QR Codes: so convenient, yet so risky.

Gigabit Systems

December 16, 2024

•

20 min read

Share this post

QR Codes: so convenient, yet so risky.

Because of the surge in QR code scams, the city of Miami has been forced to take down thousands of QR codes from parking meters. Criminals have been replacing legitimate QR codes with fraudulent ones, tricking users into providing sensitive information or making payments to malicious accounts.

QR codes have made everyday tasks like paying for parking, shopping, and accessing services more convenient, but scammers are exploiting this technology at an alarming rate. Here’s what you need to know to stay protected:

1️⃣ Beware of “Quishing”:

QR code scams mimic phishing attacks, redirecting you to fake websites to steal your credentials. Always inspect the preview link before clicking. If it doesn’t look secure or official, don’t proceed.

2️⃣ Fake QR Codes in Public:

Scammers place fraudulent QR codes on parking meters, menus, or posters. If you’re scanning a QR code in public, double-check that it matches the business or service. When in doubt, manually type in the URL instead.

3️⃣ Avoid Scanning Unexpected QR Codes:

Received a QR code via text or email urging immediate action? This could be QRLJacking, where attackers create fake login portals to steal credentials. Always verify the source before scanning.

4️⃣ Be Wary of Secondhand Transactions:

QR codes used in personal sales (e.g., Facebook Marketplace) can lead to fraud. Stick to trusted payment platforms like PayPal or Zelle by navigating to their websites directly.

5️⃣ Use Built-In Camera Scanners:

Avoid downloading third-party QR scanning apps—they can be malware in disguise. Most smartphones already have QR scanning capabilities in their native camera apps.

6️⃣ Enable MFA (Multi-Factor Authentication):

Even if attackers grab your login credentials through a QR scam, MFA can block unauthorized access. Add this extra layer of protection to all your accounts.

7️⃣ Keep Your Software Updated:

Outdated systems are an open door for hackers. Keep your phone and apps updated to protect against vulnerabilities.

⚠️ Pro Tip: When in doubt, always navigate directly to the official website instead of relying on a QR code.

QR codes are incredibly convenient, but their growing use comes with great responsibility. Stay informed, stay cautious, and help spread awareness to protect yourself and others.

====================================

Follow me for mind blowing information and cybersecurity news. Stay safe and secure!

====================================

#CyberSecurity #QRCodeScams #OnlineSafety #Quishing #Miami #StayVigilant #HolidaySecurity #technology #data

Share this post

See some more of our most recent posts...

Cybersecurity

News

Tips

Crypto

Quantum Computing: Hype or Real Threat?

July 3, 2025

•

20 min read

⚛️ Quantum Computing: The Clock Is Ticking on Encryption

Think quantum computing is just sci-fi? It could break today’s encryption within your lifetime.

Quantum Computing: Hype or Real Threat?

For years, quantum computing has been portrayed as a distant, futuristic technology. But here’s the reality:

Quantum computing will eventually break the encryption that secures your business, your clients, and your financial future.

This isn’t just a tech industry issue. It will impact every SMB, healthcare provider, law firm, and school that stores sensitive data.

Why Should Small Businesses Care?

Quantum computers can solve certain math problems exponentially faster than traditional computers — including the math behind most encryption systems in use today.

That means:

Passwords? Breakable.
Encrypted emails? Exposed.
VPNs and secure backups? At risk.
Blockchain wallets? Vulnerable.

Even if quantum decryption isn’t practical today, attackers are already stealing encrypted data now with plans to decrypt it later. This is called “harvest now, decrypt later.”

How Will It Affect the Markets and Blockchain?

Financial Markets:
Quantum computers could destabilize digital banking and stock transactions by compromising encryption.
Blockchain & Cryptocurrencies:
Bitcoin, Ethereum, and most blockchains rely on quantum-vulnerable encryption. A sufficiently powerful quantum computer could:
- Steal funds
- Forge transactions
- Undermine the entire system

Some crypto projects are working on quantum-resistant protocols, but they’re far from mainstream.

