CySec bloghttps://cysec.am/en/pages/blog.htmlPractical articles about IT infrastructure, backups, email security and cybersecurity for businesses.enHow to protect 1C:Enterprise: access, backups and updateshttps://cysec.am/en/pages/blog/protect-1c-enterprise.htmlhttps://cysec.am/en/pages/blog/protect-1c-enterprise.htmlThu, 12 Nov 2026 09:00:00 +0000Servers & systemsAccounting, payroll, warehouse — for many companies everything lives in 1C. Here is how to keep that database safe and available.N-able N-central “4EverAble2Shell” zero-day: when the remote management server is the targethttps://cysec.am/en/pages/blog/n-able-n-central-4everable2shell-zero-day.htmlhttps://cysec.am/en/pages/blog/n-able-n-central-4everable2shell-zero-day.htmlThu, 12 Nov 2026 09:00:00 +0000Vulnerabilities & CVEA newly disclosed exploit chain gives attackers root on on-premises N-central servers; attacks began hours after the proof of concept. No complete fix yet — immediate checks.The 3-2-1 backup rule: how to survive ransomware and hardware failurehttps://cysec.am/en/pages/blog/backup-3-2-1-rule.htmlhttps://cysec.am/en/pages/blog/backup-3-2-1-rule.htmlTue, 10 Nov 2026 09:00:00 +0000Backup & recoveryMost companies have backups — until the day they need to restore. Here is a simple, proven model that keeps your data recoverable.Outlook zero-day CVE-2026-124194 and November 2026 Patch Tuesday: what to update firsthttps://cysec.am/en/pages/blog/outlook-zero-day-cve-2026-124194-november-2026.htmlhttps://cysec.am/en/pages/blog/outlook-zero-day-cve-2026-124194-november-2026.htmlTue, 10 Nov 2026 09:00:00 +0000Vulnerabilities & CVEAn exploited Outlook flaw leaks NTLM password hashes from a crafted file. Microsoft fixed over 1,000 vulnerabilities this month — here is what to prioritise.Chrome zero-day CVE-2026-125350: update the browser and restart ithttps://cysec.am/en/pages/blog/chrome-zero-day-cve-2026-125350.htmlhttps://cysec.am/en/pages/blog/chrome-zero-day-cve-2026-125350.htmlMon, 09 Nov 2026 09:00:00 +0000Vulnerabilities & CVEGoogle fixed a use-after-free in Chrome that is already exploited. The fix only works after the browser restarts — here is how to make sure every PC is protected.SonicWall SSL VPN (CVE-2026-19868): exploited flaw that bypasses SAML and MFAhttps://cysec.am/en/pages/blog/sonicwall-ssl-vpn-mfa-bypass-cve-2026-19868.htmlhttps://cysec.am/en/pages/blog/sonicwall-ssl-vpn-mfa-bypass-cve-2026-19868.htmlFri, 06 Nov 2026 09:00:00 +0000Vulnerabilities & CVEOn SonicWall firewalls that use SAML for SSL VPN, attackers with stolen credentials could skip SAML checks — including MFA. Fixed firmware and what to do.SPF, DKIM and DMARC: stop attackers from sending email in your company's namehttps://cysec.am/en/pages/blog/spf-dkim-dmarc-email-security.htmlhttps://cysec.am/en/pages/blog/spf-dkim-dmarc-email-security.htmlThu, 05 Nov 2026 09:00:00 +0000Email, passwords & peopleFake invoices and "urgent" messages from the director are among the most common attacks. Three DNS records make them much harder.OpenSSH “SSHole” (CVE-2026-123158): password bypass on Alpine and other musl-based Linuxhttps://cysec.am/en/pages/blog/openssh-sshole-cve-2026-123158.htmlhttps://cysec.am/en/pages/blog/openssh-sshole-cve-2026-123158.htmlThu, 05 Nov 2026 09:00:00 +0000Vulnerabilities & CVEA flaw in how OpenSSH handles locked accounts on musl-based systems was exploited within two days of the fix. Who is affected and what to check.How to configure MikroTik for a small business: a secure baseline step by stephttps://cysec.am/en/pages/blog/mikrotik-setup-small-business.htmlhttps://cysec.am/en/pages/blog/mikrotik-setup-small-business.htmlFri, 30 Oct 2026 09:00:00 +0000How-to guidesUpdate RouterOS, replace the admin user, close management