Security Insights
Expert tips, industry trends, and practical advice to keep your business secure.
Virtual CISO for Small Business: Who Needs One
A virtual CISO for small business leads the security program part time. The FTC Safeguards Rule lets a service provider fill the role. Here are the signs.
Read Article →
Written Information Security Program for Small Business
A written information security program is required for many US businesses under the FTC Safeguards Rule. Here is who needs one and what goes in it.
Read Article →
LiteLLM Supply Chain Attack: Find It, Contain, Rotate Keys
LiteLLM 1.107.0 was compromised on October 21, 2026 with credential-stealing malware. How to find it, remove it and rotate keys. Safe version: 1.106.2.
Read Article →
Node.js Brotli CVE-2026-111497: Find Every Copy, Then Patch
CVE-2026-111497 is a critical Node.js Brotli flaw rated CVSS v4.0 9.2. Update to 22.23.4, 24.22.1, or 26.12.1. Here is how to find Node.js in your environment.
Read Article →
Plex2Shell Vulnerability: Home Media Servers as a Remote Work Risk
CISA added four Plex Media Server vulnerabilities to its KEV catalog on October 20, 2026. Chained together, they let attackers gain admin access and run code on unpatched servers. Here is why remote workers matter.
Read Article →
Antivirus for Business: What Protection Every Device Actually Needs
Antivirus for business starts with the free protection in Windows and macOS. Learn when that is enough and when Defender for Business, EDR or MDR makes sense.
Read Article →
PHP2Shell: Critical PHP Flaws Put Millions of Sites at Risk
CVE-2026-109618 and CVE-2026-109619 are critical PHP remote code execution flaws rated CVSS 9.2, with early attacks reported. Update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35 now.
Read Article →
ConnectWise Cloud Backup Breach: How a Vendor Credential Exposed Microsoft 365 Tenants
A compromised ConnectWise Cloud Backup application credential allowed attackers to access Microsoft 365 tenants on October 15, 2026, without phishing any user or bypassing MFA. Here is what happened and how to check your tenant.
Read Article →
Cybersecurity Assessment in Hamilton and Burlington: What It Covers
A cybersecurity assessment reviews 22 security areas through interviews and a technical review. Cyber Unit runs them remotely for Hamilton and Burlington businesses.
Read Article →
FortiOS CVE-2025-61624 Exploited: Is Your Firewall at Risk?
CVE-2025-61624 is an actively exploited Fortinet path traversal flaw in FortiOS, FortiProxy, FortiPAM, and FortiSwitchManager. CISA added it to the KEV catalog on October 16, 2026. Here is how to check your version and patch.
Read Article →
BeyondTrust Remote Support CVE-2026-102764 Exploited Since August
CVE-2026-102764 is a critical authentication bypass in BeyondTrust Remote Support, actively exploited since August 2026. CISA added it to the KEV catalog on October 16, 2026. Self-hosted customers must patch immediately.
Read Article →
CCCS Baseline Controls for Small and Medium Organizations: What They Are and How to Implement Them
The Canadian Centre for Cyber Security's 13 baseline controls provide a practical cybersecurity framework for SMBs. Here's what each control requires and how a managed provider can help.
Read Article →