The Digital Dentist

09/23/2026

Who in your business can change the bank details on an invoice? Your accounting software is connected to your bank and holds payroll data. Turn on MFA, give everyone their own login, and use roles so only the people who need to move money can. Review access every few months.

09/22/2026

MFA isn't bulletproof. Google's June 2026 advisory warns attackers build fake login pages that pass your password and MFA code through to the real site, stealing your session. Use passkeys for important accounts, and never log in through an emailed link.

An overview from Google’s Trust & Safety teams on the most recent online scam trends.

09/21/2026

Your router or firewall connects your business to the internet, and on default settings it's an easy way in. The admin password is often still the default, the firmware is out of date, and remote management may be switched on. Ask your IT provider to fix all three this week.

09/20/2026

Your team's home wifi routers are part of your security now. A lot still run the default admin password from the sticker. Have them change it, turn on WPA2 or WPA3, and work from a company device rather than the family laptop. Give every remote worker a short checklist.

09/19/2026

You search for software or your bank login and the top result is a paid ad. It looks right, but it's a fake site that installs malware or steals your login. Skip the ads and click the real result below, or type the address yourself. Only download software from the official site.

09/18/2026

A stranger walks in behind your employee carrying a box, and nobody stops them. From there they can plug into a network port, take a laptop, or sit at an unlocked computer. Get your team comfortable asking 'can I help you?' and make locking your screen normal when you step away.

09/17/2026

Malware still arrives as an email attachment someone opens without thinking. Be wary of .exe, .msi, .scr, scripts like .js or .bat, disk images like .iso, and any Office file asking you to enable macros. Unexpected attachment? Check with the sender another way before opening it.

09/16/2026

How many people know the password to your company Instagram? If it's in a spreadsheet or a group chat, you can't see who used it and it walks out the door when someone leaves. Use a password manager with a shared vault so people can use logins without ever seeing the password.

09/15/2026

People reported losing $3.5 billion to imposter scams in 2025, per the FTC. That's someone pretending to be your bank, a supplier or your boss to get money moved. Never act on an out-of-the-blue message. Call them back on a number you already have.

New data from the Federal Trade Commission reveal that people reported losing a staggering $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020.

09/14/2026

If someone gets into your domain account at GoDaddy or Namecheap, they can point your website anywhere and take over your email. Put MFA on that account, turn on the domain transfer lock, and make sure it auto-renews. Businesses lose domains every year by forgetting to renew.