IT BRIEFING FOR BUSINESSES

Today's reporting puts internet-facing gateways, remote-management systems, and connected building equipment at the top of the business IT checklist. Attackers are exploiting PHP2Shell flaws in Check Point gateways, while reported N-central compromises include servers running Hotfix 2. Siemens advisories also show how vulnerable software components can affect building, energy, and industrial products. Ask your IT provider to identify affected systems, verify the latest vendor guidance rather than assume an earlier hotfix is sufficient, and apply available updates or configuration-specific mitigations. Restrict network access to affected equipment, check managed devices for suspicious activity, and review backup isolation and recovery readiness given the reports of ransomware activity and ESXi file destruction.

Access control deserves equal attention across Microsoft 365, email, staff accounts, and automated tools. Police seized roughly 6.4 million stolen logins, a newly identified spying group intercepted calls and texts through compromised telecom equipment, and today's AI coverage highlights how connected agents can misuse permissions after encountering malicious instructions. Review privileged and service-account access, examine suspicious sign-ins, and assess authentication options that do not depend on SMS. For AI agents, limit accessible records and permitted actions, and establish how to revoke access quickly. Remind staff that search results and familiar accounts are not proof of trust, and confirm that your IT team can connect unusual activity to the person, service, or agent responsible.