Vudu Consulting

Vudu Consulting We’re technology wizards providing supernatural IT solutions that transform businesses. We’re a digital transformation company.

Vudu is not a traditional IT company, and we focus on much more than just managed services. We believe through the analytical and predictive power of data, we can help you empower employees, engage customers, optimize operations, and transform products. We like to do things a little differently. We aren’t afraid to explore new ideas and take risks that push us and our clients out of our comfort zone and toward something better. As our name–Vudu–implies, we believe that good IT is like magic, with the ability to transform businesses.

The laptop is returned and email is disabled—but does a former employee still have your company cellular line on their p...
09/17/2026

The laptop is returned and email is disabled—but does a former employee still have your company cellular line on their personal phone? 📱🛑

With the rise of remote work and BYOD, digital eSIMs make provisioning cellular data instant and easy. But because there is no physical card to collect when an employee leaves, company-paid eSIM profiles are easily overlooked during offboarding.

Leaving a company eSIM active isn't just a silent billing drain—if that number is still tied to account recovery or SMS 2FA, it creates a real security risk.

Learn how to close the eSIM offboarding gap by integrating digital cellular revocation directly into your IT offboarding checklist.



www.vuduconsulting.com/blog/revoking-digital-cellular-profiles

How many forgotten third-party apps still have standing access to your company's Google Workspace? 🔐👀Every time an emplo...
09/10/2026

How many forgotten third-party apps still have standing access to your company's Google Workspace? 🔐👀

Every time an employee clicks "Sign in with Google" to skip creating a password, that app gets permission to read emails, view Drive files, or access calendars.

In fact, Material Security's 2026 OAuth Risk Report found as many as 13,768 OAuth grants in a single Google Workspace environment—with nearly 47% going unused for 90+ days!

These forgotten connections turn into "orphaned OAuth access," leaving open backdoors long after an employee leaves or a free trial ends.

A quick, repeatable audit allows you to revoke stale permissions and enforce app trust levels without disrupting workflow.



www.vuduconsulting.com/blog/revoking-orphaned-oauth-access

Multi-Factor Authentication stops remote hackers—but what protects an unlocked laptop left unattended at a coworking des...
09/03/2026

Multi-Factor Authentication stops remote hackers—but what protects an unlocked laptop left unattended at a coworking desk? 💻☕

An employee steps away to grab coffee. Ten minutes later, anyone walking past that open screen inherits active sessions for email, financial portals, and client databases—no password or MFA prompt required.

This is physical session hijacking, and hybrid work environments (coworking spaces, hot-desks, and shared offices) multiply the risk.

CIS Controls recommend setting automatic OS-level inactivity locks at no more than 15 minutes (and 2 minutes for mobile).

Learn how to configure endpoint inactivity timeouts that automatically safeguard your hybrid team's active sessions.



www.vuduconsulting.com/blog/hardening-desktop-inactivity-timeouts

Your team knows not to open suspicious email attachments—but what about files uploaded directly through your website? 📄⚠...
08/27/2026

Your team knows not to open suspicious email attachments—but what about files uploaded directly through your website? 📄⚠️

Accounting firms, staffing agencies, and law practices routinely collect resumes, tax forms, and claims via web upload fields. But because standard upload buttons only check basic file extensions, interactive PDFs packed with embedded JavaScript, hidden redirects, or QR codes slip right through.

In fact, recent research shows 70% of malicious PDFs contain QR codes designed to move the attack onto mobile devices where security controls are weaker.

Because these files arrive through a process your business created, employees treat them as trustworthy paperwork—making them a dangerous blind spot.

Learn how Content Disarm & Reconstruction (CDR) and automated pre-delivery scanning can secure your intake portals.



www.vuduconsulting.com/blog/blocking-weaponized-interactive-pdfs

When a freelance designer or marketing agency finishes a project, paying the final invoice shouldn't be your last step.O...
08/20/2026

When a freelance designer or marketing agency finishes a project, paying the final invoice shouldn't be your last step.

Over time, external vendors accumulate high-level access to your CMS, domain registrar, shared drives, and social media tools. Months—or even years—after the work ends, those accounts often remain active. Third-party vendor compromises accounted for 67% of known breaches in recent research, making forgotten vendor access an open door for attackers.

A Vendor Offboarding Audit helps close these hidden security gaps:
- Audit accounts payable: Track every vendor paid for creative or web work over the past two years.
- Clean up shared logins: Replace unmonitored group accounts with named individual permissions.
- Revoke API keys & app integrations: Don't just disable dashboard logins; remove background access tokens and webhook integrations.

Stop leaving your network keys in former contractors' hands.



www.vuduconsulting.com/blog/the-vendor-offboarding-audit

Address

211 N Robinson Avenue Ste N840
Oklahoma City, OK
73102

Opening Hours

Monday 9am - 6pm
Tuesday 9am - 6pm
Wednesday 9am - 6pm
Thursday 9am - 6pm
Friday 9am - 6pm

Telephone

+18666401615

Website

Alerts

Be the first to know and let us send you an email when Vudu Consulting posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Shortcuts

Share

Category