This Week in Small Business Security — 2026-08-18
11 sites scanned this week. Top issue: No DMARC record — phishing using your domain is possible.
This week, in numbers
We ran 11 Security Score scans across our customers this week.
- high: 28
- medium: 30
- critical: 12
- low: 6
- info: 18
Most common issues
- No DMARC record — phishing using your domain is possible (seen 5x)
- No CAA records (seen 5x)
- DNSSEC not detected (seen 5x)
- No SPF record (seen 4x)
- No DMARC record (seen 4x)
What to do about it
If any of the above sounds familiar, the fix is usually quick: missing security headers and outdated front-end libraries are the two most common findings we see, and both are typically a same-day fix. Run a free Security Score scan to see where your own site stands.
This newsletter is generated automatically from real (anonymised) Hebrides Cyber scan data. Set AZURE_OPENAI_ENDPOINT/KEY/DEPLOYMENT for a narrative AI write-up instead of this templated summary — see src/lib/newsletter.ts.
$ ./get-your-score
Get a free Security Score for your site
Automated TLS, headers, DNS, and exposure checks — results in under a minute.
Request a free scan