Everyday Security Will Need an Overhaul

Quantum computing will force every business to:

Adopt post-quantum cryptography (PQC)
Replace or upgrade secure systems and software
Re-evaluate data retention policies
Rethink how they protect sensitive information long-term

This won’t be optional—it will be a compliance and survival issue.

Who Will Actually Have Access to Quantum Computing?

For now:

Governments
Big Tech (Google, IBM, Microsoft, Amazon)
Research labs and defense agencies

SMBs and regular users won’t have direct access anytime soon—but that doesn’t mean they’re safe.

Timeline: When Will Quantum Computing Be A Threat?

Milestone

Estimated Timeline

Commercial R&D use -
- Now through 2028
Encryption-breaking capabilities (theoretical)-
- 10–20 years (possibly sooner)
Global rollout of quantum-safe encryption
- 2024–2027 (already starting)

Will Hackers Actually Use It?

Eventually — yes.

At first, only nation-states and high-level criminal syndicates will be able to afford or access quantum technology.

Their first targets?

✔ Government secrets

✔ Corporate intellectual property

✔ Financial records

Everyday ransomware attacks won’t use quantum computers anytime soon. But attackers are already stealing encrypted data for future decryption.

4 Practical Tips for SMBs Today:

Ask your vendors about post-quantum encryption plans.
Stop storing sensitive encrypted data longer than necessary.
Use up-to-date encryption protocols and VPNs.
Prioritize fixing today’s real-world threats like phishing, ransomware, and unpatched systems.

Bottom Line: Quantum Threats Are Coming—But You Can Stay Ahead

This isn’t about panicking—it’s about preparing.

Your security strategy needs to account for both today’s threats and tomorrow’s risks.

Gigabit Systems can help assess your cybersecurity readiness and plan for the post-quantum future.

====================================

Follow me for mind-blowing information and cybersecurity news. Stay safe and secure!

70% of all cyber attacks target small businesses. I can help protect yours.

Quantum computing, post-quantum encryption, cybersecurity, SMB security, managed IT, blockchain risks, VPN security

#CyberSecurity #QuantumComputing #Encryption #SmallBusinessSecurity #TechFuture

Cybersecurity

News

Apple’s biggest AI promise has crumbled, now it’s asking rivals for help.

July 3, 2025

•

20 min read

🍏 Siri’s Silent Retreat: Apple’s AI Gamble Fails Spectacularly

Apple’s biggest AI promise has crumbled — now it’s asking rivals for help.

A High-Tech Fumble on a Global Stage

When Apple launched the iPhone 16 in September 2024, it promised “Apple Intelligence” — a sleek AI-powered Siri that would automate mundane tasks and compete with the likes of ChatGPT and Gemini.

Spoiler: It never arrived.

Instead, Apple now faces shareholder lawsuits for misleading customers, and after months of delays, Bloomberg reports the tech giant is abandoning its in-house AI Siri project entirely.

Who’s Apple Calling for Backup?

Anonymous insiders say Apple is now in talks with:

OpenAI (ChatGPT’s creator)
Anthropic (maker of Claude AI)

Apple reportedly asked both companies to customize their large language models (LLMs) to run on Apple’s cloud infrastructure for internal testing.

Insiders suggest Apple favors Anthropic’s Claude, citing better privacy alignment — but nothing’s official yet.

Why This Matters to SMBs, Schools, Healthcare & Law Firms

Apple’s AI retreat isn’t just a tech headline. It’s a case study in over-promising and under-delivering — something every business leader can learn from.

It also signals that even giants like Apple are struggling to keep up in the AI arms race.

For business owners and tech decision-makers, here’s the takeaway:

✅ AI isn’t magic—it needs infrastructure, transparency, and realistic timelines.
✅ Rushing to adopt AI tools without vetting their true capabilities is risky.
✅ Many AI models remain overhyped, especially regarding reasoning, privacy, and data security.

Key Lessons for Your Organization:

Vetting AI Vendors Matters
Don’t assume big names = best results. Assess privacy, reliability, and control.
Don’t Blindly Follow AI Hype
Focus on solving real business problems, not just chasing trends.
Prepare for AI Dependency
As major players offload AI tasks to third parties, your vendors may too. Know where your data goes.
Build Flexibility Into AI Strategy
Ensure your systems can adapt to changes in AI providers or technology shifts.

