85°F Knoxville
Mon–Fri 9–5 ETAnswered by a human
Topic · Security

Security reports.

Incident response, fraud prevention, encryption, and the security work that keeps East Tennessee businesses out of the headlines.

01Security

Getting Verification Codes You Didn't Request? How to Tell Spam From Account Compromise

A title company user started receiving back-to-back OTP codes she never asked for. Here's the triage playbook — attacker on a signup form vs. actual account compromise.Corey Watson Updated Mar 2026 5 min
02Security

Finding Your BitLocker Recovery Key After a Windows Update Breaks Boot

A nonprofit's four-month-old HP laptop hit the BitLocker recovery screen after a botched Windows update. Here's how the key lookup saved the day — and why having it escrowed ahead of time is non-negotiable.Corey Watson Updated Feb 2026 5 min
03Security

BEC Wire Fraud at a Title Company: How We Stopped a High-Six-Figure Loss

An attacker got into a closer's inbox and sent fraudulent wire instructions to the other side of a real estate deal. We contained it in under three hours.Corey Watson Updated Dec 2025 6 min
04Security

Laptop Stolen at Airport: Emergency Remote Wipe via RMM

Friday 4:47 PM. Sales rep's laptop stolen with customer data. Device online on a different network. We had minutes to act.Corey Watson Updated Dec 2024 5 min
05Security

OneStart Browser Hijacker: Complete Removal from 30 Infected Machines

PUP that hijacks browsers, injects ads, and reinstalls itself via scheduled tasks. Standard uninstall fails. Complete removal automation.Corey Watson Updated Dec 2024 7 min
06Security

Locked Out of Client PC: Emergency Local Admin via RMM

IT director quit and changed every admin password on the way out. Domain locked, DSRM locked, 85 users dead in the water. RMM saved the day.Corey Watson Updated Nov 2024 7 min
07Security

Security Audit: Passwords Found in Spreadsheets and Documents

Compliance audit required proving no plaintext passwords on endpoints. Scan found 23 files with 'password' in the name containing actual credentials.Corey Watson Updated Nov 2024 6 min
Advertisement — ours, permanently
Dealing with something like this right now?

Book fifteen minutes with Corey — the person who wrote every report on this page.