Security alerts
Cleveland, Ohio
When attackers start using a flaw in software businesses run on, we tell you what it is, whether it touches you, and what to do that week. In plain English. Join and get the checklist: 12 things to secure this week.
Each check comes from a real problem we wrote about this year, and each one you can start yourself.
An update protects only the programs started after it. Install the operating system and app updates, then restart the services or the machine.
Ask the software its version, inside each container and vendor app, instead of trusting the release notes or the update log.
An old image keeps old, vulnerable code even after the server itself is updated. Rebuild and redeploy.
Firewall, router, VPN and storage admin pages should open only inside your network or over a VPN.
Firewalls, VPN gateways, routers and storage devices need their updates too. Plan to replace any device that no longer gets them.
Without it, an attacker can try passwords against every account until one works.
Move passwords out of configuration files and spreadsheets into a password manager, and change any that sat on an exposed device.
Add a second step to email, banking and every admin account, so a stolen password alone is not enough.
A private network is not a safe one. If every device can reach every other device, one infected laptop can reach your servers.
A single phone update can fix many security flaws at once; iOS 27.2 fixed 163. Do not leave updates waiting.
Put smart TVs and other gadgets on a separate network from payroll and company computers, and switch off TV viewing tracking.
Download security and admin tools only from the official source and check their signature before running them.
The latest from our security writing. Members hear about the next one by email.
Moldova says hackers accessed the personal data of about 450,000 citizens through government digital services. The prime minister suspects a state actor but has named none. Here is what is confirmed and what businesses should check.
Park Dental patients have until December 28, 2026 to claim up to $2,500 or $60, plus credit monitoring, over a January 2024 breach. The deal is not final, and it shows how long a breach can follow a company.
Rosstat says it is still restoring systems after cyberattacks from October 29 to November 1, 2026. Hackers claim months of access and mass data theft, which Rosstat disputes and nobody has independently verified.
Gnosis Pay says customer information was exposed in a breach of the legacy system behind its branded cards. Here is what is confirmed, what is only reported, and what to do before the cards stop on December 20.