Apple’s Bigger Shift: The “Safe” AI Role?

Behind the scenes, Apple may be moving toward a supporting AI role instead of trying to lead. It recently pledged $500 billion to U.S. tech manufacturing, including data centers and engineering facilities — hinting at a long-term infrastructure-first strategy.

And just last month, Apple’s own Machine Learning Research team openly criticized the broader AI market for exaggerating AI capabilities — including claims from OpenAI about “reasoning.”

Bottom Line: Caution Is Creeping Into Big Tech

Apple’s decision to potentially outsource AI to rivals marks one of the first major signs that tech giants may begin pulling back from the AI hype cycle.

Whether it’s a sign of things to come or an isolated case remains unclear — but the message for businesses everywhere is the same:

Don’t get swept up in AI promises. Prioritize practical, proven solutions that truly benefit your team and customers.

====================================

Follow me for mind-blowing information and cybersecurity news. Stay safe and secure!

70% of all cyber attacks target small businesses. I can help protect yours.

Apple AI, Siri, managed IT, cybersecurity, AI risk, SMB tech strategy, AI vendor security

#CyberSecurity #AITech #BusinessStrategy #ManagedIT #DigitalTransformation

Cybersecurity

Tips

The DNS Blind Spot in Zero Trust Security

July 3, 2025

•

20 min read

🕳️ The DNS Blind Spot in Zero Trust Security

Zero Trust without DNS is like locking your doors… but leaving the windows open.

The Problem With Traditional Zero Trust Models

For years, Zero Trust has revolved around identity and access management (IAM). The core idea is simple:

Never trust, always verify.

Organizations have focused heavily on verifying users and their devices before granting access to apps or systems. But there’s one massive security gap most Zero Trust architectures still overlook:

DNS — the phonebook of the internet.

Why DNS Matters for True Zero Trust

DNS isn’t just for routing traffic to websites. It’s also the primary way malware communicates with command-and-control servers, phishing domains, and other malicious resources.

If your Zero Trust strategy doesn’t monitor and control DNS traffic:

Malware can bypass your defenses
Employees can access malicious sites
Threat actors can exfiltrate data without detection

DNS is often the last blind spot for attackers to exploit.

Common DNS Attacks That Bypass Zero Trust:

DNS Tunneling: Attackers secretly exfiltrate data through DNS queries.
Domain Generation Algorithms (DGA): Malware randomly generates domains to avoid detection.
Typosquatting: Fake lookalike domains trick users into sharing credentials.

The Solution: DNS-Integrated Zero Trust

By integrating DNS-layer protection into your Zero Trust model, you can:

Automatically block malicious domains before connections are made
Detect shadow IT and unauthorized apps
Reduce phishing risks and prevent ransomware command calls
Gain visibility into all outbound traffic—whether it’s user-initiated or malware-based

✅ 4 DNS Security Must-Haves for SMBs, Healthcare, Law Firms & Schools:

DNS Filtering: Block risky or inappropriate sites before threats reach users.
Threat Intelligence Feeds: Auto-update domain blocklists with verified global threat data.
Encrypted DNS (DoH/DoT): Secure DNS queries to prevent eavesdropping.
DNS Logging and Analytics: Monitor outbound DNS requests for suspicious activity.

Why It’s Critical Now

With hybrid work, cloud apps, and mobile devices, traditional network perimeters no longer exist. Attackers know that DNS is often the easiest path inside.

You can’t secure what you don’t see — and DNS is where most attacks begin.

Don’t Leave Your Business Half-Protected

Gigabit Systems can help integrate DNS protection into your existing Zero Trust framework, delivering layered defense without adding complexity.

====================================

Follow me for mind-blowing information and cybersecurity news. Stay safe and secure!

70% of all cyber attacks target small businesses. I can help protect yours.

Zero Trust, DNS Security, Managed IT, MSP, cybersecurity for SMB, DNS filtering, ransomware prevention

#CyberSecurity #ZeroTrust #DNSProtection #ManagedIT #SmallBusinessSecurity