IT BRIEFING FOR BUSINESSES

Today’s news puts patching and device oversight at the top of the business IT agenda. CISA added four actively exploited vulnerabilities to its catalog, SAP fixed four maximum-severity flaws, and Apple addressed messaging and Bluetooth weaknesses. Have your IT provider identify affected systems and prioritize remediation, especially for internet-facing services. A separate iOS sandbox escape reportedly allows access to other apps’ files, with no fix confirmed in the supplied report. Review which apps staff install on business phones and where sensitive credentials are stored; do not assume the latest Apple updates resolve that separate issue.

Email security and operational resilience also deserve attention. The reported Cereal toolset targets Microsoft Exchange servers to collect email; the story does not establish a Microsoft 365 compromise. Confirm which email infrastructure your business uses and review its monitoring and access controls accordingly. Sabotage of refrigeration controllers illustrates the potential for connected equipment attacks to interrupt operations and damage stock. Inventory those devices, restrict their network access, and verify that backups and recovery procedures cover critical systems and configurations. Give staff a clear incident-reporting route, and ask your IT team whether available network records can support an investigation beyond the initial alert.