Technology Advisor Blog

Ekaru Awarded GTIA Cybersecurity Trustmark for Excellence in Cybersecurity Practices

Ann Westerheim — Wed, 22 Apr 2026 14:43:58 GMT

Ekaru earned the GTIA Cybersecurity Trustmark, recognizing its commitment to secure, compliant IT practices and trusted client protection.

Ekaru, a leading provider of IT support, cybersecurity protection, cloud services, proudly announces its achievement of the Cybersecurity Trustmark issued by the Global Technology Industry Association (GTIA). The Trustmark confirms that Ekaru has undergone a rigorous review of its cybersecurity policies, procedures, and controls.

“Achieving the GTIA Cybersecurity Trustmark reinforces our promise to our clients: security isn’t a feature - it is our foundation,” said Dan Wensley, CEO of GTIA. “This recognition assures our partners and clients that their data is in trusted hands.”

The GTIA Cybersecurity Trustmark follows a detailed evaluation aligned with frameworks such as NIST and CISA. In addition, CREST-accredited third-party assessors ensure audit integrity to the Trustmark standard.

“Earning the GTIA Cybersecurity Trustmark reflects something we’ve always believed: the same security standards we recommend to our clients must be the standards we hold ourselves to every day. Small businesses can’t afford to treat cybersecurity as an afterthought, and we’re committed to helping our clients stay secure and confident as they grow.” Ann Westerheim, PhD. Founder and President of Ekaru.

As cyber threats continue to evolve, small and midsize businesses face increasing pressure to protect their operations, customer data, and reputation. The rapid adoption of AI has created new opportunities for efficiency and growth, but it has also introduced more sophisticated phishing attacks, social engineering, and automated threats that can target organizations of any size. For today’s SMBs, cybersecurity is no longer just an IT issue - it is a business priority directly tied to continuity, trust, and competitiveness. Ekaru is committed to helping clients navigate this changing landscape with practical security strategies, proactive support, and technology planning that not only reduces risk, but also empowers businesses to operate more efficiently, adapt faster, and compete with confidence.

About Ekaru - Ekaru is a trusted provider of managed IT services, cybersecurity, Microsoft 365 cloud solutions, and business communications for small and midsize organizations throughout the Boston area. We help businesses improve productivity, reduce risk, and gain peace of mind through responsive support and strategic technology guidance. With a focus on security, reliability, and long-term client relationships, Ekaru delivers practical solutions that help organizations operate efficiently and grow with confidence every day. For more information, visit ekaru.com.

About the Global Technology Industry Association - The Global Technology Industry Association (GTIA) is the only vendor-neutral, 501(c)(6) non-profit membership community connecting and representing the worldwide IT channel. We set our members up for success by providing benefits that include trusted resources and networking opportunities. In addition, the association sets industry standards that enable companies to build sustainable, secure and profitable businesses in an ever-changing technology landscape. Internationally, GTIA represents tens of thousands of professionals from thousands of ITSPs, vendors, distributors, and other companies serving the IT channel. GTIA was formerly known as the CompTIA Community (the membership arm of CompTIA). For more information, visit gtia.org.

Read the press release on EIN PressWire.

If you’d like a friendly second opinion on how your business is handling cybersecurity, or day-to-day IT support, we’re always happy to talk!

About the author:

Ann Westerheim, PhD is the Founder and President of Ekaru, a Technology Service Provider of cybersecurity and IT services for small and medium businesses in the greater Boston area. Ann is an accomplished technology innovator and leader with three engineering degrees from MIT. She has twenty years of high tech experience in research, advanced development, product development, and as an entrepreneur. Her career has spanned a vast range of technology endeavors including research in thin film semiconductors and superconductors, microprocessor fabrication, development of early Internet medical applications, and now focusing on the application of technology in business. She has an avid focus on the "last mile" of technology and decreasing the digital divide.

Today is Patch Tuesday: Why It Matters for Your Business

Ann Westerheim — Tue, 14 Apr 2026 14:55:29 GMT

April 2026 Updates Released Today

If your computer prompts you to restart today, you might be tempted to click Remind Me Later and move on with your day.

You wouldn’t be alone.

But that small pop-up is tied to one of the most important cybersecurity habits a business can have: staying current with updates.

Today is Patch Tuesday - the second Tuesday of each month, when Microsoft releases security updates, bug fixes, and system improvements for Windows and other Microsoft products. It happens quietly in the background for most people, but for IT teams and cybersecurity professionals, it’s a date we watch closely every single month. Microsoft publishes these releases through its official Security Update Guide each month.

At Ekaru, we pay attention to Patch Tuesday because these updates often fix the kinds of weaknesses attackers look for first. And while updates may seem routine, falling behind can create real risk.

What Is a Patch?

A patch is simply a software fix.

Think of it like repairing a lock, sealing a roof leak, or replacing worn brake pads. Small maintenance tasks may not feel urgent in the moment, but they help prevent much bigger problems later.

Software patches typically do three things:

Fix security vulnerabilities
Resolve bugs or glitches
Improve performance and reliability

Some months bring larger updates than others, but every month matters.

Why Patch Tuesday Is So Important

When Microsoft releases patches, they’re addressing newly discovered issues and improving system stability.

The challenge is that cybercriminals watch Patch Tuesday too.

Once fixes are released, attackers often study them to understand what was corrected. Then they look for businesses that haven’t installed those updates yet.

That creates an avoidable window of opportunity between patch available and patch installed.

This is one reason we’re so focused on patching at Ekaru. It’s not because updates are exciting. It’s because consistency matters, and delays can turn preventable issues into expensive ones.

Organizations like CISA regularly encourage businesses to prioritize remediation of known vulnerabilities and keep systems current as part of good cyber hygiene.

Whether you run a professional office, nonprofit, manufacturer, or local service business, routine updates matter more than most people realize

What Came Out in April 2026?

This month’s Patch Tuesday includes security updates across Microsoft products, along with several Windows 11 improvements that everyday users may actually notice.

Reported highlights for the April 2026 Windows 11 release include:

Improvements to the Windows Settings experience
Easier visibility and management of Smart App Control
Accessibility enhancements in Narrator
File Explorer usability fixes
Better support for certain display and graphics configurations
Reliability improvements for printing, audio, and Remote Desktop experiences

Microsoft also maintains a Windows Release Health dashboard where IT teams can track known issues, rollout status, and resolved problems after updates are released.

While some of these changes sound minor, small improvements can make a real difference across an entire business. A smoother, more stable computer experience means fewer interruptions and less frustration for employees.

And behind the scenes, security fixes remain the most important part of the monthly release.

Sometimes There are Unexpected Results

We were reminded recently that updates can sometimes bring small surprises. One local user found that after a Microsoft update, their default browser had been reset to Edge, so links and files were opening there instead of Chrome. It was a quick fix, but a good reminder that even routine updates can occasionally change settings and may need a little follow-up. There will be glitches along the way, even with the advance testing we do at Ekaru.

Why Businesses Often Fall Behind

We understand why updates get postponed. Most people are trying to get work done, not think about software maintenance.

For many small businesses across Massachusetts and Southern New Hampshire, keeping up with technology updates often falls to the bottom of a busy to-do list.

Common reactions sound like this:

“I’m in the middle of something.”
“I don’t want my computer restarting right now.”
“Everything seems fine.”
“I’ll do it later.”

Completely understandable.

But we’ve seen many situations where a computer appears to be working normally while quietly missing months of important updates. That usually isn’t discovered until there’s a bigger performance issue, security concern, or support emergency.

We often meet business owners across New England who assumed updates were happening automatically, only to learn several devices had quietly fallen behind. This is especially common in hybrid workplaces where laptops move between the office, home, and the road.

Routine patching helps reduce those surprises.

Why We Obsess Over It at Ekaru

Patching is about more than clicking Install Updates.

