AsystYOU Technology

09/22/2026

MFA isn't bulletproof. Google's June 2026 advisory warns attackers build fake login pages that pass your password and MFA code through to the real site, stealing your session. Use passkeys for important accounts, and never log in through an emailed link.

An overview from Google’s Trust & Safety teams on the most recent online scam trends.

09/19/2026

You search for software or your bank login and the top result is a paid ad. It looks right, but it's a fake site that installs malware or steals your login. Skip the ads and click the real result below, or type the address yourself. Only download software from the official site.

09/17/2026

Malware still arrives as an email attachment someone opens without thinking. Be wary of .exe, .msi, .scr, scripts like .js or .bat, disk images like .iso, and any Office file asking you to enable macros. Unexpected attachment? Check with the sender another way before opening it.

09/15/2026

People reported losing $3.5 billion to imposter scams in 2025, per the FTC. That's someone pretending to be your bank, a supplier or your boss to get money moved. Never act on an out-of-the-blue message. Call them back on a number you already have.

New data from the Federal Trade Commission reveal that people reported losing a staggering $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020.

09/12/2026

Anyone with your meeting link can walk into your client call. In Zoom, Teams or Meet, turn on a waiting room so you approve who joins, add a passcode, lock the meeting once everyone's in, and limit screen sharing to the host. Don't post meeting links publicly.

09/10/2026

The accounts you set up for a new starter on day one tend to stick around for years. Give them their own login, not a shared one. Give access to only what their job needs. Turn on MFA from the first login. It's easy to add access later and hard to take it back.

09/08/2026

Police shut down SocGholish in June 2026, the fake 'your browser is out of date' pop-ups that infected thousands of businesses. They seized 106 servers and cleaned 15,000 hacked sites. The trick will come back, so teach your team: a real update never comes from a website pop-up.

SocGholish, an operation that's been delivering malware to users via fake software updates, has suffered a major blow.

09/05/2026

That contract you emailed is sitting in someone else's inbox forever, and it can be forwarded to anyone. For anything sensitive, share a link from OneDrive, Google Drive or Dropbox that only the named person can open, set it to expire, and switch it off when they're done.

09/03/2026

If your guests, staff phones and work computers are all on the same wifi, they can all reach each other. One infected laptop sits right next to the machine running your accounts. Put guests and smart devices on separate networks. Most routers do this already.

09/01/2026

Google put out an emergency Chrome update in June 2026 for a flaw attackers were already using. Just visiting a bad web page is enough to get hit, no clicking needed. Click the three dots, Help, About Google Chrome, then Relaunch. Updates only take effect once you restart.

Google released security updates for 74 Chrome vulnerabilities, including CVE-2026-11645, a high-severity V8 out-of-bounds memory access flaw.