uwannawat IT
@uwannawat.bsky.social
An FBI official said a North Korean IT worker had been working for a US government agency. The agency and the worker's access weren't disclosed. For remote hires, verify identity, work history and location before sending equipment or granting access.
https://techcrunch.com/2026/08/11/north-korean-re
https://techcrunch.com/2026/08/11/north-korean-re
North Korean remote IT staffer worked for US government agency, says FBI | TechCrunch
North Korean remote IT staffer worked for US government agency, says FBI | TechCrunch
techcrunch.com
October 8, 2026 at 2:05 AM
An FBI official said a North Korean IT worker had been working for a US government agency. The agency and the worker's access weren't disclosed. For remote hires, verify identity, work history and location before sending equipment or granting access.
https://techcrunch.com/2026/08/11/north-korean-re
https://techcrunch.com/2026/08/11/north-korean-re
Your out-of-office reply shouldn't tell strangers where you are, which clients you're working with or who is covering for you. People outside your company only need to know when you'll reply and how to contact the business if it's urgent.
October 6, 2026 at 11:55 PM
Your out-of-office reply shouldn't tell strangers where you are, which clients you're working with or who is covering for you. People outside your company only need to know when you'll reply and how to contact the business if it's urgent.
Your company should control the main admin account for its accounting software, CRM and file storage. Use a company email address, give access to at least two trusted people, and keep the billing and recovery details current. Need help checking? Contact us.
October 6, 2026 at 5:45 AM
Your company should control the main admin account for its accounting software, CRM and file storage. Use a company email address, give access to at least two trusted people, and keep the billing and recovery details current. Need help checking? Contact us.
Emailing the same message to several customers? Put their addresses in BCC so they can't see each other's details or send a reply to the whole list. Use an email marketing platform for newsletters or larger groups.
October 5, 2026 at 1:10 AM
Emailing the same message to several customers? Put their addresses in BCC so they can't see each other's details or send a reply to the whole list. Use an email marketing platform for newsletters or larger groups.
Don't trust hotel Wi-Fi. It can be compromised even when you've joined the correct network.
Microsoft has found attackers taking control of the systems used for Wi-Fi login pages at hotels and conference venues.
Once the login system has been compromised, guests can be redirected to a fake Microso
Microsoft has found attackers taking control of the systems used for Wi-Fi login pages at hotels and conference venues.
Once the login system has been compromised, guests can be redirected to a fake Microso
October 4, 2026 at 11:35 PM
Don't trust hotel Wi-Fi. It can be compromised even when you've joined the correct network.
Microsoft has found attackers taking control of the systems used for Wi-Fi login pages at hotels and conference venues.
Once the login system has been compromised, guests can be redirected to a fake Microso
Microsoft has found attackers taking control of the systems used for Wi-Fi login pages at hotels and conference venues.
Once the login system has been compromised, guests can be redirected to a fake Microso
Google Sheets can now turn spreadsheet data into a dashboard, project board or other visual layout. The new Canvas feature updates when the spreadsheet changes, and edits made in Canvas update the sheet. It's initially available on selected paid plans.
https://blog.google/products-and-platforms/prod
https://blog.google/products-and-platforms/prod
Bring your spreadsheet data to life with Sheets canvas
Bring your spreadsheet data to life with Sheets canvas
blog.google
October 4, 2026 at 12:26 AM
Google Sheets can now turn spreadsheet data into a dashboard, project board or other visual layout. The new Canvas feature updates when the spreadsheet changes, and edits made in Canvas update the sheet. It's initially available on selected paid plans.
https://blog.google/products-and-platforms/prod
https://blog.google/products-and-platforms/prod
A short power cut can shut down your server, firewall or network equipment. A UPS battery gives those devices time to stay on or shut down safely. Ask your IT provider which equipment has power protection and when the batteries were last tested.
October 3, 2026 at 12:35 AM
A short power cut can shut down your server, firewall or network equipment. A UPS battery gives those devices time to stay on or shut down safely. Ask your IT provider which equipment has power protection and when the batteries were last tested.
Check what people outside your company can see on your work calendar. Meeting titles may reveal client names, projects, interviews or travel plans. External users usually only need to see whether you're free or busy.
October 2, 2026 at 5:50 AM
Check what people outside your company can see on your work calendar. Meeting titles may reveal client names, projects, interviews or travel plans. External users usually only need to see whether you're free or busy.
RingCentral says a social engineering campaign led to a breach affecting about 1.6 million accounts. Names, email addresses, phone numbers and physical addresses were exposed. If someone contacts you about your account, call RingCentral on its official support number.
https://www.bleepingcomputer.co
https://www.bleepingcomputer.co
RingCentral data breach exposed info of 1.6 million accounts
RingCentral data breach exposed info of 1.6 million accounts
www.bleepingcomputer.com
October 1, 2026 at 3:10 AM
RingCentral says a social engineering campaign led to a breach affecting about 1.6 million accounts. Names, email addresses, phone numbers and physical addresses were exposed. If someone contacts you about your account, call RingCentral on its official support number.
https://www.bleepingcomputer.co
https://www.bleepingcomputer.co
Your bin might be the easiest place to steal your customer data from. Invoices, bank statements and employee files go in the rubbish and anyone can pull them back out. One rule: personal, financial or customer info gets shredded, not binned. Use a cross-cut shredder.
