Storm Dot Com

Storm Dot Com We specialise in providing cost effective IT support solutions to the business sector.

With over 20 years of experience StormDotCom is a single source provider for total network solutions; transforming technology into business solutions.

On 8 June 2026, AVBOB confirmed a cyberattack that forced all branches to serve clients through manual processes only. N...
15/06/2026

On 8 June 2026, AVBOB confirmed a cyberattack that forced all branches to serve clients through manual processes only. No digital systems. Just paper and pens to manage payments, claims, and funeral arrangements nationwide.

Most business owners assume a cyberattack means a slow day. The AVBOB incident proves otherwise. When an unmanaged network is compromised, your ability to trade stops with it.

At StormDotCom, we work with businesses across Cape Town to build infrastructure that does not just function on a good day, but holds together when things go wrong.

If your systems went offline right now, does your team have a plan? Let us know in the comments, or get in touch at [email protected].

4 baseline habits to close your company's hidden digital doors before the weekend.This week we have been covering what t...
12/06/2026

4 baseline habits to close your company's hidden digital doors before the weekend.

This week we have been covering what the SITA vulnerability exposure reveals about the security of everyday business networks. Today we close with something practical: four things every business should be able to verify with their IT provider.

1. Automate core patching. Operating systems and main applications should update automatically on a structured schedule - not left to manual processes or deferred support calls.

2. Close unused ports. If a remote access port or legacy service is no longer used daily, disable it. Every open port is a potential entry point for automated scanners.

3. Upgrade to behavioural protection. Legacy antivirus only catches threats it already knows about. An EDR system like SentinelOne monitors application behaviour in real time, catching threats that do not have a known signature yet.

4. Schedule regular external scans. Internal dashboards only show what your systems see from the inside. External scans show what an attacker sees from the outside.

StormDotCom has been helping Cape Town businesses maintain secure, resilient IT foundations for over 25 years. We do not just patch software. We protect operational continuity.

Save this checklist and use it to challenge your current IT setup on Monday morning.

Visit us at sdcom.co.za to learn more.

There is a difference between an IT provider that fixes what breaks and an IT partner that ensures as little as possible...
11/06/2026

There is a difference between an IT provider that fixes what breaks and an IT partner that ensures as little as possible breaks in the first place.

That difference shows up in what most basic IT services simply do not have time to do: run a proper infrastructure health check. Look at your network from the outside. Review your patch status. Evaluate whether your current endpoint protection is actually equipped for modern threats.

Most businesses have never had that conversation with their IT provider.

Following this week's posts on the SITA vulnerability exposure, we want to make it easy for Cape Town businesses to take a first step.

StormDotCom is offering a Free External Infrastructure and Patching Review for businesses with 10 or more users in the Cape Town area.

We will review:
- Known network exposures visible from the public internet
- Your current software patch status
- Whether your endpoint protection is set up to catch behavioural threats

We have five slots available for next week.

Comment "AUDIT" below or send us a direct message. No obligation, just an honest assessment.

In law, accounting, and financial services, a single data breach does not just mean a system outage. It can mean a POPIA...
10/06/2026

In law, accounting, and financial services, a single data breach does not just mean a system outage. It can mean a POPIA violation, a regulatory investigation, and client relationships built over years unravelling overnight.

The threat is often simpler than people realise. Attackers are not writing custom malware targeting your specific firm. They are running automated scanners looking for known, publicly listed vulnerabilities in common systems: unpatched exchange servers, outdated remote access tools, legacy file-sharing configurations.

If your practice has not had its IT infrastructure reviewed and patched in the past six months, there is a real possibility that these vulnerabilities are visible right now to anyone who cares to look.

POPIA requires that you take reasonable protective measures for the personal information you hold. An unreviewed infrastructure does not meet that standard.

To any law, accounting, or financial services business reading this: when did you last have your IT audited from the outside?

We work with professional services firms across Cape Town, and we are always willing to have an honest conversation about what active protection looks like. Get in touch via our website or give our team a call.

The most dangerous vulnerability in any network is complacency.Here is the structural mistake that the SITA situation hi...
09/06/2026

The most dangerous vulnerability in any network is complacency.

Here is the structural mistake that the SITA situation highlights - and that we see regularly in business networks of all sizes.

An IT system gets set up. Servers, laptops, firewalls - all configured correctly on the day they were installed. Then time passes. Software ages. Known vulnerabilities accumulate. And because nothing has visibly crashed, the assumption becomes: we are fine.

That assumption is the gap that attackers exploit.

