MoreMax Inc.

08/28/2026

Law firms: phishing attacks aren't just happening through email anymore.

Cybercriminals are increasingly using Microsoft Teams to impersonate colleagues, executives, vendors, and other trusted contacts.

The goal?

To trick employees into: ✔ Sharing sensitive information
✔ Opening malicious files
✔ Updating payment details
✔ Providing login credentials

For law firms, even a single successful attack can have serious consequences, from compromised client information to trust account fraud and business disruption.

That's why cybersecurity today is about more than spam filters and antivirus software.

Your team needs to know how to recognize suspicious messages wherever they appear, including Microsoft Teams.

The threat landscape is changing.

Your defenses should too.

If you're not sure whether your firm's Microsoft 365 environment is properly secured, it may be time for a review.

08/21/2026

As a lawyer, you probably aren't spending your day thinking about who can install software on their computer. And you shouldn't have to.

You're focused on your clients, your cases, your deadlines, and the countless responsibilities that come with running a law firm.

💭But here's a question worth asking: Can everyone in your firm install software or change security settings on their computer? If the answer is yes, your firm may be carrying more risk than necessary.

When a user has those permissions, malicious software often does too if that device is compromised. That can make it easier for an attack to disable security protections, install unwanted software, or gain a deeper foothold in your environment.

The good news? 🤠

For most attorneys and legal staff, removing those permissions doesn't change how they work day to day. Email still works. Documents open normally. Your practice management system runs as expected.

The only real difference is that software installations and system changes go through IT first.

That's not about making life more difficult.

It's about protecting client information, reducing risk, and helping your firm avoid problems that could have been prevented.

One question I encourage every law firm to ask their IT provider:

"Who in our firm can install software or make changes to security settings?"

The answer is often: more people than necessary.

Good cybersecurity isn't always about adding another tool. Sometimes it's about limiting access to only what's needed.

Small change. Meaningful reduction in risk.

08/18/2026

Here's a question every law firm should ask before turning on Copilot:

If someone in your firm asked AI for information today, are you confident it would only see what it's supposed to see?

The answer often has less to do with AI and more to do with years of accumulated file permissions.

Copilot only accesses information a user can already see. The problem is that many firms have folders, documents, and matter-related files that were shared years ago and never reviewed.

Until now, finding that information required someone to go looking for it. With AI, it's as simple as asking a question.

Before embracing Copilot, take time to review access permissions, especially for HR records, financial data, firm management documents, and confidential client information.

AI can be an incredible productivity tool for legal teams. But the firms that benefit most will be the ones that first get their information governance right.

That's not an AI project. That's a risk management decision.

Hello Georgetown Bullard Chamber Idaho Statesman

08/13/2026

Your team has probably been trained to think twice before clicking a suspicious link.

But what happens when the link is hidden inside a QR code?

Cybercriminals have figured out that QR codes can slip past many of the security checks designed to catch traditional phishing emails. And once someone scans the code, they're often taken to their phone, outside the protections they rely on at work.

We're seeing more fake emails that look legitimate. Think court notifications, document-sharing requests, client portal alerts, or messages claiming your account needs attention. The QR code is usually the bait.

Before you scan, pause.

Ask yourself: Was I expecting this? And do I trust the sender?

A few extra seconds could save your firm from a major security headache.

08/11/2026

AI note-takers are popping up in more and more law firm meetings. And they can be incredibly helpful. No one misses action items. Nobody has to scramble to take notes. Everyone gets a clean summary afterward.

But if you're talking about a client matter, case strategy, personnel issue, or firm finances, there's one question worth asking before you click "Allow."

Who's listening after the meeting ends?

Because that conversation isn't just being heard in real time. It's being recorded, stored, and processed somewhere. And depending on the platform, more people may have access to that information than you realize.

I'm not against AI note-takers. Far from it.

I just think law firms should know exactly where their information is going before inviting another participant into the room, even if that participant is a bot.

The goal isn't to avoid new technology. The goal is to make sure convenience doesn't accidentally create risk.

👉 Before your next client call, take a minute to understand what your AI meeting assistant is doing with the recording.

08/07/2026

Most law firms have a process for reviewing insurance policies each year.

But when was the last time you reviewed what would happen if your firm couldn't operate tomorrow? Not because of a hurricane or fire.

Because a critical system failed. A staff member clicked the wrong link. A ransomware attack locked your files. Or your cloud provider experienced an outage.

This is why an Annual Business Continuity Review matters.

Cyber insurance can help cover costs after an incident. But insurance doesn't keep your firm running while you're trying to restore access to client files, email, billing systems, and case information.

The firms that recover fastest aren't necessarily the firms with the best insurance policies.

They're the firms that have already answered questions like:

✅ How do we communicate with clients during an outage?

✅ Who has access to backups?

✅ How quickly can we restore critical systems?

✅ What happens if key team members are unavailable?

A continuity plan isn't about expecting disaster.

It's about making sure one bad day doesn't become a bad month.

Because your clients are counting on you to be there when they need you most.

Hello Georgetown Bullard Chamber

08/05/2026

🤔 "What's the minimum we need to do to stay compliant?"

It's a question we hear from law firms all the time.

And honestly? We get it.

Between managing cases, serving clients, and running a business, cybersecurity can feel like just another item on an already overwhelming to-do list.

But here's the thing...

The American Bar Association (ABA) has made it clear that attorneys have a responsibility to understand the technology they use and take reasonable steps to protect client information.

That doesn't mean you need to become an IT expert.

It means recognizing that protecting client data is part of protecting your clients.

We've seen firms invest in security tools but overlook simple things like staff training, vendor risks, or outdated processes. Unfortunately, cybercriminals are often looking for the easiest way in.

Instead of asking:

❌ "Are we compliant?"

Try asking:

✅ "Are we doing everything we reasonably can to protect our clients' information?"

That's a much more meaningful conversation.

At MoreMax Inc., we believe cybersecurity isn't just about compliance. It's about trust.

Because your clients trust you with their most sensitive information. We're here to help you protect it.

Hello Georgetown

07/22/2026

Most law firms invest in cybersecurity.

Far fewer take the time to check whether criminals can impersonate their firm's email domain.

We recently reviewed the domain impersonation settings of 100 law firms and the results were eye-opening.

If protecting client trust matters to your firm, this is worth a read:
👉 Read the article:

Discover the email security gaps we found in 100 law firms and how to prevent spoofing, wire fraud, and impersonation attacks.

06/26/2026

Law firms are being forced to operate like enterprise organizations, without the structure of one.

The expectations have changed.
From clients. From regulators. From insurers.
But most firms are still running on:
– informal processes
– assumed safeguards
– “we’ll figure it out if something happens”
That gap doesn’t show up day-to-day.
It shows up when you’re asked to prove you’re ready.
Most firms don’t realize the standard has changed.
Cyber insurance is just where it starts to show.

06/23/2026

This is definitely NOT AI. Yes… we still like the personal touch 🙂
Built by humans (one who actually speaks legal, by the way) for humans who bill by the hour. 😉

In a world where everything looks automated, generated, and… templated, this was done with a marker, a piece of paper, and a lot of real conversations with law firms.

Because your IT shouldn’t be generic.
It should answer questions like:
✔️Are we actually compliant… or just assuming we are?
⚖️Do we know who has access to our files?
😧Would we even know if something went wrong?
💰Downtime isn’t billable.
💻Cyber risk isn’t theoretical.
And “peace of mind” shouldn’t be a buzzword.
If this made you pause for even a second… it’s probably worth a conversation👉🏻 www.moremax.net

Bullard Chamber Idaho News 6