News - IT and Cybersecurity Insights

Cybersecurity

Technology

Must-Read

Traffic cameras are collecting so much more than video of your car

July 8, 2026

•

20 min read

The Camera Isn’t Watching You Anymore

For decades, surveillance cameras recorded video.

Someone had to sit down afterward and watch it.

AI has changed that.

Today’s intelligent surveillance systems don’t just capture footage—they analyze it.

Describe what you’re looking for…

“White pickup truck with a ladder.”

“Blue SUV with a broken taillight.”

“Person wearing a red hoodie carrying a backpack.”

The system can search millions of images in seconds.

That’s a remarkable advancement for solving crimes.

It’s also one of the biggest privacy shifts we’ve experienced in decades.

AI Has Changed What Cameras Are

Many people still think of cameras as devices that simply record video.

Increasingly, they’re becoming searchable databases.

Modern AI-powered camera systems can identify vehicles by far more than a license plate.

They can recognize:

Vehicle color
Make and model
Visible damage
Roof racks
Bumper stickers
Cargo
Clothing descriptions
Direction of travel
Time and location

Instead of manually reviewing hours of footage, investigators can search using plain English descriptions.

That dramatically changes what surveillance technology is capable of.

The Double-Edged Sword

There’s no question these systems have helped solve serious crimes.

Missing persons.

Vehicle theft.

Homicides.

Amber Alerts.

Those are meaningful public safety benefits.

But like every powerful technology, the same capabilities introduce difficult questions.

Who has access?

How long is the data retained?

Who audits searches?

What happens if AI identifies the wrong vehicle?

Could someone misuse the system to monitor a former partner, a journalist, a political activist, or a business competitor?

Technology itself isn’t ethical or unethical.

How it’s governed is what matters.

The Cybersecurity Lesson

As cybersecurity professionals, we often focus on protecting data after it’s collected.

Maybe we should spend more time asking whether it needed to be collected in the first place.

Every connected camera…

Every smart sensor…

Every license plate reader…

Every facial recognition system…

Creates another database that must be secured.

History has shown us that if enough valuable data exists, someone will eventually try to abuse it.

The conversation shouldn’t be whether AI-powered surveillance is good or bad.

It should be whether the safeguards evolve as quickly as the technology itself.

Because once a surveillance network exists, rolling it back is often much harder than deploying it.

70% of all cyber attacks target small businesses, I can help protect yours.

#Cybersecurity #ArtificialIntelligence #Privacy #DataProtection #ManagedIT

Cybersecurity

Technology

Mobile-Arena

Your Phone Has Been Keeping a Diary

July 5, 2026

•

20 min read

Your Phone Has Been Keeping a Diary

Your smartphone knows where you slept last night.

Where you work.

Where you worship.

Who you visit.

What doctor you saw.

And until this week, police could sometimes ask Google for every phone that happened to be near a crime scene—even if the overwhelming majority of those people had absolutely nothing to do with the crime.

That just changed.

In a landmark 6-3 decision, the U.S. Supreme Court ruled that obtaining a person’s cellphone location history from companies like Google is a search under the Fourth Amendment. The Court held that people have a reasonable expectation of privacy in this data, even when it’s stored by a third party, and sent the case back to determine whether the specific geofence warrant met constitutional requirements.

What Is a Geofence Warrant?

Imagine a bank is robbed.

Instead of investigating a suspect, investigators draw a digital circle around the bank and ask Google:

“Show us every phone that was here between 2:00 PM and 4:00 PM.”

Google first provides anonymous device data.

Investigators narrow the list.

Then they ask Google to reveal the identities behind the devices they find interesting.

The result?

People who were simply walking by, sitting in a coffee shop, attending church, or shopping nearby can become part of a criminal investigation—even though they were never suspects.

That’s why these are often called reverse warrants. Instead of starting with a suspect and gathering evidence, investigators gather everyone’s data first and identify suspects afterward.

