Griffin Technology Solutions, LLC

06/19/2026

asswords are still one of the biggest cybersecurity risks facing businesses today. They’re often reused, easily stolen, and responsible for over 80% of data breaches. Even traditional MFA can now be bypassed by modern phishing attacks.

That’s why more companies are moving toward passkeys — a faster, safer, passwordless way to log in.

Passkeys use built-in device security like Face ID, fingerprints, or Windows Hello instead of passwords, making them resistant to phishing, credential theft, and account takeovers. They also reduce password reset requests and make sign-ins faster for your team.

In our latest video, we explain how passkey migration works and why businesses are making the shift to passwordless security.

Ready to strengthen your business security and reduce login headaches? Contact Griffin Technology Solutions at [email protected] to get started.

06/18/2026

If a website ever tells you to press Windows Key + R, close the tab.

That single instruction is the giveaway for a fast-growing scam called ClickFix, which has been behind a wave of infostealer infections all year.

An infostealer is malware that scrapes every saved password, browser cookie, session token, and stored credit card...

You click a Google result that takes you to a hacked website.

A fake CAPTCHA pops up and tells you to press Windows Key + R, then Ctrl + V, then Enter to verify you're human.

The second you hit Enter, you've installed malware on your own machine.

This attack slips past most security tools because you run the command yourself.

No file was downloaded, so antivirus has nothing to scan.

The browser shows no warning.

From the operating system's perspective, you typed a command into a Windows utility, the same as any admin doing real work.

A few things you can do this week:
Tell your team that if any website prompts the user to press Win+R or paste something into the Run box, they should close the tab and report it.

Restrict PowerShell for non-IT staff using AppLocker or Windows Defender Application Control. Most office employees have no work reason to run PowerShell scripts.

Make sure your endpoint protection is doing behavioral monitoring and not just signature scanning. Microsoft Defender for Endpoint and most modern EDR tools have detection rules specifically for this attack chain.

There's no shame in falling for a fake CAPTCHA. They're designed to look real. But once your team knows the keystroke trick, this scam stops working on them.

Data protection isn’t just about prevention — it’s about preparation. Let’s make sure your systems are ready. Contact us at [email protected]

06/17/2026

Passwords are still one of the leading causes of data breaches — but businesses now have a safer alternative.

Our latest article explores how passkey migration helps organizations reduce phishing risks, improve cybersecurity, and simplify employee logins with passwordless authentication.

If your business uses Microsoft 365, Google Workspace, or cloud-based applications, you may already have the tools needed to begin transitioning away from passwords.

Read the full article here: www.griff.tech/blog/passkey-migration-houston-tx

Want help evaluating whether passkeys are right for your organization? Contact Griffin Technology Solutions at [email protected] to schedule a consultation.

06/16/2026

The latest Windows 11 updates are finally making it easier to manage your account and security settings in one place. Staying secure shouldn't be a chore for business owners. Have you explored the new account dashboard on your work PC yet?

If this article made you rethink your current safeguards, we can help evaluate and enhance them. Reach us at [email protected]

Microsoft has released Windows 11 KB5083769 and KB5082052 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features.

06/11/2026

A new phishing campaign is mimicking Google Workspace pages to steal login codes and certificates. Even tech-savvy users can be fooled by these perfect clones. Have you trained your team on how to spot the latest fake login pages?

Your data is your business. Keep it protected with expert support from Griffin Technology Solutions — [email protected]

Attackers are impersonating a Linux Foundation leader and social engineering open source developers via Slack.

06/10/2026

Most cybersecurity threats don’t start with sophisticated hackers — they start with everyday habits.

Checking personal email on a work laptop, reusing passwords, or using unapproved apps may seem harmless, but these small actions can create major security risks for businesses.

In our latest article, Griffin Technology Solutions breaks down:
✔ How personal web habits expose businesses to cyber threats
✔ Why phishing and password reuse remain top attack methods
✔ The hidden dangers of shadow IT
✔ Practical ways Houston businesses can improve cybersecurity without hurting productivity

If your company relies on cloud apps, remote work, or shared devices, this is a must-read.

Read the full article here: www.griff.tech/blog//personal-web-habits-cybersecurity-risks-houston

Need help improving your cybersecurity strategy? Contact Griffin Technology Solutions today to schedule a cybersecurity assessment and identify hidden risks before attackers do.

