Oakland Solutions LLC

08/15/2026

On open wifi at a hotel or cafe, someone on the same network can capture what your team sends, or set up a fake hotspot. Use a VPN on any device on public wifi, or better, use your phone's hotspot for anything sensitive. And turn off 'auto-connect to open networks.

08/14/2026

Think about everyone outside your company who still has a login to your systems: the web developer from two years ago, an old freelancer, the bookkeeper who left. A lot of those accounts are still active. List them, turn off what's not needed, and give each one its own login.

08/13/2026

A vendor called Klue got breached, and dozens of companies lost their Salesforce data because of it, including LastPass. Every app you connect to your CRM or email holds a key to your data. Review your connected apps today and remove anything you don't recognize or no longer use.

Salesforce disabled Klue Battlecards integration after attackers used compromised OAuth tokens to access customer CRM data via connected apps.

08/12/2026

Someone calls your IT, says they're locked out, sounds friendly and rushed. It's an attacker, and that's how big breaches start. Make one rule: no password or MFA reset on a phone call alone. Call the person back on a number you already have. Verifying takes 30 seconds.

08/11/2026

Some of your files might be open to anyone on the internet with the link. 'Anyone with the link' sharing is easy, but that link can be forwarded or copied anywhere, no login needed. Share with named people instead, and check what's already open, starting with customer data.

08/10/2026

Microsoft's new Copilot Cowork runs whole multi-step tasks on its own, like sorting files and sending emails, then hands back the finished work. But it's billed by usage, so a busy team can run up the bill fast. Set spending limits before you let people loose on it.

Copilot Cowork is now generally available worldwide, bringing secure, AI-powered automation for complex enterprise tasks in Microsoft 365.

08/09/2026

When a hacker gets into your email, they often set up a hidden rule that forwards your invoices and payment emails to them. Even after you change the password, it keeps feeding them your mail. Check your inbox rules and forwarding settings. You won't spot it unless you look.

08/03/2026

Your cyber insurance might not pay out. Insurers now require MFA, real endpoint protection, tested backups, and security training, and if you claimed to have them but didn't, they can deny the claim. Read your policy's conditions now, not after an attack.

08/02/2026

Anyone can send an email that looks like it's from your company. Three DNS records stop it: SPF, DKIM, and DMARC. The catch is DMARC is often set to 'monitor only,' which watches spoofing happen without blocking it. Ask your IT provider: is ours set to reject, or just none?

08/01/2026

Many ransomware groups delete your backups before they lock your files, so paying becomes the only way out. Keep one backup copy offline with its own login, separate from your admin password, and test a restore this month. If you've never tried it, you don't know it works.

INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023 | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software vulnerabilities.