Portland IT & Cybersecurity Blog
Holiday Phishing Scams 2026: Fake Shipping Notices, Gift Card Requests and Delivery Texts
Holiday phishing scams are hitting Portland small businesses: fake shipping notices, gift card requests from the boss and delivery texts. How to stop them.
“We Have Cybersecurity” Is No Longer Enough: Regulators and Insurers Now Want Proof
Cybersecurity compliance proof: HIPAA, CMMC, the FTC and cyber insurers now want documented evidence, not promises. See the checklist for 2027.
Microsoft 365 Backup for Small Business: Why OneDrive Sync Isn’t a Backup (and How to Fix It)
Microsoft 365 backup for small business: why OneDrive sync and the recycle bin aren’t a real backup, what can go wrong and a 5-step fix you can test.
Payroll Diversion Scams: How a Fake “Change My Direct Deposit” Email Steals Paychecks (A Small Business Guide)
An email that looks like it’s from an employee asks payroll to switch their bank account before the next payday. It’s a payroll diversion scam. Here’s how it works, the red flags in a real example, and what to do if a paycheck already went out.
HIPAA and Ransomware: What the Security Rule Expects from Small Practices
What the HIPAA Security Rule expects from small medical and dental practices on ransomware: backups, access, audit logs, training and incident response.
It’s Q4: A Good Time for Some Quarterly IT Upkeep
It’s Q4. Here’s the quarterly IT upkeep I recommend for small businesses: firewall, UPS, backups, access, patching, licenses and next year’s budget.
Your Business Email Showed Up in a Data Breach: What to Do Next (A Step-by-Step Plan)
You got the alert: your company email address was found in a data breach. Now what? Here is a calm, step-by-step response plan Portland-area small business owners can follow today, from confirming the leak to checking Microsoft 365 for hidden forwarding rules.
Credential Stuffing: How One Leaked Password Opens Your Business Email (and How to Stop It in 2026)
Most stolen passwords never get cracked. They get reused. Credential stuffing is how criminals turn an old breach at some unrelated website into a login to your company email. Here is how it works and how Portland-area small businesses can shut it down.
