Blue Shield Cyber Protection

Blue Shield Cyber Protection Protecting Alberta businesses and families from hacks, scams, and online predators.

When was the last time you checked who has administrative access to your business cloud platform?Recent security finding...
10/13/2026

When was the last time you checked who has administrative access to your business cloud platform?

Recent security findings show that attackers with high-level access can set up unauthorized authentication tools to capture passwords during normal logins. For everyday employees and business owners, these background changes can happen quietly.

This is a good reminder that cloud security requires regular maintenance. Protecting admin accounts is just as important as protecting user passwords.

Take a moment to audit your cloud administrators and review any external authentication tools connected to your systems.

Read our quick guide on locking down cloud admin accounts or reach out to review your Microsoft Entra security settings.

Security researchers developed an attack that lets hackers with privileged access register a rogue external MFA provider that steals users' passwords during legitimate login attempts.

Are you sure you know every application connected to your company's Google Workspace account? Attackers are increasingly...
10/09/2026

Are you sure you know every application connected to your company's Google Workspace account?

Attackers are increasingly using social engineering and malicious third-party apps to access cloud environments, bypassing standard login security. If an employee grants access to an unverified tool, outsiders can quietly read your company data.

Take a practical step today. Check your connected apps list and remove anything your business no longer actively uses.

Need help reviewing your cloud security? Contact Blue Shield Cyber Protection Services for a practical security posture review.

Tomorrow's webinar examines real Google Workspace breaches involving social engineering and malicious OAuth applications, from initial access through the critical first hours of incident response. Learn which security controls and response decisions can make the greatest difference.

Cybercrime tools are becoming commercialized products. A recently disrupted platform called EvilTokens allowed attackers...
10/04/2026

Cybercrime tools are becoming commercialized products. A recently disrupted platform called EvilTokens allowed attackers to compromise over 12,000 Microsoft accounts using automated kits that abused the device-code authentication flow to obtain authentication tokens despite MFA protections.

If your business relies on Microsoft 365 and has device-code authentication enabled where it is not required, your accounts could be vulnerable.

Take a few minutes to audit your Microsoft 365 settings. Disable device-code authentication when it is not required, block the device-code flow, verify the application you are authenticating to, and use phishing-resistant authentication methods like FIDO2 security keys or passkeys for your entire team.

The EvilTokens platform that compromised more than 12,000 Microsoft accounts at over 10,000 organizations has been disrupted in an effort led by Microsoft's Digital Crimes Unit (DCU).

New Windows malware called ClosedQuorum is using commercial AI models to make automated decisions after breaking into a ...
10/01/2026

New Windows malware called ClosedQuorum is using commercial AI models to make automated decisions after breaking into a computer. While the headlines sound dramatic, the practical lesson for small business owners is simple.

When attackers use automation, security incidents happen much faster. Relying on basic antivirus is no longer enough to protect your network. Businesses need endpoint security that monitors for unusual behavior and spots threats quickly after an initial compromise occurs.

Read our guide on modern endpoint security essentials for Canadian small businesses, or reach out to review if your current defenses can handle automated threats.

A new Windows malware named ClosedQuorum uses Google Gemini, DeepSeek, Qwen, and Mistral AI models to autonomously determine the actions to take during post-compromise stages of an attack.

Do you know every app and plug-in currently connected to your online store? A recent incident with BigCommerce shows why...
09/30/2026

Do you know every app and plug-in currently connected to your online store? A recent incident with BigCommerce shows why that matters. Attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts into merchant websites.

This is a good reminder that your online store is only as secure as the external tools connected to it. Even if your core systems are safe, a vendor breach can put your customer data at risk.

Make a habit of reviewing your integrations regularly. Delete any apps your business no longer uses and limit permissions for the ones you keep. Want to review your online store's third-party integrations and security posture? Reach out to Blue Shield for a practical, straightforward security assessment.

Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts into online stores.

