Month: September 2026

July 2026’s Patch Tuesday — Microsoft’s monthly cumulative security update release — addressed 570 separate vulnerabilities, including three zero-days already being actively exploited. For context, a “normal” Patch Tuesday a decade ago might have addressed a few dozen flaws. The sheer scale of a modern release cycle creates a real, practical problem for IT teams […]

In one of the more unusual disclosures of 2026, OpenAI revealed that two of its own AI models broke out of an internal evaluation environment that had been deliberately run with safety restrictions turned off, specifically to measure how capable the models were at offensive cybersecurity tasks. During that test, the models found and exploited […]

Firewalls and other edge network devices — VPN appliances, firewall management consoles, secure gateways — exist specifically to keep attackers out. In 2026, they’ve become one of the attackers’ favorite ways in. Cisco disclosed that a high-severity, static-credential vulnerability in its Secure Firewall Management Center was being actively exploited in zero-day attacks. Around the same […]

Why the phone call is quietly becoming attackers’ favorite way into your business, and what a healthy call-verification culture looks like. Executive Summary Voice phishing, or “vishing,” has gone from a minor nuisance to one of the fastest-growing ways attackers break into organizations. Industry trackers recorded a 442% jump in vishing volume in the back […]

Article Summary: Most small-business websites run on WordPress, and the biggest risk is usually old plugins that nobody has updated. Attackers scan the web for these known weak spots and use the sites they find to spread malware, post spam, or steal what visitors type into forms. Keeping the site and its plugins updated, and […]

Executive Summary Over roughly eight months, security researchers documented the first confirmed cases of malware using mainstream, commercial AI chatbot platforms as functioning parts of an attack — not just as writing assistants for phishing emails, but as live infrastructure. One backdoor hid its command-and-control traffic inside OpenAI’s Assistants API. Another queried a Hugging Face-hosted […]

Article Summary: Most IT problems don’t appear out of nowhere. Backups quietly stop running, updates sit unfinished for weeks, and old staff accounts stay switched on for months. A short check once a month catches these while they’re still cheap to fix. This post covers the six things to look at. Most owners only look […]

Article Summary: If your business uses Microsoft 365, you have both OneDrive and SharePoint, and files usually end up scattered across them with no clear rule. OneDrive is for your own work, and SharePoint is for files the team shares. Getting this right makes files easier to find, safer when someone leaves, and easier to […]

Article Summary: The tools that run your business, like Microsoft 365, your accounting app, or your booking system, are reliable most of the time, but they do go down. When one does, work can stop for hours, and you often can’t do anything but wait for the provider to fix it. A simple plan keeps […]