CMIT Solutions of Downtown Columbus

09/29/2026

An email from a supplier says their bank details have changed. You update them, pay the invoice, and the money goes to a criminal. Sometimes the supplier's own account was hacked, so it's genuinely from them. Never change bank details without calling on a number you already have.

09/29/2026

The next voice you hear on the phone may not belong to a person.

Google is beginning to give consumers AI assistants that can call businesses on their behalf, whether that means checking if a product is in stock, asking about pricing, or booking an appointment. The technology is still early, but for Columbus small businesses that rely on the phone, it’s worth paying attention to who, or rather what, is on the other end of the line.

That means your team may need to get comfortable talking to AI assistants as well as actual humans. Clear, accurate information about hours, pricing, availability, and policies matters even more when a call can be handled and recorded without a person taking notes.

There’s an upside, too! The same technology can take some of the tedious calls off your plate, from checking on an order to navigating an endless hold queue. Hey, less time on hold is something we can all get behind

09/28/2026

Researchers found the DragonForce ransomware group hiding inside normal Microsoft Teams traffic, undetected for up to two months. Their malware disguised its connection as ordinary Teams activity. Basic antivirus misses this. Ask your IT provider if what you have would catch it.

DragonForce-linked hackers used Backdoor.Turn to route C2 traffic through Microsoft Teams relay infrastructure during a U.S. firm attack.

09/28/2026

When was the last time someone logged into your small business website?

For many Columbus small businesses, a website can go months or even years without anyone checking what’s happening behind the scenes. Outdated WordPress plugins and unsupported software can create security vulnerabilities that attackers actively scan for, putting your website and your customers at risk.

A compromised website may not look hacked at first. It could quietly redirect visitors, host scam pages, or expose information submitted through your site. By the time someone notices, the damage may already be affecting your business and your customers.

Our latest blog looks at why neglected websites can become a cybersecurity risk and what small businesses can do to keep their websites secure.

Read the full blog here:
https://cmitsolutions.com/columbus-oh-1051/blog/is-your-small-business-website-a-security-risk/

09/27/2026

When did anyone last look closely at your card terminals? Skimmers get attached and terminals get swapped, and neither is obvious unless someone checks. Look at each one at the start of the day. If it looks different or loose, stop using it and call your provider.

09/26/2026

You've thought about what you'd do in a cyberattack, but have you practiced it? Sit your key people down for an hour and talk it through: files encrypted Monday morning. Who do we call first? Can we reach our contacts with email down? Note what nobody could answer.

09/25/2026

Microsoft will never call you about a virus on your computer. Neither will Apple. If a pop-up or a caller says your machine is infected and wants you to call a number, install something or pay, it's a scam. Close it or hang up, then call your own IT provider if you're worried.

09/24/2026

Deleting files doesn't remove them from an old computer or phone. Free tools can pull them back. Before any device leaves, use Reset this PC and remove everything, or a full factory reset on phones. And don't forget the office copier, most store what you scan.

09/23/2026

Who in your business can change the bank details on an invoice? Your accounting software is connected to your bank and holds payroll data. Turn on MFA, give everyone their own login, and use roles so only the people who need to move money can. Review access every few months.

09/22/2026

MFA isn't bulletproof. Google's June 2026 advisory warns attackers build fake login pages that pass your password and MFA code through to the real site, stealing your session. Use passkeys for important accounts, and never log in through an emailed link.

An overview from Google’s Trust & Safety teams on the most recent online scam trends.