https://sicovis.com/ Practical cybersecurity: guides for safer systems and fair comparisons. en https://sicovis.com/hardening/security-baseline-small-teams/https://sicovis.com/hardening/security-baseline-small-teams/Sat, 31 Oct 2026 09:00:00 GMTHardeningTwelve controls, ordered by impact, that protect a team of one to fifty people against the break-ins that actually happen, from MFA and a password manager to offboarding and an incident contact list. https://sicovis.com/hardening/multi-factor-authentication/https://sicovis.com/hardening/multi-factor-authentication/Sat, 31 Oct 2026 09:00:00 GMTHardeningPasskeys, hardware security keys, authenticator apps, push approval, SMS and email codes all count as MFA, but they fail in very different ways. A comparison by phishing resistance, recovery and everyday use. https://sicovis.com/hardening/backups-ransomware-proof/https://sicovis.com/hardening/backups-ransomware-proof/Sat, 31 Oct 2026 09:00:00 GMTHardeningRansomware looks for your backups before it encrypts anything else. How to keep copies it cannot reach: the 3-2-1-1-0 rule, immutable storage, separate credentials, SaaS data and restore drills that prove it all works. https://sicovis.com/hardening/patch-management-routine/https://sicovis.com/hardening/patch-management-routine/Sat, 31 Oct 2026 09:00:00 GMTHardeningAttackers routinely exploit flaws that already have a fix. A realistic update routine for small teams: automatic updates, a weekly slot, priorities from the known exploited list, firmware, testing and end of support. https://sicovis.com/hardening/strong-passwords-passphrases/https://sicovis.com/hardening/strong-passwords-passphrases/Sat, 31 Oct 2026 09:00:00 GMTHardeningLength beats complexity, reuse is the real danger and forced rotation does more harm than good. What current NIST guidance says, how cracking works online and offline, and where password managers fit in. https://sicovis.com/hardening/phishing-signals/https://sicovis.com/hardening/phishing-signals/Sat, 31 Oct 2026 09:00:00 GMTHardeningAI-written phishing leaves no spelling mistakes to spot. The signals that still work: sender domains, look-alike and IDN homograph tricks, link targets, QR codes, callback scams, surprise MFA prompts and payment changes. https://sicovis.com/servers/web-servers-compared/https://sicovis.com/servers/web-servers-compared/Sat, 31 Oct 2026 09:00:00 GMTServers & HostingFour web servers, one question: which one leaves the fewest gaps once it is running? We compare defaults, automatic HTTPS, configuration risk, attack surface and how fast fixes reach you. https://sicovis.com/servers/shared-hosting-vps-managed/https://sicovis.com/servers/shared-hosting-vps-managed/Sat, 31 Oct 2026 09:00:00 GMTServers & HostingEvery hosting model splits security work between you and the provider. We compare shared hosting, unmanaged and managed servers, platforms as a service and static hosting by who patches, isolates and restores. https://sicovis.com/servers/linux-server-distributions/https://sicovis.com/servers/linux-server-distributions/Sat, 31 Oct 2026 09:00:00 GMTServers & HostingSupport periods, update processes and default protection differ more than package names. We compare Debian, Ubuntu LTS, Rocky Linux, AlmaLinux and Alpine as systems you leave running for years. https://sicovis.com/servers/ssh-hardening/https://sicovis.com/servers/ssh-hardening/Sat, 31 Oct 2026 09:00:00 GMTServers & HostingMost attacks on SSH are automated guessing. Keys, a small drop-in file and an allow list make that guessing pointless. Here are the settings and how to apply them without locking yourself out. https://sicovis.com/servers/https-tls-configuration/https://sicovis.com/servers/https-tls-configuration/Sat, 31 Oct 2026 09:00:00 GMTServers & HostingA padlock in the browser is the start, not the finish. This guide covers TLS 1.2 and 1.3, sensible ciphers, HSTS and preloading, and the shrinking certificate lifetimes that make automation mandatory. https://sicovis.com/ai-security/llm-data-privacy-options/https://sicovis.com/ai-security/llm-data-privacy-options/Sat, 31 Oct 2026 09:00:00 GMTAI & LLMsFree chat app, business plan, API, cloud region or your own server: the deployment type decides