TorchLight Secured & Managed It

10/16/2026

🏃‍♂️‍➡️ 👟 🎉This Sunday, our very own CEO, Nolan Garrett will be competing in the IRONMAN California 140.6 in Sacramento, CA!

🔐 Nolan, be sure to stay hydrated! It's like Patch & Vulnerability Management for athletes. 🤣 Hydration won't win the race, but dehydration can certainly end it. 🫗

Seriously though, from all of us at TorchLight, we wish you a safe competition, one hell of a good time, and of course, nothing but the BEST OF LUCK all the way to the finish line at the California State Capitol! 🏃‍♂️‍➡️ 🏛️ 🏁 🎉 👏

🎉 👏 Go TorchLight! 👏 🎉

10/13/2026

☀️ Good morning, Credit Union Leaders! ☕

Before the meetings begin, the emails pile up, and another busy day gets underway, we have something exciting we'd love to share with you!

🔐 You're Invited! Cybersecurity Leadership for Credit Union CEOs: The 9 Layers

We're hosting a special LinkedIn Live webinar designed specifically for credit union CEOs, presidents, and executive leadership teams!

Join Benjamin Ross of TorchLight Secured & Managed It as we take cybersecurity out of the server room and into the boardroom.

We'll explore the "9 Layers of Cybersecurity", how they work together to protect your credit union, and what every executive should understand about organizational readiness, emerging threats, and protecting member trust.

No technical degree required. Just practical, engaging insights to help you ask better questions, make more informed decisions, and lead with confidence.

☕ So grab that second cup of coffee, take a look at your calendar, and make some room for a conversation we're genuinely excited to share with you!

We'd love to see you there!

👉 Register for our upcoming LinkedIn Live webinar:
https://www.linkedin.com/events/7513732212467625984?viewAsMember=true

10/09/2026

🚨⚠️ A major update in the Spokane Public Schools cybersecurity incident:

SPS has now notified families that it has reason to believe student and staff data was compromised.

That's a significant shift from where this story stood just a few weeks ago.

The district is still working with third-party cybersecurity specialists to determine exactly what information was affected, how many people may be impacted, and what happens next.

We’ve updated our article with the latest verified information, the district’s October 8 notification to families, what is still unknown, and what parents, staff and local organizations should be watching for now.

This one is still very close to home for us.

Read the full update:

This one is close to home. Here’s what has been confirmed about the Spokane Public Schools security incident, what has not, and what local organizations should know.

10/07/2026

Plenty of organizations are still thinking about AI risk as "what employees type into ChatGPT".

SalesBleed showed why that view is already outdated.

In the disclosed Agentforce research, an AI agent could be influenced by information entering through an ordinary business form. The bad guy didn't need an employee password or a convincing phishing email. The real risk came from something far more fundamental: the agent already had access to valuable data and enough authority to act on what it read.

That should raise a very practical question for every organization using AI inside a CRM, Microsoft 365, research platform, workflow tool, or other business system:

"Do you actually know what your AI can access, remember, and do?"

For RIAs, that question now sits alongside the SEC's increased focus on AI supervision. But this isn't just a financial-services problem. Any organization giving AI deeper access to business data should understand the permissions and controls behind it.

We broke down what SalesBleed exposed, what the research actually showed, and what organizations should be reviewing now.

Read the full article:
https://torchlight.io/blog/ai-governance-rias-salesbleed/

If your organization is still struggling with the idea of implementing AI, or governing the AI already in use, give us a call. We're here to help.

Call now to connect with business.

10/01/2026

Some encouraging news for our Spokane community!

Spokane Public Schools has now restored PowerSchool access for staff, parents and students, and BusinessPlus is back online as well. After more than a week of manual workarounds and disruption, that 's a positive step forward for our local teachers, staff, families and students.

The forensic investigation is still ongoing, and there are important questions that haven't been answered publicly, yet. But recovery matters too, and it is good to see critical systems coming back online.

Because this is happening in our own backyard, we’ve continued updating our original article as verified information becomes available. Our goal is simple: separate what is confirmed from what is still speculation, and help our community understand what is happening without adding unnecessary noise.

We’ve updated our story here:

https://torchlight.io/blog/spokane-public-schools-cybersecurity-incident/

We’ll keep following it as the investigation continues.

