News - IT and Cybersecurity Insights

Must-Read

Cybersecurity

News

Tips

Technology

MFA or Pay the Price

August 3, 2025

•

20 min read

MFA or Pay the Price

Hamilton just got handed an $18.3M cybersecurity bill.

Why? Their insurer denied the claim. The reason? No MFA.

A Wake-Up Call for Every Organization

In February 2024, the City of Hamilton fell victim to a devastating ransomware attack. 80% of their network went dark. Transit, tax processing, fire department records—wiped or frozen.

The attackers demanded $18.5 million. The city refused to pay.

Smart move ethically. But still: the recovery cost was nearly the same.

And then came the second gut punch:

The insurance company denied coverage due to a lack of Multi-Factor Authentication (MFA) — a basic security control.

“We Have Insurance” Isn’t a Security Strategy

Cyber insurance is not a substitute for cybersecurity.

It’s a safety net — but only if your organization follows best practices.

Many policies now require MFA, endpoint protection, user training, and regular patching.

Fall short? You’re on your own.

What Does This Mean for SMBs, Schools, Law Firms, and Clinics?

If a major Canadian city can be devastated by an overlooked MFA rollout, imagine what one missed step could cost a smaller organization.

Schools hold sensitive student data
Healthcare providers store PHI
Law firms manage confidential client communications

One breach could wreck more than your systems. It could destroy trust — and your bottom line.

5 Takeaways You Can’t Ignore

Implement MFA — on all cloud services, email accounts, and admin portals
Test your backups — don’t assume they’re working
Train your users — phishing is still the #1 attack vector
Know your insurance policy — do you meet the requirements?
Partner with a cybersecurity-first MSP — like Gigabit Systems

70% of all cyber attacks target small businesses, I can help protect yours.

#Cybersecurity #ManagedIT #MSP #Ransomware #SMBSecurity

Technology

Cybersecurity

Must-Read

Tips

Too Late to Insure a Burning House

July 30, 2025

•

20 min read

🔥 Too Late to Insure a Burning House

“Can you do cybersecurity… without the ongoing stuff?”

A client once asked us that. It’s like saying: “I want insurance—just when my house is on fire.”

Why Cybersecurity Can’t Be a One-Time Fix

Cybersecurity isn’t a fire extinguisher. It’s a sprinkler system.

Hackers don’t wait for your annual checkup—they look for cracks daily.

Yet many small businesses, law firms, schools, and even healthcare practices still treat cybersecurity as a checkbox:

A one-time antivirus install
A firewall from five years ago
“We’re too small to be a target”

Reality check: 70% of cyber attacks target small businesses. Most never see it coming until it’s too late.

What “Ongoing” Really Means

At Gigabit Systems, ongoing doesn’t mean “endless bills.”

It means:

Real-time monitoring of threats
Patching vulnerabilities as they emerge
Simulated phishing tests to train staff
Backups that actually work when disaster strikes

It’s not overkill. It’s survival.

If you wouldn’t drop your health insurance just because you feel okay this month, why gamble with your business?

Think Like a Hacker

Hackers don’t care if your firm has 5 users or 500.

They just want:

One stolen email login
One unpatched device
One distracted employee

Ongoing cybersecurity isn’t a luxury.

It’s the difference between a near-miss and a headline.

70% of all cyber attacks target small businesses, I can help protect yours.

Must-Read

Technology

Science

Cybersecurity

News

Even spy agencies are getting hacked.

July 30, 2025

•

20 min read

Even spy agencies are getting hacked.

Hackers have breached a top-secret portal used by the CIA and other intelligence agencies to manage sensitive contracts, raising serious alarms across the national security landscape. The compromised site, the Acquisition Research Center, is run by the National Reconnaissance Office (NRO), which oversees the U.S. spy satellite program.

Sources familiar with the breach say data from Digital Hammer, a classified CIA initiative, was exposed — along with proprietary intelligence technologies and personal information submitted to support covert operations. The full extent of the breach is still unknown, but insiders suggest the compromise could stretch into programs tied to Space Force surveillance and missile defense efforts, including the Golden Dome.

This breach comes on the heels of another sobering disclosure: Chinese state-backed hackers accessed systems inside the Department of Energy’s National Nuclear Security Administration, the central hub of the U.S. nuclear arsenal.

This isn’t just a federal problem. It’s a loud and clear warning for every business with sensitive contracts, vendor portals, or IP. If cybercriminals can infiltrate intelligence networks and nuclear agencies, what’s protecting your organization?

