Cybersecurity researchers found the first known harmful Microsoft Outlook add-in used in a real attack. The add-in, called AgreeTo, was once a normal calendar tool but was abandoned after 2022. An attacker took control of its expired web address and replaced it with a fake Microsoft login page. When users entered their passwords, the attacker stole them. Over 4,000 accounts were affected.

This happened because Outlook add-ins load content from a web link that can change over time. Microsoft checks the add-in when it is first approved, but it does not always monitor the live web content later. If a web address expires and someone else takes it, they can use it for phishing or other attacks.

How users can protect themselves:

• Avoid installing old or unused add-ins.
• Remove add-ins you no longer use.
• Turn on multi-factor authentication (MFA) for your Microsoft account.
• Check the web address carefully before entering your...

  ---

  February 11, 2026 15:51 (21 hours ago) |  0 | 1 minute read

Before signing in or sharing personal information online, take a moment to carefully look at the website address. Make sure the company name is spelled correctly and doesn’t include extra words, strange symbols, or small changes that are easy to miss. If anything about the link looks unusual or different from what you normally see, don’t continue—go directly to the company’s official website instead.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.

Disable auto-connect to Wi-Fi networks. This prevents your device from joining unsafe or unknown networks without your knowledge. Always choose and verify the network manually before connecting. Keeping auto-connect off helps protect your data from being exposed. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.

Avoid reusing old passwords, even if they’re easy to remember, because passwords exposed in past data breaches can still be used by attackers years later. Reusing the same password across multiple accounts makes it easier for one breach to compromise everything. Change your passwords regularly—especially for important accounts like email or banking—to reduce the risk of unauthorized access.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Recognize social engineering tricks that target human behavior. Scammers manipulate emotions such as fear, urgency, or curiosity to obtain sensitive information. These attacks often come through emails, phone calls, messages, or sometimes face-to-face conversations that appear legitimate. Always verify requests before responding or sharing details. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Avoid using public Wi-Fi for sensitive activities like online banking, work emails, or health apps because these networks are shared and often unsecured. Other people on the same network—or fake Wi-Fi hotspots—can secretly view or steal your personal information. When handling important or private tasks, use your mobile data or a trusted home or office network instead.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support

Microsoft is warning that cybercriminals are increasingly targeting Apple macOS users with data-stealing malicious software, expanding beyond their traditional focus on Windows systems.

The company says attackers are using deceptive online ads, fake websites, and phishing messages to trick people into installing malicious software. These scams often appear when users search for popular tools, including AI-related apps or utility software, and are sometimes delivered through platforms like Google Ads.

Once installed, the malware can quietly steal sensitive information such as saved passwords, browser data, financial details, and even cryptocurrency credentials. In some cases, attackers also gain access to cloud accounts and developer information.

Microsoft noted that some of these campaigns are linked to organized threat groups and have been spread not only through email but also through messaging apps like WhatsApp. The stolen data is then sent back to the...

Assuming “it won’t happen to me” creates risk — attackers target everyone. Cybercriminals don’t look for specific people; they look for easy opportunities. A single weak password or ignored update can be all they need. Staying alert and practicing basic security habits reduces your risk significantly. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Cloud storage is convenient and keeps everything in one place, but simple mistakes—like weak passwords or oversharing—can put your data at risk. By practicing good security habits and regularly reviewing your settings, you can enjoy the cloud safely without compromising your privacy.

Follow these tips to stay safe:

• Use multi-factor authentication (MFA) to prevent unauthorized access.
• Encrypt sensitive files before uploading.
• Review sharing settings regularly to avoid accidental oversharing.
• Keep offline backups in case of loss or ransomware.
• Delete what you no longer need—the cloud isn’t a trash...

  ---

  February 3, 2026 16:33 (1 week, 1 day ago) |  0 | QR Ready | 1 minute read

Important information can be lost due to device failure, accidental deletion, or cyber incidents. Always follow the 3-2-1 rule by keeping multiple copies of important files, storing them in different places, and ensuring at least one copy is kept offsite or in secure cloud storage. Regular backups help keep information safe and easy to recover when needed.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support