Firelands Computer Services Blog

There’s a new type of scam doing the rounds… and this one’s a little more convincing than most.

It looks like a genuine alert from Microsoft Azure Monitor.

It comes from a real Microsoft domain, and it lands in your inbox without being flagged as suspicious.

That’s why it’s catching people out.

Azure Monitor is a tool businesses use to keep an eye on their systems.

It tracks performance, spots problems, and sends alerts when something needs attention.

If you’re running cloud services, especially in Microsoft Azure, these kinds of notifications are completely normal.

So, when an email arrives saying there’s a billing issue, suspicious activity, or a problem with your account, it doesn’t immediately raise alarm bells.

That’s where the problem starts.

These scam emails are designed to look urgent.

They might mention unexpected charges, invoices you don’t recognize, or even say your account has been suspended.

Then they push you to act quickly, usually by calling a phone number to “resolve” the issue.

The email itself can be genuinely sent through Azure Monitor.

That means it isn’t spoofed in the usual way.

It’s not pretending to be Microsoft. It’s using Microsoft’s own system to deliver the message. And because of that, many email security tools let it through without question.

Azure Monitor allows users to create alerts based on certain triggers. For example, a new invoice being generated or activity on an account.

Whoever sets up the alert can also customize the message that gets sent out.

Attackers are taking advantage of this.

They create alerts with very basic triggers, write their own warning message (which looks like a billing issue), and then send it out to mailing lists they control.

The result is a convincing, legitimate-looking email. It’s simple and it works.

We’ve seen similar tactics before using other trusted platforms like PayPal and Google tools.

The pattern is the same: Take a service people already trust and use it as the delivery method for the scam.

If you receive one of these alerts, pause.

That’s the most important step.

If an email is pushing you to act urgently, especially to call a number or share information, take a moment to verify it properly.

Go directly to your Azure account through your browser (not via any links in the email) and check for alerts there.

If there’s a real issue, it will show up inside your account.

And if you’re not sure, ask your IT support provider to check before you do anything.

This is a good reminder of how phishing attacks are evolving. It’s no longer badly written emails with obvious spelling mistakes. Some of these messages are polished, well-timed, and delivered through trusted systems.

Awareness is more important than ever.

If you’re not completely confident your team would spot something like this, we can help. Get in touch.

Cybercriminals aren’t simply causing chaos anymore.

They’re getting smarter, more organized, and much better at finding weak spots in businesses of every size.

And while that sounds worrying, understanding what’s happening is the first step to protecting your business.

One big change we’re seeing is a shift from traditional ransomware to something far more damaging: Data theft and extortion.

Instead of locking your systems and asking for money, attackers are now breaking in, quietly stealing sensitive files, and threatening to publish them unless you pay up.

This can include anything from financial records to customer details.

And because privacy laws are stricter than ever, the pressure on victims is huge.

Another trend is criminals taking advantage of unpatched devices. That’s equipment that hasn’t been updated. This could be a file sharing tool, a system that connects your office to the internet, or something else.

When these devices are out of date, they have gaps that attackers can slip through. In some cases, a single unpatched device has allowed criminals to break into dozens of businesses at once.

We’re also seeing more attacks on virtual servers (the systems many businesses use to run their IT behind the scenes). If attackers get into these, they can cause serious disruption very quickly.

And to make matters worse, modern cybercriminals are getting better at hiding. They often use everyday tools already built into Windows or other systems to blend in, making it harder for security software to spot them.

It can sound overwhelming, but here’s the good news: You can protect your business from these newer, more refined threats. You just need the right approach.

The strongest businesses are focusing on the basics done well.

That means keeping systems updated, watching for unusual activity, and having good visibility of what’s happening across all devices (not just the obvious ones).

It also means knowing what you’d do if something went wrong. A clear incident response plan can dramatically reduce damage and downtime.

Cyberthreats may be getting more sophisticated, but your defenses can stay one step ahead with the right preparation. And for that, you need the right people supporting you.

If you’d like help understanding your risks or strengthening your cyber protection, we’re here whenever you need us. Get in touch.

If there’s one thing guaranteed to test your patience during a busy workday, it’s a messaging app that doesn’t behave the way you expect it to.

For a tool that millions of us rely on every day, Microsoft Teams does an impressive job of keeping businesses connected and conversations flowing.

But for many fans, a couple of small-but-maddening quirks have been causing frustration for a little too long.

Microsoft has finally heard our cries of despair.

It’s continuing to refine and improve Teams based on real user feedback, and some long-awaited fixes are finally on the way.

One of the biggest updates is a simple but powerful change. You’ll soon be able to choose what the Enter key does.

We’ve all sent a half-formed message by hitting Enter to start a new paragraph. It’s a reflex.

But now instead of automatically sending your message, you’ll have the option to use Enter for a new line.

Another welcome improvement is arriving too. Forwarding multiple messages at once.

Teams traditionally only lets you forward one message at a time, which makes sharing context clunky and time-consuming.

But now you’ll be able to select up to five messages from a chat or channel and forward them together in one go.

Both features are rolling out now.

For businesses that rely on Teams every day, these may sound like small fixes, but they remove friction from hundreds of tiny moments.

