Threat update

Cisco has confirmed that attackers are actively exploiting a high-severity flaw in Cisco Secure Firewall ASA and Firepower Threat Defense (FTD). Tracked as CVE-2026-76418 (CVSS 8.6), the bug lets anyone on the internet send a crafted request to your VPN login page and force the firewall to reboot. No username or password needed. Keep sending those requests and the firewall keeps going down, taking your remote workers, branch connections, and anything else behind it along for the ride. CISA added this one to its Known Exploited Vulnerabilities catalog on October 29. If you run Cisco firewalls with SSL VPN, it belongs at the top of this week's patch list.

Threat update

Attackers are using poisoned Google search results and sponsored ads to steer IT administrators to fake PuTTY download sites. The installer looks right, and PuTTY even opens and works like normal. Meanwhile, malware is quietly installing itself in the background, stealing browser sessions and credentials, and watching the admin's screen. No software flaw is involved. The attack only needs one busy admin to click the first search result. If your team ever grabs tools from a quick Google search, now is the time to put a stop to it. 

Threat update

SonicWall has released fixes for four vulnerabilities in its SMA 1000 Secure Mobile Access appliances, the gateways many organizations use to give staff remote access to internal systems. The worst of the four scores a perfect 10.0 and can be exploited by an attacker with no username or password. SonicWall hasn't reported active exploitation yet, but security teams are already seeing increased scanning of internet-facing SMA 1000 devices. If you run one, patch it now.

Threat update

A phishing kit called Milk Dragon (also known as NaiLong) is being sold to criminals as a subscription service, and it is built for one job: turning a "too good to be true" social media deal into a fraudulent card charge. Victims click a discount ad on Facebook or TikTok, land on a cloned store that looks like a brand they trust and enter their card details. The kit then grabs the one-time passcode their bank sends and uses it on the spot. Your business is exposed in two ways. Employees may shop on these sites with company cards, and your own brand could be the one being copied.

We have some good news to share: as of Wednesday, September 30, 2026, LBT Technology Group, LLC is officially SPECTRA Certified.

If you've never heard of SPECTRA, you're not alone. Most business owners don't spend their days thinking about IT certifications, and they shouldn't have to. That's our job. But this one is worth a few minutes of your time, because it affects how well your business is protected, and it may even lower what you pay for cyber insurance.

In this post, we'll explain what SPECTRA Certification is, what we had to prove to earn it, and what it means for you, whether you're already a client or you're looking for an IT partner.