Why This Matters

Most people don’t realize how much information their phones continuously collect.

Your device creates an incredibly detailed record of your life.

Not just where you are.

But where you’ve been.

Every commute.

Every vacation.

Every late-night emergency room visit.

Every political rally.

Every place of worship.

Every school.

Every business meeting.

Location history is one of the most revealing forms of personal data that exists.

The Bigger Cybersecurity Lesson

As cybersecurity professionals, we spend a lot of time talking about hackers stealing data.

But we rarely stop to ask a different question:

How much data are we creating in the first place?

Every app.

Every location permission.

Every connected device.

Every cloud backup.

Every convenience feature.

All of it leaves a digital trail.

The more data that exists, the more valuable it becomes—not just to advertisers, but to criminals, investigators, and anyone else with legal or unauthorized access.

Privacy isn’t about hiding wrongdoing.

It’s about controlling who gets to know everything about your life.

The Supreme Court didn’t ban geofence warrants.

It made clear that location history deserves Fourth Amendment protection and that courts must carefully scrutinize whether these broad searches satisfy constitutional warrant requirements. That distinction could shape digital privacy for years to come.

70% of all cyber attacks target small businesses, I can help protect yours.

#Cybersecurity #Privacy #DataProtection #DigitalPrivacy #ManagedIT

Cybersecurity

Tips

Technology

The Cyber Warnings Most People Ignore

July 6, 2026

•

20 min read

The Cyber Warnings Most People Ignore

Most cyberattacks don’t begin with ransomware.

They begin with a tiny warning that someone dismisses.

A password reset email.

A strange login notification.

A phone that suddenly starts acting differently.

By the time obvious damage appears, attackers have often been inside your accounts for days—or even weeks.

Here are nine warning signs you should never ignore.

1. Password Reset Emails You Didn’t Request

If you receive password reset emails or two-factor authentication (MFA) codes that you didn’t request, someone is likely attempting to access your account.

Don’t approve unexpected MFA prompts.

Don’t ignore repeated verification requests.

Change your password immediately.

2. Login Alerts From Unknown Devices

Many online services notify you when a new device signs in.

If you don’t recognize the device or location, assume your credentials may have been compromised until you prove otherwise.

3. Your Device Suddenly Behaves Differently

Unexpected battery drain.

Random overheating.

Apps crashing.

Your screen waking up by itself.

These aren’t always signs of malware—but they’re worth investigating before assuming it’s “just a glitch.”

4. Apps You Never Installed

One unfamiliar application can be enough to compromise an entire device.

Regularly review installed apps and remove anything you don’t recognize.

5. More Spam Than Usual

A sudden increase in phishing emails, scam texts, or spam calls can indicate your information has been exposed in a recent data breach.

Attackers often begin targeting victims long before they attempt financial theft.

6. Tiny Credit Card Charges

Fraudsters frequently test stolen cards with purchases worth only a few cents or a few dollars.

Many victims ignore these transactions.

That’s exactly what criminals are hoping for.

7. Emails Already Marked as Read

If messages appear opened before you’ve read them—or friends tell you they’re receiving strange emails from your account—assume your email has been compromised until proven otherwise.

8. You’re Suddenly Locked Out

Unexpected account lockouts often mean one of two things:

Someone is trying very hard to get into your account…

Or they’ve already succeeded.

Either way, act immediately.

9. Your Streaming History Looks Strange

It may seem harmless if Netflix or Spotify starts recommending things you never watched.

But an account takeover anywhere should be treated as a warning.

People often reuse passwords across multiple websites.

One compromised account can quickly become several.

Small Warnings Become Big Incidents

The biggest cybersecurity mistake isn’t getting hacked.

It’s dismissing the warning signs that appear beforehand.

Attackers rarely announce themselves.

They quietly test credentials, observe behavior, and gather information before launching the attack that makes headlines.

Pay attention to the little things.

They often tell you the biggest story.

