Intechtel @Intechtel

Your router or firewall connects your business to the internet, and on default settings it's an easy way in. The admin password is often still the default, the firmware is out of date, and remote management may be switched on. Ask your IT provider to fix all three this week. #cy

Your team's home wifi routers are part of your security now. A lot still run the default admin password from the sticker. Have them change it, turn on WPA2 or WPA3, and work from a company device rather than the family laptop. Give every remote worker a short checklist. #cyberse

You search for software or your bank login and the top result is a paid ad. It looks right, but it's a fake site that installs malware or steals your login. Skip the ads and click the real result below, or type the address yourself. Only download software from the official site.

A stranger walks in behind your employee carrying a box, and nobody stops them. From there they can plug into a network port, take a laptop, or sit at an unlocked computer. Get your team comfortable asking 'can I help you?' and make locking your screen normal when you step away.

Malware still arrives as an email attachment someone opens without thinking. Be wary of .exe, .msi, .scr, scripts like .js or .bat, disk images like .iso, and any Office file asking you to enable macros. Unexpected attachment? Check with the sender another way before opening it.

How many people know the password to your company Instagram? If it's in a spreadsheet or a group chat, you can't see who used it and it walks out the door when someone leaves. Use a password manager with a shared vault so people can use logins without ever seeing the password. #

People reported losing $3.5 billion to imposter scams in 2025, per the FTC. That's someone pretending to be your bank, a supplier or your boss to get money moved. Never act on an out-of-the-blue message. Call them back on a number you already have. #cyber ftc.gov/news-events/ne…

If someone gets into your domain account at GoDaddy or Namecheap, they can point your website anywhere and take over your email. Put MFA on that account, turn on the domain transfer lock, and make sure it auto-renews. Businesses lose domains every year by forgetting to renew. #c

Even with MFA on, your Microsoft 365 lets someone try to log in from anywhere in the world. Conditional access rules fix that. Ask your IT provider to block sign-ins from countries you don't do business in, and block the old sign-in methods that skip MFA entirely. #cybersecurity

Anyone with your meeting link can walk into your client call. In Zoom, Teams or Meet, turn on a waiting room so you approve who joins, add a passcode, lock the meeting once everyone's in, and limit screen sharing to the host. Don't post meeting links publicly. #cybersecurity #vi

SIM swapping is when someone calls your mobile carrier, pretends to be you, and moves your number to their SIM. Now your texts go to them, including your security codes. Put a PIN on your mobile account so nobody can move your number without it. Use an app for 2FA, not texts. #c

The accounts you set up for a new starter on day one tend to stick around for years. Give them their own login, not a shared one. Give access to only what their job needs. Turn on MFA from the first login. It's easy to add access later and hard to take it back. #cybersecurity #o

Your office security camera, smart TV and video doorbell are small computers on your network, and most still have the password they came with. Change the default password on each, turn on automatic updates, and switch off remote access you don't use. #cybersecurity #IoT #network

Police shut down SocGholish in June 2026, the fake 'your browser is out of date' pop-ups that infected thousands of businesses. They seized 106 servers and cleaned 15,000 hacked sites. The trick will come back, so teach your team: a real update never comes helpnetsecurity.com/2026/06/18/law…

Your IT person's admin account can change almost everything in your business. If they're logged into it while reading email or browsing, one bad click hands all of that over. They should use a normal account day to day and only sign into admin when they need it. #cybersecurity #

At least one of your team's work emails is probably already in a leaked password list. Go to haveibeenpwned.com and check. It's free. Anything that shows up, change that password now and anywhere else you reused it. Then ask your IT provider about dark web monitoring. #cybe

That contract you emailed is sitting in someone else's inbox forever, and it can be forwarded to anyone. For anything sensitive, share a link from OneDrive, Google Drive or Dropbox that only the named person can open, set it to expire, and switch it off when they're done. #cyber

If someone takes over your business Facebook page, they can scam your customers using your name. Turn on two-factor authentication for every social account. Stop sharing one login and use Business Manager so each person has their own access you can remove when they leave. #cyber

If your guests, staff phones and work computers are all on the same wifi, they can all reach each other. One infected laptop sits right next to the machine running your accounts. Put guests and smart devices on separate networks. Most routers do this already. #cybersecurity #net

Using the same password twice means a breach at some site you forgot about can get someone into your business email. Attackers take leaked passwords and try them everywhere automatically. A strong password doesn't help if you reused it. Use a password manager and turn on MFA. #c