A well-managed update process includes:

Monitoring new releases
Watching for known issues
Scheduling updates thoughtfully
Confirming devices actually install them
Making sure reboots happen
Following up on failures or devices that missed the cycle

Because in the real world:

Laptops are shut down
Employees postpone reboots
Devices fall out of sync
Updates occasionally fail
Older systems need extra attention

This is the kind of behind-the-scenes work that good IT support handles quietly and consistently. When patch management is done well, it usually goes unnoticed - and that’s a good thing.

What Business Owners Should Ask

Today is a good reminder to ask a few simple questions:

Are our computers updating regularly?
Do we know when updates fail?
Are reboots actually being completed?
Are any systems too old to support properly?
Who is keeping an eye on all of this?

If those answers aren’t clear, it may be time for a conversation. If your business carries cyber insurance (and you should!), these questions matter even more. Many policies ask whether security updates, monitoring, and basic safeguards are in place. If there’s ever a claim, you’ll want to be confident that your real-world practices match what was represented on the application.

Final Thought

Patch Tuesday may not be flashy, but it plays an important role in keeping businesses secure, productive, and resilient.

The safest environments usually aren’t the most complicated ones. They’re the ones that are maintained consistently.

If you’d like a friendly second opinion on how your business is handling updates, cybersecurity, or day-to-day IT support, we’re always happy to talk.

About the author:

Color Coordinating Your Microsoft Outlook Inbox For Boosted Productivity

scarroll@ekaru.com (Sarah Carroll) — Wed, 08 Apr 2026 17:36:26 GMT

Have you noticed your inbox becoming more cluttered? Are you using flagged messages to keep track of important messages and everything else gets lost in the noise of your active inbox? Well, you’re not alone, and there’s a rather colorful solution to assist with organizing your emails that transforms how you interact with your inbox! Emails are more than just keeping in contact with your colleagues and vendors, it’s a task manager, documentation hub, and what keeps your overall daily operations functioning. However, without a structured approach to organization, Outlook can quickly become overwhelming, leading to missed deadlines, overlooked messages, and increased stress.

In today’s blog, we will dive into how to implement a highly effective Outlook organization system. At Ekaru, we specialize in Microsoft for businesses in the greater Boston metropolitan area and surrounding Massachusetts counties. Ensuring you and your team have the tools to maintain overall operations and react proactively to cybersecurity threats.

The Gravity Of A Disorganized Inbox

Before we begin diving into solutions, it’s important to understand that a cluttered inbox doesn’t just look messy, it actively harms productivity and security. In this can affect an individual’s work performance.

When employees spend excessive time searching for emails, re-reading messages, or trying to determine priorities, this results in:

Lost productivity hours across the organization that can affect stakeholders trust and work morale
Increased response times to clients and internal teams
Higher stress levels and decision fatigue
Missed opportunities and deadlines

Even more concerning, disorganization can create cybersecurity blind spots that threat actors can weaponize. Important alerts from IT or security tools can be buried, and phishing emails may go unnoticed amongst the clutter. A good solution; color coordination.

Color Coordination Has More Intention Than You Think

Color coding is one of the most underutilized productivity tools in Outlook. The human brain processes visual information significantly faster than text, and colors trigger immediate recognition.

Users can use various colors for folders in outlook with the intention of:

Instantly recognize priority levels of emails from colleagues and or essential deadlines
Differentiation between departments or clients instead of relying fully on your memory of who and what’s important
Identify action-required emails without opening them
Reduce the time spent scanning inboxes for a specific email

Here are some examples you can use for your folders when organizing:

Red = Urgent / Immediate Action Required
Yellow = Pending / Awaiting Response
Green = Completed / Informational
Blue = Client Communication
Purple = Internal Projects

By using color coordination, this creates a visual workflow in your system that reduces cognitive load and speeds up decision-making. If you are new to color coordinating files on your Outlook, here’s how you can implement a color-coded system.

How to Implement a Color-Coded System in Outlook

While Outlook does not allow direct folder color customization, its Categories feature is extremely powerful when used correctly.

Step-by-Step Strategy for Success:

1. Define Your Color System

Start by identifying the categories that matter most to your business:

Priority levels
Departments (Finance, HR, IT, Sales)
Clients or projects
Task status (Pending, Completed, Follow-up)

Consistency is key! Once your strategy is defined, this system should be standardized across your organization.

2. Create and Customize Categories

Within Outlook:

Navigate to Categorize → All Categories
Create new categories and assign distinct colors
Use clear, standardized naming conventions

For example:

“URGENT – Action Required” (Red)
“Client – Active Projects” (Blue)
“Finance – Billing” (Green)

3. Automate with Rules

Automation is where Outlook becomes truly powerful.

Set rules to:

Automatically assign categories based on sender or keywords
Move emails into designated folders
Flag high-priority communications

Examples:

Emails from your CEO → Automatically tagged Red
Emails containing “Invoice” → Assigned to Finance category
Client-specific emails → Categorized and routed instantly

This eliminates manual sorting and ensures consistency.

4. Train Your Team for Consistency

A system only works if everyone follows it.

Ensure:

Employees understand category meanings
Teams apply categories consistently
New hires are trained during onboarding

Without standardization, even the best system breaks down.

Advanced Outlook Organization Techniques

Color coding is just the foundation. To maximize efficiency, layer in these advanced strategies:

1. Have Rules in Place

You can use rules to assist in organization and prevent chaos such as:

Auto-sort incoming emails
Flag messages for follow-up
Assign categories instantly
Forward critical emails to team members

The Results: Less manual work, more consistency, and fewer missed messages.

2. Search Folders for Dynamic Organization

Search folders act as smart filters that update automatically.

Examples:

Unread Mail
Flagged for Follow-Up
High Importance Emails
Emails from Specific Clients

Instead of digging through folders, Outlook surfaces what matters most in real time.

3. Focused Inbox Optimization

Outlook’s Focused Inbox separates important emails from distractions.

Best practices:

Regularly train the system by marking emails as “Focused” or “Other”
Combine with categories for even stronger prioritization

Its also important to recognize that constant checking of your emails can also hinder your productivity and best practice can be to schedule when to review emails that way you can focus on deep work with no interruptions!

4. The Inbox Zero Methodology

Inbox Zero doesn’t mean having zero emails, it means zero clutter.

For every email:

Respond as soon as possible to avoid emails getting lost
Delegate as to how high of priority it places within your day to day
Archive what has been resolves or no longer relevant
Delete emails that may be spam or you have received by mistake. Overall, avoid letting emails sit unprocessed within your inbox.

Why Email Organization is Critical for Cybersecurity

Email remains the #1 attack vector for cyber threats. A poorly organized inbox increases vulnerability.

Key Risks of Disorganization:

Phishing emails blend in with clutter
Security alerts are overlooked
Employees rush through emails without scrutiny
Sensitive data is mishandled

How Organization Improves Security:

Clear categorization highlights suspicious emails
Priority tagging ensures alerts are seen immediately
Reduced clutter improves focus and decision-making
Structured workflows enforce better data handling

An organized inbox isn’t just efficient; it’s a frontline defense.

How Ekaru Can Elevate the User Outlook Experience

Implementing these strategies on a scale requires more than good intentions. It requires expertise, planning, and ongoing support. That’s where we, the Ekaru team, come in as your local IT and Cybersecurity ally!

Here are some ways we assist you on your Journey To success Using Outlook:

Customized System Design: We analyze your business workflows and design a tailored Outlook organization system. This can look like department-specific category structures, priority-based color frameworks, and folder hierarchies aligned with operations.

Automation & Integration: We configure advanced rules and automation to:

Eliminate manual sorting
Ensure consistency across users
Integrate with your broader IT ecosystem

Proactive User Employee Training: Even the best systems fail without user adoption.

