Solvitnow

Administrator access lets employees install software and change security settings on their computers. If an account is compromised, that same access can give malicious software more control.

Most employees don’t need administrator access for everyday work.

Find out how to restrict it without preventing employees from doing their jobs:

solvit.now

Most owners only look at their IT when something has already broken. A file won't open, or an invoice gets paid into a scammer's account.
Almost none of it happens without warning. Backups can fail for weeks before anyone notices. Accounts belonging to people who left are often still switched on.
Verizon's 2026 report found that 31% of breaches started with software that hadn't been patched.
Here's what to check each month:

solvit.now

What would happen if Microsoft 365 went down for the next 4 hours?
Could your team still communicate?
Could they access important files?
Would they know who to contact?
Could you still serve your customers?
You can’t prevent every technology outage, but you can have a plan for what happens when one occurs.
We put together a simple guide to preparing your business for Microsoft 365 and other technology outages.
🔗 Read the full article:

IT Consulting Services: Prepare for Microsoft 365 Outages - SolvITNow IT consulting services can help your business prepare for Microsoft 365 outages and keep critical operations running.

If your website runs on WordPress, when did anyone last log into it?

For most small businesses the answer is not since it was built.

Meanwhile the plugins that run it keep needing updates, and some get abandoned by their developers, so no updates are coming at all.

Attackers scan for exactly that, automatically, and get in through the old plugin.

Once they're in, the site quietly hosts scam pages or sends your visitors somewhere else. Most owners find out when a customer tells them, or when Google flags the site.

Here's what to check on yours:

solvit.now

When an AI note-taker joins your meeting and emails everyone a tidy summary, it saves real time. But that recording has to go somewhere.
It captures every word, stores it on the vendor's servers, and depending on the tool, the company may use it to train its AI. Some of these bots even auto-join meetings straight from a calendar, recording calls nobody meant to record.
They're fine to use, as long as you know who can see the recording before you let a bot sit in on a client or staff meeting.
Find out what to check first:
https://solvit.now/2026/09/01/ai-note-taker-data-privacy/

Who Can See What Your AI Note-Taker Records? - SolvITNow Learn how AI note-takers record, store, and share meeting data, who may have access, and how to use these tools safely in your business.

Passwords are the weak point in most businesses. People reuse them, write them down, and type them into fake login pages without realizing.
Passkeys fix that. You sign in with the same fingerprint, face, or PIN you use to unlock your phone, and there's no password for anyone to steal, guess, or phish.
They already work with Microsoft, Google, and Apple accounts, they're included with Microsoft 365 at no extra cost, and they're fast. Microsoft says a passkey sign-in takes about 3 seconds, against 69 for a password plus a code.
Find out whether your business should switch, and where to start
https://solvit.now/2026/08/25/passkeys-for-your-business/

What Are Passkeys, and Should Your Business Use Them? - SolvITNow Learn what passkeys are, how they protect against phishing and stolen passwords, and why your business should start using them.

Your email security can probably catch a suspicious link.
A QR code is harder.
That's why scammers have started hiding their links inside QR codes. The code is just an image, so the filters that scan for bad links can't read it. And the moment someone scans it, they're on their phone, away from the protection on their work computer.
Microsoft saw QR-code phishing jump 146% in the first few months of 2026. The usual setup is a fake “scan to keep your account active” email, often with the code tucked inside a PDF.
Find out how to spot them, plus the one thing to check before you scan anything:
https://solvit.now/2026/08/18/qr-code-scams/

QR Code Scams: What They Are and How to Protect Your Business - SolvITNow QR code scams can steal passwords and payment details. Learn how quishing works, what warning signs to watch for, and how to protect your...

Right now, with no hacking at all, someone could send an email that looks like it came from your company.
They put your domain in the “from” line and email your clients or suppliers, asking them to pay a fake invoice or change bank details. It works because email was never built to check that senders are who they claim to be.
Three settings on your domain (SPF, DKIM, and DMARC) stop it. Most businesses have one or two set up and the third missing, or they've left DMARC on “monitor only,” so it never blocks the fakes.
Find out how to check whether your domain is protected:
https://solvit.now/2026/08/11/email-spoofing/

solvit.now