“The threat actor used ClickFix lures to target marketing and trader roles in cryptocurrency and retail sector organizations rather than targeting software development roles,” GitLab
Author: Robert Timlick
-

DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams
Threat actors with ties to the Democratic People’s Republic of Korea (aka DPRK or North Korea) have been observed leveraging ClickFix-style lures to deliver a known malware called BeaverTail and InvisibleFerret.
“The threat actor used ClickFix lures to target marketing and trader roles in cryptocurrency and retail sector organizations rather than targeting software development roles,” GitLab -

Is Your Smart Office a Security Risk? What Small Businesses Need to Know About IoT
Your office thermostat, conference room speaker, and smart badge reader are convenient, but they’re also doors into your network. With more devices than ever in play, keeping track can be tough, and it only takes one weak link to put your entire system at risk.
That’s why smart IT solutions matter now more than ever. A trusted IT partner can help you connect smart devices safely, keep data secure, and manage your whole setup without stress.
Here’s a practical guide designed for small teams getting ready to work with connected tech.
What is IoT?
IoT, or the Internet of Things, is all about physical devices, like sensors, appliances, gadgets, or machines, being connected to the internet. These smart tools can collect and share data, and even act on their own, all without needing someone to constantly manage them. IoT helps boost efficiency, automate tasks, and provide useful data that leads to smarter decisions for both businesses and individuals. But it also comes with challenges, like keeping data secure, protecting privacy, and keeping track of all those connected devices.
Steps To Manage IoT Security Risks for Small Businesses
1. Know What You’ve Got
Begin with all of your network’s smart devices, such as cameras, speakers, printers, and thermostats. If you are not aware of a gadget, you cannot keep it safe.
- Walk through the office and note each gadget
- Record model names and who uses them
With a clear inventory, you’ll have the visibility you need to stay in control during updates or when responding to issues.
2. Change Default Passwords Immediately
Most smart devices come with weak, shared passwords. If you’re still using the default password, you’re inviting trouble.
- Change every password to something strong and unique
- Store passwords securely where your team can consistently access them
It takes just a minute, and it helps you avoid one of the most common rookie mistakes: weak passwords.
3. Segment Your Network
Let your smart printer talk, but don’t let it talk to everything. Use network segmentation to give each IoT device space while keeping your main systems secure.
- Create separate Wi-Fi or VLAN sections for IoT gear
- Block IoT devices from accessing sensitive servers
- Use guest networks where possible
Segmented networks reduce risk and make monitoring easy.
4. Keep Firmware and Software Updated
Security flaws are found all the time, and updates fix them. If your devices are out of date, you’re wide open to cyberattacks.
- Check for updates monthly
- Automate updates when possible
- Replace devices that are no longer supported
Even older gadgets can be secure if they keep receiving patches.
5. Monitor Traffic and Logs
Once your devices are in place, watch how they talk. Unexpected activity could signal trouble.
- Use basic network tools to track how often and where devices connect
- Set alerts for strange activity, like a badge reader suddenly reaching the internet
- Review logs regularly for odd patterns
You don’t need an army of security experts, just something as simple as a nightly check-in.
6. Set Up a Response Plan
Incidents happen; devices can fail or malfunction. Without a plan, every problem turns into a major headache. Your response plan should include:
- Who to contact when devices act weird
- How you’ll isolate a problematic device
- Available standby tools or firmware
A strong response plan lets you respond quickly and keep calm when things go wrong.
7. Limit What Each Device Can Do
Not every device needs full network access. The key is permission controls.
- Turn off unused features and remote access
- Block internet access where not needed
- Restrict device functions to exact roles only
Less access means less risk, yet your tools can still get the job done.
8. Watch for Devices That Creep In
It’s easy to bring in new devices without thinking of security risks, like smart coffee makers or guest speakers.
- Have a simple approval step for new devices
- Ask questions: “Does it need office Wi-Fi? Does it store data?”
- Reject or block any gear that can’t be secured
Catching these risks early keeps your network strong.
9. Encrypt Sensitive Data
If your smart devices transmit data, ensure that data is encrypted both during transmission and while stored.
- Check device settings for encryption options
- Use encrypted storage systems on your network
Encryption adds a layer of protection without slowing things down.
10. Reevaluate Regularly
It’s easy to secure your office tech once and assume it stays that way. But tech changes fast, and so do threats.
- Do a full check-in every six months
- Reassess passwords, network segments, and firmware
- Replace devices that don’t meet today’s standards
With a regular schedule, you keep ahead without overthinking it.
Why This Actually Matters
Smart devices simplify work but can pose risks if not properly secured. More businesses are experiencing cyberattacks through their IoT devices than ever before, and these attacks are rising rapidly. Protecting your systems isn’t about expensive high-tech solutions, it’s about taking simple, smart steps like updating passwords, keeping devices up to date, and knowing what’s connected.
These simple steps can protect your business without getting in the way. Plus, with the right IT support, staying ahead of threats is simpler than you might expect.
Your Office Is Smart, Your Security Should Be Too
You don’t need to be a cybersecurity expert to protect your small office. As more smart devices like printers, thermostats, and security cameras connect to your network, hackers have more opportunities to get in. The good news? Keeping your space secure doesn’t have to be complicated or costly.
With the right IT partner who understands the unique challenges small businesses face, you can take simple steps to protect what matters. Ready to get serious about IoT security? Contact us today and partner with a team that protects small offices, without the big-business complexity.
—
This Article has been Republished with Permission from The Technology Press.
- Walk through the office and note each gadget
-

