OffSite IT

09/01/2026

Google put out an emergency Chrome update in June 2026 for a flaw attackers were already using. Just visiting a bad web page is enough to get hit, no clicking needed. Click the three dots, Help, About Google Chrome, then Relaunch. Updates only take effect once you restart.

Google released security updates for 74 Chrome vulnerabilities, including CVE-2026-11645, a high-severity V8 out-of-bounds memory access flaw.

08/31/2026

Your website is online 24/7 for anyone to poke at, and most owners never think about its security. Make sure it uses HTTPS, keep its software and plugins updated (outdated plugins are the top way sites get hacked), and lock down the admin login with MFA and a strong password.

08/31/2026

If your business is ever targeted by a cyberattack, the first hour is more important than anything you do later.

The natural instinct is to begin fixing things, but doing so frequently exacerbates the situation, such as turning off the wrong computer, deleting evidence, or emailing everyone from a hacked account.

The right steps, in the right order, are worth learning before you need them.

Learn how and where to report an attack: https://www.offsiteit.com/what-to-do-in-case-of-a-cyberattack-step-by-step/

08/30/2026

Hit with ransomware and your files are locked. Do you pay? Before paying: it doesn't guarantee you get your files back, and in some cases it can break the law. Start with your backups instead. If you can restore yourself, you may not need to pay. Plan this before it happens.

08/29/2026

Don't let your router or firewall get old. These devices have a shelf life, and once they stop getting security updates, your hacking risk goes up. Ask your IT for a list of your network gear and whether each piece is still supported. Anything past end of life needs replacing.

08/28/2026

The face on your video call might not be real. Deepfakes can now fake a familiar face and voice live, and people have been talked into wiring out fortunes. If someone on a call pushes you to move money fast, verify another way first. Call them back on a number you already have.

08/27/2026

You're probably holding way more customer data than you need: old card numbers, files from clients who left years ago. If you don't need it, it's just data for a hacker to steal. Delete what you've no reason to keep, old payment details first. You can't lose what you don't have.

08/27/2026

Passwords are the weak point in most businesses. People reuse them and type them into fake login pages without realizing.

Passkeys fix that. Instead of a password, you sign in with your fingerprint, face, or PIN, so there's nothing for a scammer to steal or trick you out of.

They already work with Microsoft, Google, and Apple, and they're included with Microsoft 365 at no extra cost.

Find out whether your business should switch, and where to start: https://www.offsiteit.com/what-are-passkeys-and-should-your-business-use-them/

08/26/2026

Attackers don't always need your password. They click 'forgot password' and reset it through your recovery email or security questions, and those answers are often on your social media. Lock down your recovery email with MFA, and make up fake answers to security questions.

08/25/2026

Still running Windows 10 on any of your computers? Those machines stopped receiving security updates in October 2025.

They keep working, so it's easy to forget about them, but every new security flaw found now never gets fixed. That makes them an easier target, and it can cause problems with your compliance and cyber insurance.

You've got three options: upgrade to Windows 11, pay for extended updates, or replace the PC.

Find out which one's right for each machine: https://www.offsiteit.com/still-using-windows-10-here-is-why-you-are-putting-your-business-at-risk/