Enhanced Computing Solutions

05/28/2026

ATTENTION:

Threat actors are spoofing the FIFA website through a process known as “typo squatting”. Typo squatting relies on Internet users making common typos when visiting a URL. Spoofing FIFA’s official website (www.fifa.com) allows threat actors to collect personally identifiable information (PII) entered by users into the fake website, including name, home address, phone number, email address, and banking information.

Using a minor misspelling, such as fiffa[.]com, or alternative top-level domains, such as .org rather than .com, threat actors mimic the legitimate URL. They may also register illegitimate websites such as jobs-fifa[.]com to impersonate legitimate subdomains. While there are at least a dozen known illegitimate domains, users should anticipate the generation of additional fake domains leading up to, and throughout, the 2026 World Cup.

Learn more about how the scam works and review recommendations on how to protect yourself: https://www.ic3.gov/PSA/2026/PSA260527

05/22/2026

ATTENTION:

Today the FBI released a warning the public about Kali365—an emerging Phishing-as-a-Service (PhaaS) platform. Kali365, first seen in April 2026, enables cyber threat actors to obtain Microsoft 365 access tokens and bypass multi-factor authentication (MFA) protocols without intercepting the user’s credentials. The platform allows less-skilled attackers access to AI-generated phishing lures, automated campaign templates, real-time targeted individual/entity tracking dashboards, and OAuth token capture capabilities.

Learn more about how the scam works and review recommendations on how to protect yourself: ic3.gov/PSA/2026/PSA260521 See less

Today the FBI released a warning the public about Kali365—an emerging Phishing-as-a-Service (PhaaS) platform. Kali365, first seen in April 2026, enables cyber threat actors to obtain Microsoft 365 access tokens and bypass multi-factor authentication (MFA) protocols without intercepting the user’s credentials. The platform allows less-skilled attackers access to AI-generated phishing lures, automated campaign templates, real-time targeted individual/entity tracking dashboards, and OAuth token capture capabilities.

Learn more about how the scam works and review recommendations on how to protect yourself: ic3.gov/PSA/2026/PSA260521

05/18/2026

Heads up for Dell users:

Dell has confirmed that its SupportAssist software is causing Blue Screen of Death (BSOD) crashes on some Windows devices.

If your team has recently experienced unexpected crashes, system instability, or reboot issues, this may be the culprit—not hardware failure.

This is a good reminder that even trusted vendor tools can create operational disruptions, which is why proactive monitoring and patch management matter.

If your business is dealing with unexplained endpoint issues, don’t ignore them.

Read more via BleepingComputer: https://www.bleepingcomputer.com/news/software/dell-confirms-its-supportassist-software-causes-windows-bsod-crashes/

05/11/2026

LinkedIn “Social Engineering”

A fake recruiter message is one of the cleanest social engineering tricks around because it doesn’t look like a trick.

That’s why LinkedIn recruitment scams work so well inside real businesses.

They don’t arrive as malware. They arrive as a normal conversation that nudges someone toward one small action: click this link, open this file, “verify” this detail, move the chat to a different app.

A few simple checks, a couple of hard-stop rules, and an easy way to report suspicious outreach can shut these scams down without slowing anyone down.

Read More: https://www.enhancedcs.com/online-presence/linkedin-social-engineering-protecting-your-staff-f

05/08/2026

In the traditional office, a “Clean Desk” policy was a simple habit: shred the sensitive stuff, lock it away, and don’t leave passwords where someone can see them.

In 2026, the same idea still matters but the “desk” has changed.

For many teams, the home office is now the default workspace, and that means physical access can quickly become digital access. An unlocked screen, a shared device, or a laptop left in the wrong place can expose the same systems your business runs on every day.

Read More: https://www.enhancedcs.com/working-from-home/clean-desk-2-0-securing-your-home-office-from-physical-data-leaks/

05/06/2026

Microsoft Edge users: this is worth a quick read.

PCWorld reports that Edge’s password manager may store saved passwords in plaintext RAM, meaning someone with local access or malicious software could potentially read credentials from memory.

For businesses, the takeaway is simple: browser-saved passwords are convenient, but they are not always the safest option.

A few smart next steps:

Review where your team stores passwords.

Use a dedicated business password manager.

Enable MFA wherever possible.

Remove saved passwords from browsers when appropriate.

Read the article here: https://www.pcworld.com/article/3131805/microsoft-edge-stores-your-passwords-in-plaintext-ram-on-purpose.html

05/04/2026

The Essential Checklist for Securing Company Laptops at Home

Read More: https://www.enhancedcs.com/working-from-home/the-essential-checklist-for-securing-company-laptops-at-home/

05/01/2026

If your incident response plan starts with Google… it’s already too late.

Work with a team that’s ready before you need to search.

Contact us today for your Free Network Analysis and Security Assessment

https://www.enhancedcs.com/free-network-analysis-and-security-assessment/

04/29/2026

Backups aren’t top of mind, until something goes wrong.

The real question isn’t whether you have backups. It’s whether they’ve actually been tested and can be restored when it matters most. If you’re unsure when your last successful restore test took place, it’s time to take a closer look.

Enhanced Computing Solutions is here to help.
https://www.enhancedcs.com/contact-us/

04/27/2026

If you want to uncover unsanctioned cloud apps, don’t begin with a policy. Start with your browser history.

The cloud environment most businesses actually use rarely matches the one shown on the IT diagram. It’s built through countless small shortcuts: a “just this once” file share, a free tool that solves one problem faster, a plug-in installed to meet a deadline, or an AI feature quietly enabled inside an app you already pay for.

In the moment, none of it feels like a problem. It feels efficient. Helpful.

Until it isn’t.

Read More: https://www.enhancedcs.com/cloud/the-2026-guide-to-uncovering-unsanctioned-cloud-apps/