Researchers found 543,699 leaked credentials still valid, exposed for a median of 784 days. The leak isn't the only failure. Not changing the keys is. Rotate shared passwords this month.

Voice cloning needs only seconds of audio. If "the owner" calls asking for an urgent wire, hang up and call back a known number. Your process should never depend on recognizing a voice.

New data: 75% of small business owners rank cyberattacks as a top concern vs. 54% for inflation. A first. And 40% say a $100K attack would close them. Worry less, plan more.

Over 1,200 Citrix NetScaler devices were patched and still backdoored. Updating closes the hole. It doesn't evict whoever got in first. After a critical flaw, check for compromise too.

An independent insurance agency took nine months to learn what attackers stole. Florida agencies: could you answer "what was taken?" inside the 30 days state law generally allows?

Florida's DMV database was breached using one Plant City police user's login, stored on a personal device. Your business has the same risk. Where do your team's work passwords live?

Even security pros are still hanging on to passwords. Roughly half still rely on them per a new Yubico survey. Passkeys can't be typed into a fake login page. Start with email and admin accounts this month.

The real compliance risk for most agencies isn't the audit, it's the vendor nobody's ever asked about. A short list of who touches your data, with real answers on file, closes that gap. #InsuranceAgency

Your password isn't enough anymore. MFA blocks the vast majority of account takeovers, but not all MFA is equal. Text codes, authenticator apps, push, passkeys, and security keys compared in our new video. youtu.be/p_eIC6myjf0 #MFA #Cybersecurity #TampaBay

Scammers watch LinkedIn for "started a new position" posts, then time a fake-urgent request for week one, when someone's most eager to please and least familiar with how things work. Tell new hires it's always fine to double check. #SecurityAwareness

A backup that's never been tested is really just a file you're hoping works. Pick one folder, restore it on purpose, see what happens. Ten minutes now beats a bad surprise later. #DataBackup

A call asking to change banking details might sound exactly like your client. Voice cloning makes that possible now. Always confirm with a callback to a number you already have on file. #CybersecurityAwarenessMonth