Author: Robert Borges

Red padlock resting on a black keyboard, representing Zero Trust access control

Zero Trust Isn’t a Product You Buy. It’s a Question You Should Be Asking About Every Login

Posted on by Robert Borges

Photo by FlyD on Unsplash “Zero Trust” shows up in so many vendor pitches that it’s easy to assume it’s a product: something you install, switch on and check off a list. It isn’t. The National Institute of Standards and Technology, which formalized the model in its Zero Trust Architecture guidance, describes it as a Read more about Zero Trust Isn’t a Product You Buy. It’s a Question You Should Be Asking About Every Login[…]

Network cables connected to a firewall and switch in a server rack

FortiBleed Wasn’t a Bug: It Was a Password Problem

Posted on by Robert Borges

Photo by Kirill Sh on Unsplash In June 2026, researchers found something alarming sitting in a threat actor’s open directory: login details, including many plaintext passwords, for tens of thousands of Fortinet firewalls and VPN gateways around the world. The incident became known as FortiBleed. Researchers who reviewed the data counted roughly 73,932 unique firewall Read more about FortiBleed Wasn’t a Bug: It Was a Password Problem[…]

Doctor on the phone while working on a laptop in a medical office

HIPAA Fines Aren’t Capped at What You’d Guess. Here’s What a Breach Actually Costs a Small Practice

Posted on by Robert Borges

Photo by Vitaly Gariev on Unsplash A lot of small healthcare practices carry a quiet assumption: HIPAA enforcement is for hospital systems and big insurers, not a four-provider practice in a strip mall. The penalty structure doesn’t make that distinction, and neither do the costs that pile up long before any fine is assessed. Small Read more about HIPAA Fines Aren’t Capped at What You’d Guess. Here’s What a Breach Actually Costs a Small Practice[…]

Open laptop displaying website code, representing PHP web server security

Your Website Is Patched. The Software Underneath It May Not Be

Posted on by Robert Borges

Photo by Daniil Komov on Unsplash If you run a small business website, you’ve probably heard the same advice for years: keep WordPress updated, keep your plugins current, and you’ll be fine. This month, that advice stopped being enough. On October 21, 2026, the PHP project shipped emergency fixes for two critical flaws in PHP Read more about Your Website Is Patched. The Software Underneath It May Not Be[…]

A padlock resting on a circuit board, representing email and data security

Phishing Spikes Nearly 700 Percent Before Black Friday. Your Employees Are the Real Target.

Posted on by Robert Borges

  The Timing Isn’t an Accident Every year, right around the point when Massachusetts businesses start eyeing Black Friday sales and year end deadlines, something else picks up speed too: email based fraud aimed at the people who approve payments. Darktrace tracked a 692 percent jump in phishing volume during the run up to Black Read more about Phishing Spikes Nearly 700 Percent Before Black Friday. Your Employees Are the Real Target.[…]

Financial advisory team meeting to review compliance planning

Regulators Don’t Accept “Our IT Guy Handles It” as a Compliance Answer Anymore

Posted on by Robert Borges

Photo by Vitaly Gariev on Unsplash If your firm is a registered investment adviser, broker-dealer or other covered financial institution, the SEC’s amended Regulation S-P is no longer something on the horizon. Larger firms had to comply by December 2025. Smaller investment advisers, those with less than $1.5 billion in assets under management, had until Read more about Regulators Don’t Accept “Our IT Guy Handles It” as a Compliance Answer Anymore[…]