#cybersecurity #datasecurity #s
#cybersecurity #datasecurity #s
September 30, 2026 at 5:05 AM
Your bin might be the easiest place to steal your customer data from. Invoices, bank statements and employee files go in the rubbish and anyone can pull them back out. One rule: personal, financial or customer info gets shredded, not binned. Use a cross-cut shredder.
#cybersecurity #datasecurity #s
#cybersecurity #datasecurity #s
An email from a supplier says their bank details have changed. You update them, pay the invoice, and the money goes to a criminal. Sometimes the supplier's own account was hacked, so it's genuinely from them. Never change bank details without calling on a number you already have.
#cybersecurity #fr
#cybersecurity #fr
September 29, 2026 at 12:08 AM
An email from a supplier says their bank details have changed. You update them, pay the invoice, and the money goes to a criminal. Sometimes the supplier's own account was hacked, so it's genuinely from them. Never change bank details without calling on a number you already have.
#cybersecurity #fr
#cybersecurity #fr
Researchers found the DragonForce ransomware group hiding inside normal Microsoft Teams traffic, undetected for up to two months. Their malware disguised its connection as ordinary Teams activity. Basic antivirus misses this. Ask your IT provider if what you have would catch it.
#cybersecurity #ran
#cybersecurity #ran
DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic
DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic
thehackernews.com
September 28, 2026 at 12:56 AM
Researchers found the DragonForce ransomware group hiding inside normal Microsoft Teams traffic, undetected for up to two months. Their malware disguised its connection as ordinary Teams activity. Basic antivirus misses this. Ask your IT provider if what you have would catch it.
#cybersecurity #ran
#cybersecurity #ran
When did anyone last look closely at your card terminals? Skimmers get attached and terminals get swapped, and neither is obvious unless someone checks. Look at each one at the start of the day. If it looks different or loose, stop using it and call your provider.
#cybersecurity #payments #smallbus
#cybersecurity #payments #smallbus
September 27, 2026 at 5:35 AM
When did anyone last look closely at your card terminals? Skimmers get attached and terminals get swapped, and neither is obvious unless someone checks. Look at each one at the start of the day. If it looks different or loose, stop using it and call your provider.
#cybersecurity #payments #smallbus
#cybersecurity #payments #smallbus
You've thought about what you'd do in a cyberattack, but have you practiced it? Sit your key people down for an hour and talk it through: files encrypted Monday morning. Who do we call first? Can we reach our contacts with email down? Note what nobody could answer.
#cybersecurity #incidentresponse
#cybersecurity #incidentresponse
September 26, 2026 at 1:40 AM
You've thought about what you'd do in a cyberattack, but have you practiced it? Sit your key people down for an hour and talk it through: files encrypted Monday morning. Who do we call first? Can we reach our contacts with email down? Note what nobody could answer.
#cybersecurity #incidentresponse
#cybersecurity #incidentresponse
Microsoft will never call you about a virus on your computer. Neither will Apple. If a pop-up or a caller says your machine is infected and wants you to call a number, install something or pay, it's a scam. Close it or hang up, then call your own IT provider if you're worried.
#cybersecurity #scams
#cybersecurity #scams
September 25, 2026 at 6:10 AM
Microsoft will never call you about a virus on your computer. Neither will Apple. If a pop-up or a caller says your machine is infected and wants you to call a number, install something or pay, it's a scam. Close it or hang up, then call your own IT provider if you're worried.
#cybersecurity #scams
#cybersecurity #scams
If you want your team to work fast, don't skimp on their computers or your internet.
Everything moves quicker than it used to. Customers want fast replies, and the jobs often go to whoever gets back to them first. Your team can't be quick if their tools are slow.
A laptop that takes an age to load
Everything moves quicker than it used to. Customers want fast replies, and the jobs often go to whoever gets back to them first. Your team can't be quick if their tools are slow.
A laptop that takes an age to load
September 25, 2026 at 12:35 AM
If you want your team to work fast, don't skimp on their computers or your internet.
Everything moves quicker than it used to. Customers want fast replies, and the jobs often go to whoever gets back to them first. Your team can't be quick if their tools are slow.
A laptop that takes an age to load
Everything moves quicker than it used to. Customers want fast replies, and the jobs often go to whoever gets back to them first. Your team can't be quick if their tools are slow.
A laptop that takes an age to load
Deleting files doesn't remove them from an old computer or phone. Free tools can pull them back. Before any device leaves, use Reset this PC and remove everything, or a full factory reset on phones. And don't forget the office copier, most store what you scan.
#cybersecurity #datasecurity #disposal
#cybersecurity #datasecurity #disposal
September 24, 2026 at 2:45 AM
Deleting files doesn't remove them from an old computer or phone. Free tools can pull them back. Before any device leaves, use Reset this PC and remove everything, or a full factory reset on phones. And don't forget the office copier, most store what you scan.
