Security

When the Security Prompt Is Real, But the Person Asking You to Approve It Isn't

For years, we've trained people to trust one thing above almost everything else in cybersecurity: the authentication prompt on their phone.  See a legitimate-looking notification from Microsoft, approve it, and move on with your day.  That instinct has protected a lot of organizations from a lot of attacks.

It's also exactly what a newer wave of attackers is now counting on.

Attackers Aren't Breaking In. They're Being Let In.

A new scam is tricking people into hacking their own computers

You've clicked "I'm not a robot" a thousand times.  It's second nature: click the box, maybe select a few traffic lights, and move on with your day.

That's exactly why a new scam called Click-Fix is so effective.

It doesn't try to sneak malware onto your computer.  Instead, it convinces you to install it yourself.

Here's how the scam works and how to make sure it never works on you.

Imagine your phone rings.  The caller sounds exactly like your mom, brother, or best friend. They're upset, need help immediately, and ask you to act fast.

The problem?  It may not be them at all.

The New Face of an Old Scam

Impersonation scams have been around for years, but AI has made them far more convincing.  With just a few seconds of someone's voice from a social media video, voicemail, or podcast, scammers can create a realistic voice clone.

Warmer weather means travel, outdoor plans, and a little more time away from home but it also means a little more opportunity for identity thieves.  Whether you're heading out of town for work or fun, a few simple habits can go a long way toward keeping your personal information safe.  Here are our team's top tips for protecting yourself this summer.

Secure Your Devices

HUD Proposes Cyber Incident Reporting Requirement Within 36 Hours

HUD has issued Notice PIH 2026-17, outlining new reporting requirements for Public Housing Agencies (PHAs) that experience cybersecurity incidents.  

Once in effect, if a Housing Authority becomes aware of a cyber incident, it must notify HUD's Cyber Incident Response Team (CIRT) at CIRT@hud.gov and its local field office point of contact within 36 hours of becoming aware of the incident.

Digital threats are ever-changing:

Recent cyber threats highlight just how critical it is for users and organizations to remain vigilant online.  Attackers are increasingly relying on sophisticated deception techniques rather than obvious red flags.  For example, one attack leveraged a fake website, google-prism.com that closely mimicked Google’s design to establish trust.  Users were prompted to grant normal browser permissions and install what appeared to be a legitimate security extension which actually gave attackers access to sensitive data. 

Credential theft is still the easiest way into a corporate network—and attackers know it.
Despite years of warnings and proven defenses, many organizations continue to rely on passwords alone. The result is a growing wave of breaches that didn’t require sophisticated exploits—just a stolen username and password.

Most organizations do not think about their technology until something goes wrong—a system crashes, files disappear, or the network slows down. Just like a vehicle needs routine maintenance, IT systems need regular checkups to stay secure and reliable. For public housing authorities that handle sensitive data and support daily operations, regular technology audits are essential.

Data is one of the most important assets public housing authorities manage. From resident information to financial and operational data, protecting that information is critical to keeping daily operations running and maintaining trust. One of the most effective ways to protect data is by using both on‑site and off‑site backups. Each serves a different purpose, and together they provide complete protection.

Software is the set of programs and apps that make your computer work, such as email, internet browsers, and office programs. Just like cars need regular maintenance, software needs regular updates to keep working safely and properly. Updating software helps protect your computer, your information, and your ability to get work done.