, 360, Elite, EDR and EDR Core, modules, ThreatSync and the WatchGuard Cloud console. Our guide.
Cybersecurity · 15 October 2026 · 8 min read
WatchGuard VPN for remote work: Mobile VPN with IKEv2, SSL, IPSec or L2TP, official recommendation, clients, ports, AuthPoint and cloud management. Our guide.
Cybersecurity · 1 October 2026 · 7 min read
Managed EDR in Morocco: who handles night and weekend alerts, triage, isolation, critical incidents handled in under 15 min, reporting, EDR vs MDR.
Cybersecurity · 1 October 2026 · 6 min read
IT security audit or penetration test in Morocco: differences, scopes, deliverables, how to read the report and the right order for an SMB.
Cybersecurity · 30 September 2026 · 7 min read
Site-to-site or remote access, IPsec, SSL or ZTNA, MFA, split tunnelling, FortiClient and WatchGuard: our method to secure remote work in Morocco.
Cybersecurity · 17 September 2026 · 6 min read
EDR or antivirus for an SMB: behavioural detection, endpoint isolation, investigation, 24/7 monitoring. Key differences, rollout method, checklist.
Cybersecurity · 16 September 2026 · 6 min read
Fake supplier bank details, CEO fraud, fake Microsoft 365, fake parcels: the 8 email scams aimed at Moroccan SMBs, and the habits that stop them.
Cybersecurity · 15 September 2026 · 6 min read
Clinic or medical practice in Morocco: immutable backups, MFA, segmentation, EDR and backup telephony to protect patient data and keep care running.
Cybersecurity · 14 September 2026 · 6 min read
Multi-factor authentication for SMBs in Morocco and beyond: which accounts to protect first, which method to choose, how to roll out without friction.
Cybersecurity · 12 September 2026 · 6 min read
Zero Trust for SMBs: MFA, compliant devices, Microsoft 365 conditional access, network segmentation and ZTNA. Five workstreams in order, no rebuild needed.
Cybersecurity · 10 September 2026 · 6 min read
Ransomware attacks target SMBs first. Here are the seven measures that stop the vast majority of attacks, in order of priority.
Cybersecurity · 6 September 2026 · 7 min read
Morocco’s data protection law 09-08: declaring processing to the CNDP, legal basis, security, contractors, transfers abroad, and how IT meets each obligation.
SME
Securing an SME’s network and remote work
A network protected against common threats, smooth business applications and secure remote work for the whole team.
Read the case studyMulti-site group
Secure access to a biometric time-tracking system
Secure access from anywhere for managers, no downtime for the terminals, and a server that is no longer exposed.
Read the case studyA free audit to identify your top three risks.
Reply within one business day · Free initial audit · No commitment
Other topics
