SOS Computers & Networks

10/21/2026

Microsoft recommends at least two emergency administrator accounts for Microsoft Entra, the service that controls Microsoft 365 logins. These accounts are used when the normal administrator accounts cannot sign in. They should use security keys or another sign-in method that does not depend on the same phones or apps used by the normal administrators. Store the access details securely, create an alert for every login and test the accounts at least every 90 days. We can set up and test these emergency accounts without changing how your employees normally sign in .

10/21/2026

Your people are your first line of defense. But are they ready?

Here are 10 steps to build a cyber-smart team:

• Train your team with interactive, real-world scenarios
• Encourage open communication about threats and concerns
• Test readiness with phishing simulations
• Make it personal by showing employees how security protects them too
• Lead by example from the top down
• Establish clear, easy-to-follow security guidelines
• Tailor training to each employee’s role and responsibilities
• Help everyone understand how their actions affect the whole business
• Make it easy and safe to report suspicious activity
• Recognize and reward employees who take security seriously

If any of these aren't fully in place, it’s time to close the gaps.

We’ve created a free 10-step checklist to help you build a more cyber-aware team. Message us to get your free copy.

10/20/2026

More traps don’t guarantee you’ll catch the threat.

Cybersecurity tool sprawl is one of the most common and costly mistakes businesses make.

Without the right strategy behind them, additional tools can create more problems than they solve:

• More complexity can create gaps between systems
• Alert fatigue can make real threats easier to miss
• Overlapping software can waste budget without adding protection
• Misconfigured tools can leave vulnerabilities hiding in plain sight

If you’re not confident your security environment is configured to work together effectively, we’re here to help.

Schedule a discovery call today and take a closer look at whether your tools are helping your security or getting in the way.

10/20/2026

Some newer Xfinity routers can detect movement inside a home by measuring changes in Wi-Fi signals. Comcast’s optional Wi-Fi Motion feature sends an alert through the Xfinity app when it detects movement. It does not need a camera. Comcast says it may be required to disclose information created by Wi-Fi Motion in response to a valid subpoena, court order, search warrant or other lawful legal process. It may also disclose information in limited situations involving legal proceedings, dispute resolution or emergencies when the law allows it. Read the privacy terms before enabling this or any other smart feature in an office or home office.

A new feature added to Comcast's newest routers can detect if there is motion inside your home without needing traditional motion sensors.

10/19/2026

Photos and documents can store hidden information that is not visible when you open the file. A photo may include the GPS location where it was taken and the device used to take it. Word, Excel and PowerPoint files may contain the author’s name, company information, comments and tracked changes. PDFs can contain details about who created them and which software was used. Before sending a file outside your business, inspect its metadata and remove anything the recipient does not need. Microsoft Office includes a Document Inspector for finding hidden information. For photos on Windows, open the file’s Properties and check the Details section. Inspect the exact version you are about to send.

10/19/2026

Most businesses are so focused on protecting themselves against outside threats that they overlook the risks already inside.

Insider threats can be deliberate or accidental, and they show up in more ways than many businesses realize:

• Data theft
• Sabotage
• Unauthorized access
• Negligence and human error
• Credential sharing
• Unapproved AI tool use

Recognizing these threats early is the difference between a close call and a costly breach. Message us to see how well your current setup would hold up against an insider threat.

10/18/2026

Drawing a black rectangle over words in a PDF may only hide the words from view. The text underneath can sometimes still be searched, copied or recovered. Use the redaction feature in a PDF editor. Proper redaction removes the selected information from the file instead of covering it. After saving the redacted copy, search for the removed words and try selecting and copying the covered area. Open the file in another PDF reader and check it again. Test the document before sending contracts, financial statements, legal files or records containing personal information.

10/17/2026

Do your employees know which company information they may share? A simple classification system can use three labels: Public information can be shared outside the business. Examples include published job adverts, press releases and information already on your website. Internal information is for employees and approved contractors. Examples include internal procedures, meeting notes and business reports. Confidential information needs stricter access. Examples include customer records, payroll information, bank details and legal documents. For confidential information, explain who may access it, where it may be stored, how it may be sent and when it should be deleted. Need help creating clear rules for your company information? Reach out and we’ll work through them with you.

10/16/2026

Researchers found thousands of digital keys to Amazon cloud accounts exposed online. Many of them still worked. Businesses use Amazon Web Services, or AWS, to store data and run software. Apps use access keys to connect to the data and systems stored there. Anyone who gets one of those keys may be able to access the company’s AWS account. Researchers checked 10,616 exposed keys that contained everything needed to gain access. They found that 88% still worked. Hundreds provided full administrative access. Removing the file containing a leaked key is not enough. The key itself needs to be disabled or replaced. Ask your developers and software providers how these keys are stored, checked for exposure and replaced. Using AWS but unsure how your access keys are managed? Contact us and we’ll help you review them

More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and valid.

10/16/2026

Myth: “Cybersecurity support is too expensive.”

While cybersecurity is an investment, the cost of being unprepared is much higher.

Downtime, recovery costs, lost revenue and damaged customer trust can quickly outweigh what it takes to put the right protection in place.

The goal isn’t to spend more on security. It’s to invest in the right support for your business and your risks.

What matters most to you when investing in cybersecurity: cost, coverage or peace of mind? Tell us below.