Tethered Computer Services

Just receive this memo from one of my security partners.

Microsoft has announced that it has identified new nation-state cyberattacks using previously unknown exploits that target the company’s on-premises Exchange Server software.

To minimize or avoid impact, Microsoft highly recommends that you take immediate action to apply the patches for any on-premises Exchange deployments you have or are managing for a customer or advise your customer of the steps they need to take. The vulnerabilities exist in on-premises Exchange Servers 2010, 2013, 2016, and 2019. Exchange Online is not affected.

One of my clients is selling a wall mount rack. They outgrew this unit after a couple of years and went to a larger unit. This cabinet is in perfect shape.

$200 OBO

Reach out to me if you're interested. The cabinet locks for extra security.

There are quite a few articles in the news in the last few days about malware going around that's affecting routers. If you happen to have one of these routers in your business or at home, do a reset of the router to get rid of payload for the Malware.

Linksys E1200

Linksys E2500

Linksys WRVS4400N

Mikrotik RouterOS for Cloud Core Routers: Versions 1016, 1036, and 1072

Netgear DGN2200

Netgear R6400

Netgear R7000

Netgear R8000

Netgear WNR1000

Netgear WNR2000

QNAP TS251

QNAP TS439 Pro

Other QNAP NAS devices running QTS software

TP-Link R600VPN

Got word of a new computer social engineering scam going on.

What will happen is that an 'older sounding lady' will call you and say something like "We installed some software on your computer last week and there is a problem. We need to get back on..."

Some of the words above may be changed by the telephone solicitor. With the calling being an older sounding female, it gives some 'comfort' to the person receiving the call.

If you get such a call, hang up. Only you should know whether or not you installed software on your computer at any point, or if your computer is managed by an IT company (like us), your IT company would be the one calling you.

Unfortunately, there's no blocking the social engineering phone calls, this relies on company employee education on what to watch out for.

Good day everyone. It seems that time of year again, not just tax season, but time for social engineering tax calls from people threatening to arrest you; if you do not pay the CRA your outstanding tax bill.

Well, this reminds me that not only are people falling for this tactic that goes back several years, but people are also falling for phishing emails - still

Here's a good article from MXToolBox that people can follow. Bottom line as I believe I mentioned before, go with your gut feeling. If you don't trust it, delete it. Especially if you know you've never dealt the the company or service in question.

https://mxtoolbox.com/c/landing/identifyingphishing?utm_source=IDPhishingEmail&utm_medium=email&utm_term=inlinelink&utm_campaign=IDPhishingEmail

How to Identify Phishing?