“Is this message a scam?”
Examine the wording and requests in a suspicious email, text, or call. Get a practical list of what to verify.
Review the warning signsAegis · Your AI cybersecurity assistant
Cybersecurity questions.
Clear next steps.
A suspicious message. An unfamiliar alert. A vulnerability in the news. Make sense of it with Aegis, the security feature inside Kona Business AI’s Chat and Workspace.
For individuals, founders, and the people who keep a business running.
Start where you are
What’s on your mind?
You do not need to know the right security term. Start with the situation. Kona helps you ask better questions, understand the evidence, and decide what needs attention.
“Was my account compromised?”
Explain what you noticed. Separate warning signs from confirmed evidence and organize your next checks.
Work through next steps“Does this vulnerability affect me?”
Look up a product or CVE, then assess supported exact package versions from your own inventory.
Understand a vulnerability“How do we prepare for ransomware?”
Turn patching, access, backups, and recovery questions into a readiness checklist for your business.
Build a response planSecurity news → useful action
Understand the headline.
Find your next step.
Recent security reports raise practical questions about account access, connected apps, ransomware, and scams. Use the original sources, then bring the questions that matter to your situation into Kona.
Security source briefing
Reviewed · Curated by Kona Business AI
HuntressPublished
A password reset may not finish the job.
Huntress documented stolen Microsoft 365 sessions and hidden inbox rules in a campaign observed from July 14 to September 22. The research is newly published; those attack dates are earlier.
Read the original sourceA useful next step
Build an account-compromise checklist covering sessions, MFA methods, registered devices, and mailbox rules.
Review account securitySophos X-OpsPublished
Old app connections can still matter.
Sophos reported suspicious ConnectWise Cloud Backup application sign-ins on October 15, including tenants with no active subscription. Its report did not establish what was done with issued tokens.
Read the original sourceA useful next step
List current and former business integrations. Prepare an app-access review using the vendor’s guidance and your sign-in evidence.
Plan an app-access reviewCISA & partner agenciesPublished
Turn ransomware advice into practical work.
The joint SafePay advisory draws on investigations through August 2026. Its guidance includes patching exposed systems, restricting privileged access, and strengthening identity protection.
Read the original sourceA useful next step
Create an inventory, prioritize applicable known-exploited vulnerabilities, and document your backup and recovery checks.
Build a readiness checklistFederal Trade CommissionPublished
Pressure and secrecy are warning signs.
The FTC warned about impostors threatening to disconnect phone numbers and demanding personal information or money. Real FTC employees do not make those demands.
Read the original sourceA useful next step
Describe the suspicious claim without sharing private details. Get help identifying warning signs and independent ways to verify it.
Review a suspicious messageA published report does not establish that your account or systems are affected. Publication dates and observed incident dates are distinct. This is a dated editorial briefing; open the source for subsequent updates. Our editorial standards.
Part of Kona Business AI
One place to ask.
One place to work it through.
Aegis brings security work into the same Kona product you already use for business decisions. Chat helps you reason through a question. Workspace gives your evidence and follow-up a structure.
Understand what you’re looking at.
Ask about a suspicious message, an unfamiliar security term, or a vulnerability affecting your software. Bring selected evidence from your security workspace into the conversation.
- Plain-language explanations and follow-up questions
- Practical phishing and account-response guidance
- Editable drafts before you send
Keep evidence attached to the work.
Import supported software inventories and logs, query public advisories, investigate findings, and record a remediation plan with its review and verification evidence.
- Inventory, SBOM, and dependency-file imports
- Bounded log analysis with source and confidence
- Reviewed plans, fresh checks, and JSON exports
Security records stay in this browser. Export a copy when you need to keep or share the work; cross-device security-workspace sync is not included.
Evidence before confidence
Know what a finding proves.
A useful security tool shows the limits of its information. Aegis keeps observations, possible risks, and verified changes distinct, so you can make a more informed decision.
Match the right software.
Search CISA and CVE intelligence. Assess supported package names, ecosystems, and exact versions with OSV. Source failures and incomplete coverage remain visible.
Investigate the signal.
Review supported attack patterns in imported logs and provider alerts. A suspicious request or a high-severity alert does not by itself prove a successful intrusion.
Check the actual change.
Review a specific version or configuration target. Record the operation you performed, then supply a newer observation from the same asset to verify the result.
Before you start
A few useful answers.
What Aegis can help with, and how the security workflow works.
What is Aegis in Kona Business AI?
Aegis is Kona’s cybersecurity assistant and evidence workspace. Use Chat to understand a suspicious message or security question. Use the security Workspace to import an inventory or logs, look up vulnerability advisories, review findings, and track a remediation plan through fresh evidence checks.
I clicked a phishing link. What should I do next?
Stop interacting with the page. If you entered a password, change it from a trusted device using the service’s official website, review active sessions, and revoke unfamiliar sessions. If you approved an app or shared a code, review that access as well. Contact your IT or security team for a work account. Tell Kona what happened without sharing passwords or verification codes, and ask for a prioritized response checklist.
Can Aegis check whether my software has a known vulnerability?
Aegis searches CISA’s Known Exploited Vulnerabilities catalog and CVE records, and queries OSV for supported exact package names, ecosystems, and versions. Import an inventory or supported dependency file to start an assessment. A version match is evidence to investigate; it does not establish internet exposure or successful compromise. Missing or failed source coverage is shown as a limitation.
Can small businesses and individuals use it?
Yes. Individuals can ask about scams, suspicious messages, and account security. Small businesses can organize software inventory, investigate supplied log evidence, and prepare a reviewed security action plan. Technical findings still need the context and judgment of the person responsible for the affected system.
Does Aegis automatically patch systems or monitor my devices?
No. This Kona feature works with evidence you supply and public advisory lookups on demand. It does not continuously monitor devices, scan your network, or execute patches. You review the proposed scope, make the actual change using your own tools, record the outcome, and provide a new observation for verification.
Where do my imported security records go?
Inventory and log parsing run in your browser. Security workspace records are stored in this browser and are not a shared or cross-device security database. Public package assessments send package identities and versions to the advisory service. Sending a summary to Chat shares that selected context with Kona’s AI service. Keep credentials and sensitive personal data out of your uploads and review what you share.
Start with the question you have.
You can work through a suspicious message or build a more complete security review. Aegis is right here in Kona.