All CySec articles about IT management: current vulnerabilities, step-by-step guides and practical protection advice for businesses in Armenia.
An exploited Outlook flaw leaks NTLM password hashes from a crafted file. Microsoft fixed over 1,000 vulnerabilities this month — here is what to prioritise.
Read articleYou don't need an enterprise budget to be much harder to attack. Start with these ten measures — most of them cost very little.
Read articleA practical checklist with commands: personal admin account, SSH keys, firewall, automatic security updates and fail2ban.
Read articleConcrete DNS records for Microsoft 365 and Google Workspace, and a safe path from monitoring to blocking fake emails.
Read articleUnpatched systems are one of the most common ways in. A simple monthly process that keeps servers, PCs and devices up to date.
Read articleCameras protect the office — but often they are the least protected devices on the network. Simple steps to secure video surveillance.
Read articleClassic antivirus catches known malware. EDR also sees suspicious behavior. What the difference means for a small or medium business.
Read articleMany outages are caused not by hackers but by heat, power cuts and an open door. A practical checklist for a small server room.
Read articleIf someone takes over your domain, they control your website and email. Simple steps to keep the domain and DNS safe.
Read articleOne hypervisor runs many servers — if it falls, they all fall. 2FA, firewall, separate management network, backups and updates.
Read articleYou do not need a 50-page policy. A single page that everyone can find during an incident is far more useful. Here is what to put on it.
Read articleA full disk, an expired certificate or a dying UPS battery can be seen days in advance. Why monitoring pays off and what to watch.
Read articleFormer employees with active accounts are a common and avoidable risk. A simple checklist for the last working day.
Read articleEmail, messengers, documents and MFA codes all live on phones. Simple rules for company and personal devices.
Read articleTwo chained flaws gave attackers full control of Ivanti VPN gateways. Why a factory reset was recommended even after patching.
Read articleA flaw in the Windows Print Spooler allowed code execution with SYSTEM rights, including on domain controllers. Why the print service should be off where it is not needed.
Read articleA two-year-old fix that many hosts never installed. In February 2023 the ESXiArgs ransomware encrypted thousands of exposed ESXi servers.
Read articleA cryptographic flaw in the Netlogon protocol let an attacker on the network become domain administrator. Why domain controllers must be patched first.
Read articleA path traversal in Citrix ADC let attackers run code without logging in. Patches took a month — mitigation steps were the only defence in the meantime.
Read articleAn unauthenticated file read on Pulse Connect Secure exposed cleartext credentials. Organizations that patched but did not reset passwords stayed compromised.
Read articleTell us about your infrastructure and goals. We'll get back to you within one business day with next steps.