We provide:

Hands-on training sessions
Documentation and best practices
Ongoing support for questions and improvements

Continuous Optimization: As your business evolves, we evolve with you along with your systems. We provide tools to help you evolve such as:

Monitor usage and effectiveness
Refine rules and categories
Scale solutions as your company grows

Bottom Line

When used correctly, Outlook is far more than an email tool, it’s a productivity engine. Color coordination, automation, and structured workflows allow your team to work faster, smarter, and more securely to maintain productivity. Take control of your communication, boost productivity, and strengthen your cybersecurity posture today.

Interested in learning more about our services and how they can assist you you’re your evolving cybersecurity needs, contact us today to schedule your consultation and discover how we can transform your Outlook environment to become more secure and productive across your business.

What Happens When You Click “Report Phishing” in Outlook? (And Why It Matters More Than You Think)

Ann Westerheim — Mon, 06 Apr 2026 16:07:25 GMT

📩 Most employees have seen it.

That little button in Outlook:
👉 “Report Phishing”
👉 “Report Junk”

During a recent Cybersecurity Town Hall with one of our clients in Boston, someone in the room asked about this button - The question most people haven't asked:

What actually happens when someone clicks it?
And more importantly - is anyone paying attention?

This is worth exploring.

🧠 Your Employees Are Your Early Warning System

Even with great email security tools in place, no system is perfect.

Phishing emails still get through.
That’s just reality.

No security tool is 100% perfect - some phishing emails will inevitably get through. Cybercriminals carefully craft their messages to look legitimate, avoiding obvious red flags, suspicious links, or known spam triggers.

What makes the difference is how quickly your business can detect and respond.

And that’s where this simple button becomes powerful.

🛑 What Happens When a User Clicks “Report Phishing”

When someone reports a phishing email in Microsoft Outlook, a few important things happen behind the scenes:

📤 1. The email is sent to Microsoft

Microsoft analyzes the message using global threat intelligence:

Suspicious links
Impersonation attempts
Malware indicators

This helps improve protection - not just for you, but across all Microsoft 365 users.

🗑️ 2. The email is removed from the user’s inbox

It’s typically moved to Junk or Deleted Items, reducing the chance of accidental clicks later.

👀 3. (Optional—but important) Your IT team can be notified

This is the part many small businesses are missing.

With the right configuration:

A copy of the reported email can go to a monitored inbox (like security@yourcompany.com)
Your IT provider can review it quickly
If needed, they can take action across the organization (the email can be removed for other users)

👉 Without this step, the report may only go to Microsoft - and your team never sees it. When a user reports a phishing email, it’s a positive step. Those reports go to Microsoft and help improve detection across the broader ecosystem. If you want to take it a step further, you can also choose to have those reports sent to someone within your organization so they can review and respond more quickly. This could get "noisy" but could also help with Security Awareness Training.

📧 What About “Report Junk”?

“Report Junk” is different.

It tells Microsoft:

“This is unwanted email”

But it does not trigger the same level of urgency or investigation.

No security response
No alerting
No organization-wide action

It helps improve filtering - but it’s not a threat response. For example, you may have signed up for promotional emails from your favorite store at some point in the past. Perhaps today you no longer wish to receive the weekly sales promotions from Kohls, or wherever. We recommend "unsubscribing" as a first course of action, but you could report them as "Junk" to clear them quickly from your inbox and reduce clutter. In this case, though, we do not recommend reporting as "Phishing", because its not really a phishing email. Even if you're annoyed, reserve the phishing flag for a legitimate security concern.

⚠️ Why This Matters for Small Businesses

Here’s what we see all the time:

One employee reports a phishing email
Another employee clicks the same email minutes later
The business didn’t realize it was a broader issue

That gap - between detection and response - is where risk lives.

🛠️ A Simple (and Often Overlooked) Security Upgrade

The good news?

You don’t need expensive security tools to improve this.

Most Microsoft 365 environments already allow you to:

Capture reported phishing emails
Route them to a designated inbox
Review and respond quickly

This turns your team into a real-time detection network. You can elect to configure to remove the email for everyone. This requires that everyone is on the same page, and you have trained users to reserve the "phishing" designation for actual phishing, so everyone doesn't lose access to, for example, a newsletter that is of value.

One quick reminder: avoid forwarding suspicious emails to coworkers to ask, “Is this phishing?” That well-intentioned step can spread the risk - someone may click it. Instead, use the “Report Phishing” button. We've seen this happen way too many times in our local community. In the ProofPoint State of the Phish Report, researchers found an intriguing statistic: 2.5% of people will click a suspicious link out of curiosity - even when they know they shouldn’t! So NEVER forward around suspected phishing emails!

💡 Cybersecurity for Main Street Takeaway

Cybersecurity isn’t just about software, and EVERYONE on the team has an active role to play.

It’s about visibility and response.

When your team clicks “Report Phishing,” that’s not just a button -
it’s a signal.

The question is:

Is anyone listening? Yes! Microsoft is receiving these reports, and you can also designate someone on your team to get the reports as well.

✅ What You Can Do Next

Make sure your “Report Phishing” button is enabled in Outlook
Configure reports to go to a monitored mailbox if you'd like that extra step
Talk to your IT provider about how reports are reviewed and acted on
Reinforce to your team: If something looks suspicious - report it

🔐 Final Thought

Even with the best tools in place, people are still your first line of defense.

But they can also be your fastest detection system -
if you give them a way to raise their hand and someone is ready to respond. Make it a habit to talk about cybersecurity on a regular basis with your team.

❓Got Questions about Cybersecurity?

If you have questions about your security setup - or want to make sure you’re getting the most out of tools you already have - reach out to Ekaru. We’re always happy to help. Contact Us

About the author:

Windows 11 Updates You Can Expect in April 2026

scarroll@ekaru.com (Sarah Carroll) — Wed, 01 Apr 2026 17:54:47 GMT

Last month, we discussed Windows 11 Updates that assisted individuals in increasing their overall security posture, productivity workflow, and expressive various widgets for user experience. As we are a quarter of the way through the year, a new and impactful wave of updates is approaching for those using Windows 11 systems.

In April, we can expect Windows 11 patch Tuesday updates (likely build 26200.8116, KB5079391) to arrive as scheduled within the second Tuesday of the month for various updates, along with some intentional changes to the taskbar functions, audio upgrades, customized usage of AI for users, and control over windows updates.

At Ekaru, we specialize in Microsoft knowledge and reinforcing security guidelines within the greater Boston and surrounding New England counties. Our goals is to provide businesses and individuals alike with up-to-date cybersecurity news, trends, Windows updates and more! The best advantage for a business is educational awareness and staying ahead of cybersecurity trends.

Task Bar Location Customization

After years of feedback, Microsoft is very much practicing social listening to improve user experience quality for all. The upcoming updates focus less on radical redesigns and more on refining the everyday experience: Improving performance, restoring user control, and thoughtfully integrating AI where it actually adds value.

One of the most anticipated changes is the return of taskbar customization. When Windows 11 first launched, it removed several legacy features, including the ability to reposition the taskbar, a change that frustrated many users as they had to outlet 3rd party sources to mimic the original functions. Thankfully, that is now being reversed!

Users will soon be able to:

Move the taskbar to the top, left, right, or bottom of the screen
Resize the taskbar for a more compact or expanded view
Use a redesigned context menu to quickly dock and adjust positioning

This update restores a level of familiarity and flexibility that many users relied on for productivity workflows, now eliminating the need for third-party tools with everyone in one place.

A More Thoughtful Approach to AI (Copilot)

Rather than aggressively embedding AI into every corner of the OS that seems to be a common trend, Microsoft is shifting toward a value-first approach with Copilot.

For those that may not know, a Value-First Approach in the context of Windows 11 refers to the design and development. Emphasizing on delivering users productivity, user-centric experiences, rather than offering a collection of new features. This is intended to create a more modern, secure, and user friendly operating system that accommodates for various working conditions a user may find themselves in.

