The Fix
Recognise the symptoms, find the cause and work through a safe, verifiable resolution.
OUR THINKING / FIELD NOTES
Useful answers.
Better questions.
Technology has a habit of being complicated at precisely the wrong moment. We untangle the issues, explain what matters and share practical steps you can use.
KNOWLEDGE PUT TO WORK
Understand the problem.
Make the next move.
Some problems call for a precise fix. Others reveal a better way to build the whole thing. And when a security issue develops, the advice needs to evolve with it.
Our Field Notes bring together research, sound technical judgement and useful detail so you can get on with what matters, with reliable sources and updates where things change.
FIVE WAYS TO EXPLORE
From the immediate fix to the bigger picture.
Clear guidance, grounded in technical evidence and written for the people who have to make it work.
The Better Way
Compare the options, understand the trade-offs and make recurring frustrations easier to manage.
The Insight
Unpack important changes and the technical decisions that shape dependable technology.
The Security Watch
Follow meaningful vulnerabilities as new facts, official workarounds, security patches and confirmed impact emerge.
The Guide
Get from start to finish with ordered instructions, clear explanations and checks that show each step has worked.
THE LATEST FIELD NOTES
What we're looking at.
A growing collection of practical knowledge and evidence-led security updates.
FIND WHAT YOU NEED
Explore the library.
Search every published Field Note, or narrow things down by topic and format.
Other Technology
Set Up Business IT From Scratch: A UK Guide for Self-Employed Starters
A plain-English route for anyone starting work for themselves in the UK: what to set up on day one, what to sort before customers arrive and what can wait until money is coming in. Includes simple self-checks and a printable checklist.
Security & Protection
Brotli Vulnerability CVE-2026-111497: Is Your Node.js or Python Affected?
CISA added the Google Brotli decoder flaw CVE-2026-111497 to its exploited-vulnerabilities list on 27 October 2026. Here is who is affected, the fixed versions that exist, how to check your own systems and what to do first.
Other Technology
Arista VeloCloud Orchestrator SQL Injection (CVE-2026-114625)
Arista says an actively exploited SQL injection in on-premises VeloCloud Orchestrator lets any logged-in user gain operator rights. Who is affected, the fixed builds and what to do first.
Security & Protection
Nextcloud's Built-in Collabora CODE Server Is Being Exploited - What to Do
CVE-2026-110447 lets an unauthenticated attacker run commands on Nextcloud servers using the built-in Collabora CODE Server app before 26.4.303. CISA lists it as exploited. Update or remove the app, then check for web shells.
AI, Data & Automation
ChatGPT Chat vs Work: What's the Difference and When to Use Each
Chat is for asking, thinking and drafting with you steering. Work is an agent that takes a goal and builds a finished file, sometimes using your apps. Here's how to choose, and what to watch before connecting company data.
Security & Protection
How to set up Police CyberAlarm for free vulnerability scans
Police CyberAlarm is a free, Home Office-funded service that scans your public websites and internet-facing IP addresses for known vulnerabilities. Here is how to register, prove ownership of what you submit and switch the scans on, with no Secure Sensor needed.
Infrastructure & Cloud
How to install free VMware ESXi 8.0U3e and create your first VM
A practical guide to installing the free VMware ESXi 8 hypervisor on a spare server, setting up management and starting a test virtual machine.
Infrastructure & Cloud
How to set up a standalone Hyper-V host on Windows Server 2025 and create your first VM
Install the Hyper-V role on a workgroup Windows Server 2025 machine, choose where VM files live, add an external virtual switch, build a first generation 2 VM and prove it is running. PowerShell throughout, no domain or cluster needed.
Websites & Development
Critical PHP Security Vulnerabilities: Is Your Website at Risk? (October 2026)
Two critical PHP vulnerabilities can allow unauthenticated remote code execution. Check the PHP versions serving your websites, apply vendor-fixed releases and confirm the active runtimes were updated.
Microsoft 365 & Email
Microsoft 365 Blocking Outgoing Email: Fix a Restricted Sender
A user's mail bounces with 550 5.1.8 because Microsoft 365 has restricted their mailbox. Here is how to confirm it, secure the account first, then lift the restriction safely and check that sending works again.
Microsoft 365 & Email
Why Legitimate Business Emails End Up in Spam, and How to Tell Why
Good email lands in junk when the receiving provider cannot tie it to your domain or has seen complaints about it. Here is how authentication, SPF limits and sender reputation cause that, and a read-only way to find which applies to you.
Microsoft 365 & Email
Scan to Email Not Working in Microsoft 365: Fix SMTP Authentication Errors
Work out whether your scanner is failing on settings, a switched-off SMTP AUTH option, a Basic authentication block or TLS, then fix it safely. Includes a relay route for devices that cannot meet Microsoft 365's current requirements.
AN OPEN INVITATION
Got a technology question that deserves a proper answer?
Whether it's a persistent technical problem or a more ambitious challenge, tell us what you're trying to achieve.