Rhinotech

Call Directions Website Contact the business

Rhinotech At rhinotech, we provide cost-effective network management and IT support services in Canton, GA - both on-premise and for cloud-based environments.

As your trusted IT partner, count on the rhinotech team to keep your data secure and systems running. Rhinotech's team of IT experts in Canton, Georgia, offers cost-effective network management, IT support services, and security solutions, both on-premises and in the cloud. Rhinotech is committed to protecting your data and keeping your systems running smoothly, so you can focus on what truly matters: growing your business. Rhinotech is the trusted IT partner who helps you stay connected, secure, and competitive in the digital age.

10/09/2026

Your antivirus says it is on. But is it still looking?

Huntress research shows attackers with admin rights can tell Microsoft Defender to skip certain folders, then hide that list from normal admin tools. Defender looks healthy. It just is not scanning there.

This week, Ukraine's CERT-UA reported fake "verify you are human" pages on hacked websites. One installer from that campaign adds Defender exclusions before dropping info-stealing malware.

Cut back admin rights. Manage Defender centrally. Keep a list of approved exclusions, and question broad ones. Watch for the hide setting. And remember: no real website asks you to paste a command.

Rhinotech helps Canton, North Atlanta, and Upstate SC SMBs check what their antivirus is really doing. Ask about a free tech checkup.

This week's SMB cyber brief is about the green check mark on your antivirus.Huntress recently updated its research showi...
10/09/2026

This week's SMB cyber brief is about the green check mark on your antivirus.

Huntress recently updated its research showing that attackers with admin rights on a Windows PC can add Microsoft Defender exclusions so their files are never scanned, then turn on a setting that hides those exclusions from normal admin tools. Defender stays on and looks healthy. It just is not looking everywhere.

A fresh example: Ukraine's CERT-UA reported fake "verify you are human" pages on more than 100 hacked websites. The page asks visitors to run a command, and one version of the resulting installer adds Defender exclusions before dropping info-stealing malware. No patch is needed for this one. It is about settings and habits.

Practical moves for owners:
1. Cut back standing admin rights
2. Manage Defender centrally, not PC by PC
3. Keep a short list of approved exclusions
4. Question broad ones like a whole drive, Temp, or Downloads
5. Investigate the hide setting if IT did not set it
6. Turn on tamper protection where licensing supports it
7. Remind staff: no real website asks you to paste a command

10/07/2026

This week's story is your remote-access appliance, not another phishing lure.

Citrix disclosed a NetScaler SAML memory flaw. Denial of service on ADC and Gateway when SAML SP or IdP is configured. Exploited in targeted attacks. CISA added it to KEV on October 4. Federal due date is today, October 7.

Different from Monday's FortiMail email-gateway story. Different from Settra VPN malware. This one is an ADC or Gateway sitting in front of remote login.

Confirm you run customer-managed NetScaler. Check for SAML SP or IdP config. Install 14.1-73.41 or 13.1-64.28. Last weekend's earlier emergency upgrade is not enough. Review Citrix guidance carefully. Keep backups restorable.

Rhinotech helps Canton, North Atlanta, and Upstate SC SMBs keep remote-access appliances under control. Ask about a free tech checkup.

This week's SMB cyber brief is about the remote-access appliance, not the inbox lure.Citrix disclosed CVE-2026-88779: a ...
10/07/2026

This week's SMB cyber brief is about the remote-access appliance, not the inbox lure.

Citrix disclosed CVE-2026-88779: a high-severity NetScaler ADC / Gateway memory overflow that can deny service when SAML SP or IdP is configured. Citrix says targeted attacks are hitting unmitigated deployments. CISA added it to KEV on October 4 (federal due date October 7, today). Fixed builds: 14.1-73.41 / 13.1-64.28 (and matching FIPS lines). Different from Monday's FortiMail email-gateway story and from September's Settra VPN malware brief. Same lesson: know your edge appliances, and do not treat last weekend's patch as the final word when Citrix ships another build.

Practical moves for owners:
1. Confirm whether you run customer-managed NetScaler ADC or Gateway
2. Check for SAML SP (`samlAction`) or IdP (`samlIdPProfile`) config
3. Upgrade to the CVE-2026-88779 fixed build (prior 88771-88778 upgrades are not enough)
4. Treat deny lists as helpers, not a substitute for the patch
5. Review Citrix guidance / IOC tooling carefully; preserve evidence if anything looks wrong
6. Rebuild and rotate credentials if compromise is suspected
7. Keep backups restorable after an edge outage

10/05/2026

This week's story is your email gateway, not another phishing lure.

On October 1, Fortinet disclosed a critical FortiMail flaw. An attacker can write files over HTTP or HTTPS without logging in. Fortinet says it's exploited in the wild, and CISA added it to its Known Exploited Vulnerabilities list the same day.

Unlike Friday's signed remote-tool phishing story, this is an edge appliance sitting in your mail path.