70% of all cyber attacks target small businesses, I can help protect yours.

#Cybersecurity #DataProtection #ManagedIT #SmallBusiness #CyberAwareness

Technology

Cybersecurity

Crypto

Caller ID Can No Longer Be Trusted

July 7, 2026

•

20 min read

Caller ID Can No Longer Be Trusted

Your phone rings.

The screen says it’s your bank.

Or your child.

Or your spouse.

Or your attorney.

But what if your phone is lying?

For years, we’ve relied on caller ID as proof of who is on the other end of the line. That assumption is no longer safe.

Scammers have become experts at spoofing phone numbers, and with AI voice cloning, they can now sound remarkably like someone you know and trust.

That’s what makes Google’s new Fake Call Detection feature one of the most interesting cybersecurity developments this year. Rather than trying to analyze what the caller is saying, it verifies whether the call is actually coming from the trusted person’s device.

A Digital Handshake

Here’s how it works:

The Silent Verification
When someone in your contacts calls using Phone by Google, their device silently sends an encrypted verification signal over RCS.
The Trust Check
If someone spoofs that person’s phone number, the verification signal is missing. Your phone quietly checks whether your contact’s actual device is placing the call.
The Warning
If the real device isn’t making the call, Android displays a warning that someone may be pretending to call from your contact’s number, giving you the chance to hang up before the conversation even begins.

This Changes the Security Model

Think about the scams we see every day.

“Mom, I’ve been in a car accident.”
“This is your bank’s fraud department.”
“Your Microsoft 365 account has been compromised.”
“This is law enforcement. You have an outstanding warrant.”

These attacks don’t succeed because someone hacked your computer.

They succeed because someone successfully hacked your trust.

For years we’ve focused on protecting devices.

The next generation of cybersecurity will focus on verifying identities.

As AI continues making voice impersonation more convincing, proving who is calling may become just as important as encrypting what they’re saying.

Google’s new feature isn’t a complete solution, but it introduces something attackers hate:

Friction.

Sometimes a five-second warning is all it takes to stop a life-changing scam.

There is one important limitation. Both parties must be using Phone by Google on Android 12 or newer for this verification to work, which means it won’t protect every call today. Google is rolling it out globally, starting with Pixel devices.

I hope this is only the beginning. As AI-powered impersonation becomes more sophisticated, we’ll need identity verification built directly into our everyday communications—not just our passwords.

70% of all cyber attacks target small businesses, I can help protect yours.

#Cybersecurity #ArtificialIntelligence #ScamPrevention #ManagedIT #DataProtection

Technology

Cybersecurity

A company that sells insurance against cyber risk just became another cyber victim.

July 9, 2026

•

20 min read

A company that sells insurance against cyber risk just became another cyber victim.

Last week, Aflac disclosed that attackers gained access to parts of its systems and potentially exposed sensitive customer information, including policy details, personal information, and financial data. The intrusion reportedly lasted for days before it was detected.

Here’s the part that should make every business pay attention.

Aflac isn’t a small company with outdated technology. It’s a sophisticated global insurer with mature security controls, dedicated security teams, and significant cybersecurity investments.

Yet the attackers reportedly succeeded using one of the oldest tactics in the book:

They targeted people.

This follows a pattern we’ve seen repeatedly over the past year, with major insurers including Allianz Life and Erie Insurance falling victim to similar social engineering campaigns.

The attackers aren’t spending weeks breaking through firewalls or exploiting obscure software vulnerabilities.

They’re impersonating employees.

They’re convincing someone to reset credentials or bypass security procedures.

In other words, they’re hacking human trust.

Technology Alone Won’t Save You

This is the uncomfortable reality many organizations still struggle to accept.

There is no amount of spending on cybersecurity tools that completely eliminates human risk.

The best endpoint protection, firewalls, MFA, SIEM platforms, and threat detection systems are incredibly valuable—but they can all be undermined if an attacker successfully manipulates a person into opening the door.

