Researchers found 543,699 leaked credentials still valid, exposed for a median of 784 days. The leak isn't the only failure. Not changing the keys is. Rotate shared passwords this month.

Voice cloning needs only seconds of audio. If "the owner" calls asking for an urgent wire, hang up and call back a known number. Your process should never depend on recognizing a voice.

New data: 75% of small business owners rank cyberattacks as a top concern vs. 54% for inflation. A first. And 40% say a $100K attack would close them. Worry less, plan more.

Over 1,200 Citrix NetScaler devices were patched and still backdoored. Updating closes the hole. It doesn't evict whoever got in first. After a critical flaw, check for compromise too.

An independent insurance agency took nine months to learn what attackers stole. Florida agencies: could you answer "what was taken?" inside the 30 days state law generally allows?

Florida's DMV database was breached using one Plant City police user's login, stored on a personal device. Your business has the same risk. Where do your team's work passwords live?

Even security pros are still hanging on to passwords. Roughly half still rely on them per a new Yubico survey. Passkeys can't be typed into a fake login page. Start with email and admin accounts this month.

The real compliance risk for most agencies isn't the audit, it's the vendor nobody's ever asked about. A short list of who touches your data, with real answers on file, closes that gap. #InsuranceAgency

Your password isn't enough anymore. MFA blocks the vast majority of account takeovers, but not all MFA is equal. Text codes, authenticator apps, push, passkeys, and security keys compared in our new video. youtu.be/p_eIC6myjf0 #MFA #Cybersecurity #TampaBay

Scammers watch LinkedIn for "started a new position" posts, then time a fake-urgent request for week one, when someone's most eager to please and least familiar with how things work. Tell new hires it's always fine to double check. #SecurityAwareness

A backup that's never been tested is really just a file you're hoping works. Pick one folder, restore it on purpose, see what happens. Ten minutes now beats a bad surprise later. #DataBackup

A call asking to change banking details might sound exactly like your client. Voice cloning makes that possible now. Always confirm with a callback to a number you already have on file. #CybersecurityAwarenessMonth

Quick exercise: search your email at Have I Been Pwned and see how many breaches it's in. Then change any reused passwords and turn on MFA. Five minutes, genuinely worth it. #DataBreach

That email "from your boss" is only as trustworthy as the address behind the display name. Check the real sender before you act on anything urgent or money related. #EmailSecurity

Could your Florida insurance agency hand over a written information security program tomorrow? Rule 69O-128.032 asks for one with administrative, technical, and physical safeguards. It should be real, current, and scaled to your size. #InsuranceAgency

With next month being Cybersecurity Awareness Month we'll be giving a talk at the North Tampa Bay Chamber office covering cybersecurity basics for small business owners and managers.

Most small businesses do not have a security problem. They have a "nobody owns it" problem. Name one person for each area: access, backups, devices, vendors, training, response. Ten minutes of naming fixes a lot. #SmallBusinessIT

Is your team pasting client info into AI chatbots? Most people are just trying to work faster. A one-page policy helps: approved tools, a never-paste list, and a human read before anything goes to a client. #AIatWork

Ransomware is mostly automated, not personal. It looks for open doors like accounts without MFA or backups nobody has tested, not company names. Close the doors and test your restore. Small businesses in Wesley Chapel can do both. #SmallBusinessIT

"Your SunPass balance is overdue." Sound familiar? Skip the link, open the official SunPass site or app yourself, forward the text to 7726, then delete it. The same red flags show up in work email too. #ScamAwareness