Solvitnow

09/01/2026

When an AI note-taker joins your meeting and emails everyone a tidy summary, it saves real time. But that recording has to go somewhere.
It captures every word, stores it on the vendor's servers, and depending on the tool, the company may use it to train its AI. Some of these bots even auto-join meetings straight from a calendar, recording calls nobody meant to record.
They're fine to use, as long as you know who can see the recording before you let a bot sit in on a client or staff meeting.
Find out what to check first:
https://solvit.now/2026/09/01/ai-note-taker-data-privacy/

Learn how AI note-takers record, store, and share meeting data, who may have access, and how to use these tools safely in your business.

08/26/2026

Think your business is too small to be a target for cybercriminals?

According to Verizon's 2025 Data Breach Investigations Report, there were nearly 4x as many SMB breach victims as large organizations.

Small and medium-sized businesses may not always make the headlines when they're attacked, but that doesn't mean they're being overlooked.

The good news? Cybersecurity doesn't have to be overwhelming. A few well-planned changes can make a significant difference in protecting your business, your employees, and your data.

Watch the video to learn why SMBs need to take cybersecurity seriously and where to start.

08/25/2026

Passwords are the weak point in most businesses. People reuse them, write them down, and type them into fake login pages without realizing.
Passkeys fix that. You sign in with the same fingerprint, face, or PIN you use to unlock your phone, and there's no password for anyone to steal, guess, or phish.
They already work with Microsoft, Google, and Apple accounts, they're included with Microsoft 365 at no extra cost, and they're fast. Microsoft says a passkey sign-in takes about 3 seconds, against 69 for a password plus a code.
Find out whether your business should switch, and where to start
https://solvit.now/2026/08/25/passkeys-for-your-business/

Learn what passkeys are, how they protect against phishing and stolen passwords, and why your business should start using them.

08/18/2026

Your email security can probably catch a suspicious link.
A QR code is harder.
That's why scammers have started hiding their links inside QR codes. The code is just an image, so the filters that scan for bad links can't read it. And the moment someone scans it, they're on their phone, away from the protection on their work computer.
Microsoft saw QR-code phishing jump 146% in the first few months of 2026. The usual setup is a fake “scan to keep your account active” email, often with the code tucked inside a PDF.
Find out how to spot them, plus the one thing to check before you scan anything:
https://solvit.now/2026/08/18/qr-code-scams/

QR code scams can steal passwords and payment details. Learn how quishing works, what warning signs to watch for, and how to protect your...

08/11/2026

Right now, with no hacking at all, someone could send an email that looks like it came from your company.
They put your domain in the “from” line and email your clients or suppliers, asking them to pay a fake invoice or change bank details. It works because email was never built to check that senders are who they claim to be.
Three settings on your domain (SPF, DKIM, and DMARC) stop it. Most businesses have one or two set up and the third missing, or they've left DMARC on “monitor only,” so it never blocks the fakes.
Find out how to check whether your domain is protected:
https://solvit.now/2026/08/11/email-spoofing/

07/29/2026

It’s hard to hear, but small businesses are the most common ransomware target by volume of incidents.
The 10-to-50-staff range is where ransomware operations make their best return per hour.
A 22-person company can be researched in 40 minutes using public records, attacked with credentials bought for $14, and ransomed within a week.
The total attacker spend is under $100.
We wrote an example of how an attack would work from the attacker's perspective…
Including how the target is picked, the going rate for credentials, how MFA gets bypassed in 2026, and the five places the attack would have died if Microsoft 365 controls had been turned on.
https://solvit.now/2026/07/29/smb-ransomware-attacks/

Learn how ransomware attacks target small businesses and the practical security controls that can stop them before they cause costly downtime

07/15/2026

Copilot uses each user's existing Microsoft 365 permissions to find and summarize files.
Most tenants have years of accumulated sharing that nobody fully tracks: old project folders, files sent to clients that were never recalled, Teams channels that grew beyond their original members, and app consents granted years ago.
Copilot can search across all of it.
Microsoft now publishes specific guidance on cleaning this up before a Copilot rollout.
We wrote up what to check, what Copilot can return when permissions are broad, and the one question to send to your IT provider.
https://solvit.now/2026/07/15/how-to-prepare-for-a-safe-copilot-rollout/

Learn how to prepare Microsoft 365 permissions for a secure Copilot rollout by auditing oversharing, reviewing access controls, and...

07/02/2026

Your ears and eyes can be deceived by AI, but a strong process cannot. 💸 Discover how to build a deepfake-proof payment workflow that keeps your funds safe regardless of how smart the technology gets.
https://solvit.now/2026/07/01/invoice-deepfake/

07/01/2026

That urgent email from the CEO asking for a rush payment? It might be an AI deepfake. 🤖 Attackers are now cloning voices and mimicking writing styles perfectly to bypass the red flags we used to rely on. It’s time to upgrade your AP process.
https://solvit.now/2026/07/01/invoice-deepfake/

06/29/2026

Phishing has moved beyond passwords. Modern "Adversary-in-the-Middle" attacks use live proxies to grab your access in real-time. Discover how phishing-resistant identity controls like Passkeys can stop these middlemen in their tracks.
https://solvit.now/2026/06/26/adversary-in-the-middle-attacks/

Learn how Adversary-in-the-Middle (AiTM) attacks bypass traditional MFA by stealing authenticated sessions. Discover how these phishing...