Junction City

02/09/2026

Using the same password twice means a breach at some site you forgot about can get someone into your business email. Attackers take leaked passwords and try them everywhere automatically. A strong password doesn't help if you reused it. Use a password manager and turn on MFA.

01/09/2026

Google put out an emergency Chrome update in June 2026 for a flaw attackers were already using. Just visiting a bad web page is enough to get hit, no clicking needed. Click the three dots, Help, About Google Chrome, then Relaunch. Updates only take effect once you restart.

Google released security updates for 74 Chrome vulnerabilities, including CVE-2026-11645, a high-severity V8 out-of-bounds memory access flaw.

31/08/2026

Your website is online 24/7 for anyone to poke at, and most owners never think about its security. Make sure it uses HTTPS, keep its software and plugins updated (outdated plugins are the top way sites get hacked), and lock down the admin login with MFA and a strong password.

30/08/2026

Hit with ransomware and your files are locked. Do you pay? Before paying: it doesn't guarantee you get your files back, and in some cases it can break the law. Start with your backups instead. If you can restore yourself, you may not need to pay. Plan this before it happens.

29/08/2026

Don't let your router or firewall get old. These devices have a shelf life, and once they stop getting security updates, your hacking risk goes up. Ask your IT for a list of your network gear and whether each piece is still supported. Anything past end of life needs replacing.

28/08/2026

The face on your video call might not be real. Deepfakes can now fake a familiar face and voice live, and people have been talked into wiring out fortunes. If someone on a call pushes you to move money fast, verify another way first. Call them back on a number you already have.

27/08/2026

You're probably holding way more customer data than you need: old card numbers, files from clients who left years ago. If you don't need it, it's just data for a hacker to steal. Delete what you've no reason to keep, old payment details first. You can't lose what you don't have.

26/08/2026

Attackers don't always need your password. They click 'forgot password' and reset it through your recovery email or security questions, and those answers are often on your social media. Lock down your recovery email with MFA, and make up fake answers to security questions.

25/08/2026

From August 2nd 2026, the EU requires AI-generated content to be labeled, and it can apply even outside Europe if you have EU customers. If you use AI for images, video, or text the public sees, you might need to flag it. Worth a quick chat with whoever handles your legal side.

This code of practice supports compliance with the AI Act transparency obligations related to marking and labelling of AI-generated content.

24/08/2026

Found a USB stick in the parking lot? Don't plug it in to see what's on it. A dodgy USB drive can install malware the second it's connected, or even act like a keyboard and type commands itself. If you didn't buy it, it goes in the bin, not into your laptop.