SonicWall patches firewall VPN flaw that can get around SAML login protections
SonicWall fixed seven SonicOS firewall flaws, including one already used in attacks that can bypass SAML-based logins and MFA on SSL-VPN. Businesses using these firewalls should update now.
Read more →Fake Google Calendar invites steal live sessions and get past MFA
A phishing campaign used Google Calendar invites from trusted contacts to hijack Google accounts, even with MFA turned on. Businesses on Google Workspace should know the warning signs.
Read more →DreamHost breach exposed FTP passwords and some webmail sessions
Web host DreamHost says attackers stole FTP and SFTP logins from its File Manager over about two months. Businesses that host websites or email there should check their accounts.
Read more →mSecure password manager users urged to change passwords and reset 2FA
mSecure customers received an email about suspicious activity tied to the app. Few details are known, but businesses using it should review the passwords and logins stored in it.
Read more →Security awareness habits that fit how threats work today
A new set of awareness tips focuses on safer searching, stronger logins, and protecting executives. These everyday habits can lower risk for small businesses too.
Read more →Ready for IT that just works?
Start with a free assessment of your network, security and backups.