Some changes include:

AI features will be introduced only where they provide clear benefits
Reduced pressure for users to engage with AI tools if they prefer not to based on their values or personal preferences.
A stronger focus on practical use cases, rather than feeling mandatory to try out due to freshness

This marks an important evolution, moving away from “AI everywhere” to AI where it makes sense so human touch is still present.

Greater Control Over Windows Updates

Have you noticed when moving over to Windows 11 the updates are quite frequent? You are not alone, and understandably, they interrupt workflows or force restarts at the beginning or in the middle of a busy work day. While Patch Tuesdays will always occur on the second Tuesday of the month, and other various roll out updates. You now have more control where you prefer to update to utilize productivity as much as possible.

The April 2026 updates aim to fix include:

Ability to skip updates during initial setup to come back at a later point when you have the proper downtime.
More flexible options to delay or schedule updates. On your terms.
Reduced forced restarts and interruptions
Smarter update timing based on usage patterns

This change directly addresses productivity concerns and puts users back in control of their systems.

File Explorer Gets a Performance Boost: Speed, Stability, and Efficiency

File Explorer is one of the most frequently used tools in Windows, and it's getting a significant upgrade in speed and reliability.

Some improvements include:

Faster search results and navigation
Quicker context menu response times
Improved performance when copying or moving large files
Faster launch times and overall responsiveness

These updates enhance everyday efficiency, especially for users handling large datasets or complex file structures. To which these improvements have a direct, measurable impact on:

Less time waiting for files to load
Improved efficiency when handling large datasets
A smoother overall experience in daily tasks

For businesses dealing with large volumes of data, these changes can significantly improve operational efficiency.

Widgets: Less Noise, More Personalization

Widgets are being refined to reduce distractions and improve usability.

What’s changing:

Quieter default settings with fewer intrusive updates
Better personalization options
A shift away from engagement-driven design toward user-controlled experiences

This aligns with a broader theme across Windows 11: less noise, more intention.

The 2026 Roadmap: Performance, Reliability, and Craft

Looking beyond April, Microsoft is focusing on three core pillars throughout 2026:

1. Performance

Faster application launch times
Improved memory efficiency for better multitasking
Consistent performance across long sessions without slowdowns

Users can run more applications simultaneously without sacrificing responsiveness.

2. Reliability

Fewer system crashes and improved driver quality
More stable Bluetooth, USB, printer, camera, and audio connections
Enhancements to the Windows Insider Program for clearer feedback and expectations
Easier switching between Insider channels

3. Craft (User Experience & Design)

Greater personalization across the OS
Reduced distractions during setup and daily use
Improved taskbar usability and workflow integration
More thoughtful and optional AI integration
A consistent emphasis on choice and control

Why These Updates Matter

These changes aren’t just incremental, they reflect a philosophical shift.

For users, this means:

More control over how your system behaves
Fewer interruptions during critical work
Faster performance in everyday tasks
A cleaner, more focused user experience

For businesses, it translates to:

Increased employee productivity
Reduced downtime from updates and crashes
Better long-term system stability

How Ekaru Helps Your Business Stay Ahead

Keeping up with Windows updates can be time-consuming, and risky if not managed properly. That’s where your local and reliable Managed Service Provider (MSP), the Ekaru team comes in.

Our team specializes in Windows Updates such as:

Plan and manage updates to avoid disruptions in your day to day workflow
Ensure compatibility across your systems and applications
Monitor performance and proactively resolve issues
Provide guidance on new features and best practices for teams to ensure they understand all update functions
Maintain security and compliance without sacrificing productivity

Instead of reacting to changes, we help you stay ahead of them.

Bottom Line

The April 2026 Windows 11 updates signal a clear direction: users come first.

With improved customization, smarter update controls, better performance, and a more restrained approach to AI, Microsoft is addressing long-standing concerns while setting a stronger foundation for the future.

Don’t let updates slow you down. Let us handle the complexity so you can focus on what matters most.

Contact us today to learn how our services can streamline your Windows 11 experience, improve performance, and keep your business running smoothly!

Not Sure If Your IT Support Is Good Enough? Here’s Where to Start

Ann Westerheim — Tue, 31 Mar 2026 19:53:54 GMT

We’ve had a few conversations recently with local business owners who all said some version of the same thing:

“I think our IT is fine… but I’m not really sure. Maybe we're not doing everything we should be doing.”

Nothing was obviously wrong. Systems were running. But underneath that was uncertainty - and when it comes to IT and cybersecurity, “I think we’re okay” isn’t the same as actually being protected.

Sometimes its the "One-man-show bottleneck":

“We’ve been working with the same IT person for years, but I think we’ve outgrown them. It’s getting harder to reach them, and when something goes wrong, we’re kind of stuck waiting.”

What most small businesses think “good IT support” means

When we ask what they expect from IT support, we usually hear:

“Fix things when they break”
“Be responsive”
“Keep things running”
“Help us with new computers”

That’s not wrong - but it’s incomplete.

That definition comes from how IT worked 10–15 years ago.

You may have the "No one told us" problem. We see this a lot:

“Honestly, we didn’t even know what MFA was - or that we needed it. No one had ever brought it up. Same with Windows 10 reaching end-of-life… we just assumed someone was keeping an eye on that.”

What good IT support actually looks like today

Today, good IT support isn’t just about fixing problems.

It’s about preventing problems, reducing risk, and giving you visibility into what’s really happening in your environment.

Here’s what that looks like in practice:

🔍 1. You have visibility - not just trust

You shouldn’t have to assume things are secure.

You should be able to answer questions like:

Are all devices up to date?
Is multifactor authentication enforced everywhere?
Has anyone logged in from an unusual location?
Are backups actually working and tested?

Good IT support gives you clear answers - not guesswork.

🛡️ 2. Cybersecurity is built in - not bolted on

A lot of small businesses still have:

Antivirus
Maybe a firewall
Some user training

But modern threats (especially identity-based attacks) require more than that.

You may have "Security Uncertainty":

“I think we’re secure… but if you asked me how or why, I wouldn’t be able to tell you.”

Good IT support includes:

MFA (Multi Factor Authentication) everywhere it matters: Something you know (like a password) plus something you have (like a code on your phone)
Email security and phishing protection
Monitoring for suspicious behavior (not just alerts)
Backup and recovery planning
Ongoing user security awareness. This needs to be part of the company culture. Cybersecurity depends on EVERYONE.

Not as add-ons - but as part of a cohesive security approach

🧠 3. Someone is thinking ahead for you

If your IT provider is only reacting to tickets, you’re missing a big piece.

You should have someone who is:

Planning hardware lifecycle (not waiting for failure)
Keeping an eye on Microsoft changes and risks
Advising on compliance requirements (Mass Data Security Law, CMMC, FTC Safeguards, HIPAA, etc.)
Helping you make decisions - not just execute them

We hear from a lot of SMBs that their experience is "reactive only":

“They fix things when they break, but that’s about it. We’ve never really had anyone sit down with us and talk about a plan or what we should be doing proactively.”

📊 4. You get guidance - not just technical fixes

Good IT support translates technology into business impact.

Something we hear a lot is the "Communication gap":

“Most of the time, we don’t really understand what they’re doing or why. It’s a lot of technical language, and we just kind of trust it’s handled.”

Better communication means explaining not just what’s being done, but why it matters - so you’re never left guessing or making assumptions.

Instead of:

“Your system needs patching”

You hear:

“Here’s the risk if we don’t address this - and here’s what we recommend. Here's WHY its a problem”

That’s the difference between IT support and IT partnership.

🚨 5. If something happens - you’ll know exactly what happened

This is one of the biggest gaps we see.

After a suspicious event, many businesses can’t answer:

Was anything accessed?
Was data exposed?
Are we okay?

Good IT support includes monitoring and visibility tools that can quickly surface what happened and help you take the right next steps.

It’s important to note - while these tools can reveal a significant amount of detail and give you a strong head start, they’re not a substitute for formal digital forensics. In the event of a confirmed incident, your cyber insurance provider will typically guide the response and may bring in a forensics team.

