SmarterIT

One of the things businesses often underestimate about downtime is how quickly it spreads beyond “the IT issue”.

A system goes offline and, within minutes, people can’t access information 😱

Customers start noticing problems, communication slows down, and normal workarounds suddenly become much more difficult than anyone expected.

New research suggests the financial impact of unplanned downtime is growing at a huge rate, with major organizations collectively losing hundreds of billions every year.

It can mean staff sitting idle because systems aren’t available.

Delays to customer service.

Disrupted operations.

Marketing campaigns pausing unexpectedly.

In some situations, it can mean reputational damage that lasts much longer than the outage itself.

The interesting part of the research wasn’t really the size of the numbers, though.

It was the fact that many businesses still struggle to identify what’s causing the disruption in the first place 😵‍💫

In a growing number of cases, security incidents are initially mistaken for ordinary technical faults.

Something seems slow, unstable, or unavailable, so teams treat it as a normal IT problem while an attacker is still actively operating in the background.

That delay can make the eventual impact much worse 😰

At the same time, businesses are becoming more dependent on connected systems, cloud services, and digital workflows than ever before.

When almost every part of the company relies on technology in some way, even relatively short disruptions can create operational problems quickly.

That’s why resilience has become such an important conversation.

Not in the sense of trying to guarantee that nothing will ever go wrong, because that’s unrealistic.

Systems fail, updates cause problems, cyberattacks happen, and unexpected outages will always exist to some degree.

But it is important that you think through what happens next.

Who needs to know first?
How do teams continue operating?
Which systems are critical?
What can still function manually if necessary?

Those conversations are easier to have calmly before a problem happens than during the middle of one.

👉 If a major system outage happened tomorrow morning, would your business have a clear plan for keeping things moving?

This is one of the clearest signs that AI is becoming part of mainstream business infrastructure…

Companies are now paying to reserve guaranteed AI capacity in advance.

OpenAI launched an enterprise plan that allows large organizations to lock in long-term access to its computing power 🔐

Specifically, so their AI systems keep running reliably, even during periods of very high demand.

That might sound quite technical, but the idea behind it is simple.

AI tools like ChatGPT rely on enormous amounts of computing power sitting inside data centers.

Every prompt, response, automation, and AI-driven workflow uses a small piece of that infrastructure.

As more businesses adopt AI, demand for that computing power keeps increasing 😰

The result is that AI availability is starting to matter in the same way internet uptime or cloud reliability matters.

A couple of years ago, most businesses treated AI as something experimental 🧫

People used it occasionally to write content, summarize notes, or brainstorm ideas.

Now some organizations are building AI directly into customer service, reporting, operations, workflows, and internal automation.

In those environments, even short outages become much more significant.

That’s why this announcement feels important to me.

It shows AI is moving towards being treated more like core infrastructure.

Businesses are no longer asking: “Can AI help us?”

They’re starting to ask: “What happens if our AI systems become unavailable?”

What’s also interesting is how much infrastructure sits behind all this.

OpenAI is continuing to build huge new data center capacity to support growing demand, because the scale of AI usage now is difficult to comprehend.

And demand is still accelerating.

I think this is another reminder that AI adoption is moving much faster than many people expected.

💬 Do you think businesses are becoming too dependent on AI, or are we only just scratching the surface of what it’ll eventually become?

For years, the advice has been simple: “Be careful what you click on in Google.”

Now we might need to start saying the same thing about AI 🤖

Microsoft has warned that cybercriminals are finding ways to manipulate AI tools into recommending fake software downloads.

And honestly, it makes sense when you think about how people use the internet now.

A lot of us don’t search the way we used to anymore 🔦

Instead of typing something into Google and scrolling through websites, people are asking AI questions directly…

“What’s the best tool for checking PC temperatures?”�
“Where can I download this app?”�
“What software should I use for…?”

The problem is that attackers are adapting to that behavior.

