A new scam is tricking people into hacking their own computers
You've clicked "I'm not a robot" a thousand times. It's second nature: click the box, maybe select a few traffic lights, and move on with your day.
That's exactly why a new scam called Click-Fix is so effective.
It doesn't try to sneak malware onto your computer. Instead, it convinces you to install it yourself.
Here's how the scam works and how to make sure it never works on you.
Imagine your phone rings. The caller sounds exactly like your mom, brother, or best friend. They're upset, need help immediately, and ask you to act fast.
The problem? It may not be them at all.
The New Face of an Old Scam
Impersonation scams have been around for years, but AI has made them far more convincing. With just a few seconds of someone's voice from a social media video, voicemail, or podcast, scammers can create a realistic voice clone.
Most front-office staff send the same few messages again and again: late payment reminders, maintenance follow-ups, document requests, inspection notices, and welcome letters.
Retyping these messages, or searching through old emails to copy and paste them, wastes valuable time. It also increases the chance of leaving out important details or creating inconsistencies from one letter to the next.
The solution is simple: create each message once, save it, and reuse it whenever you need it.
Step 1: Set Up Quick Parts in Outlook
Warmer weather means travel, outdoor plans, and a little more time away from home but it also means a little more opportunity for identity thieves. Whether you're heading out of town for work or fun, a few simple habits can go a long way toward keeping your personal information safe. Here are our team's top tips for protecting yourself this summer.
Secure Your Devices
Prompting 101: How to Ask AI for What You Actually Want
“Prompt engineering” sounds technical, but it simply means giving AI clear instructions. If you’ve ever written a work order or explained a task, you already know the basics.
Ask AI to “write a letter about an upcoming inspection” and you’ll get something generic. It does not know which inspection, resident, deadline, or tone you need unless you tell it.
The CRAFT Structure: Context, Role, Action, Format, Target Audience
HUD Proposes Cyber Incident Reporting Requirement Within 36 Hours
HUD has issued Notice PIH 2026-17, outlining new reporting requirements for Public Housing Agencies (PHAs) that experience cybersecurity incidents.
Once in effect, if a Housing Authority becomes aware of a cyber incident, it must notify HUD's Cyber Incident Response Team (CIRT) at CIRT@hud.gov and its local field office point of contact within 36 hours of becoming aware of the incident.
Digital threats are ever-changing:
Recent cyber threats highlight just how critical it is for users and organizations to remain vigilant online. Attackers are increasingly relying on sophisticated deception techniques rather than obvious red flags. For example, one attack leveraged a fake website, google-prism.com that closely mimicked Google’s design to establish trust. Users were prompted to grant normal browser permissions and install what appeared to be a legitimate security extension which actually gave attackers access to sensitive data.
We're thrilled to announce a new series of AI and Productivity Training Webinars created specifically for Housing Authority staff. No tech background required!
Artificial intelligence is changing the way organizations work, and we want to make sure your team feels confident, informed, and ready to take advantage of what it has to offer. Whether you're curious about AI but not sure where to start, or you've already been experimenting and want to learn more, these webinars are designed to meet you where you are.
Microsoft Publisher Is Retiring This October: What to Know and What to Use Instead
Microsoft has announced that Microsoft Publisher will be retired in October 2026, marking the end of a product that has been part of Microsoft Office and Microsoft 365 for decades. While some users may feel nostalgic, this change reflects a broader shift toward more modern, flexible design tools that better match today’s needs.
Credential theft is still the easiest way into a corporate network—and attackers know it.
Despite years of warnings and proven defenses, many organizations continue to rely on passwords alone. The result is a growing wave of breaches that didn’t require sophisticated exploits—just a stolen username and password.