Our role is to help you get clarity quickly, preserve key information, and support that process - so you’re not starting from zero.

We recently worked with a local business owner who clicked on a malicious link and had their credentials compromised - Very smart person, just busy and made a mistake. Within minutes, we detected an unauthorized login, and using our monitoring tools, we were able to confirm that only a small number of emails were accessed and no files were touched.

That level of visibility made all the difference - and provided real peace of mind.

The real question: Where do you stand?

If you’re reading this and thinking:

“I’m not sure we could answer those questions”
“We rely a lot on trust”
“We haven’t really looked under the hood in a while”

You’re not alone - and it doesn’t mean something is wrong.

It just means it might be time for a closer look.

A simple way to sanity check your IT support

You don’t need a full audit to start.

Ask these 5 questions:

Do we know (not assume) that all our systems are up to date?
Is multifactor authentication enforced everywhere it should be?
Do we have visibility into suspicious login activity?
Are our backups tested - not just running?
If something happened tomorrow, would we know what was accessed?

If you’re unsure on even one of these, it’s worth digging deeper.

Final thought

Good IT support shouldn’t leave you wondering if you’re protected.

It should give you clarity, confidence, and a plan.

If you’re not sure where you stand…

We’ve been having more of these conversations lately with local small businesses, and they’re always helpful - no pressure, just a chance to look at things with fresh eyes.

If you’d like a second opinion on where things stand, we’re always happy to take a look.

About the author:

AI In Moderation: Protecting Your Business with an AI Acceptable Use Policy

scarroll@ekaru.com (Sarah Carroll) — Thu, 26 Mar 2026 21:01:42 GMT

With the increased usage of AI in our daily lives and the integration into our daily workflow, scammers have found sophisticated ways to target individuals and multiple enterprise businesses alike. For businesses, an essential procedure to consider is monitoring your employees’ AI usage, whether through authorized AI tools, data protection and privacy, along with prohibited uses.

At Ekaru, we assist small to medium sized businesses in ensuring they have the powerful tools to stay ahead of the evolving geopolitical environment of cybersecurity. Located in the greater Boston area, we assist users through 24/7 monitoring of their accounts, endpoint detection, and cybersecurity awareness training that allows businesses to make thoughtful decisions when facing scams within their inbox. In today’s blog, we will go over why having an AI acceptable use policy is essential to keeping your business and users safe!

What Is an AI Acceptable Use Policy?

To start off our discussion, AI Acceptable Use Policy (AI AUP) is a formal document that outlines the rules, boundaries, and expectations for employees using AI technologies within the workplace.

These policies are intended to help businesses stay protected, in which they cover:

Approved and prohibited AI tools
Data privacy and security requirements
Ethical guidelines
Compliance with legal and regulatory standards
Monitoring and enforcement procedures

Without these guardrails, organizations run a risk of inconsistent usage, compliance violations, and reputational damage if their AI tools become exploited or fall into the wrong hands.

Core Components of an Effective AI AUP

A well-designed AI Acceptable Use Policy should include:

Approved AI tools and platforms
Data usage restrictions
Required human oversight
Security and access controls
Employee training programs
Monitoring and enforcement procedures

Why Businesses Must Monitor AI Usage

While AI tools can significantly enhance productivity, they can also create blind spots if left unmanaged. Hackers can then exploit these blind spots. Monitoring AI usage is not about restricting innovation; it’s about ensuring safety, compliant, and effective adoption.

Why Monitoring Is Essential

Data Protection Risks: Employees may input confidential company or customer data into public AI tools, potentially exposing sensitive information. AI will remember your company name and input data, then hackers looking to create phishing attempts on you using AI can already have this information in store.
Regulatory Compliance: Improper AI usage can violate industry regulations and create legal exposure.
Intellectual Property Concerns: Sensitive business information may unintentionally be shared or reused. It’s best to keep details about your business while doing a prompt as cryptically as possible.
Inconsistent Outputs & Decision Risks: AI can produce inaccurate or biased results that impact operations. It’s essential while AI can provide a stable structure, it’s best to have human touch by double checking work and making edits as needed.
Shadow AI Usage: Shadow AI usage is described as an employee using unauthorized tools within their workflow that runs the risk of introducing security vulnerabilities without IT oversight.

Business Impact of Implementing an AI AUP

Organizations that implement a strong AI AUP gain both defensive and strategic advantages, which can look like the following:

Reduced Security Risks: By reducing security risks, you are preventing data leakage within your company, along with limiting your business’ overall exposure to malicious tools disguising as AI applications.
Improved Operational Consistency: It’s essential to keep operations flowing smoothly. By having strong AI AUP procedures in place, businesses can properly regulate AI usage across departments and establish clear expectations on AI in daily workflows that create success rather than setbacks.
Enhanced Trust and Transparency: Understandably, while some folks may be skeptical using AI depending on their values, those that use AI properly within their business can demonstrate responsible AI governance that allows them to also build confidence with their customers.
Regulatory Readiness: Helping businesses stay ahead of evolving compliance requirements.

Not All AI is Created Equal

AI first started making waves in its current form back in 2023. Today, there are increased discussions between users across all social media platforms if something is authentic or AI. With how AI has evolved into our daily lives compared to in 2023 and earlier, so does the number of malicious or low-quality tools posing as legitimate solutions. Businesses must recognize that not all AI applications are trustworthy or secure.

Insights from Recent Cybersecurity Findings

Fake AI Apps Are Being Used for Data Theft: Malicious apps impersonate legitimate AI platforms to trick users into downloading them. These apps often collect sensitive data, credentials, or install spyware.
AI-Themed Malware Is Rapidly Increasing: Cybercriminals are exploiting the popularity of AI tools by disguising malware as trusted platforms, specifically targeting businesses.
Phishing Campaigns Using AI Branding: Fake invitations, such as “exclusive ChatGPT access” are being used to lure users into clicking malicious links or downloading harmful files under the disguise as boosting productivity tools.

What This Means for Your Business

Without proper controls:

Employees may unknowingly use compromised tools
Sensitive business data can be exposed
Security incidents can escalate quickly

An AI Acceptable Use Policy acts as your first line of defense, ensuring only trusted, vetted tools are used.

How Your Local MSP Ekaru Helps Businesses Take Control of AI

Adopting AI safely isn’t just about creating a policy, it requires ongoing oversight, expertise, and adaptation. At Ekaru, we help businesses move from uncontrolled AI usage to a secure, structured, and strategic approach.

Our Approach to AI Governance

Custom AI Acceptable Use Policy Development: Your policy is tailored to your workflows, industry, and risk level
AI Tool Vetting & Approval: We evaluate AI platforms before they enter your environment, and secure, compliant, and business-ready tools are approved
Real-Time Monitoring & Risk Detection: 24/7 monitoring to detect threats like phishing attempts, malicious downloads and identify unauthorized or risky AI usage.
Employee Training That Actually Sticks: The first step to preventing cyber attacks on a business is through education and employee training. Providing courses on what is safe versus what is risky when it comes to AI applications and practices.
Data Security & Compliance Alignment: Protect sensitive data across all AI interactions, and ensuring alignment within various industry standards and regulations.

Why Businesses Choose Ekaru!

AI is moving fast, and most businesses don’t have the internal resources to keep up with both innovation and risk management.

That’s where we provide a measurable difference:

We simplify AI adoption without slowing your team down
We reduce risk without limiting productivity
We turn AI from a liability into a competitive advantage

Instead of reacting to problems after they happen, we help you stay ahead of them.

Bottom Line

AI is a powerful enabler of innovation but without governance, it becomes a liability. An AI Acceptable Use Policy is not just a compliance document; it is a business-critical safeguard.

With the right strategy and the right partner, businesses can:

Embrace AI with confidence
Protect their data and operations
Build a foundation for long-term, secure growth

AI isn’t slowing down. The question is whether your business is prepared to use it safely. Interested in learning how you can implement an AI Acceptable Use Policy into your business? Contact us today to have a 15 minute conversation, we will meet you where you are to help you move forward!

