IT BRIEFING FOR BUSINESSES

Today's reports put the systems that protect and connect a business at the front of the patching queue. Active exploitation involves network appliances, an email gateway and backup software, while Microsoft has released more than 1,400 security fixes. Prioritize checks for affected Ivanti Connect Secure, Palo Alto Networks PAN-OS, Cisco Secure Email Gateway and AhsayCBS installations, then schedule Windows and other Microsoft updates with testing appropriate to your business. For AhsayCBS, confirm that the latest fixes are installed rather than relying on earlier, incomplete patches. Treat backups as systems that need protection themselves: review their administrative access and verify that recovery works. Because the Ivanti attacks include credential theft and data exfiltration, affected businesses should investigate possible compromise rather than assume an update alone resolves the incident.

Account security and less-visible applications also deserve attention. GhostAction's compromise of about 1,900 GitHub accounts underscores the need to review developer access and replace exposed secrets, while attacks involving Langflow and an optional Nextcloud app make a current software inventory especially useful. Include cameras, industrial software and optional server components in that inventory—not just employee computers. Review Microsoft 365 administrative access and email controls as part of normal account protection, without treating these reports as evidence of a Microsoft 365 breach. Give staff a clear way to report suspicious messages and calls, assign responsibility for each affected product, and keep a record of updates, investigation findings and recovery tests.