who sees your prompts, how long they are kept and what you can prove later. https://sicovis.com/ai-security/prompt-injection/https://sicovis.com/ai-security/prompt-injection/Sat, 31 Oct 2026 09:00:00 GMTAI & LLMsA language model cannot reliably tell your instructions apart from text it happens to read. How direct and indirect prompt injection work, why agents raise the stakes and which defences help. https://sicovis.com/ai-security/local-llm-runners/https://sicovis.com/ai-security/local-llm-runners/Sat, 31 Oct 2026 09:00:00 GMTAI & LLMsRunning open-weight models on your own hardware keeps prompts in house, but only while the server stays off the open network. Four popular runners compared on defaults, authentication and serving. https://sicovis.com/ai-security/ai-coding-assistants-security/https://sicovis.com/ai-security/ai-coding-assistants-security/Sat, 31 Oct 2026 09:00:00 GMTAI & LLMsCode assistants and agents write useful code fast, and now and then insecure code, invented packages or a shell command you did not expect. These habits keep the speed without the surprises. https://sicovis.com/ai-security/ai-usage-policy/https://sicovis.com/ai-security/ai-usage-policy/Sat, 31 Oct 2026 09:00:00 GMTAI & LLMsYour staff already use AI tools, with or without a policy. A short, clear one sets which tools are approved, which data stays out, who checks the output and what the EU AI Act expects of you. https://sicovis.com/cms/cms-security-compared/https://sicovis.com/cms/cms-security-compared/Sat, 31 Oct 2026 09:00:00 GMTCMS & WebSix ways to run a website, scored on security process, extension risk, updates, support windows and attack surface. The right choice depends less on the code than on the routine you can keep. https://sicovis.com/cms/wordpress-hardening/https://sicovis.com/cms/wordpress-hardening/Sat, 31 Oct 2026 09:00:00 GMTCMS & WebWhen a WordPress site is broken into, the cause is rarely WordPress core. These steps close the usual gaps in order of impact, with settings and server rules you can copy. https://sicovis.com/cms/static-site-security/https://sicovis.com/cms/static-site-security/Sat, 31 Oct 2026 09:00:00 GMTCMS & WebNo database, no login page, no code running on each request: static sites are hard to break into directly. The risks move to the build pipeline, the accounts, the DNS and the scripts you embed. https://sicovis.com/cms/security-headers/https://sicovis.com/cms/security-headers/Sat, 31 Oct 2026 09:00:00 GMTCMS & WebA handful of HTTP response headers tell browsers to enforce HTTPS, block framing and limit what scripts may load. Here is what each one does, which ones to drop and how to add them on Apache and Nginx. https://sicovis.com/cms/website-launch-checklist/https://sicovis.com/cms/website-launch-checklist/Sat, 31 Oct 2026 09:00:00 GMTCMS & WebThe week before launch is the cheapest time to fix security. These checks cover HTTPS, logins, error pages, forms, privacy, DNS and email records, backups and monitoring, whatever the site is built with. https://sicovis.com/operating-systems/desktop-os-security-compared/https://sicovis.com/operating-systems/desktop-os-security-compared/Sat, 31 Oct 2026 09:00:00 GMTOperating SystemsAll four are safe enough when they are updated, encrypted and used without admin rights. The real differences lie in defaults, support periods and how much of the work stays with you. https://sicovis.com/operating-systems/ios-android-security/https://sicovis.com/operating-systems/ios-android-security/Sat, 31 Oct 2026 09:00:00 GMTOperating SystemsBoth platforms are well protected while they receive updates. The bigger gap runs between phones: an iPhone, a Pixel, a Samsung flagship and a budget Android phone age very differently. https://sicovis.com/operating-systems/windows-11-hardening/https://sicovis.com/operating-systems/windows-11-hardening/Sat, 31 Oct 2026 09:00:00 GMTOperating SystemsStandard accounts for daily work, prompt updates, Defender's ransomware protection, encryption with a stored recovery key and app control: the settings that make a Windows 11 PC hard to misuse. https://sicovis.com/operating-systems/macos-security-settings/https://sicovis.com/operating-systems/macos-security-settings/Sat, 31 