Researchers found criminals creating fake websites pretending to be popular tools.

Somehow, they’re managing to get these malicious sites recommended by AI systems.

Instead of tricking search engines, they’re now trying to trick AI.

And if someone trusts the recommendation and downloads the file, malware gets installed on the device.

In some cases, that malware gives the attacker remote access to the computer. They can then explore the network and steal data.

They may even install something called a “crypto jacker”.

That’s software which uses your computer’s power to mine cryptocurrency for the attacker.

Your machine slows to a crawl while somebody else profits from your electricity bill 💸

The bigger point here is that cybercriminals follow behavior.

If people move from search engines to AI, attackers move there too.

That means we need to treat AI recommendations with the same level of caution we’d use for search results or emails ⚠️

Helpful doesn’t always mean safe.

AI is an incredible tool, but it doesn’t “fact check” the internet in the way many people assume.

It can still surface bad information, fake sites, or manipulated recommendations.

So, if you’re downloading software, especially business software, you should still check the source properly before clicking install.

💭 Have you started using AI instead of Google for searches yet?

The FBI has issued a warning about a new type of phishing attack targeting Microsoft 365 users 😰

And this one is a little different…

Normally with phishing, the attacker tries to steal your password.

This time, they’re trying to steal something called an “OAuth token”.

A what?!

An OAuth token is like a temporary digital pass that proves you’ve already logged in successfully.

It’s what keeps you signed into apps like Outlook, Teams, and OneDrive without needing to enter your password every few minutes.

If an attacker steals that pass, they can potentially access those services as if they were you 🥸

The phishing emails themselves are becoming incredibly convincing, thanks to AI.

They can look like document shares, meeting invites, or account notifications. And they often lead to real Microsoft login pages.

So, when someone approves the request, it feels legitimate.

That’s the trap 🪤 The attacker is effectively getting you to approve access on their behalf.

This is why cybersecurity is changing so much right now.

For years, businesses focused heavily on passwords and antivirus software, and those are still important.

But attackers are increasingly finding ways to work around them by targeting normal human behavior instead.

A rushed click, an approval without thinking, a moment of distraction during a busy day. That’s often all they need.

Fortunately, there are protections you can put in place behind the scenes, especially around how Microsoft 365 handles authentication requests.

And remember, if you receive an unexpected login request, verification prompt, or email asking you to approve access to something, slow down and think before clicking anything 🔎

Even if it looks genuine.

👉 Have you noticed that phishing emails are harder to spot lately?

Where your files are stored shapes how your business runs.

It affects who can access them, how easily your team can work together, and what happens if something goes wrong.

If everything still lives on individual devices, think about what that really means day to day, or when things don’t go to plan…

Here’s something most businesses don’t think about…

You install a plugin on your website.

It works fine and you trust it.

Maybe it’s been there for years.

Then one day, it updates.

And that update opens the door to an attacker 😱

That’s what’s happened in the WordPress world.

A hacker bought a collection of legitimate plugins, more than 30 of them, all with a solid reputation and thousands of active users.

Then they pushed an update.

Hidden inside that update was a backdoor, which is a way for someone else to access your website without permission.

In some cases, this gave full control.

What makes this particularly clever is how it stayed hidden 🫥

The malicious code was designed to show spam and harmful content only to search engines like Google, not to the website owner.

So, everything looked normal when you checked your own site.

Meanwhile, your website could be redirecting visitors or damaging your reputation in search results.

Modern attacks are evolving. Now, instead of breaking in, they’re waiting to be invited in.

Plugins, apps, integrations… they’re all helpful, but they also extend access into your systems.

It means it’s more important than ever that they’re managed properly.

👀 Keep an eye on what’s installed.

❌ Remove anything you don’t use.

🤝 Make sure updates are coming from trusted sources.

Because once something like this is in place, it can be very hard to spot.

🧐 When was the last time you reviewed the plugins or add-ons running on your website?