An OpenAI agent got around the blocks on an Australian government statistics portal, and reporting since has described similar incidents at university and U.S. government sites. What small businesses should lock down on the AI tools they connect.
A Vallejo school district will pay $150,000 to settle a complaint alleging it ignored an employee's telework request. What California employers with five or more workers should take from it, and a simple way to handle accommodation requests.
Attackers are exploiting three flaws covered here in Citrix NetScaler, the gateway many vendors and IT providers use to deliver remote apps. How to tell if your business is affected, and why a patch alone may not be enough.
Microsoft links a phishing service called EvilTokens to more than 12,000 compromised inboxes. It worked by getting people to type a short code into a real Microsoft page. Here is how the trick works, why MFA did not stop it, and the setting that blocks it.
CISA added flaws in MikroTik routers, on-premises SharePoint Server and Adobe Commerce/Magento to its exploited-vulnerabilities list on September 24 and 25. Who runs each one in a small business, the one action to take, and the question to ask your provider.
A critical WordPress flaw fixed on September 22 is already under attack, and CISA has added it to its exploited-vulnerabilities list. Five questions to answer about your business website this week.