LastPass Warns of Fake Repositories Infecting macOS with Atomic Infostealer
LastPass is warning of an ongoing, widespread information stealer campaign targeting Apple macOS users through fake GitHub repositories that distribute malware-laced programs masquerading as legitimate tools.“In the case of LastPass, the fraudulent repositories redirected potential victims to a repository that downloads the Atomic infostealer malware,” researchers Alex Cox, Mike Kosak, and
-

Researchers Uncover GPT-4-Powered MalTerminal Malware Creating Ransomware, Reverse Shell
Cybersecurity researchers have discovered what they say is the earliest example known to date of a malware with that bakes in Large Language Model (LLM) capabilities.
The malware has been codenamed MalTerminal by SentinelOne SentinelLABS research team. The findings were presented at the LABScon 2025 security conference.
In a report examining the malicious use of LLMs, the cybersecurity company -

ShadowLeak Zero-Click Flaw Leaks Gmail Data via OpenAI ChatGPT Deep Research Agent
Cybersecurity researchers have disclosed a zero-click flaw in OpenAI ChatGPT’s Deep Research agent that could allow an attacker to leak sensitive Gmail inbox data with a single crafted email without any user action.
The new class of attack has been codenamed ShadowLeak by Radware. Following responsible disclosure on June 18, 2025, the issue was addressed by OpenAI in early August.
“The attack -

UNC1549 Hacks 34 Devices in 11 Telecom Firms via LinkedIn Job Lures and MINIBIKE Malware
An Iran-nexus cyber espionage group known as UNC1549 has been attributed to a new campaign targeting European telecommunications companies, successfully infiltrating 34 devices across 11 organizations as part of a recruitment-themed activity on LinkedIn.
Swiss cybersecurity company PRODAFT is tracking the cluster under the name Subtle Snail. It’s assessed to be affiliated with Iran’s Islamic -

SystemBC Powers REM Proxy With 1,500 Daily VPS Victims Across 80 C2 Servers
A proxy network known as REM Proxy is powered by malware known as SystemBC, offering about 80% of the botnet to its users, according to new findings from the Black Lotus Labs team at Lumen Technologies.
“REM Proxy is a sizeable network, which also markets a pool of 20,000 Mikrotik routers and a variety of open proxies it finds freely available online,” the company said in a report shared with -

How To Automate Alert Triage With AI Agents and Confluence SOPs Using Tines
Run by the team at workflow orchestration and AI platform Tines, the Tines library features over 1,000 pre-built workflows shared by security practitioners from across the community – all free to import and deploy through the platform’s Community Edition.
The workflow we are highlighting streamlines security alert handling by automatically identifying and executing the appropriate Standard -

Russian Hackers Gamaredon and Turla Collaborate to Deploy Kazuar Backdoor in Ukraine
Cybersecurity researchers have discerned evidence of two Russian hacking groups Gamaredon and Turla collaborating together to target and co-comprise Ukrainian entities.
Slovak cybersecurity company ESET said it observed the Gamaredon tools PteroGraphin and PteroOdd being used to execute Turla group’s Kazuar backdoor on an endpoint in Ukraine in February 2025, indicating that Turla is very likely -

U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack
Law enforcement authorities in the U.K. have arrested two teen members of the Scattered Spider hacking group in connection with their alleged participation in an August 2024 cyber attack targeting Transport for London (TfL), the city’s public transportation agency.
Thalha Jubair (aka EarthtoStar, Brad, Austin, and @autistic), 19, from East London and Owen Flowers, 18, from Walsall, West Midlands
