<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>HackGuardX UK Cybersecurity Knowledge Hub</title>
    <link>https://hackguardx.com/blog</link>
    <description>Practical cybersecurity guides, NCSC Cyber Essentials checklists, and vulnerability insights for UK businesses.</description>
    <language>en-gb</language>
    <atom:link href="https://hackguardx.com/blog/feed.xml" rel="self" type="application/rss+xml" />
    
    <item>
      <title><![CDATA[The Complete UK Small Business Cyber Security Checklist (NCSC & GDPR Aligned)]]></title>
      <link>https://hackguardx.com/blog/uk-small-business-cyber-security-checklist-2026</link>
      <guid isPermaLink="true">https://hackguardx.com/blog/uk-small-business-cyber-security-checklist-2026</guid>
      <description><![CDATA[A practical, non-jargon security checklist for UK businesses with 1 to 100 staff—covering domains, websites, Microsoft 365, cloud backups, and Cyber Essentials readiness.]]></description>
      <category>UK SME Cybersecurity</category>
      <pubDate>Thu, 01 Oct 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Automated Security Testing vs Traditional Penetration Testing: What UK SMEs Actually Need]]></title>
      <link>https://hackguardx.com/blog/automated-security-testing-vs-penetration-testing-uk</link>
      <guid isPermaLink="true">https://hackguardx.com/blog/automated-security-testing-vs-penetration-testing-uk</guid>
      <description><![CDATA[Compare £8,000 annual manual pen tests with continuous automated vulnerability scanning. Learn when you need a CREST manual test and how continuous testing protects the other 364 days.]]></description>
      <category>Compliance & Cyber Essentials</category>
      <pubDate>Mon, 28 Sep 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Microsoft 365 Security Hardening Guide: 12 Critical Settings to Stop Invoice Fraud & BEC]]></title>
      <link>https://hackguardx.com/blog/microsoft-365-security-hardening-guide-uk-businesses</link>
      <guid isPermaLink="true">https://hackguardx.com/blog/microsoft-365-security-hardening-guide-uk-businesses</guid>
      <description><![CDATA[Default Microsoft 365 tenant settings leave UK businesses vulnerable to Business Email Compromise (BEC). Here are the 12 Entra ID, Exchange, and SharePoint controls you must verify.]]></description>
      <category>Microsoft 365 Security</category>
      <pubDate>Thu, 24 Sep 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[HTTP Security Headers Explained: CSP, HSTS, X-Frame-Options & Referrer-Policy for UK Websites]]></title>
      <link>https://hackguardx.com/blog/http-security-headers-guide-csp-hsts-x-frame-options</link>
      <guid isPermaLink="true">https://hackguardx.com/blog/http-security-headers-guide-csp-hsts-x-frame-options</guid>
      <description><![CDATA[Missing HTTP security headers leave websites vulnerable to clickjacking, XSS script injection, and SSL stripping. Learn how to inspect and deploy production headers in Next.js, Nginx, and Cloudflare.]]></description>
      <category>Website Security</category>
      <pubDate>Fri, 18 Sep 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[How Leaked API Keys in GitHub Repositories Happen—And How to Stop Them permanently]]></title>
      <link>https://hackguardx.com/blog/prevent-leaked-api-keys-secrets-github-repositories</link>
      <guid isPermaLink="true">https://hackguardx.com/blog/prevent-leaked-api-keys-secrets-github-repositories</guid>
      <description><![CDATA[Automated bots scrape GitHub commits and client-side JavaScript bundles within seconds for AWS, Stripe, and OpenAI keys. Learn how secret detection and pre-commit guardrails protect your stack.]]></description>
      <category>GitHub & Source Code</category>
      <pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[Cloud Storage Misconfigurations: Finding Public S3 Buckets, Open Security Groups & IAM Drift]]></title>
      <link>https://hackguardx.com/blog/aws-s3-azure-blob-cloud-storage-misconfigurations</link>
      <guid isPermaLink="true">https://hackguardx.com/blog/aws-s3-azure-blob-cloud-storage-misconfigurations</guid>
      <description><![CDATA[Why cloud storage permissions and security group rules drift over time—and how read-only Cloud Security Posture Management (CSPM) secures AWS and Azure in minutes.]]></description>
      <category>Cloud Posture</category>
      <pubDate>Thu, 10 Sep 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[SPF, DKIM and DMARC Explained: How to Stop Criminals Spoofing Your UK Business Domain]]></title>
      <link>https://hackguardx.com/blog/spf-dkim-dmarc-explained-stop-email-spoofing-uk</link>
      <guid isPermaLink="true">https://hackguardx.com/blog/spf-dkim-dmarc-explained-stop-email-spoofing-uk</guid>
      <description><![CDATA[If your domain lacks a strict DMARC policy, anyone can send emails pretending to be your Managing Director or Finance team. Learn how to move safely from p=none to p=reject.]]></description>
      <category>Incident Prevention</category>
      <pubDate>Sat, 05 Sep 2026 00:00:00 GMT</pubDate>
    </item>
    <item>
      <title><![CDATA[How to Prepare for NCSC Cyber Essentials & Cyber Essentials Plus with Automated Scanning]]></title>
      <link>https://hackguardx.com/blog/cyber-essentials-technical-controls-preparation-guide</link>
      <guid isPermaLink="true">https://hackguardx.com/blog/cyber-essentials-technical-controls-preparation-guide</guid>
      <description><![CDATA[Map the 5 NCSC Cyber Essentials technical controls directly to automated vulnerability scanning, patch management SLAs, and boundary configuration checks.]]></description>
      <category>Compliance & Cyber Essentials</category>
      <pubDate>Tue, 01 Sep 2026 00:00:00 GMT</pubDate>
    </item>
  </channel>
</rss>