Blue Footprint Ltd

31/08/2026

The face on your video call might not be real. Deepfakes can now fake a familiar face and voice live, and people have been talked into wiring out fortunes. If someone on a call pushes you to move money fast, verify another way first. Call them back on a number you already have.

31/08/2026

You're probably holding way more customer data than you need: old card numbers, files from clients who left years ago. If you don't need it, it's just data for a hacker to steal. Delete what you've no reason to keep, old payment details first. You can't lose what you don't have.

28/08/2026

Attackers don't always need your password. They click 'forgot password' and reset it through your recovery email or security questions, and those answers are often on your social media. Lock down your recovery email with MFA, and make up fake answers to security questions.

28/08/2026

Microsoft's June updates fixed 200 security holes, some already being used by attackers. Most businesses don't install updates for weeks, and that delay is exactly when attackers strike. Set computers to update on their own, and don't forget the spare laptop or closet server.

Today is Microsoft's June 2026 Patch Tuesday, with security updates for 200 flaws, including five publicly disclosed zero-day vulnerabilities and one actively exploited in attacks.

28/08/2026

From August 2nd 2026, the EU requires AI-generated content to be labeled, and it can apply even outside Europe if you have EU customers. If you use AI for images, video, or text the public sees, you might need to flag it. Worth a quick chat with whoever handles your legal side.

This code of practice supports compliance with the AI Act transparency obligations related to marking and labelling of AI-generated content.

27/08/2026

Found a USB stick in the parking lot? Don't plug it in to see what's on it. A dodgy USB drive can install malware the second it's connected, or even act like a keyboard and type commands itself. If you didn't buy it, it goes in the bin, not into your laptop.

27/08/2026

The phone in your pocket holds the same company email and files as your laptop, but rarely gets the same care. Put a screen lock on it, leave automatic updates on, only install apps from the official store, and set up a way to wipe it remotely if it's ever lost or stolen.

27/08/2026

Microsoft 365 and Google Workspace ship with security settings switched off, and most businesses never turn them on. Ask your IT to confirm four things: legacy auth is blocked, audit logging is on, external sharing is controlled, and MFA is on for everyone, not just admins.

26/08/2026

Once-a-year security training does almost nothing. People forget it in weeks. A 5-minute reminder once a month sticks far better, especially when it uses real scams like fake 'paste this' prompts. And make it safe to report a click with no blame, so you catch attacks early.

26/08/2026

The old advice to spot a scam by its bad spelling is dead. AI now pumps out scam texts and fake websites that look perfect, right down to the logo. Judge a message by what it asks you to do. If it's rushing you to click, log in, or move money, stop. Go to the real site yourself.

Google sued Outsider operators for allegedly using Gemini AI to create phishing pages tied to 1.59M URLs and 100K+ victims.