Security Insights
Expert tips, industry trends, and practical advice to keep your business secure.
Google Calendar Phishing: How to Stop Fake Meeting Invites from Reaching Your Team
Attackers are using Google Calendar invites to bypass email filters. As of August 2026, Google Workspace admins can restrict calendar invitations to known senders only, blocking phishing events before they reach employees.
Read Article →
Cyber Insurance Questionnaire: What Carriers Ask at Renewal and How to Prepare
Cyber insurance questionnaires now probe MFA, EDR, backups, and incident response plans. Answer inaccurately and a claim may be reduced or denied. Here is what to verify before renewal.
Read Article →
Bill C-8 and Canadian SMB Suppliers: A Practical Checklist for Compliance
Canada's Critical Cyber Systems Protection Act became law June 15, 2026. SMBs supplying critical infrastructure face new contractual requirements.
Read Article →
Evaluating a Managed IT or Cybersecurity Provider: Criteria That Matter and Red Flags to Watch
Vetting an IT support partner is due diligence. Here are the questions, criteria, and warning signs to use before signing a contract.
Read Article →
Vendor Payment Fraud: How Fake Supplier Emails Steal Real Money
FBI data shows US$3.05 billion in BEC losses in 2025. Here is how fake supplier bank-detail emails work and how to stop the wire.
Read Article →
Microsoft 365 Anyone With the Link: Finding and Fixing Anonymous Sharing
Microsoft 365 'anyone with the link' sharing creates unauthenticated access that cannot be audited. Here is how to find and close these links.
Read Article →
Ransomware Now Targets Cloud Credentials: Lessons from a Claimed Attack on a Canadian Distributor
Ransomware groups now target cloud credentials and API keys, not just files. Here are the questions every SMB should be asking.
Read Article →
A Stolen AI API Key Ran Up $600,000 in Three Weeks at METR
An attacker bypassed login on an AI agent and used about $600,000 in credits over three weeks. Why stolen AI API keys are a direct financial risk.
Read Article →
Cybersecurity Assessment for Small Business: What It Actually Covers
A cybersecurity assessment should produce a prioritized findings list, not a scare document. Here is what it examines and what you receive.
Read Article →
IT Security Services: What a Small Business Should Actually Get
IT security services for a small business should cover identity, patching, endpoint detection, backups, training and response. Here is what each one does and what to get in writing before you sign.
Read Article →
Windows 11 24H2 End of Support Hits October 13, 2026
Windows 11 24H2 Home and Pro stop getting security updates on October 13, 2026. Here's why some managed business fleets won't auto-upgrade to 25H2 in time, and what to check first.
Read Article →
Workforce AI Security's 2-Week Trial Maps Your AI Exposure
A 2-week Workforce AI Security trial inventories every AI tool, browser extension, coding agent, and MCP connection your employees use, then delivers a written report of your organization's AI exposure.
Read Article →