Scammers Love Tax Season: The IRS Dirty Dozen to Watch in 2026

Ann Westerheim — Tue, 24 Mar 2026 18:38:53 GMT

Every year, the IRS releases its list of the “Dirty Dozen” - the most common tax scams they’re seeing across the country.

And every year, we have the same conversation with clients:

“I got an email that looked official… I just wanted to double-check before I clicked anything.”

This year’s list for 2026 is a reminder of something we’re seeing more and more - scammers aren’t just targeting individuals anymore. They’re going after small businesses, nonprofits, and busy teams who don’t have time to second-guess every message.

Let’s break down what matters most - and what to watch for.

The IRS “Dirty Dozen” tax scams for 2026 highlight the most common ways scammers target taxpayers and small businesses - from phishing emails and fake charities to misleading tax credits and identity theft. Understanding these scams can help you avoid costly mistakes, protect sensitive information, and reduce your risk during tax season.

Why This Matters More Than Ever in 2026

Tax scams aren’t new. But they are getting more convincing.

The IRS continues to warn that many of these scams:

Look like they come from trusted sources
Use urgency to pressure quick decisions
Target people during already stressful times (like tax season)

What’s changed is how polished and believable these scams have become. With better design, more personalized messaging, and even AI-generated content, it’s getting harder to tell what’s real.

👉 This is where we often see even the most careful business owners get caught off guard.

The Biggest Tax Scam Trends We’re Seeing Right Now

Here's an overview of the "Dirty Dozen" list from the IRS. Here is a full list with a description in plain English about what it means.

1. IRS impersonation by email and text (phishing + smishing).

These messages may look official - logos, formatting, even “case numbers.”

They often say things like:

“You have a pending tax issue”
“Immediate action required”
“Click here to avoid penalties”

What to know:
The IRS does not initiate contact this way.

👉 Watch out for:
We’ve had clients forward emails that looked incredibly real to other people on the team and then suddenly the email is from a "trusted source" - Talk to your team!

2. AI-Enabled IRS Impersonation by Phone (Robocalls, Voice Mimicry, Spoofed Caller ID)

Phone scams are getting more advanced - and more convincing.

Scammers are now using:

Robocalls that sound more natural (Cyber criminals use AI too!)
Spoofed caller ID to appear legitimate
AI-generated voices that can mimic real people

These calls often create urgency or fear, pushing you to act quickly.

What to know:
The IRS typically contacts taxpayers by mail first. They will not call to demand immediate payment, threaten arrest, or leave urgent prerecorded messages.

👉 Watch out for:
We’ve seen situations where a call looks legitimate because the caller ID appears to match a real organization - or even a known contact.

That false sense of familiarity is what scammers are counting on.

If something feels off, hang up and call back using a number you trust (like the official IRS website or your known contact). And as AI tools become more common, it’s also worth double - checking any tax advice or calculations they generate - don’t take them at face value.

3. Fake Charities

Scammers often take advantage of tragedies and disasters by creating fake charities.

They use emotional appeals to:

Encourage quick donations
Collect personal or financial information
Take advantage of people trying to do the right thing

What to know:
Charitable donations are only tax-deductible if they go to a legitimate, IRS-recognized organization.

👉 Watch out for:
We often see donation requests come through email or even shared within teams, especially after a major event. Someone wants to help, shares the link internally, and before you know it, multiple people are donating to something that hasn’t been verified.

A quick check can make all the difference. If you’re not sure, take a moment to confirm the organization is legitimate before clicking or contributing.

4. Misleading Tax Advice on Social Media

“Tax hacks” are everywhere right now, and some of them are flat-out wrong.

These posts often:

Promise unusually large refunds
Suggest writing off personal expenses as business costs
Encourage claiming credits you may not qualify for

What to know:
Following bad advice - even if you found it online - can lead to refund delays, audits, penalties, or worse. If a return is knowingly inaccurate, it can also lead to serious consequences.

👉 Watch out for:
We’ve had conversations with clients who came across something online that sounded legitimate - especially when it’s explained confidently or backed by lots of comments.

The challenge is, these posts rarely apply to your specific situation.

If something seems like a “shortcut” or a loophole, it’s worth double-checking with a trusted source before acting on it. A quick question now can prevent a much bigger issue later.

5. Identity Theft Involving IRS Online Account Access

Scammers may try to access your IRS online account using stolen personal information, or offer to “help” set it up while collecting sensitive details.

This can include:

Social Security numbers
Login credentials
Financial or tax information

What to know:
You should always create and access your IRS account directly through IRS.gov, not through a third party who reaches out to you.

👉 Watch out for:
We’ve seen situations where someone offers to “walk you through” setting up an account, especially if it feels confusing or time-sensitive.

But handing over that kind of information - even with good intentions - can open the door to identity theft.

When it comes to accounts like this, it’s always safer to go directly to the source and keep control of your own access.

6. Abusive Undistributed Long-Term Capital Gains Claims (Form 2439)

This one is a bit more technical, but the idea is simple.

Some scammers are encouraging people to claim refunds using Form 2439, even when they don’t qualify.

These schemes may involve:

Claiming credits tied to investments you don’t actually have
Using fake or inflated numbers
Referencing well-known organizations to make the claim seem legitimate

What to know:
This credit is meant for very specific situations involving certain investment funds or real estate trusts. Most taxpayers won’t encounter it in normal filings.

👉 Watch out for:
If you’re being told you qualify for a credit you’ve never heard of - especially one tied to investments you don’t clearly recognize - that’s a sign to pause.

We’ve seen scams become more convincing by name-dropping legitimate organizations to build trust.

When something gets overly complex or unfamiliar, it’s always worth getting a second opinion before moving forward.

7. Bogus “Self-Employment Tax Credit” Promotion

This scam targets self-employed individuals with promises of large refunds.

You may see:

Ads or messages promoting a “special” tax credit
Claims that it applies broadly to freelancers or business owners
Little to no review of your actual financial situation

What to know:
Many taxpayers simply do not qualify for this credit. The IRS is closely reviewing these claims, and filing incorrectly can lead to audits, delays, or penalties.

👉 Watch out for:
We’ve seen these promoted in ways that make it sound like an easy win - especially for busy business owners who don’t have time to dig into the details.

If someone is encouraging you to claim a credit without fully understanding your situation, that’s a red flag.

It’s always better to take a few extra minutes to verify than deal with a much bigger issue later.

8. Ghost Preparers

A “ghost” preparer is someone who completes your tax return but refuses to sign it or include their Preparer Tax Identification Number (PTIN).

At first glance, everything may seem normal - but behind the scenes, they’re avoiding accountability.

What to know:
If a preparer won’t sign your return, that’s a major red flag. You, as the taxpayer, are still legally responsible for everything that gets filed.

👉 Watch out for:
We’ve seen situations where someone offers quick, low-cost help - but disappears when questions come up later.

Another warning sign? Being asked to sign a blank or incomplete return.

A trustworthy tax professional will stand behind their work, include their credentials, and make sure you understand what’s being filed on your behalf.

9. Non-Cash Charitable Contribution Schemes

Some scams involve donating items like property or art - and then inflating their value to claim a much larger tax deduction.

These schemes are often promoted as a way to:

Significantly reduce your tax bill
Offset large amounts of income
Take advantage of “special” donation strategies

What to know:
The IRS is actively reviewing these types of claims. If values are exaggerated or unsupported, it can lead to delayed refunds, audits, or penalties.

👉 Watch out for:
We’ve seen these positioned as sophisticated tax strategies, sometimes with polished presentations or complex explanations.

But if the main message is that you can dramatically reduce your taxes through a single move, it’s worth taking a closer look.

When something sounds too good to be true - especially when it comes to taxes - it usually is. And honestly, that old advice still hasn’t changed.

