AllTechField notes from the engineering team.
Security advisories, incident reports, project guides, and plain-language explainers, written by the engineers who do the work.
Barracuda ESG Flaws Exploited: Patch the Gateway
CISA lists two Barracuda flaws as exploited. Chained, they give root on the Email Security Gateway. Affected products, fixes and what to check.
Microsoft 365 Outage: What to Check Afterward
Microsoft 365 and Outlook went down worldwide on November 12. It was not a breach. Here is what to check, the phishing to expect, and how to prepare.
Working From Home: Fixing Remote Access Problems
When a laptop at home can't reach office files or apps, the cause is small: a missing client, an old VPN app or a stale shortcut. What to check.
Security Advisories
Vulnerabilities and active threats that affect small and mid-sized organizations: who is exposed, fixed versions, and what to check first.
| Date | Advisory | Severity | Exploited |
|---|---|---|---|
| SonicWall SSLVPN CVE-2026-19868: SAML MFA BypassCVE-2026-19868 | high | Exploited: Yes | |
| Ivanti Connect Secure Zero-Days: Patch and CheckCVE-2026-104935CVE-2026-111357CVE-2026-118527 | high | Exploited: Yes | |
| Cisco ASA and FTD VPN Flaw: Remote Reload BugCVE-2026-76418 | high | Exploited: Yes | |
| BeyondTrust Remote Support Zero-Day: What to CheckCVE-2026-102764 | critical | Exploited: Yes | |
| FortiOS CVE-2025-61624: Admin Bug Leads to RootCVE-2025-61624 | medium | Exploited: Yes |
Incident Reports
Write-ups of real alerts and intrusions the AllTech SOC worked, from the first signal to containment, with the details that matter changed.
Fileless PowerShell Attack Behind Node.js
A ClickFix-style attack on a Cache Valley business skipped the disk entirely: a memory-only PowerShell payload that dropped a signed-runtime backdoor.
What a ClickFix Attack Looks Like From the Inside
A high-severity alert at a small-town Utah police department began with a pasted command. How it was detected, investigated, and closed in 15 minutes.
Guides
How AllTech plans and delivers projects such as VPN retirement, Zero Trust access, and SASE, and where each approach does and does not fit.
New Hire and Leaver Requests: What IT Needs
A new hire waits on a login when the request comes late, and a leaver keeps access when it never comes. What IT needs from you, and when, for both.
Is This Email Real? How to Check and Report It
Got a suspicious email? Here is how to check it, report it with the Outlook Report button, and why quarantined mail should not be released without IT.
How to Test a Backup Restore Before You Need It
A backup you have never restored is a guess. Here is how to test a restore, what to check and how often, and why ransomware makes the test matter.
Explainers
Plain-language answers to the IT and security questions businesses ask most, written for the people who have to make the decision.
Device Code Phishing Beats MFA on Microsoft 365
A phishing kit has staff finish MFA on Microsoft's real sign-in page. Here is how device code phishing works and how to block it in Entra ID.
502 Bad Gateway Error: Causes and How to Fix It
A 502 bad gateway error means a server in your request chain got an invalid response from another server. Here's what causes it and how to fix it.
Browse by topic
- VPN & Remote AccessVPN flaws, remote access problems, and how businesses move staff and contractors off the corporate VPN without losing access.10 articles →
- Zero Trust & SASEHow Zero Trust access and SASE work in practice for small and mid-sized organizations, and which steps are worth doing first.6 articles →
- Email & Microsoft 365Phishing, email gateway flaws, and Microsoft 365 security: how to spot a bad message and how to keep the mailbox safe.4 articles →
- Ransomware & Incident ResponseReal intrusions, ransomware tactics, and the backups and response steps that limit the damage when an attack gets through.5 articles →
- Networking & FirewallsFirewalls, gateways, and network problems: flaws in edge devices, connection errors, and how the network should be built.5 articles →
- Help Desk & Everyday ITPractical help for everyday IT: fixing common problems, sending the right request to IT, and checking that backups restore.6 articles →
