Lighthouse I.T. Solutions

10/16/2026

🔒 Cybersecurity doesn't have to be complicated.

October is National Cybersecurity Awareness Month, and we're breaking it down into three simple steps:
🔹 Reduce: Find and patch known vulnerabilities before attackers use them.
🔹 Replace: Retire hardware and software that no longer get security updates.
🔹 Recover: Build a backup and response plan your whole team knows how to use.

📺 Watch the full video-breakdown on the Lighthouse Hub: https://hub.lighthousesol.com/r/eiu

Whether you run critical infrastructure or a growing small business, the three Rs are a practical place to start.

10/15/2026

Your network diagram should show how your internet connection, firewall, switches, wireless access points, servers and important cloud services fit together.

Keep it current and store a copy somewhere you can reach during an outage.

Need a current diagram? Contact us!

10/14/2026

An FBI official said a North Korean IT worker had been working for a US government agency...

The agency and the worker's access weren't disclosed, but it's a good reminder that for remote hires, verify identity, work history and location before sending equipment or granting access.

https://hub.lighthousesol.com/r/1y3

The investigation shows that North Koreans are able to infiltrate government agencies, as well as private organizations and crypto exchanges.

10/13/2026

Researchers checked 10,616 Amazon Web Services access keys that had been exposed online and found 88% still worked.

Hundreds gave full administrative access.

A leaked key must be disabled or replaced.
Deleting the file containing it isn't enough!

10/12/2026

Some free VPNs make money by letting other people send traffic through your internet connection.

Google recently took down a large network that used devices running apps advertised as free VPNs.

While the VPN worked, the app also allowed other customers' internet traffic to pass through the device.

On a work laptop, that traffic would appear to come from your company's public IP address. Your IP could get blocked because of activity nobody in the business carried out.

Google also found that some of this software could expose other devices on the same network.

Check which VPNs and browser extensions are installed on company devices. Staff should use the VPN provided by the business, not one they found online because it was free.

Want to know whether unapproved VPNs or proxy software are installed on your company devices? Reach out and we can check for you.

10/09/2026

🔦 It's Cybersecurity Awareness Month, and this year's theme is "Securing the Next 250."

The best way to prepare for the future is to build a strong foundation today. Our latest blog breaks down four essentials every person and business should have in place:

🔐 Strong, unique passwords
✅ Multi-factor authentication (MFA)
🎣 Phishing awareness
🔄 Timely software updates

The technology keeps changing, but the basics still protect you most. Read the full post and see how your business measures up.

👉 https://hub.lighthousesol.com/r/LDD

10/08/2026

Drawing a black rectangle over words in a PDF may only hide them from view. The text can still remain in the file.

Use a proper redaction tool, save a new copy and test whether the hidden text can still be selected, copied or found.

Did you know that as a client of Lighthouse you have access to a free, browser-based PDF multi-tool?
Check it out in the hub! https://hub.lighthousesol.com/r/ITZ

10/07/2026

RingCentral says a social engineering campaign led to a breach affecting about 1.6 million accounts. Names, email addresses, phone numbers and physical addresses were exposed. If someone contacts you about your account, call RingCentral on its official support number.
https://hub.lighthousesol.com/r/ssS

The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service Have I Been Pwned.

10/06/2026

Keep an inventory of company laptops, phones, servers and network equipment. Record each item’s model, serial number, assigned person, location, warranty and replacement date. Update it whenever equipment is bought, moved, reassigned or retired. Not up to the task right now? Don't worry, we can help build the list!

10/05/2026

Don't trust hotel Wi-Fi. It can be compromised even when you've joined the correct network.

Microsoft has found attackers taking control of the systems used for Wi-Fi login pages at hotels and conference venues.

Once the login system has been compromised, guests can be redirected to a fake Microsoft 365 sign-in page or shown a fake browser update that installs malware.

The timing makes the request believable. You've just connected, the hotel page opens and it says an update is needed before you can continue.

Checking the network name with reception won't help because the hotel's real Wi-Fi is involved.

Use your phone's hotspot for work whenever possible. If you have to use hotel Wi-Fi, never enter your work password into the hotel registration page.

And if the page asks you to download an update, certificate or security tool, disconnect. Joining Wi-Fi shouldn't require you to install anything.

If your staff travel with work laptops, send us a message before their next trip. We'll make sure the devices are properly protected.