Tech River

06/18/2026

A massive data breach has affected over 13 million accounts at an edtech giant. It is a stark reminder that even trusted educational platforms are targets. When was the last time you changed your passwords or enabled two-factor authentication?

Education publishing giant McGraw-Hill has confirmed a data breach following an extortion attempt, with more than 100GB of stolen data now publicly distributed online, exposing the personal information of approximately 13.5 million users.

06/15/2026

For medical device companies just getting started, establishing a comprehensive IT environment might not seem like the most pressing concern. But waiting to ensure your meeting industry regulations until someone asks about audit readiness (or until an FDA inspector comes knocking) can be much more costly to your business than if you had just built compliant infrastructure in the first place.

Having a dedicated IT partner during the earliest stages of your business’s development can mitigate the cost of trying to retroactively meet compliance standards. Read on to learn how: → https://www.techriver.com/2026/06/12/the-case-for-a-dedicated-it-partner-in-medical-device-startups/

06/14/2026

The one Outlook rule you need to set to save yourself from awkward conversations.

It's called "delay delivery." You set it once in classic Outlook, and from that point on every email you send sits in your Outbox for a specific time (that you set) before it leaves.

If you spot a typo, realize you sent the wrong attachment, or wrote something in frustration you wish you hadn't, you have can a standard 2-minute delay to give you enough time to stop it.

Just delete the email from your Outbox before the timer runs out.

To set it up in classic Outlook:

1. Go to File > Manage Rules & Alerts

2. Click "New Rule" and pick "Apply rule on messages I send"

3. Skip past the conditions so it applies to every email

4. Check "defer delivery by a number of minutes" and set it to 2

5. Save the rule

This is better than Outlook's built-in "Recall" feature, because it works every single time.

06/12/2026

CYBERSECURITY REMINDER: Cyber threats don't take time off even when you do, so as we kick off summer, make sure your business has the coverage it needs to stay protected while you’re out of the office. Backup your data, patch systems, install any necessary system and software updates, and set up remote monitoring and critical alerts to prevent hackers from taking advantage of your absence.

Splash into summer with security measures in place that will allow you to head on vacation with real peace of mind.

06/10/2026

Microsoft is overhauling how it tests new Windows features to get feedback faster and reduce bugs in the final versions. A more stable operating system means fewer headaches for you. What is the one Windows feature you wish they would fix first?

Hello Windows Insiders, Today is the day we’re beginning to move to the new Experimental and Beta channels as announced earlier this month

06/09/2026

Pay attention to this fake “Microsoft” scam.

If an email asks you to enter a verification code on Microsoft's login page, don't enter the code.

That request is the giveaway for a phishing technique called device code phishing, which has hit over 340 organizations across the US, Canada, and Europe since February.

What makes this attack dangerous is that it bypasses Multi-Factor Authentication entirely, even strong MFA.

The attacker is tricking you into authorizing their device into your Microsoft 365 tenant.

You get an email about a shared SharePoint document, a payroll bonus PDF, or a meeting invitation from someone who looks legitimate.

The link sends you to login.microsoftonline.com, which is the real Microsoft login page.

The page asks you to type in a short verification code that was included in the email. You enter it and move on with your day.

But what you did was approve the attacker's device into your Microsoft 365 environment.

They now have a valid access token tied to your account.

They can read your email, download your files, and set up mailbox forwarding rules without ever needing your password again.

A turnkey phishing kit called EvilTokens started selling on Telegram in February 2026, which means even low-skill attackers can run these campaigns at scale.

To shut this attack down inside your business:

▶️ Block device code authentication flow in Entra ID for users who don't need it.

This protocol was designed for devices with limited input, which most office staff don't use. Open Conditional Access and create a policy that blocks device code flow by default.

▶️ Train your team. Microsoft will never email you a verification code to enter on its login page.

If a user gets an email instructing them to enter a code into login.microsoftonline.com, the email is phishing, no matter how legitimate the sender looks.

▶️ Use phishing-resistant MFA where possible, like FIDO2 hardware keys or Windows Hello for Business.

Authenticator app prompts are better than nothing, but they don't protect against this specific technique.

If you don't know how to do these things, let us know and we’ll help you out.

06/04/2026

Identity is the new perimeter. Okta is now arguing that AI agents should be treated as unique identities with their own security permissions. As you add more AI tools to your office, how are you tracking who, or what, has access to your data?

Okta and Auth0 deliver flexible, secure access. Build fast with our extensible platforms for customers, workforce, and non-human identities.

06/04/2026

Hesitant to start adopting AI or unsure what role it could play at your business? Most people are, so you’re not alone.

What you might not know is that AI can work with your team to complete everyday processes such as:
1. Summarizing meeting notes
2. Drafting business communications
3. Searching internal knowledge bases for documentation
4. Improving customer service and ticket response times
5. Automating workflows and repetitive tasks

But don’t adopt AI just to say you’ve adopted AI. Know what you’re going to use it for—and make sure you have the IT infrastructure to use it securely. Read the full blog to learn more: → https://www.techriver.com/2026/05/29/the-first-5-ai-use-cases-smbs-should-actually-prioritize/

06/02/2026

Microsoft just patched 167 security flaws in its latest update. If you haven't restarted your PC today, you are leaving the door wide open for hackers. When was the last time you checked for Windows updates? Don't wait until it is too late.

Today is Microsoft's April 2026 Patch Tuesday with security updates for 167 flaws, including 2 zero-day vulnerabilities.

05/29/2026

Staff Spotlight - Chris

At Tech River, we wouldn’t be half as successful without all the work our team does both on- and off-site to keep things operational for our clients.

Building meaningful relationships is something we truly value at Tech River, and we are so thankful to Chris for embodying that value and going the extra mile to make sure our clients have the best experience possible.

Thank you, Chris, for all the work you do in the background to keep things running smoothly, and for being such a dedicated member of our team!