IT insights for Des Moines law firms and professional services firmshttps://www.artechsolutions.com/https://www.artechsolutions.com/blog/gemini-cli-botnet/https://www.artechsolutions.com/blog/gemini-cli-botnet/A threat actor used Google's open-source Gemini CLI to migrate, operate, and troubleshoot a botnet targeting a dental clinic. The entire operation fit in three text files.Thu, 16 Jul 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/rmm-supply-chain-risk/https://www.artechsolutions.com/blog/rmm-supply-chain-risk/A vulnerability in a popular remote management tool let attackers push malware through the same system used to protect clients. Here's what to ask your IT provider about how they secure their own tools.Tue, 14 Jul 2026 00:00:00 GMTIT Best Practiceshttps://www.artechsolutions.com/blog/ai-tools-attack-surface/https://www.artechsolutions.com/blog/ai-tools-attack-surface/Law firms are connecting AI tools to their systems faster than they're securing them. Recent attacks show why every integration needs the same scrutiny as a new employee with network access.Thu, 09 Jul 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/password-spray-conditional-access/https://www.artechsolutions.com/blog/password-spray-conditional-access/A massive password spray campaign hit Microsoft 365 environments in June, bypassing MFA through a legacy authentication flow. Here's what went wrong and how to check your own tenant.Tue, 07 Jul 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/vibe-coding-shadow-it-risk/https://www.artechsolutions.com/blog/vibe-coding-shadow-it-risk/A recent scan found 380,000 publicly accessible applications built by employees using AI coding tools. 5,000 contained sensitive corporate data. This is shadow IT with a compiler.Thu, 02 Jul 2026 00:00:00 GMTIT Best Practiceshttps://www.artechsolutions.com/blog/copilot-searchleak-data-exfiltration/https://www.artechsolutions.com/blog/copilot-searchleak-data-exfiltration/A vulnerability in Microsoft 365 Copilot Enterprise let attackers exfiltrate emails, files, and MFA codes with a single link click. It's patched, but the lesson isn't about the patch.Tue, 30 Jun 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/cpa-client-portal-security/https://www.artechsolutions.com/blog/cpa-client-portal-security/Everyone trains staff on phishing. Almost nobody audits the portal where clients upload tax returns, bank statements, and payroll records. That's the problem.Thu, 25 Jun 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/device-code-phishing-commodity/https://www.artechsolutions.com/blog/device-code-phishing-commodity/In April, device code phishing was mostly a state-sponsored technique. Now there are 18 kits, a 37x spike in detections, and every major phishing-as-a-service vendor offers it. Here's what changed.Tue, 23 Jun 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/cpa-ai-competencies-tech-stack/https://www.artechsolutions.com/blog/cpa-ai-competencies-tech-stack/The Journal of Accountancy identified five competencies CPAs need as AI handles more routine work. Every one of them depends on technology your firm may not have configured correctly.Thu, 18 Jun 2026 00:00:00 GMTCompliancehttps://www.artechsolutions.com/blog/clickfix-ransomware-update/https://www.artechsolutions.com/blog/clickfix-ransomware-update/Two months ago we wrote about ClickFix as the top initial access technique. Since then, ransomware groups adopted it, attackers compromised Harvard and Oxford's websites to deliver it, and Apple had to patch macOS to defend against it.Tue, 16 Jun 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/legal-ai-platform-war/https://www.artechsolutions.com/blog/legal-ai-platform-war/Four attorneys just got removed from a case over AI-generated citations. Meanwhile, Anthropic, OpenAI, Microsoft, and Clio are all racing to become your firm's AI platform. Here's how to think about the choice.Thu, 11 Jun 2026 00:00:00 GMTAI & Lawhttps://www.artechsolutions.com/blog/copilot-july-rollout-prep/https://www.artechsolutions.com/blog/copilot-july-rollout-prep/Microsoft's new bundled Copilot SKUs make the licensing decision easier. The deployment decision is harder. Here's what to configure before you flip the switch.Tue, 