06/09/2026

Pay attention to this fake “Microsoft” scam.
If an email asks you to enter a verification code on Microsoft's login page, don't enter the code.

That request is the giveaway for a phishing technique called device code phishing, which has hit over 340 organizations across the US, Canada, and Europe since February.

What makes this attack dangerous is that it bypasses Multi-Factor Authentication entirely, even strong MFA.

The attacker is tricking you into authorizing their device into your Microsoft 365 tenant.

You get an email about a shared SharePoint document, a payroll bonus PDF, or a meeting invitation from someone who looks legitimate.

The link sends you to login.microsoftonline.com, which is the real Microsoft login page.

The page asks you to type in a short verification code that was included in the email. You enter it and move on with your day.

But what you did was approve the attacker's device into your Microsoft 365 environment.

They now have a valid access token tied to your account.
They can read your email, download your files, and set up mailbox forwarding rules without ever needing your password again.

A turnkey phishing kit called EvilTokens started selling on Telegram in February 2026, which means even low-skill attackers can run these campaigns at scale.

To shut this attack down inside your business:
Block device code authentication flow in Entra ID for users who don't need it.

This protocol was designed for devices with limited input, which most office staff don't use. Open Conditional Access and create a policy that blocks device code flow by default.

Train your team. Microsoft will never email you a verification code to enter on its login page.

If a user gets an email instructing them to enter a code into login.microsoftonline.com, the email is phishing, no matter how legitimate the sender looks.

Use phishing-resistant MFA where possible, like FIDO2 hardware keys or Windows Hello for Business.

Authenticator app prompts are better than nothing, but they don't protect against this specific technique.

If you don't know how to do these things, let us know and we’ll help you out, [email protected]

06/05/2026

That urgent payment request from your CEO might not be real.

AI-powered scams are becoming incredibly convincing — from perfectly written emails to cloned executive voices designed to trick finance teams into sending money fast.

Business Email Compromise (BEC) scams cost businesses more than $3 billion last year, and attackers are now using AI to make fraud even harder to detect.

So how do you protect your business?

The answer is simple: build processes AI can’t bypass.

In our latest video, we explain why every bank detail change or high-value payment should be verified through a separate, trusted channel — like a direct phone call to a known contact number.

Strong verification processes help remove the guesswork, protect your team, and keep your business secure even as AI threats continue to evolve.

Want to strengthen your cybersecurity strategy?
Contact Griffin Technology Solutions at [email protected] to learn how we can help.

06/04/2026

If you use Excel and Microsoft 365 Copilot, an upgrade from March 2026 might save you hours every week.

It's called Work IQ, and it changes how Copilot handles spreadsheets.
Before, you had to manually feed Copilot the data you wanted it to use. Copy figures from an email, paste them into Excel, then ask Copilot to clean it up.

Now, Copilot can pull context directly from your related emails, Teams chats, meetings, and files in your Microsoft tenant. It reads the source material itself.
You can do things like:

Reconcile a vendor invoice against the quoted price by pointing Copilot at the original email thread.

Update a sales forecast based on the recap of yesterday's pipeline meeting.
Reformat a messy data dump a client sent over.

To use it, you need a Microsoft 365 Copilot license and the document stored in your business tenant, not a personal OneDrive.

One note on security: Copilot can only access files the user already has permission to see.

If your SharePoint and OneDrive permissions are messy, Copilot will surface things you didn't intend to share.

Audit your file permissions before turning this loose on your team.

AI is transforming the way businesses work — faster workflows, smarter decisions, and greater productivity. Ready to see what AI can do for your organization? Connect with us at [email protected].

06/03/2026

AI-powered fraud is changing the game for cybercriminals — especially when it comes to targeting Accounts Payable teams. From realistic phishing emails to fake invoices and even cloned executive voices, today’s scams are more convincing than ever.

The good news? Strong verification processes and cybersecurity controls can dramatically reduce your risk.

In our latest article, Griffin Technology Solutions breaks down:
✔️ How AI-enhanced fraud works
✔️ Why AP teams are prime targets
✔️ The biggest red flags businesses should know
✔️ Best practices to prevent payment fraud and BEC attacks

Read the full article here: www.griff.tech/blog/ai-enhanced-fraud-targeting-accounts-payable-teams