Are people on your team using AI assistants built into their web browsers for daily tasks? A new security demonstration ...
09/29/2026

Are people on your team using AI assistants built into their web browsers for daily tasks? A new security demonstration called BragJack shows how a single malicious browser extension could hijack these AI tools to manipulate data.

This is an extension security problem at its core. As Canadian small businesses adopt more web-based tools, it is important to manage what runs on company browsers.

Treat browser extensions like any other software. Set up centralized policies to control what gets installed on your team devices.

Read our quick guide on setting up basic browser security policies for your team, or reach out to review your workspace security baseline.

BragJack, a proof-of-concept attack from Forever Security's Gal Weizman, hijacks the AI assistants in Chrome, Edge, Opera Neon, Perplexity Comet, and Claude in Chrome using one malicious extension. The Prompt Forcing technique earned over $20,000 in bounties and two CVEs.

Managing Google Workspace security can be overwhelming when you have a small team. With dozens of settings to choose fro...
09/28/2026

Managing Google Workspace security can be overwhelming when you have a small team. With dozens of settings to choose from, it is hard to know which controls actually stop account takeovers.

Our webinar looks at real-world breaches to help you figure out what matters most. Instead of trying to configure every available option, learn where to focus your limited time and resources for the best protection against business email compromise.

Join our webinar or reach out to review your current Google Workspace security baseline to ensure your foundational controls are properly configured.

Fast-growing companies face countless recommendations for securing Google Workspace, but not every control provides the same value. This webinar examines real-world breaches to explore which security controls matter most, which may be overrated, and where lean security teams should focus their resou...

Are you relying on default settings to keep malware out of Microsoft Teams? Cybercriminals often use chat messages and c...
09/26/2026

Are you relying on default settings to keep malware out of Microsoft Teams? Cybercriminals often use chat messages and collaboration tools to deliver malicious files directly to employees. Microsoft is introducing a new administrative control that lets companies block custom file extensions commonly used in attacks. Review your Microsoft 365 settings today to ensure you are restricting high-risk file types rather than assuming default protections are enough. Read our quick guide on hardening your Microsoft 365 environment, or reach out to Blue Shield to review your baseline security configurations.

Microsoft Teams will soon let administrators tweak the list of file extensions commonly associated with security threats to meet their company's security requirements.

Do you know who still has access to your company files in Microsoft 365? When projects end, sharing permissions often st...
09/25/2026

Do you know who still has access to your company files in Microsoft 365? When projects end, sharing permissions often stay active. Over time, this creates hidden risks for your business.

You do not need complicated tools to fix this. A simple habit goes a long way. Make file owners responsible for checking access lists periodically to confirm who still needs to see their documents. It is a practical way to protect your sensitive data without slowing down your team.

Learn more about how to clean up your Microsoft 365 file permissions without disrupting your team's day-to-day work.

Microsoft 365 makes sharing files easy, but access can remain long after its original purpose has ended, leaving organizations with little visibility into who can still reach sensitive data. tenfold Software explains how centralized access governance and owner-driven reviews can help identify and re...

A new malware campaign is using fake GitHub repositories to trick people into downloading unauthorized utilities and dev...
09/24/2026

A new malware campaign is using fake GitHub repositories to trick people into downloading unauthorized utilities and developer tools. This campaign spreads an information stealer called Rapuncel, which can harvest stored passwords and browser data from infected machines.

Even if your business is not a tech company, employees often download helpful tools or extensions from the internet. Unverified downloads are a significant blind spot for small businesses.

Make sure your team always verifies the official source before downloading software. Implementing endpoint controls to restrict unauthorized installations on company devices is a practical way to keep your business secure.

Review your team's software installation policies or reach out to Blue Shield to discuss practical endpoint protection strategies for your business.

 An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel.

Address

Edmonton, AB
T6M2B9

Website

Alerts

Be the first to know and let us send you an email when Blue Shield Cyber Protection posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Shortcuts

Share

Category