09 Jun 2026 00:00:00 GMTCloud & Infrastructurehttps://www.artechsolutions.com/blog/meta-ai-account-takeover/https://www.artechsolutions.com/blog/meta-ai-account-takeover/Attackers used AI-generated videos to fool Meta's automated support into handing over accounts. What happens when AI support becomes the attack surface, and what it means for your firm's account recovery planning.Thu, 04 Jun 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/shadow-ai-oauth-tokens/https://www.artechsolutions.com/blog/shadow-ai-oauth-tokens/Shadow AI isn't just employees using ChatGPT anymore. The real risk is third-party apps with persistent OAuth access to your firm's email, files, and calendar data.Tue, 02 Jun 2026 00:00:00 GMTIT Best Practiceshttps://www.artechsolutions.com/blog/session-tokens-new-passwords/https://www.artechsolutions.com/blog/session-tokens-new-passwords/Attackers have shifted from stealing passwords to stealing session tokens. Here's why MFA alone isn't enough to protect your firm's Microsoft 365 environment in 2026.Thu, 28 May 2026 00:00:00 GMTIT Best Practiceshttps://www.artechsolutions.com/blog/irs-cybersecurity-plan-tax-preparers/https://www.artechsolutions.com/blog/irs-cybersecurity-plan-tax-preparers/Every tax preparer is required to maintain a Written Information Security Plan. The FTC Safeguards Rule adds another layer. Here's what's actually required and why it matters now.Tue, 26 May 2026 00:00:00 GMTCompliancehttps://www.artechsolutions.com/blog/claude-legal-tech-stack/https://www.artechsolutions.com/blog/claude-legal-tech-stack/Anthropic released 20+ integrations linking Claude directly to iManage, NetDocuments, Relativity, and more. Here's what that means for firms trying to manage AI governance.Thu, 21 May 2026 00:00:00 GMTAI & Lawhttps://www.artechsolutions.com/blog/exchange-zero-day-no-patch/https://www.artechsolutions.com/blog/exchange-zero-day-no-patch/A high-severity Exchange Server vulnerability is being actively exploited and Microsoft has no fix yet. If you're still running on-premises Exchange, here's what you need to know right now.Tue, 19 May 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/ai-generated-zero-day-exploit/https://www.artechsolutions.com/blog/ai-generated-zero-day-exploit/Google's threat intelligence team says a hacker used AI to discover and weaponize a zero-day vulnerability in a web admin tool. This is the first confirmed case, and it changes the math on how fast you need to patch.Thu, 14 May 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/california-ai-competence-rule/https://www.artechsolutions.com/blog/california-ai-competence-rule/California's State Bar wants to add language to Rule 1.1 requiring lawyers to independently verify AI output. Here's what the proposal says and why Iowa attorneys should pay attention now.Tue, 12 May 2026 00:00:00 GMTAI & Lawhttps://www.artechsolutions.com/blog/vetting-your-it-provider/https://www.artechsolutions.com/blog/vetting-your-it-provider/Two former incident response professionals were sentenced for running ransomware attacks against U.S. companies. The case is a reminder that trust in IT partnerships should be earned, not assumed.Thu, 07 May 2026 00:00:00 GMTCompliancehttps://www.artechsolutions.com/blog/ai-powered-phishing-kits/https://www.artechsolutions.com/blog/ai-powered-phishing-kits/New phishing kits are integrating AI assistants to help criminals draft convincing emails and run entire campaigns from a single dashboard. Here's what changed and what it means for your firm.Tue, 05 May 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/sullivan-cromwell-ai-hallucinations/https://www.artechsolutions.com/blog/sullivan-cromwell-ai-hallucinations/An Am Law 10 firm with mandatory AI training and a 'trust nothing, verify everything' office manual just admitted to filing AI-hallucinated citations. Here's what that means for your firm.Thu, 30 Apr 2026 00:00:00 GMTAI & Lawhttps://www.artechsolutions.com/blog/copilot-agentic-capabilities/https://www.artechsolutions.com/blog/copilot-agentic-capabilities/Copilot now takes action inside your documents instead of offering suggestions from a sidebar. Here's what changed last week and what it means for your business.Tue, 28 Apr 2026 00:00:00 