services, set up the firewall and a guest network — with ready-to-use commands.10 security measures every small and mid-sized business should havehttps://cysec.am/en/pages/blog/smb-security-checklist.htmlhttps://cysec.am/en/pages/blog/smb-security-checklist.htmlWed, 28 Oct 2026 09:00:00 +0000Servers & systemsYou don't need an enterprise budget to be much harder to attack. Start with these ten measures — most of them cost very little.PHP2Shell (CVE-2026-109618, CVE-2026-109619): critical PHP flaws — what to updatehttps://cysec.am/en/pages/blog/php2shell-cve-2026-109618-109619.htmlhttps://cysec.am/en/pages/blog/php2shell-cve-2026-109618-109619.htmlWed, 21 Oct 2026 09:00:00 +0000Vulnerabilities & CVETwo critical remote code execution flaws in PHP itself, CVSS 9.2. Fixed versions, temporary protections and how to check your servers.Phishing: how to recognize a fake email before it is too latehttps://cysec.am/en/pages/blog/how-to-recognize-phishing.htmlhttps://cysec.am/en/pages/blog/how-to-recognize-phishing.htmlWed, 21 Oct 2026 09:00:00 +0000Email, passwords & peopleMost successful attacks start with one click. Teach your team these simple signs and stop phishing at the inbox.How to set up a WireGuard VPN on MikroTik for remote employeeshttps://cysec.am/en/pages/blog/wireguard-vpn-mikrotik-remote-access.htmlhttps://cysec.am/en/pages/blog/wireguard-vpn-mikrotik-remote-access.htmlFri, 16 Oct 2026 09:00:00 +0000How-to guidesGive staff secure access to office files and 1C from home — without opening RDP or Winbox to the internet.nginx vulnerabilities in 2026: which version you need and how to protect ithttps://cysec.am/en/pages/blog/nginx-vulnerabilities-2026.htmlhttps://cysec.am/en/pages/blog/nginx-vulnerabilities-2026.htmlWed, 14 Oct 2026 09:00:00 +0000Vulnerabilities & CVEIn 2026 nginx.org has published 26 advisories, including two rated “major”. The safe versions now are 1.31.7 and 1.30.6.Windows zero-days exploited in 2026: what was attacked and what to dohttps://cysec.am/en/pages/blog/windows-zero-days-exploited-2026.htmlhttps://cysec.am/en/pages/blog/windows-zero-days-exploited-2026.htmlWed, 14 Oct 2026 09:00:00 +0000Vulnerabilities & CVEShell, Mark-of-the-Web and NTLM flaws were exploited before or soon after patches this year. A short overview and the protections that help against the whole class.Passwords and MFA: the cheapest protection with the biggest effecthttps://cysec.am/en/pages/blog/passwords-and-mfa.htmlhttps://cysec.am/en/pages/blog/passwords-and-mfa.htmlWed, 07 Oct 2026 09:00:00 +0000Email, passwords & peopleStolen and reused passwords open the door to most account takeovers. A password manager and MFA close it.Ubuntu server hardening: the first hour after installationhttps://cysec.am/en/pages/blog/ubuntu-server-hardening-checklist.htmlhttps://cysec.am/en/pages/blog/ubuntu-server-hardening-checklist.htmlFri, 02 Oct 2026 09:00:00 +0000How-to guidesA practical checklist with commands: personal admin account, SSH keys, firewall, automatic security updates and fail2ban.How to secure a Synology NAS: settings to change after installationhttps://cysec.am/en/pages/blog/synology-nas-secure-setup.htmlhttps://cysec.am/en/pages/blog/synology-nas-secure-setup.htmlFri, 25 Sep 2026 09:00:00 +0000How-to guidesStep-by-step DSM settings: administrator accounts, 2FA, auto block, firewall, updates and immutable snapshots against ransomware.Office network and Wi-Fi: why one flat network is a riskhttps://cysec.am/en/pages/blog/office-network-wifi-segmentation.htmlhttps://cysec.am/en/pages/blog/office-network-wifi-segmentation.htmlWed, 23 Sep 2026 09:00:00 +0000Network & remote accessGuests, cameras, printers and the accounting server on the same network? Segmentation stops one infected