Microsoft recommends at least two emergency admin accounts for Microsoft Entra, which manages Microsoft 365 sign-ins. Use a sign-in method that doesn't rely on the same phones or apps as your normal admins. Alert every login and test the accounts every 90 days.

Some Xfinity routers can detect movement through changes in Wi-Fi signals. The feature doesn't use a camera, but it creates information about activity at home. Comcast says it may disclose that information when legally required. Read the privacy terms befo techcrunch.com/2026/08/18/co…

Photos and documents can contain information you don't see when you open them. That may include a photo's GPS location, the document author, comments or tracked changes. Check the metadata before sending files outside your business.

Drawing a black rectangle over words in a PDF may only hide them from view. The text can still remain in the file. Use a proper redaction tool, save a new copy and test whether the hidden text can still be selected, copied or found.

Give employees clear rules for handling public, internal and confidential information. Customer records, payroll data and bank details should have tighter limits on who can access, store, send or delete them.

Researchers checked 10,616 Amazon Web Services access keys that had been exposed online and found 88% still worked. Hundreds gave full administrative access. A leaked key must be disabled or replaced. Deleting the file containing it isn't enough. bleepingcomputer.com/news/se…

Application allowlisting blocks software that your company hasn't approved. It can stop employees from running unapproved downloads and can also block some malware. Employees still need a quick way to request legitimate software.

What would happen if the only person who understands your IT was unavailable for a month? Someone else needs access to the documentation, provider contacts, renewal dates and emergency recovery steps. Choose a backup person and test the plan. We can help you document it.

An external security scan shows which of your systems accept connections from the internet. Run one after changing your firewall, adding remote access or installing a new system. It can also find old services that should have been switched off. Ask us to run the scan.

UK criminal records agency ACRO failed to investigate security alerts before several breaches, according to the ICO. Up to 10,920 people may have been affected. Assign someone to review every alert, escalate it and record what was checked. therecord.media/uk-criminal-…

A short email send delay gives you time to cancel a message after clicking Send. It can help employees catch the wrong recipient or attachment before payroll records, contracts or customer information leave the company.

Your network diagram should show how your internet connection, firewall, switches, wireless access points, servers and important cloud services fit together. Keep it current and store a copy somewhere you can reach during an outage. Need a current diagram? Contact us.

DNS filtering can stop employees from opening known phishing and malware sites, even when they click a bad link. Ask your IT provider whether it's enabled on office computers and work devices used away from the office.

An FBI official said a North Korean IT worker had been working for a US government agency. The agency and the worker's access weren't disclosed. For remote hires, verify identity, work history and location before sending equipment or granting access. techcrunch.com/2026/08/11/no…

Your out-of-office reply shouldn't tell strangers where you are, which clients you're working with or who is covering for you. People outside your company only need to know when you'll reply and how to contact the business if it's urgent.

Your company should control the main admin account for its accounting software, CRM and file storage. Use a company email address, give access to at least two trusted people, and keep the billing and recovery details current. Need help checking? Contact us.

Emailing the same message to several customers? Put their addresses in BCC so they can't see each other's details or send a reply to the whole list. Use an email marketing platform for newsletters or larger groups.

Google Sheets can now turn spreadsheet data into a dashboard, project board or other visual layout. The new Canvas feature updates when the spreadsheet changes, and edits made in Canvas update the sheet. It's initially available on selected paid plans. blog.google/products-and-pla…

A short power cut can shut down your server, firewall or network equipment. A UPS battery gives those devices time to stay on or shut down safely. Ask your IT provider which equipment has power protection and when the batteries were last tested.

Check what people outside your company can see on your work calendar. Meeting titles may reveal client names, projects, interviews or travel plans. External users usually only need to see whether you're free or busy.