Affinity Smart

15/08/2026

On open wifi at a hotel or cafe, someone on the same network can capture what your team sends, or set up a fake hotspot. Use a VPN on any device on public wifi, or better, use your phone's hotspot for anything sensitive. And turn off 'auto-connect to open networks.

14/08/2026

Think about everyone outside your company who still has a login to your systems: the web developer from two years ago, an old freelancer, the bookkeeper who left. A lot of those accounts are still active. List them, turn off what's not needed, and give each one its own login.

13/08/2026

A vendor called Klue got breached, and dozens of companies lost their Salesforce data because of it, including LastPass. Every app you connect to your CRM or email holds a key to your data. Review your connected apps today and remove anything you don't recognize or no longer use.

Salesforce disabled Klue Battlecards integration after attackers used compromised OAuth tokens to access customer CRM data via connected apps.

12/08/2026

Someone calls your IT, says they're locked out, sounds friendly and rushed. It's an attacker, and that's how big breaches start. Make one rule: no password or MFA reset on a phone call alone. Call the person back on a number you already have. Verifying takes 30 seconds.

11/08/2026

Some of your files might be open to anyone on the internet with the link. 'Anyone with the link' sharing is easy, but that link can be forwarded or copied anywhere, no login needed. Share with named people instead, and check what's already open, starting with customer data.

10/08/2026

Microsoft's new Copilot Cowork runs whole multi-step tasks on its own, like sorting files and sending emails, then hands back the finished work. But it's billed by usage, so a busy team can run up the bill fast. Set spending limits before you let people loose on it.

Copilot Cowork is now generally available worldwide, bringing secure, AI-powered automation for complex enterprise tasks in Microsoft 365.

09/08/2026

When a hacker gets into your email, they often set up a hidden rule that forwards your invoices and payment emails to them. Even after you change the password, it keeps feeding them your mail. Check your inbox rules and forwarding settings. You won't spot it unless you look.

08/08/2026

Most of your team probably runs their computer as an admin, and they shouldn't. Any malware that lands on an admin account can install itself and switch off security tools. As a standard user, a lot of attacks just fail. Ask your IT who has admin rights and pull them back.

07/08/2026

Attackers are hijacking Ubiquiti UniFi gear, the wifi and network kit many small offices run on. Update UniFi OS now, and get the management console off the public internet. If you can log in from anywhere in the world, so can an attacker. Not sure if you have it? Ask your IT.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added multiple Ubiquiti UniFi OS vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, warning that at least one of the flaws is now being actively exploited in the wild.

06/08/2026

Passkeys are replacing passwords, and they're ready to use now. Your device proves it's you with your fingerprint or face, so there's no password to phish or steal. Turn them on for your email and Microsoft/Google login first. Most break-ins still start with a stolen password.