Agility Technologies NA, LLC

09/30/2026

Your bin might be the easiest place to steal your customer data from. Invoices, bank statements and employee files go in the rubbish and anyone can pull them back out. One rule: personal, financial or customer info gets shredded, not binned. Use a cross-cut shredder.

09/29/2026

Three Million Affected in Pentagon Personnel Agency Data Breach - Security Affairs

Pentagon personnel agency breach exposed data of 3 million people after attackers accessed a file-sharing server for about nine months.

09/29/2026

AI was supposed to make work simpler.

But in some businesses, people are spending more time stitching systems together than using them.

The strange part is, it can still feel productive while it’s happening…

09/29/2026

An email from a supplier says their bank details have changed. You update them, pay the invoice, and the money goes to a criminal. Sometimes the supplier's own account was hacked, so it's genuinely from them. Never change bank details without calling on a number you already have.

09/28/2026

One of the easiest ways for a scammer to succeed is to look like someone you already trust.

That's why this WhatsApp change is worth paying attention to 👀

Usernames have become more widely available, and security researchers are warning about the potential for impersonation.

The concern is that criminals could create usernames that look very similar to a real colleague, supplier, customer or business leader and use them to start conversations that appear real.

This isn't really a WhatsApp problem.

But the technology creates another opportunity for someone to pretend to be somebody else.

I think this is a good reminder to think carefully about where work conversations should happen.

If employees are discussing projects, sharing documents, approving payments or making important decisions through personal messaging apps, it’s much harder to verify who you're talking to.

That's one of the reasons platforms like Microsoft Teams exist.

They're designed for business communication, with user accounts managed by the organization, security controls in place, and much better visibility if something unusual happens.

WhatsApp has its place.

It's great for chatting with friends and family, and many businesses use it for customer communication.

But be very cautious about relying on it for internal business conversations. Especially where money, confidential information or important decisions are involved 🤐

Whatever messaging platform you use, remember that names, profile pictures and usernames prove very little on their own.

If somebody asks you to change bank details, buy gift cards, share sensitive information or approve an urgent payment, don't rely on the message itself to tell you it's genuine.

Pick up the phone, start a new Teams chat, speak to them in person or use a contact method you already know belongs to that individual.

That simple habit prevents a huge number of scams.

As criminals become better at impersonating real people, independently verifying unusual requests is becoming one of the most valuable security habits a business can develop.

👉 Does your business have a clear rule about which apps employees should use for work conversations?

09/28/2026

Researchers found the DragonForce ransomware group hiding inside normal Microsoft Teams traffic, undetected for up to two months. Their malware disguised its connection as ordinary Teams activity. Basic antivirus misses this. Ask your IT provider if what you have would catch it.

DragonForce-linked hackers used Backdoor.Turn to route C2 traffic through Microsoft Teams relay infrastructure during a U.S. firm attack.

09/27/2026

Use Microsoft 365?

You’ll want to know this 👉

Researchers uncovered a campaign that generated more than 81 million login attempts against Microsoft 365 accounts in just two weeks 😱

The attackers were taking usernames and passwords that had already been exposed in previous data breaches and testing them against business accounts, hoping people had reused the same password somewhere else.

This type of attack is known as password spraying.

Instead of trying thousands of passwords against one account, criminals try a small number of commonly used or previously stolen passwords across thousands of different accounts.

Eventually, they find someone who's still using one of them 💡

What surprised me most about this research wasn't the number of login attempts.

It was the fact that some businesses had Multi-Factor Authentication (MFA) enabled and were still compromised because it hadn't been configured to protect every type of sign-in.

MFA is the extra security step where you approve a login using an app, text message or security key.

It's one of the best ways to protect business accounts.

But like any security tool, it still needs to be set up properly ⚙️

Sure, you need to turn security features on, but it’s important to make sure they're configured correctly and reviewed regularly too.

A security setting that was appropriate two or three years ago may not be enough today.

Attackers are constantly finding new ways to work around things.

That's why regular security reviews are so valuable.

They help identify gaps before someone else does 🔎

No business owner wants to discover that an important security feature was technically enabled but wasn't protecting what they thought it was.

Because from an attacker's point of view, that's almost as useful as it not being there at all.

💭 When was the last time someone reviewed your Microsoft 365 security settings to make sure they still reflect today's threats?

09/27/2026

When did anyone last look closely at your card terminals? Skimmers get attached and terminals get swapped, and neither is obvious unless someone checks. Look at each one at the start of the day. If it looks different or loose, stop using it and call your provider.

09/26/2026

I completely understand why people pause Windows updates ✋

You're in the middle of something important and a restart appears at the worst possible moment.

The last thing you want is your computer disappearing for 20 minutes.

Microsoft’s making that a bit easier by letting you choose a specific date to pause updates until, rather than selecting fixed one-week blocks.

For short-term situations, I think that's a sensible improvement 👍

If you're traveling, delivering a presentation, or working against a deadline, it's useful to know Windows won't suddenly ask for a restart.

Where I'd be careful is turning that short pause into a long-term habit.

I still hear people say things like, "I haven't updated my PC for months because everything's working fine."

The trouble is that Windows updates aren't only for adding new features.

A large proportion of them contain security fixes ⚒️

They close vulnerabilities that have been discovered since the last update, including weaknesses that cybercriminals may already know how to exploit.

Every day you delay those updates is another day your computer may be missing important protection.

There's another practical reason to avoid falling too far behind.

Installing one month's worth of updates is straightforward.

Installing six months' worth is much more likely to be disruptive, take longer, or uncover compatibility issues that could have been dealt with gradually.

Regular updating is a bit like servicing a company vehicle.

You probably won't notice any difference immediately after it's been done. But skipping every service because "it's still running" usually catches up with you eventually 🚗

That's why I'd always see the new pause feature as exactly that... a pause.

Not an alternative to updating altogether.

If you need to delay updates for a few days because business comes first, that's reasonable.

But make sure you let them install once that busy period has passed.

Your computer will almost certainly be safer, more stable, and easier to support because of it.

🧐 When Windows tells you an update is available, do you install it quickly, or are you someone who keeps clicking "Remind me later"?

09/26/2026

You've thought about what you'd do in a cyberattack, but have you practiced it? Sit your key people down for an hour and talk it through: files encrypted Monday morning. Who do we call first? Can we reach our contacts with email down? Note what nobody could answer.