That’s why security awareness training, identity verification procedures, privileged access controls, and rapid incident detection have become just as important as the technology itself.

Cybersecurity has never been solely a technology problem.

It has always been a people problem.

And as AI makes impersonation more convincing than ever, protecting the human layer will only become more critical.

70% of all cyber attacks target small businesses, I can help protect yours.

#Cybersecurity #SocialEngineering #ManagedIT #DataProtection #SmallBusiness

Technology

Travel

Mobile-Arena

Cybersecurity

Why are navigation apps acting like social media

July 2, 2026

•

20 min read

When Navigation Apps Start Competing For Your Attention

Most drivers assume navigation apps exist for one purpose:

Getting you safely from Point A to Point B.

But what happens when your navigation app starts acting like social media?

That’s the debate emerging after reports that Waze began displaying FIFA World Cup score notifications while users were driving.

The Problem Isn’t Soccer

It’s Distraction.

Waze reportedly introduced a feature that displays live World Cup updates as pop-up alerts.

Goals.

Match results.

Team updates.

For soccer fans, that may sound fun.

For safety professionals, it raises a different question:

Why is a navigation app showing sports scores at all?

The Attention Economy Has Reached The Dashboard

Modern technology companies compete for one thing above all else:

Attention.

The longer users stay engaged, the more valuable the platform becomes.

Historically, that competition happened on:

social media
streaming platforms
websites
mobile apps

Now it’s increasingly happening inside vehicles.

And that’s where things become more complicated.

Unlike scrolling Instagram at home, driving involves real-world consequences.

Every notification competes with:

road awareness
traffic conditions
pedestrians
cyclists
other vehicles

Even a brief distraction can matter.

Human Brains Are Not Great At Multitasking

One of the biggest misconceptions in technology is that people can effectively multitask.

Research consistently shows something different.

Most people don’t multitask.

They rapidly switch attention.

Every time attention shifts from:

the road
to a notification

There is a cost.

Usually measured in fractions of seconds.

Sometimes measured in accidents.

The Bigger Cybersecurity Lesson

At first glance, this seems like a driving story.

It’s actually a human behavior story.

Cybersecurity professionals have long understood a fundamental principle:

The more information competing for attention, the easier it becomes to miss something important.

Whether it’s:

a phishing email
a fake MFA prompt
a malicious link
a dangerous road condition

Human attention remains a limited resource.

Attackers know this.

Advertisers know this.

App developers know this.

SMBs, Healthcare, Law Firms, And Schools Should Care

Many organizations struggle with the same challenge internally.

Employees are bombarded with:

emails
notifications
Teams messages
security alerts
calendar reminders
software updates

The result is often alert fatigue.

And alert fatigue leads to mistakes.

The lesson extends far beyond navigation apps.

More information isn’t always better information.

The Bigger Question

The issue isn’t whether Waze should show World Cup scores.

The bigger question is:

How much information should technology place in front of us while we’re performing critical tasks?

Because every notification asks for something valuable.

Your attention.

And attention may be one of the most important security resources we have.

Whether you’re protecting:

your vehicle
your business
your accounts
your data

The principle remains the same:

Distraction is rarely neutral.

Someone usually benefits from it.

70% of all cyber attacks target small businesses, I can help protect yours.

#CyberSecurity #DriverSafety #Technology #HumanBehavior #MSP

Mobile-Arena

Cybersecurity

Technology

Hackers are targeting your WhatsApp account

June 30, 2026

•

20 min read

Hackers Aren’t Breaking WhatsApp

They’re Breaking You.

When people hear that government officials’ Signal or WhatsApp accounts were compromised, the first assumption is usually:

“The app got hacked.”

According to the FBI, that’s not what happened.

Instead, Russian-linked cyber groups allegedly targeted the people using the apps—not the encryption protecting them.

That’s an important distinction.