Supply chain targeting is one of the fastest-growing forms of cyberattack. Hackers don’t always go after the fortress — they go after the vendor with a side door. That could be your company, especially if you provide services to schools, law firms, healthcare clinics, or government contractors.

Cybersecurity is no longer about perimeter firewalls or reactive fixes. You need real-time monitoring, hardened endpoint security, and a zero-trust model that assumes every login could be a threat.

The breach of America’s most secretive platforms shows how high the stakes are. The question isn’t if your business will be tested — it’s whether your defenses are ready when it happens.

70% of all cyber attacks target small businesses. I can help protect yours.

Technology

News

YouTube Is Watching Your Age, Even If You Lie

July 30, 2025

•

20 min read

YouTube Is Watching Your Age—Even If You Lie

YouTube is rolling out a new AI-powered age detection system across the U.S., aiming to better protect teenagers online — whether or not they enter their real birthdate. The platform will now infer users’ ages using machine learning, analyzing behavior like the types of videos you watch, what you search for, and how long your account has been active.

If the system determines you’re under 18, YouTube will automatically enforce teen-specific protections, including:

Disabling personalized ads
Turning on digital wellbeing tools
Limiting exposure to repetitive or mature content in recommendations

The system has already been used in other countries, and YouTube reports positive results. U.S. users will see the rollout in the coming weeks, with global expansion planned.

If you’re wrongly flagged as underage, YouTube will allow you to verify your age using a credit card or government ID. Only verified adults will be able to view age-restricted content.

This AI approach doesn’t use facial recognition or camera scans. Instead, it focuses on privacy-preserving signals embedded in your account behavior — balancing protection and discretion. YouTube says it’s working closely with creators to ensure monetization isn’t unfairly impacted by this shift.

Whether you’re a parent, educator, or business that posts youth-friendly content, this change matters. It’s another step toward a safer platform — but also a reminder of how closely platforms watch how we watch.

====================================

70% of all cyber attacks target small businesses, I can help protect yours.

Technology

News

Cybersecurity

Tips

Your Wi-Fi Knows More Than You Think

July 30, 2025

•

20 min read

👀Your Wi-Fi Knows More Than You Think

Researchers have discovered how to identify you — using just Wi-Fi.

It sounds like science fiction, but it’s real: a new system called WhoFi can recognize individual people by how they move through Wi-Fi signals. No camera. No microphone. Just your body… interrupting invisible waves.

Let’s break down how this works — and why it’s raising serious privacy concerns.

What Is WhoFi?

Developed by researchers at La Sapienza University in Rome, WhoFi is an experimental tech that can identify people based on how their presence changes Wi-Fi signals in a room. It uses a technique called Channel State Information (CSI) — basically, it watches how your body distorts the signal between a router and a device.

From there, a deep-learning AI maps those tiny changes like a fingerprint.

Accuracy? 95.5%.

Lighting? Doesn’t matter.

Obstacles? Doesn’t matter.

Can it see through walls? Basically, yes.

Why It Matters to Everyday People

Imagine this:

You walk into your office, and the network knows it’s you.
You go to the kitchen, and your movement is silently tracked.
You never agreed to this. You never saw a camera. But your presence was still logged.

This isn’t about passwords or phishing. This is ambient surveillance — and it’s happening through the same Wi-Fi routers we all use in homes, schools, hospitals, and businesses.

The researchers say the goal is “privacy-preserving” biometric recognition… but even anonymous tracking can reveal:

Where you go regularly
When you’re home or not
If you’re alone, with others, or acting differently

And yes, that data could potentially be used by employers, governments, or bad actors if it were ever commercialized or compromised.

Can Hackers Use This?

Not yet — WhoFi is still in the academic stage. But it proves a point: your wireless network isn’t just a tool for connection — it’s a sensor. And sensors can be used in unexpected ways.

We’ve already seen:

Comcast’s Wi-Fi Motion for detecting movement in the home
Fall-detection systems for seniors using routers instead of wearables
Systems that “see” through walls to detect posture or gestures

What You Should Do Now

While this tech isn’t in public use yet, it’s a reminder that privacy isn’t just about data anymore — it’s about your physical presence.

✅ Use strong router passwords

✅ Disable unused devices on your network

✅ Segment guest networks from critical devices

✅ Talk to your MSP about traffic monitoring & intrusion detection

✅ Stay educated on emerging tech — because it may already be watching

🛡️Want a privacy audit of your home or office Wi-Fi?

We’ll help you lock down your wireless network, limit broadcast data, and make sure no one’s watching — unless you want them to.

====================================

70% of all cyber attacks target small businesses, I can help protect yours.

