Insights, tutorials, and updates from the centrexIT teamhttps://centrexit.com/https://centrexit.com/blog/five-healthcare-ransomware-breaches-what-they-share/https://centrexit.com/blog/five-healthcare-ransomware-breaches-what-they-share/Five healthcare providers reported ransomware breaches in one HIPAA Journal roundup. Here is what they share and what your practice can do now.Fri, 04 Sep 2026 00:00:00 GMThttps://centrexit.com/blog/session-token-theft-bypasses-mfa-fido2-hardware-keys/https://centrexit.com/blog/session-token-theft-bypasses-mfa-fido2-hardware-keys/Attackers are stealing session tokens after your team passes MFA. Here's why the code isn't enough anymore, and what phishing-resistant login actually fixes.Wed, 02 Sep 2026 00:00:00 GMThttps://centrexit.com/blog/recommended-microsoft-patches-deadlock-blockchain-c2-professional-services/https://centrexit.com/blog/recommended-microsoft-patches-deadlock-blockchain-c2-professional-services/DeadLock ransomware hides its command-and-control on Polygon blockchain, dodging takedowns. Here are the recommended Microsoft patches to apply now.Mon, 31 Aug 2026 00:00:00 GMThttps://centrexit.com/blog/novacookies-aitm-phishing-microsoft-365-session-theft/https://centrexit.com/blog/novacookies-aitm-phishing-microsoft-365-session-theft/NovaCookies is a subscription phishing kit that steals authenticated Microsoft 365 sessions, sailing past MFA. Here is how it works and what to do now.Thu, 27 Aug 2026 00:00:00 GMThttps://centrexit.com/blog/healthcare-cybersecurity-budget-cuts-smb-risk-2026/https://centrexit.com/blog/healthcare-cybersecurity-budget-cuts-smb-risk-2026/Economic pressure is pushing SMBs to cut cybersecurity budgets. For healthcare practices, that trade puts patient data, HIPAA compliance, and continuity at risk.Mon, 24 Aug 2026 00:00:00 GMThttps://centrexit.com/blog/mmg-fusion-hipaa-settlement-healthcare-vendor-risk/https://centrexit.com/blog/mmg-fusion-hipaa-settlement-healthcare-vendor-risk/HHS OCR settled a HIPAA case over the MMG Fusion breach affecting 15 million people. Here is what medical practices should verify about their vendors now.Sat, 22 Aug 2026 00:00:00 GMThttps://centrexit.com/blog/third-party-vendor-breach-professional-services-trizetto/https://centrexit.com/blog/third-party-vendor-breach-professional-services-trizetto/A vendor breach exposed 3.4 million people's records. Here's what professional services firms should learn about the partners holding their client data.Sat, 22 Aug 2026 00:00:00 GMThttps://centrexit.com/blog/claude-hidden-watermark-ai-content-business-impact/https://centrexit.com/blog/claude-hidden-watermark-ai-content-business-impact/Anthropic now watermarks the text Claude generates. Here's what that actually covers, what it means for your code and your content, and the policy gap it exposes.Mon, 17 Aug 2026 00:00:00 GMThttps://centrexit.com/blog/cisa-plc-water-system-warning-nonprofit-exposed-controllers/https://centrexit.com/blog/cisa-plc-water-system-warning-nonprofit-exposed-controllers/CISA warned utilities on July 31, 2026 about attacks on internet-exposed water controllers. The lesson for nonprofits: exposed systems get found. Here's what to check.Mon, 03 Aug 2026 00:00:00 GMThttps://centrexit.com/blog/sonicwall-sma-1000-zero-day-inc-ransomware-edge-appliance-exposure/https://centrexit.com/blog/sonicwall-sma-1000-zero-day-inc-ransomware-edge-appliance-exposure/Inc ransomware exploited two SonicWall SMA 1000 zero-days rated CVSS 10.0 weeks before a patch existed. Here's how to tell if you're exposed and what to fix first.Sat, 01 Aug 2026 00:00:00 GMThttps://centrexit.com/blog/qilin-gentlemen-ransomware-smb-target-july-2026/https://centrexit.com/blog/qilin-gentlemen-ransomware-smb-target-july-2026/Qilin and The Gentlemen ransomware groups hit record volume in 2026, and U.S. small and mid-sized businesses are absorbing the largest share. Here's what to verify this month.Fri, 31 Jul 2026 00:00:00 GMThttps://centrexit.com/blog/fake-wifi-airports-hotels/https://centrexit.com/blog/fake-wifi-airports-hotels/Heading