More Power Technology Group

10/12/2026

Last week, the University of Oregon hosted its 9th Oregon Cyber Resilience Summit, where a major focus was placed on third-party vendors and the cybersecurity risks they can introduce to your organization.

More Power Technology Group was proud to send three team members to attend the event, learn from industry leaders, and gain practical insights into today's evolving threat landscape. We're excited to bring that knowledge back to our local community and share valuable takeaways that can help organizations improve their security posture.

A few key themes stood out throughout the summit:
▶ Understanding and managing third-party vendor risk
▶ Developing and maintaining incident response plans
▶ Practicing response procedures before a real incident occurs
▶ Defining roles, responsibilities, and critical business processes during a cyber event

One message was repeated throughout the event: Have a plan, know the plan, and practice the plan.

Cybersecurity is no longer just an IT issue. It's a business issue that requires preparation, collaboration, and ongoing awareness. Organizations that understand their risks and regularly test their response plans are often better positioned to recover when disruptions occur.

To learn more about the Oregon Cyber Resilience Summit, visit: https://ocrs.uoregon.edu/

Photo courtesy of Oregon Cyber Resilience Summit.

10/09/2026

Not all forms of MFA offer the same level of protection.

Entering a one-time code is certainly better than using only a password, but some modern sign-in methods are designed to provide stronger protection against phishing attempts.

That's why organizations are increasingly adopting options like passkeys and other passwordless sign-in methods that make it much harder for attackers to trick users into giving away access.

For administrators and other accounts with elevated access, it's worth asking: Are we using the strongest sign-in methods available?

As with any security improvement, success comes from planning ahead. Consider device compatibility, user training, recovery options, and support needs before making the switch.

Stronger security shouldn't mean a more difficult experience.

📖 Learn more in Microsoft's authentication-strength guidance.
https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-strengths

10/08/2026

A lot of organizations are concerned about their MFA or cybersecurity policies, and for good reason. When evaluating the strength of your MFA policy, take a closer look at the accounts that don't sign in like a typical employee. For example:

A major bank thought its systems were secure, and they were. The problem came through someone they trusted. The realization came when a customer asked, "Where are the images of my deposited checks stored?"

The bank went to the app support. The app support admitted that they didn't store the images, but the developer did.

A subcontractor was compromised, giving attackers a path to a vendor account without MFA. Even though the bank wasn’t the source of the breach, it still faced the cost and reputational damage.

Cybersecurity doesn’t stop at your front door. Requiring MFA for employees, vendors, and partners helps close one of the doors attackers are looking for.

All accounts should be protected by multifactor authentication. While some accounts may power automated tasks, others serve as emergency access accounts when administrators can't log in. Both play important roles and should be reviewed carefully before any changes are made.

✅ Identify who owns these accounts
✅ Document how they authenticate
✅ Test emergency access procedures
✅ Review whether automated processes should use more appropriate identity methods

And remember: don't assume an account is safe to disable just because it has "service" in the name.

The goal is simple: create a clear list of exceptions, assign owners, and define next steps. A little planning now can prevent headaches later.

If you'd like help evaluating your environment and MFA strategy, contact MPTG to schedule a review.

📖 Read the Microsoft MFA requirements guide: https://www.morepowertech.com/2026/10/08/microsoft-mfa-requirements/

10/08/2026

We recently joined leaders from across Oregon's critical infrastructure sectors at the 2026 Dark Days Workshop, hosted by the Oregon Cybersecurity Center of Excellence (OCCoE) and the Oregon Executive Development Institute at Portland State University.

The two-day exercise brought together professionals from energy, telecommunications, water, healthcare, public safety, government, and other critical sectors to explore how organizations can communicate, collaborate, and respond during extended infrastructure disruptions and cyber-related incidents.

It raised an important question: What would happen if a cyberattack disrupted a network your organization depends on?

How would your business continue to operate without access to communications, utilities, operational systems, or critical data?

