CIT

10/19/2026

Photos and documents can contain information you don't see when you open them. That may include a photo's GPS location, the document author, comments or tracked changes. Check the metadata before sending files outside your business.

10/18/2026

Drawing a black rectangle over words in a PDF may only hide them from view. The text can still remain in the file. Use a proper redaction tool, save a new copy and test whether the hidden text can still be selected, copied or found.

10/17/2026

Give employees clear rules for handling public, internal and confidential information. Customer records, payroll data and bank details should have tighter limits on who can access, store, send or delete them.

10/16/2026

Researchers checked 10,616 Amazon Web Services access keys that had been exposed online and found 88% still worked. Hundreds gave full administrative access. A leaked key must be disabled or replaced. Deleting the file containing it isn't enough.

More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and valid.

10/15/2026

Application allowlisting blocks software that your company hasn't approved. It can stop employees from running unapproved downloads and can also block some malware. Employees still need a quick way to request legitimate software.

10/15/2026

13 October 2026 was the end of support date for Office 2021.

After that date, Word, Excel and Outlook will continue to open, but Microsoft will stop providing security updates, bug fixes and technical support.

Because the software keeps working, it can remain on company computers for months or years after support ends.

Any new security problems found in Office 2021 may be left unfixed.

Not sure whether Office 2021 is still in use? Ask us to check, and we'll talk you through the replacement options.

10/14/2026

What would happen if the only person who understands your IT was unavailable for a month? Someone else needs access to the documentation, provider contacts, renewal dates and emergency recovery steps. Choose a backup person and test the plan. We can help you document it.

10/13/2026

An external security scan shows which of your systems accept connections from the internet. Run one after changing your firewall, adding remote access or installing a new system. It can also find old services that should have been switched off. Ask us to run the scan.

10/12/2026

UK criminal records agency ACRO failed to investigate security alerts before several breaches, according to the ICO. Up to 10,920 people may have been affected. Assign someone to review every alert, escalate it and record what was checked.

Unread antivirus alerts and an unpatched content management system exposed Britain's ACRO to three separate data breaches, according to a reprimand notice.

10/11/2026

A short email send delay gives you time to cancel a message after clicking Send. It can help employees catch the wrong recipient or attachment before payroll records, contracts or customer information leave the company.