home from a big event? Fake evil twin WiFi at airports and hotels is a real way data gets stolen. Here is how it works and how to protect yourself.Mon, 27 Jul 2026 00:00:00 GMThttps://centrexit.com/blog/how-to-protect-your-data-in-crowds/https://centrexit.com/blog/how-to-protect-your-data-in-crowds/Crowded events like Comic-Con are hunting grounds for data thieves. Here's how to keep your logins, phone, and accounts safe from fake WiFi, QR scams, and more.Wed, 22 Jul 2026 00:00:00 GMThttps://centrexit.com/blog/ai-botnet-dental-office-gemini-cli/https://centrexit.com/blog/ai-botnet-dental-office-gemini-cli/A Russian hacker used Google's Gemini AI to silently control computers inside a dental clinic. Here is what happened and what it means for your business.Mon, 20 Jul 2026 00:00:00 GMThttps://centrexit.com/blog/clickfix-fake-captcha-verify-human-scam/https://centrexit.com/blog/clickfix-fake-captcha-verify-human-scam/A scam called ClickFix hides inside a fake CAPTCHA. It doesn't ask you to download anything or type a password: it just asks you to press a few keys. Here's how it works and how to stop it.Mon, 06 Jul 2026 00:00:00 GMThttps://centrexit.com/blog/biopharma-breaches-fda-ot-security-life-sciences/https://centrexit.com/blog/biopharma-breaches-fda-ot-security-life-sciences/West Pharmaceutical and Novo Nordisk were breached months apart. Here's the FDA warning behind the pattern, and what life sciences leaders should do now.Fri, 03 Jul 2026 00:00:00 GMThttps://centrexit.com/blog/five-eyes-ai-cyberattack-warning-business-2026/https://centrexit.com/blog/five-eyes-ai-cyberattack-warning-business-2026/Five Eyes intelligence agencies warn AI-driven cyberattacks are months away, and under-invested SMBs are most exposed. Here's what to do now.Mon, 29 Jun 2026 00:00:00 GMThttps://centrexit.com/blog/salesforce-klue-connected-app-breach-oauth-risk/https://centrexit.com/blog/salesforce-klue-connected-app-breach-oauth-risk/The Klue-Salesforce breach didn't exploit a Salesforce flaw. Attackers used a dormant OAuth token from a connected app to walk out with CRM data. Here's what that means for every business running SaaS integrations.Mon, 22 Jun 2026 00:00:00 GMThttps://centrexit.com/blog/ftc-cppa-ai-enforcement-smb-compliance-exposure/https://centrexit.com/blog/ftc-cppa-ai-enforcement-smb-compliance-exposure/FTC and California CPPA enforcement guidance on AI and automated decision-making now reaches SMBs. Here's what hiring tools, chatbots, and marketing automation expose you to.Tue, 16 Jun 2026 00:00:00 GMThttps://centrexit.com/blog/centrexit-pax8-hall-of-fame-2026/https://centrexit.com/blog/centrexit-pax8-hall-of-fame-2026/centrexIT has been named to the Pax8 Hall of Fame (U.S.) at Pax8 Beyond 2026, recognition for the team's work serving the organizations we support since 2002.Thu, 11 Jun 2026 00:00:00 GMThttps://centrexit.com/blog/ai-and-the-vulnerable-elder-recap/https://centrexit.com/blog/ai-and-the-vulnerable-elder-recap/centrexIT, Serving Seniors, and the San Diego County DA's office hosted a frank session on AI-powered elder fraud. Here's our thank-you and the free toolkit.Wed, 10 Jun 2026 00:00:00 GMThttps://centrexit.com/blog/microsoft-copilot-smb-permissions-readiness-gaps/https://centrexit.com/blog/microsoft-copilot-smb-permissions-readiness-gaps/Microsoft is rolling Copilot into mainstream 365 tiers. Here are the SMB permissions and SharePoint gaps that turn AI into a data exposure problem.Fri, 05 Jun 2026 00:00:00 GMThttps://centrexit.com/blog/uk-biobank-breach-california-businesses/https://centrexit.com/blog/uk-biobank-breach-california-businesses/A 500,000-person genomics dataset leaked through the trusted sharing chain, not a hacked firewall. Why the UK Biobank breach lands hardest on California's life-sciences companies.Tue, 02 Jun 2026 00:00:00 GMThttps://centrexit.com/blog/world-cup-2026-phishing-business-risk/https://centrexit.com/blog/world-cup-2026-phishing-business-risk/Criminals have spun up thousands of fake FIFA sites ahead of the 2026 World Cup. Here's how event-themed phishing