Must-Read

Cybersecurity

Technology

Tips

Six Digits That Can Destroy Your Business (and your life)

July 29, 2025

•

20 min read

🔐Six Digits That Can Destroy Your Business

If your WhatsApp gets hacked, who do you call?

For millions of business owners, WhatsApp isn’t just a messaging app — it’s the central nervous system of their company. Vendors. Clients. Team chats. Delivery updates. International communication. Even family.

But all of that can vanish in seconds with one simple mistake:

Giving away your WhatsApp verification code.

The Trap Is Simple — And Devastating

It starts with a text message:

📲 “Your WhatsApp code is 123-456”

Followed by a call or message:

“Hey! I accidentally sent you my code by mistake — can you send it back?”

The moment you share that six-digit code, you’ve handed over the keys to your digital identity. Hackers now have full control of your account, and you are locked out. No access. No way to warn contacts. No recovery unless you’re extremely lucky — or well prepared.

Why It’s Worse Than You Think

Clients think it’s still you — the hacker messages them asking for payments, passwords, or sensitive info
Vendors lose trust — thinking your account is compromised because you were careless
Family members get emotional bait messages — like fake emergencies
You’re shut out — unable to reach contacts unless you’ve backed up your data and have alternate communication paths

What to Do Right Now

✅ Turn on Two-Step Verification in WhatsApp

Go to Settings > Privacy > Two-Step Verification
Set a 6-digit PIN and link your email

✅ Never share verification codes

No app, person, or rep will ever need it — not even WhatsApp.

✅ Use device biometrics or screen lock for added protection

✅ Back up your chats securely

End-to-end encrypted backups can prevent loss in case of hijack.

✅ Alert your contacts immediately

If you suspect you’ve been compromised, notify key people via alternate platforms before damage spreads.

SMBs, Clinics, and Law Firms: You’re Especially at Risk

For professional operations using WhatsApp for:

International vendor coordination
Client billing or approvals
Legal consultations or case updates
Patient scheduling or family updates

…a hacked account isn’t just inconvenient — it’s a liability, a breach, and a reputational crisis. #MeTwo

🛡️Need a secure messaging audit for your business?

We can review your WhatsApp usage, set up multi-factor controls, and recommend enterprise-grade alternatives for higher-risk environments.

====================================

70% of all cyber attacks target small businesses, I can help protect yours.

Technology

Travel

Tips

When Your Detour Breaks the Drive (and the Trust)

July 28, 2025

•

20 min read

☕When Your Detour Breaks the Drive (and the Trust)

Waze’s latest UX decision leaves commuters confused — and late.

For years, Waze was the gold standard for smart routing. It didn’t just get you there — it helped you stop for coffee without wrecking your ETA. But a subtle change in how detours are displayed has quietly eroded user trust.

What Changed?

Previously, when users searched for stops like gas stations or coffee shops, Waze would show exactly how many minutes the detour would add to your route.

“Want to stop at Starbucks? Boom — +3 minutes. Done.”

Now, all you get is distance in miles — with no indication of how much time it will add. That 2.4-mile stop? It might be 2 minutes off your path… or a scenic tour through rush-hour traffic. You won’t know until you commit.

Why It’s a Problem

🔁 Loss of trust – Users depend on precise time estimates. That’s Waze’s core value.

🧭 Bad UX – Distance without time is meaningless in routing. A 1-mile detour in NYC ≠ 1 mile in rural Kansas.

🚫 Broken logic – Waze sometimes suggests reverse direction stops just because they technically match the query — even if it disrupts the route entirely.

This is a classic case of information hierarchy failure. By prioritizing miles over minutes, Waze has demoted the very thing that makes it valuable: context-aware decision making.

What SMBs, Developers, and UX Teams Can Learn

Small UX shifts can have massive ripple effects on trust and usability:

Don’t assume one metric fits all contexts
Preserve core user behaviors unless backed by overwhelming improvement
Always test for real-world implications, not just design elegance

Whether you’re building a routing engine or a customer dashboard, clarity > cleverness.

🔍Need help auditing your app’s user journey or information hierarchy?

We help SMBs, healthcare platforms, and tech teams identify UX gaps that can silently destroy adoption or loyalty. Let’s take a look before your users hit the exit.

====================================

70% of all cyber attacks target small businesses, I can help protect yours.

Technology

Tips

One Apple Protection Plan to Cover All Your Devices

July 28, 2025

•

20 min read

One Apple Protection Plan to Cover All Your Devices

Apple just changed the game on device protection.

