Cyber security training once a year isn’t working

We all know how important it is to keep our people up-to-date on the latest cyber threats. After all, with cyber attacks on the rise, staying one step ahead is crucial to protect your business from potential breaches.

But here’s the thing – annual cyber security training just isn’t cutting it anymore.

Sure, it’s become a routine part of the calendar for many organisations. And it’s great that it’s happening at all. But ask any security leader, and they’ll tell you… employees find it time-consuming and uninspiring. From clicking through slides to skimming through videos at double-speed, it’s usually seen as just another box to tick.

And let’s be honest, even for those who do engage with the training, there’s little evidence it leads to real behaviour change.

That’s because the traditional approach lacks interactivity and doesn’t connect with employees on a personal level. It’s more about ticking boxes than building a culture of cyber security vigilance.

Guess what? There’s a better way. It’s all about small, regular, human-centric interventions. Think of it like the speed signs you see when you’re driving. They remind people to stop and think before they engage in risky behaviour. Just as the signs work for driving, this kind of training makes your employees more aware of what they’re clicking.

By nudging employees toward safer decisions in real-time, we can help them develop better cyber hygiene habits without overwhelming them with information overload. It’s about empowering them to make smarter choices every day.

And with the amount of Generative AI and third-party tools we’re surrounded with right now, it’s more important than ever to give employees the guidance they need to navigate potential risks. Whether it’s through real-time coaching or policy reminders, we can help employees understand the importance of safeguarding sensitive data.

So, while there may be a place for annual training, it’s time to think about using a more proactive approach to cyber security education.

This is something we can help you with. If you want to learn more, get in touch.

Read more

Copilot is bringing another productivity boost to Teams

If you’re all about doing everything you can to help your team max their productivity (who wouldn’t want that, right?), then you’re going to love what Microsoft Teams has in store for us with its latest Copilot upgrades.

Imagine, you’re mid-Teams meeting, brainstorming like there’s no tomorrow. Ideas are flying all over the place! Even the quickest note-taker among you isn’t going to remember it all.

Never mind. Copilot’s got it. It can transcribe your conversation and understand your live chat, then summarise the most valuable insights.

It doesn’t stop there. Ever wish you could hit “undo” on a chat message and reword your response? Copilot can help with that too. In fact, it can come up with a fresh message suggestion right there in the chat. That could save you lots of time – and brain power.

Copilot’s call recap tool can help with normal phone calls too. Teams Premium subscribers will benefit from handy recaps. It’s like having that personal assistant you always wished for (but you still have to make your own coffee).

Microsoft’s also made IntelliFrame the default setting for video calls. What’s that, you ask? It uses AI to identify the individual video feeds of all participants so that everyone gets their moment in the spotlight during Teams Rooms calls. It also means no more awkwardly cropped faces or disappearing attendees.

Smoother team collaboration, more insightful meetings, and video calls that look like they’re straight out of Hollywood… who doesn’t want that?!

If you’re not already maxing Teams in your business, we can help. Get in touch.

Read more

Is this the most dangerous phishing scam yet?

Is this the most dangerous phishing scam yet?

Picture this: You’re going about your day, checking your emails, when suddenly you see a message from a company you trust.

You think, “Great! That’s safe to read”. But hold on just one minute… this email is not what it seems.

It’s part of yet another scam created by cyber criminals to trick you into clicking malicious links or giving up sensitive info. It’s called “SubdoMailing,” and it’s as dangerous as it sounds.

What’s the deal?

Just like regular phishing attacks, cyber criminals pretend to be trusted brands.

But here’s how it works: These cyber criminals scour the internet for subdomains of reputable companies. You know those extra bits in a web address that come before the main domain? Such as experience.trustedbrand.com. That ‘experience’ bit is the subdomain.

They find a subdomain that the brand is no longer using and is still pointing to an external domain that’s no longer registered.

Then they buy the domain and set up the scam website.

So, you believe you’re clicking on experience.trustedbrand.com… but you have no idea it automatically redirects to scamwebsite.com.

The criminals are sending out five million emails a day targeting people in businesses just like yours.

And because these emails are coming from what seems like a legit source, they often sail right past usual security checks and land in your inbox.