GMTIT Best Practiceshttps://www.artechsolutions.com/blog/engagement-letter-ai-language/https://www.artechsolutions.com/blog/engagement-letter-ai-language/Courts are stripping privilege from AI-assisted legal work. Major firms are rewriting engagement letters in response. Here's what belongs in yours and what creates more liability than it prevents.Thu, 23 Apr 2026 00:00:00 GMTAI & Lawhttps://www.artechsolutions.com/blog/callback-phishing-law-firms/https://www.artechsolutions.com/blog/callback-phishing-law-firms/The Silent Ransom Group is targeting U.S. law firms with callback phishing attacks that bypass email filters entirely. The FBI issued a warning. Here's what small firms need to know.Tue, 21 Apr 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/m365-price-increase-unused-features/https://www.artechsolutions.com/blog/m365-price-increase-unused-features/Microsoft 365 prices go up in July 2026. Before you absorb the increase, find out which security and compliance features your company is already paying for but not using.Thu, 16 Apr 2026 00:00:00 GMTCloud & Infrastructurehttps://www.artechsolutions.com/blog/cyber-insurance-requirements-law-firms/https://www.artechsolutions.com/blog/cyber-insurance-requirements-law-firms/Cyber insurance applications for law firms now require proof of MFA, EDR, tested backups, and more. If you can't prove your controls are in place, your claim can be denied.Tue, 14 Apr 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/attacks-start-with-login/https://www.artechsolutions.com/blog/attacks-start-with-login/Most cyberattacks in 2025-2026 used stolen credentials, not software exploits. Learn what credential-based attacks mean for Iowa law firms and how to defend against them.Thu, 09 Apr 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/ai-notetakers-privilege-law-firms/https://www.artechsolutions.com/blog/ai-notetakers-privilege-law-firms/AI meeting notetakers can put attorney-client privilege at risk. Learn how law firms should evaluate AI transcription tools and protect confidential communications.Tue, 07 Apr 2026 00:00:00 GMTAI & Lawhttps://www.artechsolutions.com/blog/device-code-phishing-m365/https://www.artechsolutions.com/blog/device-code-phishing-m365/A new phishing attack called device code phishing bypasses MFA to hijack Microsoft 365 accounts. Iowa law firms need to understand why MFA alone isn't enough.Thu, 02 Apr 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/choosing-msp-for-law-firm/https://www.artechsolutions.com/blog/choosing-msp-for-law-firm/Choosing an MSP for your law firm? Here's what to look for, from legal workflow expertise to pricing transparency and after-hours support.Tue, 31 Mar 2026 00:00:00 GMTIT Best Practiceshttps://www.artechsolutions.com/blog/data-ready-for-copilot/https://www.artechsolutions.com/blog/data-ready-for-copilot/Before deploying Microsoft Copilot, your law firm needs to fix permissions, clean up SharePoint, and classify sensitive data. Here's what that looks like.Thu, 26 Mar 2026 00:00:00 GMTCloud & Infrastructurehttps://www.artechsolutions.com/blog/ai-acceptable-use-policy-law-firms/https://www.artechsolutions.com/blog/ai-acceptable-use-policy-law-firms/Law firms need AI acceptable use policies to protect client data and meet ethical obligations. Learn what to include and why it matters.Tue, 24 Mar 2026 00:00:00 GMTAI & Lawhttps://www.artechsolutions.com/blog/cybersecurity-threats-iowa-law-firms/https://www.artechsolutions.com/blog/cybersecurity-threats-iowa-law-firms/Law firms are prime targets for BEC scams, ransomware, and credential theft. Here are 5 real threats and what your firm can do about each one.Fri, 20 Mar 2026 00:00:00 GMTCybersecurityhttps://www.artechsolutions.com/blog/ai-for-iowa-law-firms-2026/https://www.artechsolutions.com/blog/ai-for-iowa-law-firms-2026/Iowa law firms face new AI obligations in 2026. Learn what the ISBA AI Training Series, ABA Opinion 512, and emerging tools mean for your practice.Wed, 18 Mar 2026 00:00:00 GMTAI & Lawhttps://www.artechsolutions.com/blog/welcome/https://www.artechsolutions.com/blog/welcome/We're launching a new blog to share IT insights for Des Moines law firms and professional services firms.Mon, 16 Mar 2026 00:00:00 GMTCompany News