device from reaching everything.Ransomware attack: what to do in the first hourhttps://cysec.am/en/pages/blog/ransomware-first-hour.htmlhttps://cysec.am/en/pages/blog/ransomware-first-hour.htmlWed, 16 Sep 2026 09:00:00 +0000Backup & recoveryThe first hour decides how much you lose. A simple, calm plan for the moment screens show a ransom note.SPF, DKIM and DMARC step by step: the DNS records your domain needshttps://cysec.am/en/pages/blog/spf-dkim-dmarc-setup-step-by-step.htmlhttps://cysec.am/en/pages/blog/spf-dkim-dmarc-setup-step-by-step.htmlFri, 11 Sep 2026 09:00:00 +0000How-to guidesConcrete DNS records for Microsoft 365 and Google Workspace, and a safe path from monitoring to blocking fake emails.MikroTik RouterOS: actively exploited SSH and WebFig flaws in 2026https://cysec.am/en/pages/blog/mikrotik-routeros-vulnerabilities-2026.htmlhttps://cysec.am/en/pages/blog/mikrotik-routeros-vulnerabilities-2026.htmlThu, 03 Sep 2026 09:00:00 +0000Vulnerabilities & CVEThree RouterOS vulnerabilities are already used in attacks. Which RouterOS versions are safe and how to lock down management access.FortiGate secure baseline: protect the firewall itselfhttps://cysec.am/en/pages/blog/fortigate-secure-baseline.htmlhttps://cysec.am/en/pages/blog/fortigate-secure-baseline.htmlFri, 28 Aug 2026 09:00:00 +0000How-to guidesPersonal admin accounts, trusted hosts, no management on WAN, lockout and firmware updates — the first settings for any FortiGate.Microsoft 365 security: 8 settings every company should checkhttps://cysec.am/en/pages/blog/microsoft-365-security-basics.htmlhttps://cysec.am/en/pages/blog/microsoft-365-security-basics.htmlThu, 27 Aug 2026 09:00:00 +0000Servers & systemsMicrosoft 365 is secure only when it is configured. These settings close the most common gaps in email and cloud accounts.Encrypted Linux server backups with restic: step by stephttps://cysec.am/en/pages/blog/linux-server-backup-with-restic.htmlhttps://cysec.am/en/pages/blog/linux-server-backup-with-restic.htmlWed, 19 Aug 2026 09:00:00 +0000How-to guidesFast, encrypted, deduplicated backups to a NAS or cloud storage, with automatic retention and a restore test.Patch management: how to keep updates under control without stopping workhttps://cysec.am/en/pages/blog/patch-management-small-business.htmlhttps://cysec.am/en/pages/blog/patch-management-small-business.htmlTue, 11 Aug 2026 09:00:00 +0000Servers & systemsUnpatched systems are one of the most common ways in. A simple monthly process that keeps servers, PCs and devices up to date.Secure nginx configuration: HTTPS, security headers and access limitshttps://cysec.am/en/pages/blog/nginx-secure-configuration.htmlhttps://cysec.am/en/pages/blog/nginx-secure-configuration.htmlWed, 05 Aug 2026 09:00:00 +0000How-to guidesA practical checklist with ready-to-use snippets for a website or reverse proxy on nginx.Secure remote work: VPN, devices and home networkshttps://cysec.am/en/pages/blog/secure-remote-work.htmlhttps://cysec.am/en/pages/blog/secure-remote-work.htmlFri, 24 Jul 2026 09:00:00 +0000Network & remote accessWorking from home and on the road is normal now. How to give employees remote access without opening the company to attackers.How to encrypt company laptops with BitLockerhttps://cysec.am/en/pages/blog/bitlocker-laptop-encryption.htmlhttps://cysec.am/en/pages/blog/bitlocker-laptop-encryption.htmlWed, 22 Jul 2026 09:00:00 +0000How-to guidesA lost laptop should be an expense, not a data leak. Turn on BitLocker and store the recovery keys properly.Email account hacked or password leaked: what to do, step by stephttps://cysec.am/en/pages/blog/what-to-do-account-compromised.htmlhttps://cysec.am/en/pages/blog/what-to-do-account-compromised.htmlTue, 14 Jul 2026 09:00:00 +0000How-to guidesA calm checklist for the moment you suspect that a work account is compromised or its password appeared in a data breach.IP cameras and CCTV: how video surveillance becomes a security holehttps://cysec.am/en/pages/blog/ip-camera-cctv-security.htmlhttps://cysec.am/en/pages/blog/ip-camera-cctv-security.htmlWed, 08 Jul 2026 09:00:00 +0000Network & remote accessCameras protect the office — but often they are the least protected devices on the network. Simple steps to secure video surveillance.Antivirus or EDR: what protection do your computers really need?https://cysec.am/en/pages/blog/antivirus-vs-edr.htmlhttps://cysec.am/en/pages/blog/antivirus-vs-edr.htmlTue, 30 Jun 2026 09:00:00 +0000Servers & systemsClassic antivirus catches known malware. EDR also sees suspicious behavior. What the difference means for a small or medium business.Windows Server hardening with PowerShell: five quick winshttps://cysec.am/en/pages/blog/windows-server-hardening-powershell.htmlhttps://cysec.am/en/pages/blog/windows-server-hardening-powershell.htmlWed, 24 Jun 2026 09:00:00 +0000How-to guidesDisable SMBv1, stop the Print Spooler where it is not needed, enforce the firewall and secure Remote Desktop — with ready commands.Server room basics: power, cooling and physical accesshttps://cysec.am/en/pages/blog/server-room-power-cooling.htmlhttps://cysec.am/en/pages/blog/server-room-power-cooling.htmlFri, 12 Jun 2026 09:00:00 +0000Servers & systemsMany outages are caused not by hackers but by heat, power cuts and an open door. A practical checklist for a small server room.Docker security basics for small teamshttps://cysec.am/en/pages/blog/docker-security-basics.htmlhttps://cysec.am/en/pages/blog/docker-security-basics.htmlFri, 05 Jun 2026 09:00:00 +0000How-to guidesContainers are not automatically secure. Published ports, root users and old images are the usual problems — here is how to fix them.Your domain name is a critical asset: how to protect domain and DNShttps://cysec.am/en/pages/blog/domain-and-dns-security.htmlhttps://cysec.am/en/pages/blog/domain-and-dns-security.htmlFri, 29 May 2026 09:00:00 +0000Network & remote accessIf someone takes over your domain, they control your website and email. Simple steps to keep the domain and DNS safe.Proxmox VE security checklist: protect your virtualization hosthttps://cysec.am/en/pages/blog/proxmox-ve-security-checklist.htmlhttps://cysec.am/en/pages/blog/proxmox-ve-security-checklist.htmlThu, 21 May 2026 09:00:00 +0000How-to guidesOne hypervisor runs many servers — if it falls, they all fall. 2FA, firewall, separate management network, backups and updates.Least privilege: why not everyone should be an administratorhttps://cysec.am/en/pages/blog/least-privilege-access-rights.htmlhttps://cysec.am/en/pages/blog/least-privilege-access-rights.htmlThu, 14 May 2026 09:00:00 +0000Servers & systemsToo many access rights turn one mistake into a disaster. How to organize access to files, systems and admin rights.How to turn on MFA for the whole company in Microsoft 365https://cysec.am/en/pages/blog/microsoft-365-enable-mfa-security-defaults.htmlhttps://cysec.am/en/pages/blog/microsoft-365-enable-mfa-security-defaults.htmlThu, 07 May 2026 09:00:00 +0000How-to guidesSecurity Defaults give every Microsoft 365 user multi-factor authentication in a few clicks. Step by step, with tips for a smooth rollout.Choosing a NAS for office files and backups: what really mattershttps://cysec.am/en/pages/blog/choosing-nas-for-backup.htmlhttps://cysec.am/en/pages/blog/choosing-nas-for-backup.htmlTue, 28 Apr 2026 09:00:00 +0000Backup & recoveryA NAS can be a great file server and backup target — or a single point of failure. What to consider before buying and configuring one.