Encryption Wasn’t The Weak Link

Signal and WhatsApp use end-to-end encryption to protect messages in transit.

Rather than attacking the encryption itself, investigators say the attackers focused on something much easier:

The account owner.

According to the FBI, victims were tricked into revealing:

Verification codes
Account PINs
Backup recovery keys

Once attackers obtained those credentials, they could access message histories and, in some cases, take over the accounts.

The cryptography remained secure.

The user did not.

The Backup Key Is The Real Prize

One detail in the FBI’s warning deserves far more attention than it’s getting.

The attackers weren’t just trying to steal login credentials.

They were reportedly targeting backup recovery keys.

Why does that matter?

Because a compromised recovery key may continue providing access even after someone creates a new account using the same phone number.

In other words…

Changing your phone number alone may not fully solve the problem.

That’s a reminder that recovery mechanisms are often just as important as primary authentication.

Modern Cyberattacks Rarely Begin With Malware

Many sophisticated attacks today don’t rely on exploiting software vulnerabilities.

They rely on exploiting trust.

Fake support messages.

Convincing phishing pages.

Urgent verification requests.

Modified invitation links.

The objective is simple:

Get the victim to complete the attack for you.

SMBs, Healthcare, Law Firms, And Schools Should Care

Most organizations now rely heavily on encrypted messaging for:

Executive communication
Client discussions
Legal conversations
Healthcare coordination
Incident response

Encryption protects those conversations.

But it doesn’t protect against someone voluntarily handing over account credentials.

That’s why security awareness remains just as important as encryption itself.

Where This Is Heading

For years, cybersecurity focused on protecting passwords.

Now attackers are increasingly targeting everything that surrounds them:

Recovery keys.

Authentication codes.

Session tokens.

Account recovery workflows.

The strongest encryption in the world cannot protect an account if an attacker convinces the owner to unlock the door.

As secure messaging becomes more common, we should expect attackers to spend less time trying to break the technology…

And more time trying to manipulate the people using it.

Because in cybersecurity, the easiest system to compromise is often the one between the keyboard and the chair.

70% of all cyber attacks target small businesses, I can help protect yours.

#CyberSecurity #Signal #SocialEngineering #DataProtection #MSP

Technology

Must-Read

Cybersecurity

Most people think surveillance cameras are designed to catch criminals.

June 29, 2026

•

20 min read

Your Car Is Becoming A Tracking Device

Most people think surveillance cameras are designed to catch criminals.

Increasingly, they’re designed to understand everyone else too.

Across the United States, automated license plate reader networks now capture billions of vehicle sightings every month.

The goal is to help solve crimes.

But the same technology is raising difficult questions about privacy, oversight, and how surveillance data is being used.

From License Plates To Movement Patterns

Modern vehicle surveillance systems don’t simply record a license plate.

They can also collect information such as:

time
location
vehicle make
model
color
distinctive features

Some systems now use artificial intelligence to search for vehicles using descriptions like:

“A blue pickup with a ladder rack.”

Or:

“A white SUV with roof rails.”

That dramatically expands what investigators can search for.

The Privacy Debate

Supporters argue these systems help:

recover stolen vehicles
locate missing persons
investigate violent crimes
identify suspects

Critics raise different concerns.

Reports have documented cases where some officers allegedly misused vehicle lookup systems to track:

former romantic partners
acquaintances
individuals unrelated to criminal investigations

Those cases have intensified calls for stronger oversight, auditing, and accountability.

The issue isn’t whether the technology can be valuable.

It’s whether the safeguards are strong enough.

AI Is Changing Surveillance

Artificial intelligence is accelerating what surveillance systems can do.

Instead of searching only license plates, investigators may increasingly search by:

vehicle appearance
movement patterns
travel history
behavioral characteristics

The technology continues moving from:

“What car was here?”

To:

“Which vehicle matches this description?”

That represents a significant shift in capability.

The Cybersecurity Connection

Every surveillance system creates another large repository of sensitive information.

