The Digital Dentist

09/16/2026

How many people know the password to your company Instagram? If it's in a spreadsheet or a group chat, you can't see who used it and it walks out the door when someone leaves. Use a password manager with a shared vault so people can use logins without ever seeing the password.

09/15/2026

People reported losing $3.5 billion to imposter scams in 2025, per the FTC. That's someone pretending to be your bank, a supplier or your boss to get money moved. Never act on an out-of-the-blue message. Call them back on a number you already have.

New data from the Federal Trade Commission reveal that people reported losing a staggering $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020.

09/14/2026

If someone gets into your domain account at GoDaddy or Namecheap, they can point your website anywhere and take over your email. Put MFA on that account, turn on the domain transfer lock, and make sure it auto-renews. Businesses lose domains every year by forgetting to renew.

09/13/2026

Even with MFA on, your Microsoft 365 lets someone try to log in from anywhere in the world. Conditional access rules fix that. Ask your IT provider to block sign-ins from countries you don't do business in, and block the old sign-in methods that skip MFA entirely.

09/12/2026

Anyone with your meeting link can walk into your client call. In Zoom, Teams or Meet, turn on a waiting room so you approve who joins, add a passcode, lock the meeting once everyone's in, and limit screen sharing to the host. Don't post meeting links publicly.

09/11/2026

SIM swapping is when someone calls your mobile carrier, pretends to be you, and moves your number to their SIM. Now your texts go to them, including your security codes. Put a PIN on your mobile account so nobody can move your number without it. Use an app for 2FA, not texts.

09/10/2026

The accounts you set up for a new starter on day one tend to stick around for years. Give them their own login, not a shared one. Give access to only what their job needs. Turn on MFA from the first login. It's easy to add access later and hard to take it back.

09/09/2026

Your office security camera, smart TV and video doorbell are small computers on your network, and most still have the password they came with. Change the default password on each, turn on automatic updates, and switch off remote access you don't use.

09/08/2026

Police shut down SocGholish in June 2026, the fake 'your browser is out of date' pop-ups that infected thousands of businesses. They seized 106 servers and cleaned 15,000 hacked sites. The trick will come back, so teach your team: a real update never comes from a website pop-up.

SocGholish, an operation that's been delivering malware to users via fake software updates, has suffered a major blow.

09/07/2026

Your IT person's admin account can change almost everything in your business. If they're logged into it while reading email or browsing, one bad click hands all of that over. They should use a normal account day to day and only sign into admin when they need it.