IT BRIEFING FOR BUSINESSES

Today’s most urgent work is at the systems that handle business email and remote access. Cisco Secure Email Gateway and Ivanti Connect Secure have actively exploited flaws, with the Ivanti attacks involving credential theft and data exfiltration. Ask your IT provider to identify affected appliances, apply the available fixes, and check for evidence of compromise rather than treating patch installation as the entire response. Microsoft’s release covers more than 1,400 vulnerabilities, while a separate fix addresses Windows 11 Always On VPN problems following September updates. Prioritize exposed systems and known exploited vulnerabilities, then verify that updated devices still connect and work correctly. Review Microsoft 365 and other business email access controls, and confirm backup recovery procedures before undertaking broad maintenance; these stories do not establish a Microsoft 365 breach.

The other priority is verifying who and what your business trusts. Disruptions of phishing infrastructure and fraudulent remote-worker operations, alongside Ledger’s device-tampering investigation, put staff identity checks, supplier oversight, and device provenance on today’s checklist. Reinforce independent verification for payment requests and help desk resets, including requests delivered by convincing voice or video calls. Inventory less-visible technology such as cameras, industrial software, optional collaboration apps, and embedded software utilities: today’s reports reach well beyond employee laptops. Finally, ask what your security testing cannot reach. The report on agentic penetration testing highlights coverage limits, while the deepfake-drill article offers a way to test staff verification procedures before a real request arrives.