Questions naturally follow:

Who can access it?
How long is it retained?
How is it protected?
Who audits its use?
What happens if it’s breached?

Cybersecurity isn’t only about preventing unauthorized access.

It’s also about ensuring authorized access isn’t abused.

SMBs, Healthcare, Law Firms, And Schools Should Care

Organizations increasingly deploy:

security cameras
access control systems
visitor management platforms
vehicle monitoring systems

The more data collected, the greater the responsibility to protect it.

Strong security controls should always be matched with:

access logging
regular audits
least-privilege permissions
clear retention policies

Technology without governance creates risk.

The Bigger Lesson

Surveillance technology is becoming smarter every year.

The debate is no longer whether organizations can collect more data.

They can.

The real question is whether society can build oversight that keeps pace with the technology.

Because trust isn’t created by cameras.

It’s created by how responsibly the information behind those cameras is handled.

70% of all cyber attacks target small businesses, I can help protect yours.

#CyberSecurity #Privacy #ArtificialIntelligence #DataProtection #MSP

Cybersecurity

Technology

Tips

Hackers are now walking through the front door

June 28, 2026

•

20 min read

Cybercriminals May No Longer Need To Hack Their Way In

They may simply walk through the front door.

For years, cybersecurity has focused on protecting organizations from remote attacks.

Phishing emails.

Ransomware.

Zero-day exploits.

But recent reporting suggests some cybercriminals may be returning to something much older.

People.

The Newest Cyber Tool Might Be A Person

According to recent reports, a cyber extortion group targeting U.S. law firms has allegedly adopted an unusual tactic.

If remote access fails…

Someone may physically show up at the office.

Posing as:

IT support
a contractor
a technician

The goal isn’t to fix a computer.

It’s to gain just enough physical access to facilitate data theft.

The attack begins online.

But it finishes in the hallway.

Cybercrime Is Becoming Organized Crime

This isn’t entirely new.

Criminal organizations have always divided work among specialists.

They recruit people to:

transport goods
move money
gather intelligence
commit theft

Cybercrime appears to be evolving in much the same way.

Instead of requiring every attacker to possess advanced technical skills, organizers can outsource specific tasks to local individuals who may have little understanding of the broader operation.

One person writes the phishing email.

Another steals the credentials.

Someone else walks into the building.

Each participant only sees one piece of the puzzle.

Why Physical Access Still Matters

Organizations spend enormous amounts on:

firewalls
endpoint detection
SIEM platforms
email security
threat intelligence

But many offices still allow visitors inside with minimal verification.

A convincing badge.

A confident attitude.

A believable explanation.

Sometimes that’s enough.

Technology can be extraordinarily secure.

Buildings often aren’t.

Law Firms Aren’t The Only Target

Law firms are attractive because they store:

privileged communications
merger documents
financial records
litigation strategy
intellectual property

But the lesson extends far beyond legal practices.

Healthcare providers.

Schools.

Manufacturers.

Financial institutions.

Any organization with valuable information should ask the same question:

Would an unknown “IT technician” make it past reception?

Cybersecurity Starts Before The Login Screen

Some of the strongest security controls aren’t technical.

They’re operational.

Organizations should regularly evaluate:

visitor verification procedures
contractor management
badge policies
employee awareness
physical access controls

The best firewall in the world can’t stop someone already sitting at the keyboard.

The Bigger Lesson

Cybersecurity and physical security used to be viewed as separate disciplines.

That distinction is disappearing.

Attackers increasingly blend digital and physical tactics because organizations often defend them separately.

The next major cyberattack may not begin with malicious code.

It may begin with a knock on the front door.

And the most important security question may no longer be:

“Did they hack our network?”

It may be:

“Why did we let them inside?”

70% of all cyber attacks target small businesses, I can help protect yours.

#CyberSecurity #PhysicalSecurity #DataProtection #MSP #BusinessContinuity