reaches your business, and how to stop it.Tue, 02 Jun 2026 00:00:00 GMThttps://centrexit.com/blog/carnival-data-breach-social-engineering-lesson/https://centrexit.com/blog/carnival-data-breach-social-engineering-lesson/Carnival's breach exposed nearly 6 million people, and it started when one employee was tricked. What the social engineering attack means for your business.Mon, 01 Jun 2026 00:00:00 GMThttps://centrexit.com/blog/infusion-pump-same-network-ehr-hipaa/https://centrexit.com/blog/infusion-pump-same-network-ehr-hipaa/Healthcare auditors check the EHR. They don't check the infusion pumps on the same network. Why this gap matters for HIPAA and patient data.Thu, 28 May 2026 00:00:00 GMThttps://centrexit.com/blog/ftc-enforcement-actions-small-business/https://centrexit.com/blog/ftc-enforcement-actions-small-business/FTC enforcement against SMBs is escalating. Here's what 2024-2025 actions reveal about data handling expectations, and what a 20-person business should actually do.Wed, 20 May 2026 00:00:00 GMThttps://centrexit.com/blog/github-breach-public-service-announcement-what-to-do/https://centrexit.com/blog/github-breach-public-service-announcement-what-to-do/A GitHub security incident is making news. Here's the 10-minute checklist your team can run today to audit tokens, OAuth apps, and CI/CD secrets.Wed, 20 May 2026 00:00:00 GMThttps://centrexit.com/blog/volunteer-access-donor-database/https://centrexit.com/blog/volunteer-access-donor-database/Nonprofits grant system access to volunteers, board members, and seasonal staff, then forget to revoke it. Here's how that revolving door creates real breach risk and what to do about it.Tue, 19 May 2026 00:00:00 GMThttps://centrexit.com/blog/fda-524b-cybersecurity-life-sciences-compliance-may-2026/https://centrexit.com/blog/fda-524b-cybersecurity-life-sciences-compliance-may-2026/FDA Section 524B is no longer a future requirement. It's the standard. Here's what life sciences organizations need to verify this quarter.Wed, 13 May 2026 00:00:00 GMThttps://centrexit.com/blog/instructure-canvas-breach-nonprofit-vendor-risk-may-2026/https://centrexit.com/blog/instructure-canvas-breach-nonprofit-vendor-risk-may-2026/ShinyHunters breached Instructure and exposed data from 8,800+ schools. The lesson for nonprofits is bigger than education. Here's what to do.Fri, 08 May 2026 00:00:00 GMThttps://centrexit.com/blog/palo-alto-pan-os-cve-2026-0300-patch-gap/https://centrexit.com/blog/palo-alto-pan-os-cve-2026-0300-patch-gap/A critical Palo Alto PAN-OS firewall flaw is being actively exploited. Patches ship May 13. Here's what to do in the meantime.Thu, 07 May 2026 00:00:00 GMThttps://centrexit.com/blog/q2-it-health-check-questions-2026/https://centrexit.com/blog/q2-it-health-check-questions-2026/Your backup is the smoke detector nobody tests until it matters. 5 IT questions every business owner should ask before Q2 ends.Fri, 01 May 2026 00:00:00 GMThttps://centrexit.com/blog/crm-attack-surface-shinyhunters-salesforce-2026/https://centrexit.com/blog/crm-attack-surface-shinyhunters-salesforce-2026/ShinyHunters has stolen 1.5 billion records from 760+ companies via CRM platforms. Here's why your customer data is now a primary target.Tue, 28 Apr 2026 00:00:00 GMThttps://centrexit.com/blog/digitalmint-ransomware-negotiator-guilty-plea-nonprofit-healthcare/https://centrexit.com/blog/digitalmint-ransomware-negotiator-guilty-plea-nonprofit-healthcare/Angelo Martino extorted nonprofits, hospitals, and financial firms that hired him to protect them. Here's what every business leader needs to know.Wed, 22 Apr 2026 00:00:00 GMThttps://centrexit.com/blog/microsoft-patch-tuesday-april-2026/https://centrexit.com/blog/microsoft-patch-tuesday-april-2026/Microsoft's April 2026 Patch Tuesday is one of the largest security updates of the year. One flaw is already being used in attacks right now. Here's what every business needs to know.Thu, 16 Apr 2026 00:00:00 GMThttps://centrexit.com/blog/carecloud-ehr-breach-healthcare-vendor-risk/https://centrexit.com/blog/carecloud-ehr-breach-healthcare-vendor-risk/CareCloud's