Use the “hover to preview” feature to see where a link actually leads before clicking it. This quick check helps you catch misleading or malicious URLs designed to trick you. If the previewed address looks suspicious, unfamiliar, or slightly misspelled, treat it as a red flag. Avoid clicking any link that doesn’t match what you expect or trust. Taking a moment to verify links can greatly reduce your risk of falling for phishing attacks. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.

During the holiday season, be extra cautious of phishing emails, fake delivery notifications, and suspicious online shopping deals, as cybercriminals often use festive themes to trick users. Avoid clicking links in unexpected messages and instead visit websites directly to verify order or shipment information. Always use strong passwords, enable two-factor authentication, and monitor your accounts for unusual activity to stay safe during this busy time.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.

Voice phishing, or vishing, is becoming increasingly rampant as scammers exploit the holiday rush, often posing as banks, delivery services, or support teams. Never share personal information, verification codes, or agree to actions like resetting your password during an unsolicited call. If something feels off, hang up immediately and verify through a trusted source—either by calling the organization using a verified number or checking their official website or application. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support. 

Before clicking “Agree” or submitting a form, take a moment to pause. Many apps and websites ask for access to information you might not usually share—like photos, contacts, or personal details—so it’s important to stay aware. Always review the permissions carefully and ensure they’re only requesting what’s essential for the app or service to function.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.

Microsoft quietly fixed a security bug in Windows shortcut (.LNK) files in its November 2025 updates. This bug, called CVE-2025-9491, let attackers hide harmful commands inside shortcut files. When a user looked at the file’s properties, Windows only showed the first 260 characters, hiding the rest. This made the shortcut look safe even when it was not.

Hackers from several countries, including China, Iran, North Korea, and Russia, had used this flaw since 2017 to steal data and spy on organizations. They often disguised the shortcut files as normal documents.

Microsoft’s update now shows the full command inside a shortcut file, no matter how long it is. This helps users see if something is wrong.

The security company 0patch also released its own small fix. Their fix shows a warning if a shortcut file has more than 260 characters, since this could be used for attacks.

Source: December 4, 2025 08:46 (on 12/4/25) |  0 | 1 minute read

Handing over your house keys to a stranger sounds crazy—but that’s what happens when you link accounts carelessly or skip two-factor authentication. Suddenly, strangers have VIP access to your digital life.

Avoid:

• Linking accounts with unknown services—don’t hand out your keys.
• Reusing passwords—one key copied, every door opens.
• Ignoring permissions—check what access you’re giving.
• Disabling 2FA—your bodyguard should stay on duty.
• Forgetting old apps—unused apps are like ex-roommates with a spare key.

Do:

• Enable 2FA everywhere.
• Use strong, unique passwords.
• Regularly review and remove linked apps.
• Stick to trusted...

  ---

  December 3, 2025 08:27 (on 12/3/25) |  0 | QR Ready | 1 minute read

Avoid photographing your screen to save or remember information, especially if it contains sensitive data. Photos can linger in your camera roll, cloud backups, or shared albums without you realizing it. This creates unnecessary exposure and makes it easier for others to access private details. Instead, use secure password managers or encrypted note apps designed to store information safely. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.

Using different passwords for each of your accounts helps protect you if one of them gets hacked. When the same password is reused everywhere, criminals can easily break into your email, social media, and even banking accounts. By choosing unique passwords—especially for your most important accounts—you greatly reduce the chance of everything being compromised at once.

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.

Be cautious of anyone asking to borrow your laptop or phone. Even a brief moment of access can allow someone to install malicious software or steal information. Politely decline and offer to help in another way if needed. Protecting your devices helps protect your data and your organization. 

Do you have a question? Submit a ticket at [PB8324.3] Data Security Support.