
WordPress Pre-Auth XSS Hits Every Version: Patch Your Site Now
A critical WordPress pre-auth XSS (CVE-2026-64638) affects every version and can chain to PHP code execution. Here is what Pittsburgh SMBs should do this week.
Blog

A critical WordPress pre-auth XSS (CVE-2026-64638) affects every version and can chain to PHP code execution. Here is what Pittsburgh SMBs should do this week.

UNC6671 is vishing financial and professional services employees on personal phones to steal SaaS data. Here is what Pittsburgh SMBs should do this week.

An active Microsoft 365 AitM phishing campaign is hijacking finance and payroll mailboxes at SMBs. Here is what Pittsburgh businesses should do this week.

Kali365 hijacks Microsoft 365 accounts via device-code phishing. What Pittsburgh SMBs should check in Entra ID this week, plus a 7-step action list.

How a Pittsburgh CPA firm hardened Lacerte, UltraTax CS, and CCH ProSystem fx for GLBA and IRS Publication 4557, with 24/7 tax-season support from PGH Networks.

How PGH Networks delivers IT and cybersecurity for Pittsburgh financial services firms: FINRA, SEC Reg S-P, GLBA, SOC 2, and FTC Safeguards, done right.

A new spear-phishing chain (HollowFrame loader, Matryoshka backdoor) hit a law firm. Here is what Pittsburgh SMBs should verify and fix this week.

See how a New Castle, PA manufacturer hardened its network after a ransomware scare. A practical look at cybersecurity services for Lawrence County businesses.

Cybersecurity services in Morgantown, WV for small and mid-market businesses: EDR/MDR, ransomware defense, HIPAA and CMMC compliance, and 24/7 monitoring.

Hijacked hotel Wi-Fi is pushing fake browser updates that install a webcam and keystroke RAT. What Pittsburgh SMBs should do this week to protect travelers.

Cybersecurity for financial advisors in the Pittsburgh metro: SEC and FINRA aligned controls, 24/7 monitoring, and incident response from a local MSP team.

Looking for a managed security services provider in Pittsburgh? See our 5-step process for 24/7 monitoring, EDR, compliance, and incident response.