Microsoft Patch Tuesday, September 2025 Edition

Microsoft Corp. today issued security updates to fix more than 80 vulnerabilities in its Windows operating systems and software. There are no known “zero-day” or actively exploited vulnerabilities in this month’s bundle from Redmond, which nevertheless includes patches for 13 flaws that earned Microsoft’s most-dire “critical” label. Meanwhile, both Apple and Google recently released updates […]
10 Knowledge Management Strategies That Will Unlock Your Team’s Brainpower

Is your team constantly reinventing the wheel? It might be time to build a smarter way to share what you already know. Every small business runs on shared knowledge. How things work, what’s been tried, and what actually delivers. But when that knowledge isn’t documented, mistakes repeat, and progress slows. Inefficient knowledge sharing impacts businesses […]
18 Popular Code Packages Hacked, Rigged to Steal Crypto

At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved in maintaining the projects was phished. The attack appears to have been quickly contained and was narrowly focused on stealing cryptocurrency. But experts warn that a […]
GOP Cries Censorship Over Spam Filters That Work

The chairman of the Federal Trade Commission (FTC) last week sent a letter to Google’s CEO demanding to know why Gmail was blocking messages from Republican senders while allegedly failing to block similar missives supporting Democrats. The letter followed media reports accusing Gmail of disproportionately flagging messages from the GOP fundraising platform WinRed and sending […]
The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft

The recent mass-theft of authentication tokens from Salesloft, whose AI chatbot is used by a broad swath of corporate America to convert customer interaction into Salesforce leads, has left many companies racing to invalidate the stolen credentials before hackers can exploit them. Now Google warns the breach goes far beyond access to Salesforce data, noting […]
FreePBX Zero-Day Exploit: What Happened, How to Respond, and Why Cloud VoIP Is the Safer Choice

In August 2025, a critical zero-day vulnerability was discovered in FreePBX, the open-source VoIP platform used by thousands of organizations worldwide. Attackers exploited a flaw in the system’s web interface to gain remote access without authentication, allowing them to execute arbitrary commands and potentially pivot into other parts of the network. The vulnerability was severe […]
Affiliates Flock to ‘Soulless’ Scam Gambling Machine

Last month, KrebsOnSecurity tracked the sudden emergence of hundreds of polished online gaming and wagering websites that lure people with free credits and eventually abscond with any cryptocurrency funds deposited by players. We’ve since learned that these scam gambling sites have proliferated thanks to a new Russian affiliate program called “Gambler Panel” that bills itself […]
The 5 Symptoms of Bad IT That Are Plaguing Your Business

Welcome to the Compass Lane technology clinic, where we diagnose and treat the ailments that are slowing down your business. Just like a patient ignoring early symptoms can lead to severe health issues, ignoring signs of inadequate IT support is detrimental to the health of your business the longer you procrastinate solving the root causes! Join us as we examine […]
From Offer Letter to First Login: How IT Makes New Hire Setup Easy

There’s nothing worse than walking into a new job and spending your first day filling out forms, asking where the bathroom is, and staring at a screen that still doesn’t have your login credentials. It’s awkward, overwhelming, and not the welcome anyone hopes for. According to Gallup, only 12% of employees strongly feel that their […]
St. Paul Cyberattack: Why Cybersecurity Frameworks Are Essential for Public Trust

The recent cyberattack on the City of St. Paul, Minnesota has sent shockwaves through the public sector. With critical systems compromised, the city was forced to call in both the FBI and the Minnesota National Guard to contain the breach and begin recovery efforts. This incident is a stark reminder that municipalities—regardless of size—are increasingly […]