You connect to hotel wifi without thinking twice. That's exactly what a new wave of attacks is counting on - custom malware running on the hotel's network, tricking your laptop into thinking it's talking to the real wifi, then using that foothold to steal your Microsoft 365 credentials. There's a phishing kit doing something similar right now by spoofing RingCentral notifications - both stories are in this week's roundup below. Most firms have their Microsoft 365 locked down about as tight as antivirus was ten years ago. That used to be enough. It isn't anymore. I'll do a free, twenty-minute audit of your M365 setup and tell you plainly where you stand - no charge, no pitch.

​Read This Before You Buy That TV Streaming Stick​

Those cheap streaming boxes with the "unlimited content, one-time fee" pitch have been caught renting out your internet connection and spoofing themselves as phones to run ad fraud in the background. Anything you plug into your network, at home or the office, is a device that can access your network traffic.

​How AI-powered phishing killed blocklists for good​

Blocklists worked when phishing sites stuck around long enough to get flagged - AI-generated phishing pages now spin up and burn down faster than any blocklist can catch up. This is why I keep pushing EDR and behavior-based monitoring - the old defenses were built for a slower attacker.

​Phishing service spoofs RingCentral to steal Microsoft 365 accounts​

Hacking is now commoditized. A "phishing-as-a-service" kit is impersonating RingCentral voicemail and fax notifications to harvest Microsoft 365 logins - if your firm uses RingCentral, that notification is one you might click without thinking. Attackers keep picking the business tool you trust most and wearing it as a mask.

​Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts​

Hackers are using AI tools to generate new ways to attack vulnerable computers. Here, Russian hackers built a "Man in the Middle" attack that tricks hotel guests into thinking they are connecting to a hotel's free wi-fi, then steals credentials and gets into M365 accounts. There are settings in M365 and on your computer that can harden your system against these kinds of attacks, but are often not configured correctly.

This Week's Article: Why Your Law Firm Needs EDR (Endpoint Detection and Response)​

For years my whole security plan was antivirus on every machine, and for most of small-firm history that was genuinely enough - nobody was targeting a two-attorney firm in Houma specifically. That assumption doesn't hold anymore, and this piece walks through why EDR - which watches how a device behaves instead of just scanning files against a known-bad list - is what actually catches the fileless, credential-theft attacks that are hitting firms right now.