Most Recent

• Service Alert: Windows Defender deletes taskbar & desktop shortcuts January 13, 2023
  As you may have seen in the news, this morning a bugged Windows Defender update deleted app shortcuts from some users’ desktops and task bars. Only the shortcuts are deleted: your data and applications are safe. Microsoft has now fixed this issue, but many users are still missing quick access to common apps and tools.
• Security Alert: FortiOS devices under active exploit December 12, 2022
  Fortinet has just announced that firewall devices running versions of its FortiOS operating system are under active exploit: CVE-2022-42475 allows an unauthenticated attacker to remotely access admin controls from outside the network, posing a serious security threat to unpatched devices.
• Security Alert: Critical vulnerability in select Fortinet products October 7, 2022
  Fortinet has recently announced a severe vulnerability in certain firewalls and web proxies: CVE-2022-40684 allows an unauthenticated attacker to remotely access admin controls from outside the network, posing a serious security threat to unpatched devices.
• Security Alert: Phishing vulnerability 'Follina' in Office files May 31, 2022
  A newly-discovered malicious exploit for Microsoft Office files has made headlines over the weekend: the “Follina” MSDT attack uses programs like Microsoft Word to execute malicious code when a prepared file is accessed, allowing an attacker significant access to a device, where they can then deploy further exploits and do even greater damage.
• Security Alert: Critical Log4j Vulnerability December 14, 2021
  Update 12.22.21. This vulnerability continues to pose a major risk for many organizations. Due to the nature of this exploit, your greatest risk likely comes through any vendor that provides software to your organization. If you have not already discussed this vulnerability with each of your vendors and confirmed that their patches are up to […]
• Security Alert: Phishing Risks from Threat Actor Nobelium Remain High October 25, 2021
  You may have heard about the recent cyberattack activity from Russian actor Nobelium, a nation-state group that was responsible for the SolarWinds breach of 2020. Experts in the cybersecurity industry expect these attacks to continue, so awareness and diligence in preventing phishing attacks and breaches is crucial – for both managed services providers like Mytech, […]
• Security Alert: Exploit for Malicious Microsoft Office Attachments September 10, 2021
  You may have heard about the recently-announced security vulnerability that makes use of malicious code embedded in Microsoft Office documents. This exploit is possible if a user opens or even previews the malicious document in Outlook or Windows Explorer, and can grant an attacker significant access to the user’s network and privileges to cause further harm.
• PrintNightmare Vulnerability in Majority of Windows Devices July 7, 2021
  UPDATE – July 7 @ 11:45am: Microsoft has now published a patch to mitigate this vulnerability, and Mytech is already working on deploying it to our clients as securely and non-disruptively as possible. Further information about this process has been emailed out to our clients. If you experience any issues or have questions about this […]
• Kaseya VSA Attack: Why Mytech Isn't Affected, What We're Doing Anyway July 6, 2021
  You may have seen the news about a supply-chain ransomware attack on Kaseya which affected numerous businesses over the holiday weekend. The targeted company, Kaseya, provides tools to Managed Services Providers (MSPs) like Mytech. One of these tools, “Kaseya VSA,” was recently compromised by an international cybercrime organization, then used to attack roughly 60 MSPs […]
• Security Alert: Critical Vulnerability in Microsoft Exchange March 3, 2021
  Microsoft recently announced the discovery of a critical exploit in its Exchange Server products: these vulnerabilities are simple for attackers of any sophistication level to exploit. Microsoft has advised any organizations that use on-premise Exchange servers, or have servers with “OWA” websites open to the internet for any reason, to deploy these patches immediately, as well […]