Oct 2026 09:00:00 GMTOperating SystemsUpdates, FileVault, the firewall, app sources, privacy permissions and background items: the macOS settings that decide how well a Mac is protected, with paths for macOS Golden Gate and Tahoe. https://sicovis.com/operating-systems/end-of-support-systems/https://sicovis.com/operating-systems/end-of-support-systems/Sat, 31 Oct 2026 09:00:00 GMTOperating SystemsWindows 10 lost regular support in October 2025, and the consumer ESU programme now runs to October 2027. Your options for old PCs, Macs, phones, routers and NAS devices, from upgrade to isolation. https://sicovis.com/apps/secure-messengers-compared/https://sicovis.com/apps/secure-messengers-compared/Sat, 31 Oct 2026 09:00:00 GMTApps & ToolsFive popular messengers, five different answers to the questions that matter: is encryption on by default, what does the operator keep, and are your backups as safe as your chats? https://sicovis.com/apps/password-managers-compared/https://sicovis.com/apps/password-managers-compared/Sat, 31 Oct 2026 09:00:00 GMTApps & ToolsCloud vault or local file, open source or polished subscription: five password managers compared on audits, passkeys, sharing and recovery, with the lessons of the 2022 LastPass breach. https://sicovis.com/apps/browsers-security-compared/https://sicovis.com/apps/browsers-security-compared/Sat, 31 Oct 2026 09:00:00 GMTApps & ToolsFive browsers, one job: run code from strangers safely. We compare update speed, isolation, tracking defaults, Manifest V3, site warnings, vendor data collection and enterprise management. https://sicovis.com/apps/vpn-what-it-protects/https://sicovis.com/apps/vpn-what-it-protects/Sat, 31 Oct 2026 09:00:00 GMTApps & ToolsA VPN hides your traffic from the local network and your provider, and your IP address from websites. It does not stop phishing, malware or tracking through logins. Here is where it really helps. https://sicovis.com/apps/browser-extensions-audit/https://sicovis.com/apps/browser-extensions-audit/Sat, 31 Oct 2026 09:00:00 GMTApps & ToolsExtensions, connected apps and site permissions pile up quietly. This fifteen minute audit removes what you do not use, trims risky permissions and moves your passwords to where they belong. https://sicovis.com/secure-code/owasp-top-10/https://sicovis.com/secure-code/owasp-top-10/Sat, 31 Oct 2026 09:00:00 GMTSecure CodeThe 2025 edition of the OWASP Top 10 reorders the classic web risks and adds a new one about error handling. What each category means, how it shows up in real code and what stops it. https://sicovis.com/secure-code/secrets-management/https://sicovis.com/secure-code/secrets-management/Sat, 31 Oct 2026 09:00:00 GMTSecure CodeAn API key in a repository is copied to every clone and every fork. How to keep secrets out of code, where to store them instead and what to do in the first hour after a key was committed. https://sicovis.com/secure-code/software-supply-chain/https://sicovis.com/secure-code/software-supply-chain/Sat, 31 Oct 2026 09:00:00 GMTSecure CodeMuch of the code you ship was written by someone else. How to pin and review dependencies, avoid typosquatting and dependency confusion, produce an SBOM and check what you install. https://sicovis.com/secure-code/injection-xss-defence/https://sicovis.com/secure-code/injection-xss-defence/Sat, 31 Oct 2026 09:00:00 GMTSecure CodeSQL injection and cross-site scripting share one root cause: data that ends up being treated as code. Parameterised queries, context aware encoding and a Content Security Policy close that gap. https://sicovis.com/secure-code/password-hashing-compared/https://sicovis.com/secure-code/password-hashing-compared/Sat, 31 Oct 2026 09:00:00 GMTSecure CodeFour algorithms are fit for storing passwords, and fast hashes such as SHA-256 are not. How Argon2id, scrypt, bcrypt and PBKDF2 compare, which parameters OWASP recommends and how to migrate. https://sicovis.com/secure-code/jwt-security/https://sicovis.com/secure-code/jwt-security/Sat, 31 Oct 2026 09:00:00 GMTSecure CodeJSON Web Tokens are compact and convenient, and easy to get subtly wrong. What a token contains, which checks every verifier must make and when a plain session cookie is the better choice.