Yellowbox Solutions

10/08/2026

An FBI official said a North Korean IT worker had been working for a US government agency. The agency and the worker's access weren't disclosed. For remote hires, verify identity, work history and location before sending equipment or granting access.

The investigation shows that North Koreans are able to infiltrate government agencies, as well as private organizations and crypto exchanges.

10/06/2026

Your out-of-office reply shouldn't tell strangers where you are, which clients you're working with or who is covering for you. People outside your company only need to know when you'll reply and how to contact the business if it's urgent.

10/06/2026

Your company should control the main admin account for its accounting software, CRM and file storage. Use a company email address, give access to at least two trusted people, and keep the billing and recovery details current. Need help checking? Contact us.

10/05/2026

Emailing the same message to several customers? Put their addresses in BCC so they can't see each other's details or send a reply to the whole list. Use an email marketing platform for newsletters or larger groups.

10/04/2026

Don't trust hotel Wi-Fi. It can be compromised even when you've joined the correct network.

Microsoft has found attackers taking control of the systems used for Wi-Fi login pages at hotels and conference venues.

Once the login system has been compromised, guests can be redirected to a fake Microsoft 365 sign-in page or shown a fake browser update that installs malware.

The timing makes the request believable. You've just connected, the hotel page opens and it says an update is needed before you can continue.

Checking the network name with reception won't help because the hotel's real Wi-Fi is involved.

Use your phone's hotspot for work whenever possible. If you have to use hotel Wi-Fi, never enter your work password into the hotel registration page.

And if the page asks you to download an update, certificate or security tool, disconnect. Joining Wi-Fi shouldn't require you to install anything.

If your staff travel with work laptops, send us a message before their next trip. We'll make sure the devices are properly protected.

10/04/2026

Google Sheets can now turn spreadsheet data into a dashboard, project board or other visual layout. The new Canvas feature updates when the spreadsheet changes, and edits made in Canvas update the sheet. It's initially available on selected paid plans.

Sheets canvas turns data into interactive dashboards, custom study trackers, seating charts, and more, all with a simple prompt.

10/03/2026

A short power cut can shut down your server, firewall or network equipment. A UPS battery gives those devices time to stay on or shut down safely. Ask your IT provider which equipment has power protection and when the batteries were last tested.

10/02/2026

Check what people outside your company can see on your work calendar. Meeting titles may reveal client names, projects, interviews or travel plans. External users usually only need to see whether you're free or busy.

10/01/2026

RingCentral says a social engineering campaign led to a breach affecting about 1.6 million accounts. Names, email addresses, phone numbers and physical addresses were exposed. If someone contacts you about your account, call RingCentral on its official support number.

The ShinyHunters extortion group stole personal information from 1.6 million RingCentral accounts after hacking the company in July, according to the data breach notification service Have I Been Pwned.

09/30/2026

Your bin might be the easiest place to steal your customer data from. Invoices, bank statements and employee files go in the rubbish and anyone can pull them back out. One rule: personal, financial or customer info gets shredded, not binned. Use a cross-cut shredder.