Connected Systems

05/11/2026

A photo of a receipt or contract may upload to your personal iCloud or Google Photos account automatically. Use an approved scanning app or company device for work documents. We can help you set this up.

04/11/2026

Calendar phishing

A phishing email can end up in your calendar.

Attackers are sending fake meeting invitations containing malicious links and phone numbers.

Depending on your calendar settings, the invitation may be added automatically. Even if the original email is filtered or deleted, the calendar entry can remain and show a reminder later.

The reminder might claim that a subscription has renewed, an invoice is overdue or an account needs attention.

If you don’t recognise a meeting, don't use the link or phone number inside it. Check who sent it and contact the company through its official website if you think the message could be genuine.

If unexpected appointments have started appearing in your team's calendars, reach out and we can check how external invitations are being handled.

04/11/2026

Fake desktop apps for three US payroll and HR platforms installed remote-access software that let attackers control the computer. Check with the vendor before installing software.

Fake desktop apps for US payroll platforms install hidden ScreenConnect, giving attackers control of the PCs that run company payroll.

04/11/2026

If your team can't agree where the latest price list or proposal template lives, people may be working from different copies. Keep approved documents in one shared location so everyone knows which version to use. Need help organizing them? Reach out.

04/11/2026

"My computer isn't working" gives IT very little to work with. Tell them which device you're using, what you were doing and the exact error message. If you think an account was hacked or the whole company is offline, call instead of opening a normal ticket.

04/11/2026

It's easy to assume the people who grew up with technology are the least likely to get caught out online.

But that assumption can create a blind spot.

Cyber criminals don't care how confident someone is with technology.

They care whether someone will click at the wrong moment…

04/11/2026

You know that screen that pops up when you sign into a new app with "Continue with Google" or "Continue with Microsoft"? The one that asks "allow this app to access your email?" and you click Allow without really reading it?

Turns out that click is now one of the easiest ways for someone to get into your accounts. No password needed.

Someone sets up a fake app and gets it registered with Google or Microsoft, which sounds harder than it is. They message you, usually pretending to be someone official or someone you'd trust, with a link to a "document”.

That link takes you to a real Google or Microsoft login page, not a fake one, so everything looks legit. Then it asks you to allow the app access to your account.

If you click yes, that's it. The app now has a permanent key to read your email, send messages as you, and dig through your files, all without ever touching your password.

What catches people out is what happens next. If they realise something's wrong and change their password, it doesn't help. The access the app was given doesn't depend on your password, so it keeps working.

The only fix is going into your account's security settings and manually removing that app's access.

This got serious enough that the FBI put out a public warning about it recently, which tells you it's not a rare case.

So here's something useful you can do in five minutes: Go into your Google or Microsoft account security settings right now and look at "connected apps" o

04/11/2026

Software can renew before anyone remembers the cancellation deadline. Keep the renewal date, cancellation deadline, price, license count and approver in one calendar. Review each service before the deadline. Need help building the list? Reach out

03/11/2026

There's usually one person in a business who ends up being the go-to for everything IT related, even though it was never officially their job.

They know the passwords, remember how things were set up, and always seem to have the answer when something goes wrong.

But what happens if they're not around…?

03/11/2026

Can we talk about passwords for a second?

I still can't get over how much damage a text string can do. One weak, reused, or phished password, and someone's in your email, your bank, your client files. All of it. It's wild that this is still how most businesses lock their front door.

There's a better way now, and it's called a passkey.

A passkey isn't something you type, it’s something your device holds onto for you. Think of it like a key and a lock that were made together as a matching pair. One half stays on the server (say, your email provider). The other half never leaves your phone or laptop.

When you log in, your device proves it has the right half, usually with your fingerprint, your face, or your PIN. No password ever gets typed, sent, or stored anywhere someone could steal it.

And the part I love is that passkeys are tied to the exact website they were made for. So if someone sends your team a fake login page that looks identical to the real one (a classic phishing trick) the passkey simply won't work there.

Your device checks the address behind the scenes and says "nope, wrong site" before anything can be handed over. Password managers can be tricked, but this can't in the same way.

The numbers back it up too. Companies using passkeys are seeing login success rates around 93%, compared to 63% for the old password-plus-code combo. Fewer failed logins also means fewer "I'm locked out, help" tickets landing on your IT support’s desk… reportedly over 80% fewer