Here’s our advice to keep you and your data safe and sound:

  • Be wary of any emails that seem even remotely suspicious. If something looks fishy, it probably is.
  • Before clicking on any links or downloading any attachments, take a moment to verify the sender. Look for red flags like spelling mistakes or unusual email addresses.
  • Make sure your employees understand the latest phishing tactics and know how to spot a scam. A little knowledge goes a long way in keeping your company safe.
  • Consider investing in top-notch security software to keep the cyber criminals at bay. It might seem like an extra expense, but trust us, it’s worth it.

As always, if you need help with this or any other aspect of your email security, get in touch.

Read more

The little things that make a big difference

The little things that make a big difference

Microsoft’s latest Windows 11 update has dropped, and it’s got a small change that could make a big difference to you and your team.

Microsoft has given Copilot, its handy AI assistant, a new place on the taskbar. No more hunting around for the button. Now it sits on the far right of the taskbar, in what we tech folks call the ‘system tray area’.

If Copilot isn’t your thing, no worries. You can easily remove it from the taskbar altogether. But having an AI assistant at your fingertips can be a real boost for productivity, so we’d recommend you give it a chance before giving it the boot.

Before you rush to check if your Copilot button has relocated, let’s talk details.

First off, this update has been rolling out over the last few weeks.

It’s known as Patch KB5034765 (catchy name) and isn’t just about moving buttons around. It’s also packed with important security and bug fixes, including a crucial one for Explorer.exe. This was causing some PCs to freeze up when restarting with a game controller attached.

Probably not an issue in your business, but you never know…

There was also a problem with slow announcements from Narrator, the screen reading tool. That’s been fixed.

While this Windows 11 update may seem like small fry, it’s these little tweaks that can really streamline your workflow and stop your team from being interrupted by problems while they work.

Has your business switched over to Windows 11 yet? Our team can look at your set-up and advise whether you’d benefit from upgrading, or you should stay on Windows 10.

Get in touch and ask us for a tech audit.

Read more

And the award for most common phishing scam goes to…

And the award for most common phishing scam goes to…

If there’s one thing that’s 100% certain when it comes to protecting your business data, it’s that you need to be aware of phishing emails.

First things first, what exactly is a phishing email? Picture it as a wolf in sheep’s clothing, posing as a legitimate communication to deceive unsuspecting recipients. These emails often contain malicious links, attachments, or requests for sensitive data, all disguised as a business or person you already know and trust.

And you know what they say: Knowledge is power. One of the best ways to stay safe is to stay informed. We can do that by looking at the most common phishing emails of last year.

There are three main categories of phishing themes: Major, moderate, and minor.

Major themes

The biggest category is finance-related phishing emails, making up a huge 54% of attacks. These emails often contain pretend invoices or payment requests, aiming to lure recipients into giving away financial information.

Following closely are notification phishing emails, making up 35% of attacks. These emails prey on urgency, claiming your password is about to expire or you must take some urgent action.

Moderate themes

Document and voicemail scams take centre stage here, accounting for 38% and 25% of attacks respectively. These tactics involve deceptive files or messages designed to trick you into compromising your security.

Minor themes

While less common, minor phishing themes still pose a risk to people who don’t know what to look out for. These include emails related to benefits, taxes, job applications, and property.

Why should you be concerned about phishing emails? Falling victim to these scams can have serious consequences, including financial loss, data breaches, and damage to your company’s reputation. It’s essential to educate your employees about the dangers of phishing and put in place robust cyber security measures to protect your business.

Awareness and vigilance are your best defences against phishing attacks. By staying informed, training your employees, and using strong security protocols, you can safeguard your company’s valuable assets from cyber threats. We help businesses like yours stay safe. If you’re not 100% sure you’re fully protected… let’s talk.

Read more

Bridging the trust gap between your employees and AI

Bridging the trust gap between your employees and AI

You’ve probably been considering how to harness the potential of AI to boost your company’s efficiency and productivity.

But there’s a small problem. A recent study revealed something fascinating but not entirely surprising: A trust gap when it comes to AI in the workplace.

While you see AI as a fantastic opportunity for business transformation, your employees might be sceptical and even worried about their job security.

Here’s a snapshot of the findings:

  • 62% of C-suite executives welcome AI, but only 52% of employees share the same enthusiasm.
  • 23% of employees doubt their company’s commitment to employee interests when implementing AI.
  • However, 70% of business leaders believe that AI should include human review and intervention, showing they view AI as an assistant rather than a replacement.

Now that we understand the situation, how can you introduce AI gently and reassure your employees that their roles are safe?

