All articles
Every article we have published, newest first.

Barracuda ESG Flaws Exploited: Patch the Gateway
CISA lists two Barracuda flaws as exploited. Chained, they give root on the Email Security Gateway. Affected products, fixes and what to check.
Read the article →
Microsoft 365 Outage: What to Check Afterward
Microsoft 365 and Outlook went down worldwide on November 12. It was not a breach. Here is what to check, the phishing to expect, and how to prepare.

Working From Home: Fixing Remote Access Problems
When a laptop at home can't reach office files or apps, the cause is small: a missing client, an old VPN app or a stale shortcut. What to check.

SonicWall SSLVPN CVE-2026-19868: SAML MFA Bypass
CISA lists SonicWall SonicOS flaw CVE-2026-19868 as exploited. With SAML on for SSLVPN, MFA can be bypassed. Fixed versions and what to check.

Device Code Phishing Beats MFA on Microsoft 365
A phishing kit has staff finish MFA on Microsoft's real sign-in page. Here is how device code phishing works and how to block it in Entra ID.

New Hire and Leaver Requests: What IT Needs
A new hire waits on a login when the request comes late, and a leaver keeps access when it never comes. What IT needs from you, and when, for both.

Ivanti Connect Secure Zero-Days: Patch and Check
Attackers chained three Ivanti Connect Secure flaws to get root on VPN appliances. CISA lists all three as exploited. Fixed versions and checks.

Cisco ASA and FTD VPN Flaw: Remote Reload Bug
CISA lists Cisco ASA and FTD flaw CVE-2026-76418 as exploited. A crafted VPN request can reload the firewall. Affected setups, fixed versions, steps.

Is This Email Real? How to Check and Report It
Got a suspicious email? Here is how to check it, report it with the Outlook Report button, and why quarantined mail should not be released without IT.

How to Test a Backup Restore Before You Need It
A backup you have never restored is a guess. Here is how to test a restore, what to check and how often, and why ransomware makes the test matter.

BeyondTrust Remote Support Zero-Day: What to Check
CVE-2026-102764 let a China-linked group take over BeyondTrust Remote Support appliances. Who is affected, how to patch, and how to spot a breach.

FortiOS CVE-2025-61624: Admin Bug Leads to Root
CISA lists FortiOS flaw CVE-2025-61624 as exploited. It needs admin access, but attackers used it to reach root. Affected versions and what to do.






















