1
FlowerStorm + KrakVM: AiTM phishing against Microsoft 365 in 4 steps
FlowerStorm (AiTM) uses KrakVM to hide login logic in HTML attachments. A 4-step victim journey and OTP/SMS/push vs passkeys/FIDO2 table for Microsoft 365 SMBs.
0
AI receptionist agent: triage phone and email without losing control
An AI virtual receptionist for Quebec SMBs: decision tree (hours, FAQ, booking, complaint, payment), qualitative gains, and a safe start with human escalation, OWASP LLM06 and Law 25.
0
Microsoft 365 Copilot for small business: what it really does (and what it must not)
Microsoft 365 Copilot in Outlook, Word, Excel, Teams and PowerPoint: what it really does for a Quebec SMB, what it must not do alone, and a Law 25 checklist (PIA/EFVP, data outside Quebec, automated decisions, transparency) before rolling it out to the whole team.
0
Operation KillSwitch: 6 myths about KillSec (and what changes for SMBs)
Operation KillSwitch (Sep 30, 2026): leak site seized, 5 servers under control, 3 arrests. Six myths vs facts for Quebec SMBs facing KillSec ransomware and data-leak extortion.
1
Warlock ransomware: how SharePoint becomes the front door
Warlock ransomware (Longlegs / Storm-2603) keeps exploiting on-premises SharePoint flaws against water, telecom, government and education targets. Attack timeline and lessons for SMBs — even without SharePoint.
2
AI agents for small business: your first week, day by day
A 7-day starter plan to launch an AI agent in your small business without exposing your data: pick a low-risk task, map access, choose tool and data residency, least privilege, pilot, logs and Law 25, then decide to keep, expand or stop.
0
AI agent hacking attempts: what the Library and Archives Canada incident means for your website
They were looking for divorce records from the early 1900s. When they couldn’t find them, they tried to force the door. According to a report published on September […]
1
AI agents for small business: 5 tasks to hand off (and how to start safely)
Inbox triage, quotes and invoices, customer support, scheduling, reporting: here’s how AI agents can simplify day-to-day work in a small business, what you gain, and how to start safely, with the right permissions, human approval and Quebec’s Law 25 in mind.
0
Cybersecurity news this week: 6 stories to know (October 2, 2026)
A WordPress flaw drawing tens of thousands of attackers. Two network products hacked before a fix even existed. Hundreds of thousands of access keys forgotten on GitHub. And, […]
0
“AI committee” phishing: how TA419 steals Microsoft 365 sessions
China-linked group TA419 invites experts to join a fake “AI Policy Advisory Committee,” then steals their Microsoft 365 session despite multi-factor authentication. Here’s how the trap works, and why passkeys change the game.