And when messaging is a core part of how your team communicates, those small moments matter.

If you want help getting more from Teams, or making sure your Microsoft 365 setup works the way you want it to, we can help. Get in touch.

You know that feeling when everything should be running smoothly… but something in your IT just keeps getting in the way?

Not a big dramatic failure.

Just a constant sense that your systems are slower, fussier, or more fragile than they used to be.

That’s usually a sign of technical debt.

And now that Windows 10 has officially reached end of life, many businesses are discovering just how much of this hidden debt they’ve built up without realizing it.

Technical debt is simply what happens when businesses delay upgrades or stick with outdated systems for “just a bit longer”.

The problem is, the longer you leave it, the more it piles up.

Eventually it starts to limit productivity, increase downtime, and open the door to security risks.

A recent survey found that nine in ten businesses are dealing with Windows-related technical debt, and half have already experienced downtime because of it.

Yet only 14% are planning to fix it soon.

Why the hesitation?

For many, upgrading feels daunting. It takes time. It costs money. And there’s a fear of breaking something that still sort of works.

Others worry about the disruption caused by moving older, bespoke applications to modern systems.

Ironically, though, leaving everything as it is can be just as disruptive. Unsupported systems are more likely to fail, more vulnerable to attacks, and far harder to maintain.

The good news is that you don’t need to clear all your technical debt at once.

The smart approach is to chip away at it gradually.

Upgrade devices in phases, use specialist tools that move older apps safely to newer environments, and keep an eye on risks using automation.

This spreads out the cost, reduces disruption, and builds a culture of continuous improvement.

By tackling technical debt bit by bit, you create a stronger, safer IT foundation. One that supports growth rather than getting in the way of it.

And once that foundation is in place, your business is far better prepared to adopt new technologies, including AI, without tripping over outdated systems.

If your IT feels sluggish, unreliable, or harder to manage than it should, it might not be “just how things are”. It could be technical debt.

We can help you unlock smoother operations and faster growth. Get in touch.

Have you ever wondered what your browser is doing in the background while you work?

Most people think of a browser as a simple window to the internet. But a new wave of AI browsers is changing that idea completely.

These tools are clever, fast, and can automate tasks that used to take minutes, or even hours.

And that sounds great… until you realize they might also be quietly collecting or sending data you’d never normally share.

New technology is wonderful. But we know how quickly something helpful can become something risky when it’s used in the wrong way. Or without the right safeguards.

AI browsers are a perfect example of that.

AI browsers (such as Microsoft Edge with Copilot, OpenAI’s ChatGPT Atlas and others) are designed to boost productivity by doing more than displaying websites. They can read what’s on the page, summarize it for you, translate it, gather data, and even take actions automatically.

But here’s the problem: They can also be tricked.

Researchers found that the default settings in many AI browsers prioritize a smooth user experience over strong security. In other words, the browser is designed to be helpful first and safe second.

And that’s where things get messy for businesses.

Because these browsers don’t just display your data. They often send what’s on your screen to a cloud-based AI system so it can understand, summarize, or interact with it. That might include sensitive emails, financial information, client details, internal documents, or anything else an employee happens to have open at the time.

If the AI assistant sees it, there’s a chance that data has already left your computer and been processed elsewhere.

This becomes even more concerning when you realize that some of these browsers can perform actions on their own. They can navigate websites during logged-in sessions, interact with content, and complete routine tasks.

That’s brilliant for efficiency, but it also means they could be tricked by a malicious webpage and convinced to hand over information without the user even noticing.

The warning is clear: AI browsers can expose businesses to unnecessary risk if they’re not configured and used correctly.

So, what do you need to think about before rolling them out?

Start with the basics: Understand where the data goes.

Many AI browsers don’t allow you to keep the AI processing local on the device. Instead, everything is sent to the provider’s cloud service.

That means your cybersecurity and data protection policies need to cover this. Especially if you work with sensitive information, regulated data, or anything involving clients.

It’s also important to think about how staff will use these browsers day-to-day.

Even if the browser itself meets your security standards, an employee could easily introduce new risks by doing something as simple as opening an AI sidebar while sensitive information is visible on another tab.

The AI doesn’t know what’s private, it processes what it can see.

And then there’s the temptation issue.

Because these tools can automate boring tasks, some employees might try to use them to get through mandatory training or compliance activities. It’s easy to forget that an automated click-through isn’t the same as a trained, security-aware human.

None of this means AI browsers are bad. Far from it.

They’re powerful, exciting tools with real business benefits. But like any emerging technology, they need guardrails.

If you decide to allow AI browsers in your business, make sure your staff understand how they work. Help them see that anything open in their browser could potentially be sent to the AI service.

Encourage them to avoid using AI functions while viewing highly sensitive data. And make sure your IT team can centrally manage security settings so that convenience never comes at the expense of safety.

We’re still in the early days of AI browsers. Their risks aren’t fully understood yet, and the default settings often favor convenience over protection. Use them responsibly, after proper risk assessments and training.

Before you adopt an AI browser across your business, take the time to make sure you’re doing it securely. If you need help with that, get in touch.