10. Overstated Withholding Schemes

This scam involves inflating how much tax was supposedly withheld from your income to generate a larger refund.

It may involve:

Reporting incorrect income amounts
Claiming withholding that never actually happened
Submitting forms with fabricated or altered information

What to know:
The IRS cross-checks this information with employer and financial records. If something doesn’t match, your return may be delayed - or flagged for further review.

👉 Watch out for:
We’ve seen variations of this where it’s presented as a “strategy” to increase your refund, often with complicated explanations or references to different tax forms.

But at the end of the day, if the numbers don’t reflect reality, it’s going to raise red flags.

This is one of those situations where trying to “game the system” can quickly turn into penalties or enforcement action.

11. Spear-Phishing and Malware Campaigns Targeting Businesses and Tax Professionals

Scammers are sending highly targeted emails that appear to come from new clients or legitimate contacts.

These messages often include:

Attachments or links that install malware
Requests for sensitive client or financial information
Familiar-looking conversations pulled from real (but compromised) email threads

What to know:
These attacks are designed to get inside your systems - once that happens, attackers may access sensitive data, financial information, or client records.

👉 Watch out for:
We’ve seen emails that look like completely normal business inquiries - sometimes even continuing a real email thread from a previously compromised account.

That’s what makes them so convincing.

If something feels even slightly off - like an unexpected attachment, a strange request, or a subtle mismatch in the sender’s address - it’s worth taking a second look before clicking or responding. Also note that many cyber criminals abuse legitimate tools like Microsoft, Intuit, or DocuSign, so these emails WILL get through basic email security scanning.

12. Aggressive or Misleading Offer in Compromise Marketing (“OIC Mills”)

The IRS Offer in Compromise (OIC) program can help some taxpayers settle their tax debt - but it’s not a fit for everyone.

Some companies (often called “OIC mills”) take advantage of this by:

Promising to settle tax debt for far less than owed
Charging high upfront fees
Encouraging people to apply even when they’re unlikely to qualify

What to know:
The program is legitimate - but eligibility is specific. Not everyone qualifies, and applying without meeting the criteria can waste time and money.

👉 Watch out for:
We’ve seen these services advertised in ways that sound like a guaranteed solution - especially when someone is feeling stressed about tax debt.

High-pressure sales tactics are a red flag.

If you’re considering something like this, it’s worth taking a step back and checking eligibility through official IRS resources or getting a second opinion before committing.

What All of These Scams Have in Common

Even though they look different, most of these scams rely on the same tactics:

Urgency – “Act now or face consequences”
Authority – Pretending to be the IRS or a trusted professional
Opportunity – Promising money, refunds, or savings
Confusion – Catching people when they’re busy or overwhelmed

If something checks more than one of these boxes, it’s worth pausing.

What We Recommend to Clients (Simple, Practical Steps)

You don’t need to become a cybersecurity expert to stay safe. A few simple habits go a long way:

Slow down – Scammers rely on quick reactions
Don’t click first – Go directly to official websites instead
Verify requests – Especially anything involving money or sensitive data
Train your team – One click from one employee can impact the whole organization
Have a go-to IT partner (like Ekaru!)– Someone you can quickly ask, “Does this look right?”

👉 If you DO click on a bad link, this is where security awareness training and security tools make a big difference. Encourage your team to speak up, and if you're not already applying email security tools, a small investment can make a BIG difference!

A Quick Note on the IRS Itself

It’s worth repeating:

The IRS will not:

Email, text, or message you on social media to demand payment
Threaten immediate arrest or legal action
Ask for sensitive information through unsecured channels

When in doubt, go directly to IRS.gov or speak with a trusted advisor.

Final Thought: You Don’t Have to Figure This Out Alone

If there’s one thing we’ve learned, it’s this:

Most people who fall for scams aren’t careless - they’re busy.

They’re running businesses, managing teams, and trying to keep everything moving. And scammers take advantage of that.

If you ever get something that feels “off,” even slightly, it’s worth a second look.

We’re always happy to take a quick look and give you a straight answer - no pressure, no judgment.

Sources & Further Reading

About the author:

If Someone Logged Into Your Microsoft 365 Today, Would You Know?

Ann Westerheim — Fri, 20 Mar 2026 19:55:10 GMT

Business email compromise, or BEC, is not always about a suspicious email. Sometimes the real danger is an attacker quietly using a real account while your business has no idea.

When most people think about email security, they picture a suspicious message landing in someone’s inbox. Maybe it has a strange link, awkward wording, or a request that feels just a little off.

That is still a very real problem. But some of the most damaging email-related attacks do not start with an obviously fake message. They start when a criminal gets access to a real Microsoft 365 account and begins quietly looking around.

That is what makes business email compromise so dangerous.

In many cases, there is no loud warning sign. No flashing red light. No obvious signal that someone is inside a mailbox, reading conversations, watching financial activity, or waiting for the right moment to step in.

And for many small and midsized businesses, the uncomfortable question is this:

If someone were accessing your Microsoft 365 right now, would you know?

Business Email Compromise Often Looks Normal

Business email compromise is one of the most effective threats facing small businesses because it often blends in with everyday work. Instead of sending a generic scam email to hundreds of people, an attacker may gain access to a real account and take their time. They may read messages, learn how your team communicates, and watch for the right opportunity involving payroll, invoices, payment changes, or a sensitive customer conversation.

Then, at exactly the wrong moment, they step in.

The message may come from a real account.
The tone may sound normal.
The request may fit the conversation.

That is why these attacks can be so hard to spot.

“But We Have MFA” Is Not the End of the Story

Multi-factor authentication is incredibly important. Every business should be using it. It adds a critical layer of protection and stops many common attacks.

But MFA is not the same thing as guaranteed protection.

If an employee clicks on a phishing email, an attacker may still be able to get in through techniques like token theft. In plain English, that can mean the attacker captures the proof that the user already successfully signed in, allowing them to act like that user without having to go through the login process the normal way.

We've seen examples recently of people clicking on a link for a shared file, and then being prompted to log into Microsoft 365, sometimes by scanning a QR Code. This can look like an extra layer of security, but its actually a trick to steal your credentials. This is one reason Security Awareness Training matters so much - The extra login could appear like enhanced security to an untrained person, or could just slip by for a person who's very busy. Employees need help recognizing phishing attempts before they click, because even strong protections can be undermined when someone is tricked at the wrong moment.

MFA matters. Security Awareness Training matters. But neither one means a business would automatically know if an account has been compromised.

The Real Problem for Many SMBs: No Visibility

A lot of small businesses have tools designed to block bad email. That is important, but it is only one part of the picture.

What is often missing is visibility into what happens if a real account is compromised, and automated actions to freeze the account.

Could you tell if:

someone logged into Microsoft 365 from an unusual location?
a mailbox rule was created to quietly hide certain messages?
someone was reading email behind the scenes before taking action?
a user account started behaving in a way that did not match normal activity?

Without the right detection in place, many businesses are essentially flying blind.

And that is where business email compromise becomes especially dangerous. It can look completely ordinary until the damage is already done.

We’ve Seen the Difference Firsthand

In the past few months, we have seen several business email compromise cases where the signs of compromise could be analyzed quickly using the right tools. In those situations, it was possible to understand what was happening and stop it almost immediately, which can make a huge difference in the outcome.

Even with strong email protection and regular Security Awareness Training, people are still people. All it takes is the right message at the wrong moment.

Recently, we worked with a business where a user interacted with a phishing email. This is exactly the kind of situation that makes many organizations nervous, because the immediate question is: Did anything happen behind the scenes?

In this case, we were able to analyze the activity right away using tools designed to detect suspicious account behavior inside Microsoft 365.

The result was reassuring.

There was no evidence of unauthorized access.
No unusual logins.
No mailbox rules created.
No signs that the account had been used in a way it shouldn’t have been.

Just as importantly, we had clear visibility to confirm that.

When someone clicks, the real question is: what happened next - and can you prove it?

