The Missing Warning: Why This Month’s Windows Update Matters
You have probably seen it many times. You open a file that came from an email or a website, and Windows pauses to ask if you are sure. Sometimes Office opens it in Protected View with a yellow bar across the top. That little pause is easy to ignore, but it is one of...
FortiBleed Is Not a Patch Problem. It Is a Password Problem.
Most security news for small offices follows a familiar pattern: a vendor finds a flaw, releases a fix, and everyone patches. FortiBleed does not fit that pattern, and that is exactly why it deserves a few minutes of your attention this week. On October 6, the FBI and...
Your Antivirus Says It Is On. Here Is How to Make Sure It Is Still Looking.
Most small offices check antivirus the same way: open Windows Security, see the green check mark, and move on. That check mark tells you Microsoft Defender Antivirus is running. It does not tell you whether someone has quietly told it to ignore part of the computer....
When Remote Access Depends on NetScaler SAML, Today’s KEV Due Date Is a Patch Checklist
Citrix published an emergency NetScaler advisory for CVE-2026-88779, and CISA added the same flaw to its Known Exploited Vulnerabilities catalog on October 4, 2026. The federal remediation due date is October 7. That is today. The issue is a memory overflow in...
When Your Email Gateway Faces the Internet, This FortiMail Flaw Is a Monday Checklist
Fortinet published a critical FortiMail advisory on October 1, 2026, and CISA added the same flaw to its Known Exploited Vulnerabilities catalog that day. The issue is CVE-2026-104286, a path-traversal and NULL-byte problem that can let an unauthenticated attacker...
When a Zoom Invite Installs a Real Remote Tool, Small Offices Need an Allowlist
Microsoft’s security team published a clear warning on September 29, 2026: phishing campaigns observed in July delivered a legitimate, digitally signed MSP360 Remote Monitoring and Management installer under names that looked like everyday work. Meeting...
Check Every Work iPhone, iPad, and Mac for Apple’s September 28 Security Update
Apple released security updates on September 28, 2026 for a CoreGraphics flaw that can lead to arbitrary code execution when a device processes a maliciously crafted file. On September 29, CISA added that flaw, CVE-2026-86950, to the Known Exploited Vulnerabilities...
Settra Ransomware Is Turning Stolen VPN Logins and Unexpected RMM Tools into Quiet Footholds
Settra ransomware is a useful reminder that many serious incidents still start with a valid login, not a flashy exploit. Huntress recently documented two Settra incidents, including a September case at a manufacturing firm. MOXFIVE case work points to compromised VPN...