At StormDotCom, our approach to managed network services is built around two things: continuous automated patch management, and active behavioural endpoint monitoring through SentinelOne EDR.

This means your systems are being updated and monitored continuously in the background - not because something went wrong, but because we know that security is not a one-time setup. It is an ongoing discipline.

Are you confident your current IT partner is doing the same? Drop a comment below.

"Our Systems Remain Secure." That was the official statement from South Africa's State Information Technology Agency (SI...
08/06/2026

"Our Systems Remain Secure." That was the official statement from South Africa's State Information Technology Agency (SITA) on 24 May 2026.

This week, investigative journalists from GroundUp decided to check. Using Shodan, a freely available cybersecurity search engine, they scanned SITA's public-facing internet infrastructure.

What they found was sobering. The SITA network carries just over 5,000 total security vulnerabilities, from more than 900 unique CVEs. 126 of these are rated critical. The oldest vulnerability on their network has been there since 2006. Systems from the Deeds Office, the Limpopo health department, and the Western Cape government were among those exposed.

The message here is not to criticise SITA specifically. The message is that every organisation relying on the belief that it is secure, without active external verification, is exposed to the same risk.

If you run a business, ask yourself this: when did someone last look at your network from the outside, the way a potential attacker would?

Drop a comment below. We would love to hear how businesses in your sector are approaching this.

4 baseline metrics your business infrastructure must meet before you log off today.1. Automated Vulnerability PatchingOp...
05/06/2026

4 baseline metrics your business infrastructure must meet before you log off today.

1. Automated Vulnerability Patching
Operating systems and core software must be patched continuously, not manually on a whim. Unpatched software is the easiest door for an attacker to walk through.

2. Behavioural Endpoint Monitoring (EDR)
Standard signature antivirus is no longer sufficient. You need active EDR that can isolate an infected machine from the network automatically the moment a threat triggers.

3. Daily Redundant Backups
Your backups must be automated, encrypted, and stored off-site. Crucially, they must be tested regularly to confirm the data is actually retrievable — not just assumed to be.

4. Centralised Log Visibility
You need a single point of visibility monitoring your network's health, so that unusual activity is flagged before it turns into a system-wide freeze.

StormDotCom has spent over 25 years ensuring that Cape Town businesses build digital foundations that survive the unexpected. We do not just manage your software — we secure your continuity.

Save this checklist and use it to score your own IT setup first thing on Monday morning.

When IT is treated as a cost-only decision, you only discover the value of strategic monitoring after a total loss.A che...
04/06/2026

When IT is treated as a cost-only decision, you only discover the value of strategic monitoring after a total loss.

A cheap IT setup focuses on the price of the software licence. A value partner focuses on the continuous monitoring, governance, and rapid recovery of your entire digital asset base.

You should not have to wait for a blue screen or a ransom note to find out whether your business is resilient.

We want to remove the guesswork from your operational security entirely.

StormDotCom is offering a Free Managed Infrastructure and Resilience Review for Cape Town businesses with 10 or more users. We will help you identify known and likely vulnerabilities in your current device patching, audit your active backup readiness, and evaluate whether your current protection can handle modern threat behaviours.

We have 5 advisory slots available for next week.

Comment "MONITOR" below or send me a direct message to secure yours.

If your IT provider's only job is patching computers, they are missing the modern threat landscape entirely.Firms in hea...
03/06/2026

If your IT provider's only job is patching computers, they are missing the modern threat landscape entirely.

Firms in healthcare, law, finance, and accounting handle highly sensitive client information under POPIA. Many owners believe that because they have a local IT person pushing Windows updates once a month, they are fully protected.

They are not.

Patch management and basic antivirus are only minor pieces of the puzzle. Cybercriminals do not wait for you to update your software. They exploit unmonitored endpoints, compromise identity credentials, and deploy fileless malware that basic security tools completely miss.

Professional practices require a unified, managed framework: one that simultaneously manages operating system patches, actively hunts for behavioural anomalies via EDR, and constantly verifies that off-site backups are healthy and actually restorable.

To my fellow professionals in Cape Town: is your IT provider checking your backup logs every single day, or are you just assuming they work?

Address

28 Cross Road, Table View
Cape Town
7441

Opening Hours

Monday 08:00 - 17:00
Tuesday 08:00 - 17:00
Wednesday 08:00 - 17:00
Thursday 08:00 - 17:00
Friday 08:00 - 17:00

Telephone

+27215560696

Alerts

Be the first to know and let us send you an email when Storm Dot Com posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Storm Dot Com:

Share