This one is close to home. Here’s what has been confirmed about the Spokane Public Schools security incident, what has not, and what local organizations should know.

09/29/2026

AI-Powered Business Email Compromise Warning:

For businesses under regulatory scrutiny, business email compromise has always been a serious risk. But AI is changing what a compromised inbox can reveal and how quickly an attacker can actually act on it.

The recent EvilTokens release is a good example. Microsoft linked the service to more than 12,000 compromised inboxes, with AI helping hackers identify financial conversations, trusted relationships, payment activity, and the people inside an organization with the authority to move money.

That creates a much bigger question for leadership teams.

As AI assistants become more connected to email, documents, meetings, and business workflows, email security is no longer just an IT or cybersecurity issue. It increasingly overlaps with AI governance, identity security, permissions, and human approval.

For regulated organizations, all of these controls need to seamlessly work together.

We broke down what the EvilTokens release showed, why AI-powered business email compromise matters, and what leadership teams should be reviewing.

Read the full article:

Microsoft disrupted EvilTokens after 12,000+ inbox compromises. Learn how AI-powered business email compromise changes risk for regulated organizations.

09/23/2026

This one is very close to home.

Spokane Public Schools is investigating a network security incident that has taken certain systems offline while the district works with outside specialists.

There is still a lot we do not know.

No student-data exposure has been publicly confirmed, no attacker has been identified, and the cause hasn't been disclosed.

For Spokane-area educators, administrators and IT teams, this is worth watching closely because cybersecurity incidents can become operational problems very quickly.

TorchLight is headquartered in Liberty Lake and already supports school districts across Washington, so we will be following this one carefully.

Our goal is simple: separate what is confirmed from what is speculation and keep our local community informed as the investigation develops.

Read the full update:

This one is close to home. Here’s what has been confirmed about the Spokane Public Schools security incident, what has not, and what local organizations should know.

09/04/2026

🎉❤️🤍💙Happy Labor Day Weekend!❤️🤍💙🎉

Hackers love holidays like this. 🤣

Extended weekends, an empty office, and plenty of targets that stop monitoring when they "get away for the weekend". 🎯

With that said, drive safe, have fun with the Family, and try something new!
Enjoy your getaway from daily grind! 👀🧑‍💻

But, if you find yourself thinking about whether or not your systems are safe this weekend? You should probably reach out to us.

We take pride in giving our managed IT clients the peace of mind to enjoy their time off, and not have to think about their organization's security while they're laying on the beach, drinking Mai Thais.

You can schedule a free 30-minute meeting with a member of our team to discuss your environment and see how we can help. (LINK IN COMMENTS)

🎉❤️🤍💙Enjoy Your Labor Day Weekend!❤️🤍💙🎉

09/02/2026

If pe*******on testing or vulnerability scanning is showing up on your budget, audit list, cyber insurance questionnaire, or regulatory calendar, make sure you know what you are actually buying.

The difference is simple:

Vulnerability scanning identifies where you may be vulnerable. Pe*******on testing shows what an attacker could actually do about it.

They solve different problems, and depending on your industry, regulator, insurer, or compliance requirements, you may need one, the other, or both.

We put together a comprehensive guide for executives covering the difference, what each type of testing proves, and what to ask before approving a purchase.

Read the full article here:
https://torchlight.io/blog/pe*******on-testing-vs-vulnerability-scanning/

No hard sell, we just want you to understand the difference before you spend the money.

Vulnerability scanning finds potential weaknesses. Pe*******on testing shows what an attacker could actually do with them. Learn what regulated organizations should know before buying either service.

06/10/2026

The 2026 questionnaire is not the same as the one in 2024. The questionnaire is now an audit.

Whatever you attest to on the way in gets re-checked against forensic evidence on the way out, and the average global ransomware claim more than doubled to roughly $713,000 between 2024 and 2025.

This week’s blog post covers what actually changed, the one control that decides whether the claim pays, the business-interruption math that should worry you more than the forensic bill, and the five moves worth making before your next renewal.

If your renewal is inside the next ninety days, the question in the closer is one I would definitely benchmark against your current attestation.

TorchLight Blog Post link in the first comment.