Lighthouse I.T. Solutions

09/01/2026

Your team's home wifi routers are part of your security now. A lot still run the default admin password from the sticker. Have them change it, turn on WPA2 or WPA3, and work from a company device rather than the family laptop. Give every remote worker a short checklist to ensure they stay .

08/31/2026

Microsoft's June updates fixed 200 security holes, some already being used by attackers. Most businesses don't install updates for weeks, and that delay is exactly when attackers strike. Set computers to update on their own, and don't forget the spare laptop or closet server.

https://hub.lighthousesol.com/r/Xs5

Today is Microsoft's June 2026 Patch Tuesday, with security updates for 200 flaws, including five publicly disclosed zero-day vulnerabilities and one actively exploited in attacks.

08/28/2026

If your website runs on WordPress, when did anyone last log into it? 🕵️
For most small businesses, the answer is not since it was built.

Meanwhile, the plugins that run it keep needing updates, and some get abandoned by their developers, so no updates are coming at all.

Attackers automatically scan for exactly that and get in through the old plugin. 🔓

Once they're in, the site quietly hosts scam pages or redirects your visitors elsewhere. Most owners find out when a customer tells them, or when Google flags the site.

⚠️ Here's what to check on yours:
https://hub.lighthousesol.com/r/n0G

08/27/2026

Once-a-year security training does almost nothing. People forget it in weeks. A 15-minute reminder once a month sticks far better, especially when it uses real scams like fake 'paste this' prompts. And make it safe to report a click with no blame, so you catch attacks early.

08/26/2026

You're probably holding way more customer data than you need: old card numbers, files from clients who left years ago. If you don't need it, it's just data for a hacker to steal. Delete what you've no reason to keep, old payment details first. You can't lose what you don't have.

08/25/2026

Think about everyone outside your company who still has a login to your systems: the web developer from two years ago, an old freelancer, the bookkeeper who left. A lot of those accounts are still active. List them, turn off what's not needed, and give each one its own login.

08/24/2026

A vendor called Klue got breached, and dozens of companies lost their Salesforce data because of it, including LastPass. Every app you connect to your CRM or email holds a key to your data. Review your connected apps today and remove anything you don't recognize or no longer use.

https://hub.lighthousesol.com/r/oTP

Salesforce disabled Klue Battlecards integration after attackers used compromised OAuth tokens to access customer CRM data via connected apps.

08/21/2026

🚨 Your Vendor's Vendor Can Burn You 🔥

This week, on the , we break down three recent breaches (EY, Salesforce, and Framework Laptops) that reveal a common thread: your vendor's vendor can be your weakest link. We dig into why cybersecurity training, fast incident response, and honest disclosure timelines matter more than ever.
So have a listen and !
📺 https://hub.lighthousesol.com/r/uw4

And don't forget to read the on the as well!

08/20/2026

Someone calls your IT, says they're locked out, sounds friendly and rushed. It's an attacker, and that's how big breaches start. Make one rule: no password or MFA reset on a phone call alone. Call the person back on a number you already have. Verifying takes 30 seconds.

08/19/2026

Found a USB stick in the parking lot? Don't plug it in to see what's on it. A dodgy USB drive can install malware the second it's connected, or even act like a keyboard and type commands itself. If you didn't buy it, it goes in the bin, not into your laptop.