Business & Tech Insights
ClickFix Fake CAPTCHAs Are Tricking Office Users Into Self-Infecting
A new CTM360 report maps 17,000 ClickFix URLs. Here is what Pittsburgh SMBs in legal, CPA, healthcare and defense work should verify and train on now.
Blog
Insights for running on IT.
Business & Tech Insights
Chrome and Windows Zero-Day Chain: What Pittsburgh SMBs Should Do Now
A Chinese threat actor chained Chrome and Windows zero-days via fake websites. Here is what Pittsburgh small and mid-sized businesses should verify and patch now.
Business & Tech Insights
Fake LastPass Installer Kills EDR With a Signed Driver
A fake LastPass Authenticator installer uses a Microsoft-signed driver to disable antivirus and EDR. What Pittsburgh SMBs should verify and fix this week.
Business & Tech Insights
ClickFix Fake Updates Are Now Delivering ChainScript RAT
ClickFix fake-update lures are deploying a new RAT called ChainScript, posing as Teams, Zoom and Spotify. What Pittsburgh SMBs should do this week.
Business & Tech Insights
Fake GitHub Repos Are Pushing Infostealers at Your Staff
Fake LastPass Authenticator GitHub repos are spreading the Rapuncel infostealer. What Pittsburgh SMBs should verify and lock down this week.
Business & Tech Insights
WordPress Click2Shell Flaw: What Pittsburgh SMBs Should Do Now
A new WordPress flaw dubbed Click2Shell can install a theme from one admin click, and may chain to code execution. Here is a practical checklist for SMBs.
Business & Tech Insights
Windows 11 24H2 Home and Pro Lost Support: Check Your Fleet
Microsoft flagged an October end of support for Windows 11 24H2 Home and Pro. Here is what Pittsburgh SMBs should verify and fix now, step by step.
Business & Tech Insights
Windows Update Breaks Domain Logins: What Pittsburgh SMBs Should Do
Microsoft published a workaround for domain login failures after the September 2026 Windows updates. Here is what Pittsburgh SMBs should check this week.
Business & Tech Insights
CISA Warns of Active ScreenConnect Exploitation: What to Do Now
CISA says a critical ConnectWise ScreenConnect flaw is under active attack. What Pittsburgh SMBs should verify, patch, and document this week.
Cybersecurity
Ransomware Gangs Are Now Exploiting Critical VMware vCenter Flaw
CISA says ransomware crews are exploiting a critical VMware vCenter RCE bug. What Pittsburgh SMBs running on-prem VMware should verify and patch this week.
Business & Tech Insights
CISA Flags Actively Exploited ScreenConnect and RouterOS Flaws
CISA added five actively exploited Artifactory, ScreenConnect and RouterOS flaws to its KEV catalog. Here is what Pittsburgh SMBs should verify and patch this week.
Cloud & Microsoft 365
Passkey Phishing Is Now Targeting Microsoft 365 Tenants
Microsoft disclosed passkey-themed phishing and CEO fraud campaigns hitting cloud tenants. Here is what Pittsburgh SMBs should verify in M365 this week.