Here's the calm checklist. Confirm whether you run FortiMail. Disable I-B-E, or pull the admin interface off the internet. Upgrade when your fixed build ships. Hunt Fortinet's published indicators, and if anything matches, rebuild and rotate credentials. Keep backups restorable.

Rhinotech helps Canton, North Atlanta, and Upstate South Carolina businesses keep edge appliances under control. Ask about a free tech checkup.

This week's SMB cyber brief is about the email gateway, not the inbox lure.Fortinet disclosed CVE-2026-104286 on October...
10/05/2026

This week's SMB cyber brief is about the email gateway, not the inbox lure.

Fortinet disclosed CVE-2026-104286 on October 1: a critical FortiMail path-traversal / NULL-byte flaw that lets an unauthenticated attacker write files over HTTP/HTTPS. Fortinet says it is exploited in the wild. CISA added it to KEV the same day (federal due date October 4). Fixed builds were listed as upcoming at disclosure. Different from Friday's signed MSP360 phishing story. Same lesson: know your edge appliances, and do not leave admin web UIs on the open internet.

Practical moves for owners:
1. Confirm whether you run FortiMail
2. Disable IBE, or restrict the web UI to trusted networks
3. Upgrade to the fixed build when your branch ships
4. Hunt Fortinet's file, IP, and archive-account indicators
5. Rebuild and rotate credentials if IOCs match
6. Keep backups restorable after an edge compromise

10/02/2026

This week's phishing story installs a real remote tool, not a fake login page.

Microsoft saw July campaigns deliver signed MSP360 RMM under Zoom, PDF, and RSVP names. After UAC, it quietly installed ScreenConnect.

Different from Monday's Settra VPN story. This one starts in email with a signed installer.

Allowlist approved remote tools. Never install from email links. Cancel surprise UAC for Zoom or PDF. Hunt unexpected MSP360, ScreenConnect, or Faronics. Reset passwords if something unauthorized landed. Keep backups restorable.

Rhinotech helps Canton, North Atlanta, and Upstate SC SMBs keep remote tools under control. Ask about a free tech checkup.

This week's SMB cyber brief is about the inbox installer, not the VPN password.Microsoft published September 29 on July ...
10/02/2026

This week's SMB cyber brief is about the inbox installer, not the VPN password.

Microsoft published September 29 on July phishing that delivered a real, signed MSP360 RMM installer under Zoom, PDF, RSVP, and meeting themes. After UAC approval, that agent quietly installed ConnectWise ScreenConnect as a second remote path, then staged credential and data tools. Microsoft also saw a parallel Faronics Deploy Agent path with the same ScreenConnect follow-on. Different from Monday's Settra VPN story. Same lesson: only allowlisted remote tools belong on company PCs.

Practical moves for owners:
1. Write an allowlist of approved RMM / remote-support tools
2. Never install Zoom, PDF, or "update" tools from email links
3. Cancel unexpected UAC prompts for meeting or document apps
4. Inventory PCs for MSP360, ScreenConnect, and Faronics agents
5. Reset passwords if an unapproved agent appeared
6. Keep backups restorable after a quiet remote foothold

09/30/2026

Apple's CoreGraphics update is this week's SMB brief. CVE-2026-86950 can lead to code ex*****on from a crafted file. Install iOS/iPadOS 26.7.1 and macOS Tahoe 26.7.1 or Sequoia 15.8.1 — including personal phones with company mail.

This week's SMB cyber brief is about the phones and Macs, not the inbox.Apple released updates on September 28 for CVE-2...
09/30/2026

This week's SMB cyber brief is about the phones and Macs, not the inbox.

Apple released updates on September 28 for CVE-2026-86950, a CoreGraphics flaw. Processing a maliciously crafted file may lead to code ex*****on. Apple says it knows of a report that this may have been used in an extremely sophisticated attack against specific targeted individuals on iOS before iOS 27. CISA added it to the Known Exploited Vulnerabilities catalog on September 29. The October 2 date is a federal deadline, not a private-company countdown.

Practical moves for owners:
1. Install iOS 26.7.1 or iPadOS 26.7.1 where Software Update offers it
2. Install macOS Tahoe 26.7.1 or macOS Sequoia 15.8.1 on office Macs
3. Include personal phones that hold company email or MFA
4. Note devices too old to take the update and plan to replace them
5. If a phone was already acting oddly, pause before putting mail back on it
6. Keep the only copy of company files off the phone

Address

820 Harvey Fields Drive
Canton, GA
30114

Opening Hours

Monday 8am - 5pm
Tuesday 8am - 5pm
Wednesday 8am - 5pm
Thursday 8am - 5pm
Friday 8am - 5pm

Telephone

+16787446601

Website

Alerts

Be the first to know and let us send you an email when Rhinotech posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Rhinotech:

Shortcuts

Share