JDCTek

09/08/2026

Police shut down SocGholish in June 2026, the fake 'your browser is out of date' pop-ups that infected thousands of businesses. They seized 106 servers and cleaned 15,000 hacked sites. The trick will come back, so teach your team: a real update never comes from a website pop-up.

SocGholish, an operation that's been delivering malware to users via fake software updates, has suffered a major blow.

09/07/2026

Your IT person's admin account can change almost everything in your business. If they're logged into it while reading email or browsing, one bad click hands all of that over. They should use a normal account day to day and only sign into admin when they need it.

09/06/2026

At least one of your team's work emails is probably already in a leaked password list. Go to haveibeenpwned.com and check. It's free. Anything that shows up, change that password now and anywhere else you reused it. Then ask your IT provider about dark web monitoring.

09/05/2026

That contract you emailed is sitting in someone else's inbox forever, and it can be forwarded to anyone. For anything sensitive, share a link from OneDrive, Google Drive or Dropbox that only the named person can open, set it to expire, and switch it off when they're done.

09/04/2026

If someone takes over your business page, they can scam your customers using your name. Turn on two-factor authentication for every social account. Stop sharing one login and use Business Manager so each person has their own access you can remove when they leave.

09/03/2026

If your guests, staff phones and work computers are all on the same wifi, they can all reach each other. One infected laptop sits right next to the machine running your accounts. Put guests and smart devices on separate networks. Most routers do this already.

09/02/2026

Using the same password twice means a breach at some site you forgot about can get someone into your business email. Attackers take leaked passwords and try them everywhere automatically. A strong password doesn't help if you reused it. Use a password manager and turn on MFA.

09/01/2026

Google put out an emergency Chrome update in June 2026 for a flaw attackers were already using. Just visiting a bad web page is enough to get hit, no clicking needed. Click the three dots, Help, About Google Chrome, then Relaunch. Updates only take effect once you restart.

Google released security updates for 74 Chrome vulnerabilities, including CVE-2026-11645, a high-severity V8 out-of-bounds memory access flaw.

08/31/2026

Your website is online 24/7 for anyone to poke at, and most owners never think about its security. Make sure it uses HTTPS, keep its software and plugins updated (outdated plugins are the top way sites get hacked), and lock down the admin login with MFA and a strong password.

08/30/2026

Hit with ransomware and your files are locked. Do you pay? Before paying: it doesn't guarantee you get your files back, and in some cases it can break the law. Start with your backups instead. If you can restore yourself, you may not need to pay. Plan this before it happens.