As cybersecurity threats remain active and persistent, now is a good time to evaluate your environment:
• Do you have visibility into all of your internet-connected systems?
• Are your public-facing services adequately protected against unauthorized access?
• Is your IT environment helping advance your business goals, or are aging technologies introducing unnecessary risk and limiting growth?

Events like the Dark Days Workshop reinforce an important reality: cybersecurity is no longer just an IT issue. It's a business resilience issue. Organizations that invest in visibility, preparedness, and risk reduction are better positioned to withstand disruptions and recover quickly when incidents occur.

We're committed to helping businesses understand their risks, strengthen their security posture, and prepare for whatever comes next.

https://www.oedionline.org/2026-dark-days-exercise

09/30/2026

We're excited to share that More Power Technology Group has been named a finalist in the 2026 MSP Titans of the Industry Awards for the second year in a row! This recognition reflects our team's dedication to helping organizations across the Pacific Northwest stay secure, connected, and prepared for what's next through innovative technology solutions and exceptional service.

Read our blog to learn more about this exciting milestone. We're honored by the recognition and excited for the future!
https://www.morepowertech.com/2026/09/29/msp-titans-of-the-industry-2026/

09/15/2026

A strong security program doesn't just defend against hackers or rely on technology. This month is National Insider Threat Awareness Month, and it's a good reminder that security starts with people.

Many insider incidents aren't malicious. They're often the result of human error, misunderstandings, or a lack of awareness. And then some incidents are intentional. That's why cybersecurity awareness, employee training, clear policies, and a culture of communication remain some of the most effective ways to strengthen an organization's security posture. CISA offers resources to help organizations build awareness and reduce risk.

Taking a proactive approach today and helping your team recognize potential warning signs can create a more secure, resilient, and informed workplace tomorrow. 🔒

More information about managing insider threats can be found here: https://www.cisa.gov/topics/physical-security/insider-threat-mitigation

09/11/2026

📢 Microsoft Changes Are Coming. Are You Ready?

Microsoft Publisher will be retired on October 1, 2026, and Microsoft is also moving users toward passkeys as the default sign-in method, with SMS and voice authentication being retired in February 2027.

Now is the time to:
✅ Review users relying on SMS-based MFA
✅ Start planning for passkey adoption
✅ Identify and convert important Publisher files

These changes can improve security and help avoid disruptions down the road. If you'd like help preparing your environment, our team is here to assist.

For more information, please visit our blog: https://www.morepowertech.com/2026/09/10/important-microsoft-updates/

09/11/2026

On this September 11th, we remember those we lost, honor the heroes who served, and reflect on the strength that emerges when communities come together. Their legacy continues to inspire us to support one another and stand united.

09/10/2026

Great news for the cybersecurity community. 👏

CISA is on track to hire hundreds of new employees to strengthen key operational teams, enhance support for critical infrastructure, and improve coordination across industries. At a time when cyber threats continue to evolve, investing in cybersecurity talent is a win for everyone.

https://www.cybersecuritydive.com/news/cisa-hiring-circia-anchor-nick-andersen/829980/

The agency is also working to finalize an incident-reporting regulation and set up a new industry coordination structure, its acting director said.

09/09/2026

The services our communities rely on every day, from emergency response to public works, depend on strong cybersecurity. Join CISA's "Building Resilient Communities Through Cyber Hygiene" webinar on September 24th at 10 AM PDT to learn practical ways government organizations can reduce risk, improve preparedness, and keep essential services running when it matters most.

🔗 Register today: bda776c0-03d0-4773-9026-fc8586fd087c@69c613d2-b051-4234-8ed1-fd530b70d5d3" rel="ugc" target="_blank">https://events.gcc.teams.microsoft.com/event/bda776c0-03d0-4773-9026-fc8586fd087c@69c613d2-b051-4234-8ed1-fd530b70d5d3