LANtek

09/17/2026

Our goal is simple: make technology support easier for our clients.
That's why we're investing in cross-training our engineers across both our Low Voltage and Managed Services practices. By equipping our team with a broader understanding of network infrastructure, cabling, access control, surveillance, and IT systems, we're able to identify issues more quickly and provide a more seamless support experience.
When our clients call for help, they get a team that understands the full technology ecosystem, not just one piece of it.

09/16/2026

Our team was proud to be a part of this year’s day of caring!

09/09/2026

Microsoft will never call you about a virus on your computer. Neither will Apple.
But someone will, and they'll be convincing. It starts with a pop-up saying your machine is infected, with a number to call, or a cold call from "your IT department." If you let them, they'll have you install remote-access software so they can control your screen. From there they'll show you fake problems, charge you to fix them, and sometimes install malware or go after your bank details.
A real virus warning never comes as a web pop-up with a phone number to call. Real support doesn't ring you out of the blue.
So tell your team: if a pop-up or a caller says your computer is infected and wants you to call a number, install something, or pay, it's a scam. Close the pop-up, or hang up, and if you're worried about the machine, call your own IT provider on a number you already have.

09/08/2026

Your accounting software, QuickBooks, Xero, Sage, whatever you use, is one of the most valuable targets in your business. It's connected to your bank, it moves money, and it holds payroll and customer details.
Lock it down:
▶️ Turn on MFA.
▶️ Give each person their own login, never a shared one. You want to see who did what, especially around money.
▶️ Use roles so people only get the access their job needs. Not everyone needs to be able to send payments or change bank details.
▶️ Review who has access every few months, and remove anyone who's left or changed roles. Old bookkeepers and former staff are a common gap.
▶️ Protect the email address tied to the account. If someone gets into that inbox, they can reset the accounting login.
And keep an eye on who can change payment details or approve transfers. That's exactly what attackers and dishonest insiders go after, so the fewer people who can do it, the better.

09/07/2026

You've been told to turn on MFA, and you should. But Google's June 2026 scam advisory warns that attackers have found a way past it.
The trick is called adversary-in-the-middle. You get an email that looks legit and click the link to log in. The page looks exactly like the real Microsoft or Google sign-in, because it's passing everything you type straight through to the real site. You enter your password, then your MFA code, and the attacker grabs both, plus the "you're logged in" session token. Now they're logged in as you, even with MFA on.
MFA still stops the huge majority of attacks, so keep it on. But it doesn't stop everything. For your most important accounts, use a passkey or a physical security key instead of app or text codes. Those can't be relayed to a fake site, so this attack fails. And treat any "log in to fix this" link in an email as suspect. Don't click it. Go to the site yourself in the browser and log in there.
Give your team one rule: never log into anything through a link someone sent you.
https://blog.google/innovation-and-ai/technology/safety-security/fraud-scams-advisory-june-2026/

An overview from Google’s Trust & Safety teams on the most recent online scam trends.

09/07/2026

You might have thought about what you'd do in a cyberattack, but have you ever practiced it?
That's what a tabletop exercise is for. You sit your key people down for an hour, pick a realistic scenario, and talk through exactly what everyone would do. You don't need computers, just the conversation.
Try it like this:
1. Pick a scenario. For example: "It's Monday morning, our files are encrypted, and there's a ransom note on every screen."
2. Walk through the first hour. Who do we call first? Who can authorize decisions? Where's the list of contacts, and can we reach it if email and systems are down?
3. Keep going. How do we keep serving customers? What do we tell them, and when? Do we know if we have backups we can restore from?
4. Write down every question nobody could answer. Those are your gaps.
5. Fix the gaps, and run it again in six months with a different scenario.

09/05/2026

In June 2026, security researchers found a ransomware group called DragonForce hiding its activity inside normal Microsoft Teams traffic, and it stayed undetected for one to two months.
Once inside a company's network, their malware disguised its connection to the attackers as ordinary Teams traffic, routing it through Microsoft's own Teams servers. To anyone watching the network, it looked like the company was just using Teams normally.
Attackers are good at blending in, so traffic that looks normal isn't proof you're safe. Basic antivirus, which looks for known bad files, misses this kind of thing entirely.
What catches it is security software that watches for unusual behavior rather than known viruses, often called EDR, or a managed service that monitors your systems around the clock. Ask your IT provider what you have, and whether it would catch an attacker who's already inside and staying quiet.
https://thehackernews.com/2026/06/dragonforce-hackers-abuse-microsoft.html

DragonForce-linked hackers used Backdoor.Turn to route C2 traffic through Microsoft Teams relay infrastructure during a U.S. firm attack.

09/04/2026

If people on your team work from home, their home setup is part of your security, and you can't see or control it.
Cover these with anyone working remotely:
▶️ Their home wifi router. A lot still run the default admin password printed on the sticker. Have them change it, and turn on WPA2 or WPA3 encryption.
▶️ A work device, not a personal one. Your company data shouldn't live on a shared family laptop. If that's not possible, at least keep work in a separate, protected account on the machine.
▶️ The basics on that device: a screen lock, automatic updates, and whatever security software you use in the office.
▶️ How they connect to work. A VPN or your company's cloud tools, with MFA, keep that connection protected.
You can't set this up for them, so give every remote worker a short checklist, and have your IT provider help them through it once.

09/03/2026

You Google something like "download Zoom" or your bank's login page, and the first result is a paid ad. It looks right, with the same logo and a similar web address. You click it, and you're on a fake site that either installs malware or steals your login.
This is called malvertising. Criminals buy ads that impersonate popular software and brands, and because it's the top result, plenty of people click it without checking. Google removes these when it catches them, but new ones go up all the time.
When you search for software or a login page, skip the ads at the top and click the real result below, or better, type the address you already know straight into the browser. Only download software from the company's official website, never from an ad or a random "download" site. And an ad blocker on your team's browsers cuts a lot of this off before it shows up.
If someone does download something off a search ad, treat that machine as suspect and get your IT provider to check it.

09/02/2026

Most security effort goes into keeping attackers out of your network, but a stranger walking into your office can do a lot of damage too. They can plug a device into a spare network port, walk out with a laptop, photograph what's on desks, or sit down at an unlocked computer.
The easiest way in is called tailgating: someone follows an employee through a door that locks behind them, often carrying a box or a coffee so they look like they belong. Most people hold the door open to be polite.
Get your team comfortable saying a friendly "hi, can I help you?" to anyone they don't recognize, rather than assuming someone else invited them. Have visitors sign in and get walked to where they're going, not left to wander. And make it normal to lock your screen whenever you step away from your desk, even for a minute.
None of this costs anything. It just needs your team to feel okay questioning a face they don't recognize.