Cloud & Microsoft 365
Fake IT Help Desk Calls Are Targeting Microsoft 365 Executives
Attackers are calling executives while posing as IT help desk to steal Microsoft 365 sessions. Here is what Pittsburgh SMBs should verify and change this week.
Blog
Insights for running on IT.
Business & Tech Insights
Unpatched ScreenConnect Flaw: What Pittsburgh SMBs Should Do
ConnectWise warns of a ScreenConnect remote access flaw with no patch yet. What Pittsburgh SMBs in legal, CPA, healthcare and defense should verify now.
Cybersecurity
ClickFix Payloads on Hacked Small-Business Sites
Thousands of hacked small-business sites are serving ClickFix lures with payloads hidden in blockchain smart contracts. What Pittsburgh SMBs should do now.
Cybersecurity
Invisible Unicode Phishing Wave Slips Past Email Filters
Microsoft flags a high-volume phishing campaign hiding lure words with invisible Unicode. What Pittsburgh SMBs should verify and fix this week.
Business & Tech Insights
Actively Exploited Chrome Zero-Day: Restart Browsers Today
Google patched an actively exploited Chrome zero-day in the V8 engine plus 11 other flaws. Here is what Pittsburgh SMBs should verify and fix this week.
Cybersecurity
US Now the Top Target in a 46-Country RMM Phishing Wave
A remote-monitoring phishing campaign across 46 countries now targets the US most heavily. What Pittsburgh SMBs should verify and lock down this week.
Managed IT
22,000 Exchange Servers Still Exposed: What Pittsburgh SMBs Should Do
Nearly 22,000 unpatched Exchange servers face a mailbox-hijacking auth bypass. What Pittsburgh SMBs running hybrid Exchange should check and fix this week.
Business & Tech Insights
TerminalFix: Fake CAPTCHA Prompts Target Windows Users
Microsoft warns of TerminalFix, a ClickFix variant using fake Cloudflare CAPTCHA prompts to run malicious PowerShell. What Pittsburgh SMBs should do now.
Business & Tech Insights
PaperCut Zero-Day: What Pittsburgh SMBs Need to Patch Now
PaperCut NG/MF is under active zero-day exploitation. Here's what Pittsburgh SMBs should verify and patch this week, and how to reduce future exposure.
Business & Tech Insights
CISA Orders Urgent Zimbra Patch: What Pittsburgh SMBs Should Do
CISA ordered urgent patching of an actively exploited Zimbra flaw. Here is what Pittsburgh SMBs running Zimbra should do this week to stay ahead of attackers.
Business & Tech Insights
Defender's Own Boot Driver Can Be Turned Against You
Check Point Research shows Microsoft Defender's BTR.sys driver can be abused to wipe security tools at boot. What Pittsburgh SMBs should do this week.
Cybersecurity
SynkLoader Malware Is Hiding in Microsoft Teams Chats
A new malware family called SynkLoader is being pushed through Microsoft Teams phishing with a fake lock screen. Here is what Pittsburgh SMBs should do this week.