Start by having open and honest conversations with your employees. Explain why you’re introducing AI and how it will benefit both the company and individual roles. Show them that AI is meant to be a helping hand, not a jobs terminator.

Invest in training that helps your people acquire the skills they need to work alongside AI. Make them feel empowered by showing that it can make their jobs more interesting and valuable.

Emphasise that your AI initiatives are designed to enhance human capabilities, not replace them. Let your team know that it will handle repetitive tasks, allowing them to focus on more creative and strategic aspects of their work.

Develop clear guidelines for responsible AI use in your business. Highlight your commitment to ethical practices and ensure that employees are aware of these policies.

Involve your employees in the implementation process. Seek their input, listen to their concerns, and make them part of the solution. This shows that you value their contributions.

Encourage a culture of continuous learning. Let your employees know that they’ll have opportunities for ongoing education and development, ensuring they stay relevant and valuable in the AI-driven workplace.

Introducing AI into your workplace doesn’t have to be a cause for concern among your employees. AI is a tool for growth and innovation, not a threat to job security.

If we can help you introduce the right AI tools in the right way, get in touch.

Read more

Microsoft wants you to pay for updates

Microsoft wants you to pay for updates

Microsoft has announced that starting on 14th October 2025, they will no longer provide free support and security updates for Windows 10.

While the idea of paying for updates might raise some eyebrows, let’s put this into perspective. By 2025, Windows 10 will be a decade old, and Microsoft is likely to have introduced Windows 12. And as we know, Windows 11 is available today.

Supporting multiple old operating systems can be quite a handful, even for a tech giant like Microsoft.

2025 may seem like a way off, but it’s a good idea to start weighing up your options now. Here they are:

Option 1: Upgrade to Windows 11

Microsoft’s preferred option is for you to switch to Windows 11. It’s got some fantastic features and free updates until its end of life.

Option 2: Stick with Windows 10 and pay

You can choose to stay with Windows 10, but you’ll need to pay for security updates (no new features, though). The exact cost isn’t known yet. It’ll likely be a subscription for monthly updates.

Option 3: Stick with Windows 10 and don’t update it

Sure, you can continue using Windows 10 without paying, but this isn’t advisable. Without updates, your business’s PCs will become vulnerable to threats and security issues. And without Microsoft’s support to fix problems, even tech experts like us have nowhere to go for help. Please don’t take this option!

You’ve got until October 2025 to decide, so there’s no rush. But if you want your business to thrive this year, we’d highly recommend upgrading to Windows 11 sooner than later. You’ll immediately benefit from some features that could improve your processes and make your team’s jobs easier. 

If you’re considering the move to Windows 11, or exploring other options, we’re here to help make the transition smooth and hassle-free. Get in touch.

Read more

Are you ready for next-gen email security? (YES!)

Are you ready for next-gen email security? (YES!)

Google has unleashed a powerful new tool to make your Gmail inbox a safer and spam-free haven, and it’s called RETVec.

But what exactly is RETVec?

Well, let’s break it down in simple terms. RETVec stands for Resilient and Efficient Text Vectorizer. Fancy. In plain English, it’s a tool that makes Gmail even better at spotting annoying spam emails that try to sneak into your inbox.

Did you know that the people behind spam emails can be very smart to try to avoid detection? Some use invisible characters, something called LEET substitution (like “3xpl4in3d” instead of “explained”), and intentional typos to get past our defences. But RETVec is trained to be resilient against all these tricks.

Google explains it as mapping words or phrases to real numbers and then using these numbers for further analysis, predictions, and figuring out word similarities. In short, it’s like giving Gmail a supercharged spam radar.

How does this benefit you? Gmail’s spam detection rate shot up by an impressive 38% with RETVec on the scene. Plus, Gmail’s false positive rate dropped by nearly a fifth (that’s 19.4% fewer false alarms).

What’s the catch?

I know that some of you might be wondering if there’s a catch. Well, there’s a tiny caveat you should be aware of, especially if your business sends promotional emails.

With RETVec’s increased vigilance, some legitimate emails might get caught in the crossfire. It’s a good idea to keep an eye on your email analytics to ensure your messages reach their intended recipients.

RETVec isn’t just about better security. It’s more efficient too. Google reports that the Tensor Processing Unit (TPU) usage of the model dropped by a whopping 83%. Smaller models mean reduced computational costs and faster delivery, which is a game-changer for large-scale applications and on-device models. So, it’s a win-win situation.

