IT BRIEFING FOR BUSINESSES

Today’s news puts patch prioritization and access control at the top of the business IT agenda. CISA reports active exploitation of flaws affecting UnrealIRCd and Check Point products, while PostgreSQL has released fixes for 52 vulnerabilities, including one that can let a database user execute code on the server. Ask your IT provider to check whether these products support your networks or business applications and prioritize the relevant updates. For PostgreSQL, confirm that installed C-language extensions are rebuilt where required for full protection. Before maintenance, verify that backups are recoverable and that someone owns the recovery plan—not just the update schedule.

The other stories challenge trust in devices, communications, and automation. Reported attacks include deepfake video calls used in cryptocurrency theft, modified hardware wallets that transmit recovery phrases, and compromised telecom equipment used to intercept calls and texts. Train staff to independently verify sensitive requests rather than relying on a familiar face or message, and review authentication choices for email and Microsoft 365 rather than treating SMS codes as sufficient protection. For AI tools connected to business records, limit permissions and establish how to revoke access and stop actions. Businesses using confidential cloud computing should also ask providers about the newly disclosed AMD SEV-SNP attacks and their requirements for hypervisor and BIOS control.