One of the questions we hear all the time is: “We have spam filters—so why are these phishing emails still getting through?” Sometimes, it’s said with a little more heat:
“Why don’t these security tools actually work?”
Technology Advisor Blog
Ann Westerheim
Recent Posts
Why Some Phishing eMails Still Get Through (Even with Good Security Filters)
Posted by Ann Westerheim on 7/10/25 10:02 AM
Tags: phishing, cybersecurity
Windows 11: Small Differences That Can Feel Big (and How to Navigate Them)
Posted by Ann Westerheim on 7/8/25 10:45 AM
Microsoft is ending support for Windows 10 on October 14, 2025 and the time to start planning is now. We work with a lot of local businesses in the Boston area, and one of the things we hear a lot is - later! It's always a little stressful to think about making a change, and when your "to do" list is long, this is easy to put on the back burner. Delaying your Windows 11 upgrade will only add risk and stress later, so get started now!
If you have a relatively new system, you probably won't need to purchase a new computer - you'll likely be able to just do a software update, which keeps costs a lot lower. When you're on Windows 11, you won't need another upgrade for many years (but security updates along the way are always important).
Read MoreWhy I Changed My Out of Office Auto-Reply - And Why You Should Too
Posted by Ann Westerheim on 7/3/25 10:06 AM
Are you sharing too much information in your Out of Office message? One of our core values at Ekaru is being "Friendly and Helpful". In that spirit, I used to include a lot of information in my Out of Office Auto-Reply... because I wanted to be friendly and helpful!
Read MoreTags: Cybersecurity, email scams, cybersecurity, Cybersecurity, Travel
What Is a Pen Test - and Why Small Businesses Can't Ignore It
Posted by Ann Westerheim on 6/27/25 4:08 PM
Penetration testing (or pen testing for short) is a proactive way to protect your business from cyberattacks. It simulates real-world attacks to identify vulnerabilities before cybercriminals can exploit them. For small businesses, often working with limited security resources, pen testing is a critical tool to uncover hidden risks, meet compliance requirements, and strengthen defenses.
Your business data and customer information need strong protection to maintain trust and meet compliance standards. Modern automated tools make professional security testing both accessible and cost-effective for smaller companies. Through regular testing, you can build a clear roadmap to strengthen your defenses and stay ahead of emerging threats.
Read MoreTags: security protection, business continuity, cybersecurity, data security, cybersecurity training, pen test, Penetration Testing
Cyber Insurance: What Small Businesses Don't Know Can Hurt Them
Posted by Ann Westerheim on 5/21/25 5:01 PM
Cybersecurity Insurance for small business offers protection that standard business coverage often overlooks. Your company faces mounting risks from data breaches, ransomware attacks, and operational disruptions due to cyber incidents - problems that traditional insurance policies were not built to handle.
Read MoreTags: small business, cybersecurity, Cyber Insurance
How AI is Making Phishing Attacks Smarter - What Small Businesses Must Do Now
Posted by Ann Westerheim on 5/14/25 9:48 AM
How hackers use AI for phishing attacks has become more advanced, making standard email security measures inadequate for protection. Modern cybercriminals leverage artificial intelligence to create convincing emails with flawless grammar, personal details from social media, and context-aware content that can deceive your most alert employees. No more language barriers in cyber crime!
Read MoreTags: phishing, Cybersecurity, email scams, cybersecurity, cybersecurity training, Artificial Intelligence
Every year, Verizon publishes a Data Breach Investigation Report (DBIR). The Verizon DBIR is one of the most comprehensive reports illustrating REAL security incidents and breaches, not just hypothetical "this could happen" warnings. The 2025 Report - the 18th annual report! - was published on April 23, 2025 and as usual, its full of inciteful information for both small business AND enterprise. To generate the report, the Verizon DBIR team analyzed 22,053 real-world security incidents, of which 12,195 were confirmed data breaches.
Read MoreTags: small business technology advice., cybersecurity, ransomware, cybersecurity, data security, incident response, SecurityBreach
DMARC Gets Serious: Microsoft Enforces Stricter Email Rules
Posted by Ann Westerheim on 4/30/25 4:47 PM
Starting May 5, 2025, all businesses - regardless of size - must meet Microsoft’s stricter email authentication requirements when sending to Outlook, Hotmail, and Live addresses. These changes are designed to reduce spoofing and impersonation, aligning with similar updates from Google and Yahoo to improve overall email security.
Read MoreTags: eMail, SPF record, Cybersecurity, email scams, cybersecurity, DMARC
Spring Cleaning for your Cybersecurity: 10 Things You're Probably Overlooking
Posted by Ann Westerheim on 4/29/25 4:25 PM
Just like your home needs a good spring cleaning, your technology and data need regular organization too. Cybersecurity best practices act like a home organization system for your digital life - keeping your accounts, passwords, and access permissions tidy, updated, and secure. This guide will show you proven methods in protecting your information while making sure your systems run smoothly using smart organization techniques. Learning the straightforward steps to defend yourself against current threats and build a more secure foundation for your business and personal data. Cleaning out your closets this Spring? Make sure you take care of your digital clutter as well!
Read MoreTags: computer security, strong passwords, security protection, Cleaning your computer, data backup, cybersecurity, Privacy, cybersecurity training, General
Do small businesses need cybersecurity? YES! Data shows that half of all cyber attacks target small organizations, making them prime targets alongside large corporations. Major security breaches at Fortune 500 companies grab headlines, yet local businesses, nonprofits, and municipalities face ongoing threats that can expose donor databases, financial records, and private customer details. Each year, Verizon publishes the Data Breach Investigations Report which is loaded with statistics on the latest updates on real-world breaches. Reports like this make it clear: small businesses aren't flying under the radar - they're in the crosshairs. Understanding real-world breach data helps you prepare, protect and stay resilient.
Read MoreTags: small business, cybersecurity, incident response