AllTech Systems

09/05/2026

Everyone's downloading AI tools at the moment, and scammers have caught on.

Say someone on your team wants to try a new AI app. They search for it, click the top result, and end up on a page that looks like the real company's site. They download the app. It's fake, and it steals every password saved on their computer.

The fake sites are hard to spot because they copy the real ones closely, and the link is often an ad shown above the real website in the results.

Security firms have reported a lot more of this over the past year.

Only download software by going to the company's real website yourself, not by clicking an ad or a search result. If a page asks you to install something and you're not sure it's real, don't. And it helps to agree as a team on which AI tools you use, so people aren't installing unknown ones to try them out.

09/04/2026

If someone takes over your business page, they can scam your customers using your name. Turn on two-factor authentication for every social account. Stop sharing one login and use Business Manager so each person has their own access you can remove when they leave.

09/03/2026

If your guests, staff phones and work computers are all on the same wifi, they can all reach each other. One infected laptop sits right next to the machine running your accounts. Put guests and smart devices on separate networks. Most routers do this already.

09/02/2026

Using the same password twice means a breach at some site you forgot about can get someone into your business email. Attackers take leaked passwords and try them everywhere automatically. A strong password doesn't help if you reused it. Use a password manager and turn on MFA.

09/01/2026

Google put out an emergency Chrome update in June 2026 for a flaw attackers were already using. Just visiting a bad web page is enough to get hit, no clicking needed. Click the three dots, Help, About Google Chrome, then Relaunch. Updates only take effect once you restart.

Google released security updates for 74 Chrome vulnerabilities, including CVE-2026-11645, a high-severity V8 out-of-bounds memory access flaw.

08/31/2026

Your customers are getting their answer before they ever reach your website.

Search Google for almost anything now and there's a good chance an AI-written answer sits at the top of the page. They already show up on a large share of searches, and that share keeps climbing.

When it's there, most people read it and never click through to a website at all.

That changes how people find you. Someone used to search a question your business could answer, land on your page, look around, and get in touch. Now the AI hands them the answer and they move on, and they never see you.

The businesses that get quoted inside those AI answers are getting more visits than before. So it's worth becoming the source it pulls from.

Start with your website. Make sure it answers the questions your customers ask, in plain words rather than marketing waffle, because that's what the AI picks up.

Keep your Google Business Profile filled out and correct.

And get your name onto other respected sites in your field. The more solid places that mention you, the more the AI leans on you.

If your visitors from search have been dropping and you couldn't work out why, this is a big part of it.

08/30/2026

Microsoft has installed Copilot on business computers automatically.

It's worth getting your files in order before you use it.

Copilot can see any file the person using it can already open.

In most businesses, that's a lot more than it should be.

Files get shared with "everyone" for convenience. Folders get opened up for a project and never closed again. It piles up over the years, and no one notices, because no one goes looking through it all.

Once Copilot is in the mix, people don't have to go looking. They ask a question, and it answers using anything it's allowed to see, including files that were left open to the whole company by mistake.

So before you let the team use it, get someone to check your file permissions, starting with HR and finance. People should only be able to see what they need to.

08/30/2026

If you open an email attachment that looks like an image and it asks you to log in, close it.

There's a phishing trick going around this year that hides inside picture files, and it gets past the filters most businesses rely on.

It uses a file type called SVG. It's an image format, but unlike a normal photo, it can carry code inside it.

Someone double-clicks the attachment expecting a picture. Instead it opens in their browser, runs, and sends them to a fake Microsoft login page built for their exact email.

The email system lets it through because, as far as it can tell, it's just an image. Researchers flagged a wave of these in early June.

A picture should never send you to a login screen. So if you open an attachment and it asks for your password, don't type it in.

And be careful with any image you weren't expecting, especially one ending in .svg.

People almost never send those on purpose.

Ask your IT provider to block SVG attachments. Hardly any business needs to receive them, so blocking them costs you nothing.

08/29/2026

That slow old laptop your employee is putting up with is costing you more than a new one would.

It's easy to treat a computer as something you only replace when it dies. As long as it still switches on, a new one feels like money you don't need to spend.

Every slow start-up in the morning, every wait for a file to open, every frozen call someone has to drop and rejoin is a couple of minutes gone.

It happens over and over, all day, to everyone stuck on an old machine. Add it up across a year and it's well past the price of a new laptop.

And that's before the frustration, or the fact that old machines stop getting security updates, which makes a slow computer a risky one too.

You don't have to replace everything at once. Just look at how old your team's computers are.

Around the three or four year mark is usually where a machine starts costing you more in lost time than a replacement would.

Ask your staff which computers drive them mad and they'll tell you straight away.

Your IT provider can also point out which ones are near the end of their supported life, since those tend to be both the slowest and the least safe.

08/28/2026

Whoever controls your domain name controls your whole business.

Your domain is the address behind your website and your email. It sits in an account at whatever company you registered it with, like GoDaddy.

Anyone who can log into that account can point your website and email wherever they like.

At a lot of small businesses, nobody knows who has that login. It was set up years ago by a web guy who's long gone, or it's under one staff member's personal email with a password that hasn't changed since.

If someone gets into that account, they don't need to hack anything else.

They can send your website visitors to a fake page that still shows your real address.

They can take over your email and reset the passwords on everything tied to it.

They can send your clients an invoice from your real address, and your clients will pay it, because it came from you.

So go and check who controls the account, whether it's got two-factor login switched on, and whether the domain lock is turned on, which stops anyone moving your domain elsewhere.

While you're in there, set it to auto-renew so it can't expire.