Learn

IT, explained for the person
who runs the organization.

What is changing, what it means for your people, and what to do about it. Written in plain English for Kansas City nonprofits, churches, and small businesses.

The Budget Email Came From a Coworker. The Free PDF Tool Came With a Passenger.

On a Thursday afternoon an office received an email about the budget from one of its own people. His real mailbox sent it, because someone else was inside it, signed in from another country, and more than six thousand messages went out before the afternoon was over. Several staff noticed something wrong and said so. One clicked the link on her phone. The same afternoon the endpoint protection on the sender's laptop caught an installer dressed up as a free PDF tool. Here is why an email from a colleague is the hardest kind to doubt, why free converters are rarely free, and what to do in the first hour.

Read it

She Asked If the Email Was Real. The Password Was Already Gone.

Last week a member of staff at a client forwarded us a suspicious email with a short note: she was having trouble getting in, and was this real? That note was the whole incident. She had already clicked and typed her password. An hour later someone signed in to her account from a rented server. Here is what happened, the four words to listen for, and what should happen in the first ten minutes after a click.

Read it

The Form Your Biggest Customer Is About to Send You

A client of ours was asked by one of their partners to fill in a security questionnaire. One question asked whether they had a documented disaster recovery plan, with a named owner, tested every year. They did not, and neither do most organisations their size. Here is what those forms ask, and the answer that works better than pretending.

Read it

Twenty-Eight Licences, Eleven Computers

We looked at one office's Microsoft 365 account and found twenty-eight paid licences against eleven computers. Some of that was legitimate. Some of it was people who had left. Nobody had done anything wrong, and nobody was going to notice, because Microsoft does not send you a note when you are paying for the wrong thing. Nonprofits: the free Business Premium grant ended in July 2025.

Read it

The Remote-Access Tool Somebody Installed Years Ago Is Now the Problem

A critical flaw in ConnectWise ScreenConnect lets an attacker push files onto a computer and run them through a remote session nobody authorized, and a self-spreading campaign is already using it. The catch is that the fix lives on each computer, not on a server somewhere. Here is what we found when we checked every machine we manage, and what to do about yours.

Read it

The Email Rule Nobody Wrote

When an attacker gets into a mailbox, the first thing they do is usually not send anything. They create an inbox rule. Here is why that small, quiet change is the tell, what it is for, and why one showing up at 10:28 on a Monday night is worth more attention than most alerts you will ever get.

Read it