EHR breach exposed patient data for 45,000+ providers. Here's what every San Diego healthcare practice needs to know about vendor risk and HIPAA.Wed, 08 Apr 2026 00:00:00 GMThttps://centrexit.com/blog/axios-supply-chain-attack-what-every-business-should-know/https://centrexit.com/blog/axios-supply-chain-attack-what-every-business-should-know/A software library used by millions was compromised for 2 hours. Any business running JavaScript applications could have been affected. Here's what happened and what it means for your vendor risk.Fri, 03 Apr 2026 00:00:00 GMThttps://centrexit.com/blog/ai-acceptable-use-policy-template-business/https://centrexit.com/blog/ai-acceptable-use-policy-template-business/A year ago, AI policy was a 'nice to have' for most businesses. Today, it's a necessity. Employees are already using AI tools for work, whether you've...Sat, 14 Feb 2026 00:00:00 GMThttps://centrexit.com/blog/governance-without-red-tape-ai-policies-smbs/https://centrexit.com/blog/governance-without-red-tape-ai-policies-smbs/I talked to a business owner last month who told me they'd decided to 'just ban AI' at their company. No ChatGPT. No Copilot. No AI tools of any kind.Sat, 14 Feb 2026 00:00:00 GMThttps://centrexit.com/blog/under-armour-ransomware-breach-72-million-customers/https://centrexit.com/blog/under-armour-ransomware-breach-72-million-customers/Under Armour has confirmed that a ransomware attack resulted in customer data appearing on dark web forums. The breach exposed approximately 72 million...Wed, 11 Feb 2026 00:00:00 GMThttps://centrexit.com/blog/nike-data-breach-internal-data-stolen-2026/https://centrexit.com/blog/nike-data-breach-internal-data-stolen-2026/Another Major Brand Falls to Sustained Network IntrusionMon, 02 Feb 2026 00:00:00 GMThttps://centrexit.com/blog/88-percent-problem-ransomware-targets-small-businesses/https://centrexit.com/blog/88-percent-problem-ransomware-targets-small-businesses/I came across a number recently that I haven't been able to shake.Sat, 31 Jan 2026 00:00:00 GMThttps://centrexit.com/blog/malicious-chrome-extensions-enterprise-hr-platforms-2026/https://centrexit.com/blog/malicious-chrome-extensions-enterprise-hr-platforms-2026/Five browser extensions were just removed from the Chrome Web Store after security researchers discovered they were stealing login credentials from...Tue, 27 Jan 2026 00:00:00 GMThttps://centrexit.com/blog/evaluate-organization-ready-autonomous-systems/https://centrexit.com/blog/evaluate-organization-ready-autonomous-systems/Businesses are asking 'should we adopt autonomous systems?' when the better question is 'are we ready to adopt autonomous systems?'Thu, 22 Jan 2026 00:00:00 GMThttps://centrexit.com/blog/mfa-fatigue-uber-breach-2022/https://centrexit.com/blog/mfa-fatigue-uber-breach-2022/September 2022. A ride-share giant's entire network compromised. Not through sophisticated malware or zero-day exploits, but because someone got tired of...Tue, 20 Jan 2026 00:00:00 GMThttps://centrexit.com/blog/best-places-to-work-2025-people-first/https://centrexit.com/blog/best-places-to-work-2025-people-first/We won the San Diego Business Journal's Best Places to Work award again. I'm proud of that. But I want to talk about what it actually represents, because it's...Thu, 15 Jan 2026 00:00:00 GMThttps://centrexit.com/blog/biggest-healthcare-data-breaches-2025/https://centrexit.com/blog/biggest-healthcare-data-breaches-2025/2025 did not break the record set by the Change Healthcare attack: that catastrophic breach affected 193 million people and remains the worst in healthcare...Fri, 09 Jan 2026 00:00:00 GMThttps://centrexit.com/blog/2025-cybersecurity-year-review/https://centrexit.com/blog/2025-cybersecurity-year-review/The Year Organizations Stopped Being Victims and Started Fighting BackFri, 02 Jan 2026 00:00:00 GMThttps://centrexit.com/blog/hour-downtime-cost-story/https://centrexit.com/blog/hour-downtime-cost-story/Real Stories from Small Businesses That Learned the Hard WayWed, 31 Dec 2025 00:00:00 GMT