Spam is a go-to weapon for cyber criminals and now RETVec can help keep us better protected. It blocks malicious emails, keeping our data safe and our inboxes clutter-free.

If you don’t use Gmail, don’t feel too left out. It’s likely we’ll see other email providers including Microsoft bringing similar protection in the future.

In the meantime, if you’d like us to review your business’s email security, get in touch.

Read more

It’s time to say goodbye to traditional passwords

It’s time to say goodbye to traditional passwords

Did you ever imagine a world where the lengthy, complicated passwords people often forget would become a thing of the past?

It seems that day might be arriving sooner than we anticipated.

Google has officially made Passkeys the default sign-in method for all personal accounts on its network, signalling the beginning of a new era in online security.

What’s a Passkey, you ask?

It’s the next big thing in internet safety. And as a business owner with staff, you should pay attention to this game-changing innovation.

Here’s everything you need to know.

What are Passkeys?

Imagine logging into your account using just a four-digit PIN or your biometric data like fingerprints or facial recognition. That’s precisely what a Passkey is.

Simple, isn’t it?

But don’t let the simplicity fool you. This new technology significantly reduces the likelihood of having your credentials stolen or your account taken over by cyber criminals.

How do Passkeys work?

Creating a Passkey is easy. Head over to Google’s official Passkeys website, create a PIN or connect your biometrics (fingerprint or face), link your smartphone, and you’re done.

Just remember, your PC needs to run at least Windows 10, or your Mac should have macOS Ventura or above. And on your phone, you need Android 9 or iOS 16.

As of now, this tech works only on Microsoft Edge, Safari, and Google Chrome browsers.

What are the benefits of Passkeys?

According to Google, 64% of people find Passkeys easier to use than traditional login methods.

Not only are they simpler and more secure, they’re also faster. Logging in with a Passkey is 40% quicker than using a regular password.

What’s next?

Google’s decision to make Passkeys the default sign-in method is just the beginning. The tech giant is already working with select partners to make this new login usable across Chrome and Android. It’s already available on Uber and eBay, with plans to expand to WhatsApp soon.

So, it might be wise to start thinking about how Passkeys can benefit your business. After all, Google could soon roll out this feature for business accounts too.

Meantime, if you’re not quite ready to embrace Passkeys, you can still opt-out. Just head to the Sign-in options page, find “Skip Password When Possible”, and toggle off the switch.

We’d recommend you give it a try and see how much easier – and more secure – it can make things. And of course, if you need any help, get in touch.

Read more

Never mind “can’t teach an old dog new tricks”…

Cyber Risdks!!

New research has uncovered an unexpected twist in the tale of cyber security risks – your tech-savvy younger employees may be your biggest vulnerability.

Shocked? Let’s dive into the details.

More than 6,500 employees across the globe were surveyed, with an almost equal representation of demographics. The results were rather alarming.

The study found that younger office workers, those 40 or under, are more likely to disregard standard password safety guidelines. Can you believe that 34% admitted to using their birth dates as passwords, compared to just 19% of those over 40?

And it doesn’t stop there.

The habit of using the same password across multiple devices was also more prevalent among younger workers, with 38% admitting to doing this.

And let’s not even get started on phishing scams. A whopping 23% of the younger demographic didn’t report the last phishing attempt they received. Their reasoning? “I didn’t think it was important”.

But surely they understand the gravity of security threats against businesses, right? Well, not quite.

While ransomware and phishing were acknowledged as critical threats by 23% and 22% of employees respectively, the overall attitude towards cyber security leaves much to be desired.

Here’s the kicker: a staggering number of those surveyed revealed that their organisations did NOT provide any mandatory cyber security training.

From the US (30%) to the UK (17%), Netherlands (32%), Japan (35%), India (31%), Germany (22%), France (43%), Australia (29%) and China (65%) – the numbers speak for themselves.

So, are we really to blame our young workforce when it’s clear that businesses aren’t doing enough to equip their employees with the necessary cyber security skills?

It’s high time we stopped treating cyber security as an afterthought and started investing in regular cyber awareness training for everyone in our businesses. Yes, EVERYONE. Not just the tech team or the executives, but every single employee.

At the end of the day, it’s not just about protecting your business; it’s about creating a safer digital world for us all.

We can help you do that. Get in touch.

Read more