Critical Infrastructure Under Fire
Small business owners using remote monitoring and management tools must act immediately to secure their networks against a wave of active exploits.
- N-able N-central: Administrators must deploy Hotfix 4 immediately. This is the fourth fix in five weeks for an RCE flaw currently under active exploitation.
- ConnectWise ScreenConnect: A new vulnerability has been identified; monitor the official support portal closely as a patch is expected later this week.
- MikroTik Routers: Hackers are chaining flaws to hijack devices with SSH exposed to the internet. Disable SSH or move it to a non-standard port immediately.
Emerging Threats and AI Risks
Beyond network infrastructure, new tactics are targeting your data and communications:
- Malware Alert: The new JSCeal malware is bypassing Google authentication by stealing active session cookies. Ensure MFA is robust and monitor for unusual browser behavior.
- Phishing Evasion: Attackers are now using invisible Unicode characters to bypass email security filters. Remind employees to remain skeptical of unexpected links, even if they appear legitimate.
- ChatGPT Updates: OpenAI is introducing features that mimic your writing style by accessing connected apps. While powerful, consider the privacy implications of allowing AI to index your personal communication patterns.