What to Do When Microsoft 365 Goes Down: An Outage Action Plan for Your Business
When Microsoft 365 goes down, the right response is to confirm the problem is on Microsoft's side, leave passwords and software alone, move your team to a backup communication channel, contact key customers by phone, …
Your Supplier Didn't Change Bank Accounts. Someone Pretended They Did.
Vendor payment fraud happens when a criminal poses as one of your suppliers and asks you to send future payments to a new bank account. The email often looks routine, and the money is usually …
Manufacturers Are Ransomware’s Top Target, and a Newly Exploited SonicWall VPN Flaw Can Bypass MFA
Manufacturing is the most targeted industry for ransomware. Dragos counted 747 ransomware incidents against manufacturers in the second quarter of 2026, about 65 percent of all the industrial incidents it tracked. The way in is …
Ransomware Doesn't Have to Touch Your PLCs to Stop Your Plant. Here's the IT System That Shuts You Down.
Ransomware can stop a factory without ever reaching the machines on the floor. In the second quarter of 2026, industrial security firm Dragos found no case where attackers manipulated a control system, yet production still …
Max-Severity Bug in a Widely Used OT Programming Tool Is Already Being Exploited to Deliver Malware
A security firm says it caught attackers actively exploiting a perfect 10.0-severity vulnerability in Node-RED, a flow-based programming tool widely used across industrial control systems (ICS) and operational technology (OT) environments — and the attack …
Update Microsoft Authenticator on Android: A Flaw Let Rogue Apps Steal Work Account Access
Microsoft Authenticator is the app many businesses rely on to protect Microsoft 365 logins. We recommended it in our tip on Microsoft retiring text message sign-in. Researchers have now shown that older versions on Android …
AI Wrote a Working Exploit for a Critical Linux Kernel Flaw — And Most Major Distros Still Haven't Patched It
Anthropic reported on October 27 that its Claude model, after initial prompting from a researcher, wrote a working exploit for a critical Linux kernel vulnerability (CVE-2026-98432) that can grant an unauthenticated remote attacker root-level command …
Fake ChatGPT and Claude Desktop Apps Are Spreading Crypto-Mining Malware
Researchers at Check Point have identified a malware campaign, dubbed "Yoba," that distributes fake ChatGPT and Claude desktop applications through GitHub projects with names like "GPT-5.6 Sol," "GPT-6 Astra," and "Claude Opus" — and the …
One Hidden File in Your Downloads Folder Can Hijack Your AI Coding Assistant
AI coding assistants are now common tools for developers and everyday employees. They read the files in a folder, follow the instructions they find, and take actions on your computer. New research shows how that …
PHP2Shell: Why Every Business Running PHP Needs to Patch Right Now
The PHP project released emergency security updates today for two critical vulnerabilities, nicknamed PHP2Shell, that let an attacker run code on a web server without logging in — and Cloudflare has already reported signs of …