#cybersecurity #datasecurity #disposal
#cybersecurity #datasecurity #disposal
Who in your business can change the bank details on an invoice? Your accounting software is connected to your bank and holds payroll data. Turn on MFA, give everyone their own login, and use roles so only the people who need to move money can. Review access every few months.
#cybersecurity #account
#cybersecurity #account
September 23, 2026 at 3:35 AM
Who in your business can change the bank details on an invoice? Your accounting software is connected to your bank and holds payroll data. Turn on MFA, give everyone their own login, and use roles so only the people who need to move money can. Review access every few months.
#cybersecurity #account
#cybersecurity #account
MFA isn't bulletproof. Google's June 2026 advisory warns attackers build fake login pages that pass your password and MFA code through to the real site, stealing your session. Use passkeys for important accounts, and never log in through an emailed link.
#cybersecurity #MFA #phishing #IToperations
#cybersecurity #MFA #phishing #IToperations
Our latest fraud and scams advisory
Our latest fraud and scams advisory
blog.google
September 22, 2026 at 4:35 AM
MFA isn't bulletproof. Google's June 2026 advisory warns attackers build fake login pages that pass your password and MFA code through to the real site, stealing your session. Use passkeys for important accounts, and never log in through an emailed link.
#cybersecurity #MFA #phishing #IToperations
#cybersecurity #MFA #phishing #IToperations
Your router or firewall connects your business to the internet, and on default settings it's an easy way in. The admin password is often still the default, the firmware is out of date, and remote management may be switched on. Ask your IT provider to fix all three this week.
#cybersecurity #network
#cybersecurity #network
September 21, 2026 at 12:51 AM
Your router or firewall connects your business to the internet, and on default settings it's an easy way in. The admin password is often still the default, the firmware is out of date, and remote management may be switched on. Ask your IT provider to fix all three this week.
#cybersecurity #network
#cybersecurity #network
Your team's home wifi routers are part of your security now. A lot still run the default admin password from the sticker. Have them change it, turn on WPA2 or WPA3, and work from a company device rather than the family laptop. Give every remote worker a short checklist.
#cybersecurity #remotework #
#cybersecurity #remotework #
September 20, 2026 at 3:20 AM
Your team's home wifi routers are part of your security now. A lot still run the default admin password from the sticker. Have them change it, turn on WPA2 or WPA3, and work from a company device rather than the family laptop. Give every remote worker a short checklist.
#cybersecurity #remotework #
#cybersecurity #remotework #
Soon, some of the calls coming into your business won't be from a real person.
Google has started giving people AI assistants that ring businesses for them. The assistant will call a shop to check if something's in stock, book an appointment, or ask about a price.
For now this is mostly a consumer
Google has started giving people AI assistants that ring businesses for them. The assistant will call a shop to check if something's in stock, book an appointment, or ask about a price.
For now this is mostly a consumer
September 20, 2026 at 12:35 AM
Soon, some of the calls coming into your business won't be from a real person.
Google has started giving people AI assistants that ring businesses for them. The assistant will call a shop to check if something's in stock, book an appointment, or ask about a price.
For now this is mostly a consumer
Google has started giving people AI assistants that ring businesses for them. The assistant will call a shop to check if something's in stock, book an appointment, or ask about a price.
For now this is mostly a consumer
You search for software or your bank login and the top result is a paid ad. It looks right, but it's a fake site that installs malware or steals your login. Skip the ads and click the real result below, or type the address yourself. Only download software from the official site.
#cybersecurity #mal
#cybersecurity #mal
September 19, 2026 at 12:10 AM
You search for software or your bank login and the top result is a paid ad. It looks right, but it's a fake site that installs malware or steals your login. Skip the ads and click the real result below, or type the address yourself. Only download software from the official site.
#cybersecurity #mal
#cybersecurity #mal
A stranger walks in behind your employee carrying a box, and nobody stops them. From there they can plug into a network port, take a laptop, or sit at an unlocked computer. Get your team comfortable asking 'can I help you?' and make locking your screen normal when you step away.
#cybersecurity #phy
#cybersecurity #phy
September 18, 2026 at 6:30 AM
A stranger walks in behind your employee carrying a box, and nobody stops them. From there they can plug into a network port, take a laptop, or sit at an unlocked computer. Get your team comfortable asking 'can I help you?' and make locking your screen normal when you step away.
#cybersecurity #phy
#cybersecurity #phy
Malware still arrives as an email attachment someone opens without thinking. Be wary of .exe, .msi, .scr, scripts like .js or .bat, disk images like .iso, and any Office file asking you to enable macros. Unexpected attachment? Check with the sender another way before opening it.
#cybersecurity #phi
#cybersecurity #phi
September 17, 2026 at 5:50 AM
Malware still arrives as an email attachment someone opens without thinking. Be wary of .exe, .msi, .scr, scripts like .js or .bat, disk images like .iso, and any Office file asking you to enable macros. Unexpected attachment? Check with the sender another way before opening it.
#cybersecurity #phi
#cybersecurity #phi