How's that for peace of mind?

We have also seen the other side of it.

When that visibility is not in place, it becomes much harder to answer the questions that matter most. Is someone in the account right now? What did they access? How long have they been there? What changed? Who else may be affected?

That uncertainty is a big problem, especially when time matters.

Why This Hits Small Businesses Hard

Sometimes small business owners assume they are not likely targets, or that attacks like this mainly affect larger organizations. Unfortunately, that is not how attackers think. Criminals can send out a million emails at no cost, and all they need are a few clicks to earn a payday.

Small and midsized businesses are often appealing because they move quickly, rely heavily on email, and may not have the same level of monitoring in place as a larger company. If an attacker can get into a real account and stay unnoticed, that can be enough.

And the consequences are not limited to financial fraud. A compromised Microsoft 365 account can affect customer trust, internal operations, vendor relationships, and your team’s confidence in what is real.

Good Security Is Not Just About Prevention

We all want to stop attacks before they happen. Of course we do.

But good security also means being able to detect suspicious activity quickly and respond before a bad situation gets worse.

That includes:

strong phishing protection
multi-factor authentication
Security Awareness Training
careful account and access management
visibility into suspicious account and identity activity inside Microsoft 365

Because if someone does get through, the question becomes how quickly you can tell.

And that can be the difference between a close call and a much bigger problem.

A Better Question to Ask

If your business relies on Microsoft 365 every day, it is worth asking:

Would we know if one of our accounts had been compromised?

Not eventually.
Not after a customer notices something odd.
Not after money is sent to the wrong place.
Not after someone says, “I never sent that.”

Would you know soon enough to do something about it?

That is a much more important question than many businesses realize.

Smart, Practical Steps Can Make a Big Difference

Business email compromise is not just about suspicious emails anymore. Sometimes the bigger risk is that an attacker is using a real account in a way that looks perfectly normal from the outside.

That is why prevention matters. It is why Security Awareness Training matters. And it is why visibility matters.

If you’re not sure whether your business could spot this kind of activity in Microsoft 365, it may be time for a closer look. Multi-factor authentication, Security Awareness Training, and strong email protection all play an important role - but visibility is just as critical. Monitoring for suspicious activity helps you catch what slips through and stop it before real damage is done.

If you would like a second set of eyes on your Microsoft 365 security, we’re always happy to have a practical, no-pressure conversation about what you have in place today and where there may be gaps. Contact us!

About the author:

Spring Cleaning Your Electronics: How to Free Up Space and Protect Your Data

scarroll@ekaru.com (Sarah Carroll) — Thu, 19 Mar 2026 13:51:38 GMT

Spring is just around the corner! You know what that means? It’s time for your annual spring cleaning for clothing, around the house cleaning, and anything that no longer serves you. Today, we will be focusing on spring cleaning: Technology edition.

Whether you work within a large or small business, technology is frequently evolving, requiring many to update devices to handle refined daily workflow applications. You may have a closet dedicated to old monitors and various devices, all just collecting dust, unsure how to properly dispose of them. In this blog, we will go over tips and tricks on how to clean up your technology space, either within your computer or your physical surroundings. At Ekaru, we cultivate within our community, we serve local small and medium-sized business located in the greater Boston area and surrounding Massachusetts counties with their cybersecurity and IT needs.

Safely Discard Your Digital Footprint

Like textiles, there are different approaches to methods for discarding items that don’t affect the environment, or cause a hazard in its disposal methods. But did you know, if you do not properly dispose technology, your sensitive information could be at high risk falling into the hands of a hacker who can still extract ‘deleted’ files? You may believe you cleared your laptop, but if the memory drive is still present when thrown away, hackers can recover information regarding your digital history, photos, videos, documents, passwords and more from anywhere. When disposing of technology, it’s best to go with professionals that handle electronics, not daily trash, as hackers view this as an easy way to obtain unsuspecting victims’ information.
For businesses, the consequences are even more serious. Improper disposal of company devices doesn’t just risk a single person’s database can expose entire systems, customer databases, and proprietary information. Many major data breaches have occurred not through sophisticated hacking, but through simple negligence like discarded hardware.

Risks Businesses Face From Improper e-waste Handling:

Data breaches involving customer or employee information
Legal penalties for violating data protection laws (such as HIPAA, GDPR, etc.)
Loss of intellectual property or trade secrets
Reputational damage and loss of customer trust
Financial losses from lawsuits, fines, and incident response
Potential exposure of internal systems, making future cyberattacks easier

The good news is that these risks are entirely preventable with the right approach. Whether you’re an individual or a business, secure disposal practices can eliminate the chances of your data falling into the wrong hands.

Clearing Out Your Digital Space

Overtime, you may have accumulated screenshots, photos, videos, and various unused apps that have taken up space within your storage. One of the best feelings is finally finding the time to go through a handful of screenshots on your laptop or camera roll (if they’re not already connected to one another) clearing up that space for even more memories.

Tips To Clear Your Digital Space:

Go through a handful of photos at a time. Ask yourself; 'Have I accomplished what I wanted to within this screenshot?’ If yes, delete away! If not, hang on to it for a later point.
For photos, check if you have multiple duplicates of one specific photo and delete the ones you do not need if they’re similar.
Apps. If you have no memory of opening the app within the last several months and or it is a game that distracts you, it’s better to delete the app. Allowing you to clear up some additional space in your phone/desktop’s digital storage.
Back up important files to your cloud service of choosing

Security should be a central part of your spring-cleaning process. Old accounts, saved passwords, and outdated software can all become entry points for hackers. Tightening your digital security ensures that your information stays protected even as you clean things out

Security-Focused Cleanup Steps:

Update your operating system and all apps to the latest versions. Ideal for no security gaps that older updates may have accumulated
Change passwords for important accounts and use a password manager for better security hygiene
Enable two-factor authentication (2FA) wherever possible for additional layers of security
Log out of devices you no longer use or recognize
Review account permissions for apps connected to services like email or social media
Sign out or delete old online accounts you no longer use

When it comes to physically cleaning out old electronics, the stakes are even higher. Simply deleting files or doing a quick reset isn’t enough, data can often be recovered if it’s not properly erased. Before donating, recycling, or discarding any device, you need to ensure your personal information is completely wiped.

How Ekaru Can Help Discard Your Electronics Safely

At Ekaru, we aim to support our community through assisting local businesses and individuals alike in ensuring you are protected against hackers and sophisticated social engineering attacks hard to identify at first glance. This also includes an event specifically catered to recycling electronics. Collaborating with a local electronics disposal company, e-waste Solutions. Where we take any of your old electronics and dispose of them properly for you so you have peace of mind. Hard drives are shredded to ensure no data is ever recovered from them!

Items We Take - Personal Or Business:

Laptops
Cell Phones
Printers
iPads
Tablets
Monitors
Old CD players
Speakers
Landlines/telephones
Security tools
TVs
And more!

For additional security measures, we also take SD cards or other various memory cards and have those discarded for additional peace of mind. That way, you don’t run the risk of hackers obtaining any information if they were to use recovery tools.

Bottom Line

Spring cleaning your electronics is about more than just freeing up storage or getting rid of old devices, it’s about taking control of your digital footprint and protecting your information from unnecessary risk. Every file you delete, account you secure, and device you properly dispose of reduces the chances of your data falling into the wrong hands. Whether you’re clearing space on your phone or responsibly retiring outdated hardware, these small actions add up to stronger privacy, better performance, and greater peace of mind.

Ekaru's most anticipated and quarterly electronics recycling event is coming up! On Tuesday April 21^st from 10:30am to noon we will have eWaste Solutions truck at our office and gladly discard all electronics securely. Can't make it to drop off your electronics? You can stop by our office before the event! Dropping off your devices at our office beforehand is strongly encouraged.
If you're looing to increase your businesses cybersecurity needs, or even clear out closets filled with electronics this spring, let's connect!