Say goodbye to juggling multiple AppleCare plans for your iPhone, iPad, and Mac. With AppleCare One, you can now bundle device protection across multiple products into a single monthly subscription — complete with extended warranties, accidental damage coverage, and theft/loss protection.

It’s the Apple One-style simplicity… now for hardware peace of mind.

What Is AppleCare One?

AppleCare One is Apple’s new multi-device warranty subscription, priced at:

$19.99/month for up to 3 devices
+$5.99/month for each additional device
For example, you could protect your iPhone, Mac, and iPad — plus add your Apple Watch — all for just $25.98/month.

This includes:

Accidental damage protection (with reduced deductibles)
Theft/loss coverage for iPhone, iPad, and now Apple Watch
Priority Apple support
Battery service as needed
Automatic coverage transfer when you upgrade devices

Why This Matters for SMBs, Schools, Clinics, and Professionals

If your business or practice relies on Apple hardware — and you’re tired of tracking serial numbers, warranty windows, or receipts — AppleCare One is your new best friend.

Real-world benefits:

Tech coordinators can cover classroom or clinic iPads with one plan
Law firms and SMBs can keep employee iPhones and Macs protected without individual AppleCare purchases
Medical offices using iPads for patient intake gain peace of mind for accidental drops
IT teams reduce overhead with centralized management and device replacement workflows

Things to Keep in Mind

🔁 Devices must share the same Apple ID

No Family Sharing or multi-user bundling — each device must be tied to the same iCloud account.

🕒 Four-year grace period

You can add a device up to four years after purchase — more generous than any prior AppleCare window.

📉 Subscription fatigue is real

AppleCare One is monthly only (for now), so if you’re cutting down on subscriptions, it may be a drawback.

🔧Need help managing your fleet of Apple devices?

We can assist with Apple Business Manager enrollment, AppleCare One integration, remote device tracking, and damage mitigation — all under a streamlined managed IT plan.

====================================

70% of all cyber attacks target small businesses, I can help protect yours.

Technology

Cybersecurity

Must-Read

Tips

Bye Passwords, Hello Passkeys

July 28, 2025

•

20 min read

🔐Bye Passwords, Hello Passkeys

Apple’s built-in security just got a whole lot smarter.

Still typing passwords across your iPhone, iPad, and Mac? It’s time to upgrade. Passkeys are Apple’s answer to passwordless login — and when used right, they’re more secure, faster, and harder to phish than traditional passwords.

If your business, school, or clinic uses Apple devices, this change isn’t optional — it’s inevitable. Here’s how to prepare.

Why Passkeys Matter

🔒 Passkeys use Face ID, Touch ID, or device PINs to log you in

🔒 They’re end-to-end encrypted and synced with iCloud Keychain

🔒 No more typing, remembering, or reusing passwords

🔒 Far less vulnerable to phishing, keyloggers, or password dumps

They work across devices and even support hardware security keys or biometric fallback options — meaning better access control and fewer reset headaches.

How to Set Up Passkeys on Apple Devices

Enable iCloud Keychain
- Go to Settings > Your Name > iCloud > Passwords & Keychain
- Enable Keychain on iPhone, iPad, and Mac
Turn on Apple Passwords for AutoFill
- iOS/macOS: Settings > General > AutoFill & Passwords
- Make sure “Passwords” is toggled on under “AutoFill From”
Create a Passkey for a New Account
- Visit a supported site (e.g. Indeed.com)
- Select Continue with Passkey
- Authenticate with Face ID or Touch ID
- Your new login is stored securely
Replace Existing Passwords with Passkeys
- Visit account settings (e.g. Amazon, Yahoo, Target)
- Choose Set up a Passkey
- Confirm your identity and save
Use Them Across Devices
- Thanks to iCloud Keychain, passkeys are synced automatically
- Sign in from any Apple device — no password required
Manage Passkeys in Apple Passwords
- Open the Passwords app
- View, copy, share, or delete any saved passkeys
- Share passkeys via AirDrop or assign to family groups

Should Your Business Use Passkeys?

Absolutely — but with a few caveats.

Apple’s passkey system is robust, especially for Apple-only environments like creative firms, medical practices using iPads, or schools with MacBooks. But SMBs using mixed platforms may need a hybrid solution using:

A trusted password manager like 1Password or Dashlane
A mobile device management (MDM) platform to enforce passkey adoption
Training staff on how passkeys work and when to use them

✅ Need help transitioning your org to passkeys?

We’ll help you configure iCloud Keychain securely, establish access policies, and ensure continuity across all employee devices.

====================================

70% of all cyber attacks target small businesses, I can help protect yours.