O-cyrus

08/22/2026

The Adventures of O & Cyrus — When your change freeze meets your CI/CD pipeline, someone's going to blink first.

Catch this episode:
https://o-cyrus.com/adventures/cc80713c-the-freeze-frame/

08/21/2026

Microsoft just patched a perfect 10.0 CVSS flaw in Entra ID that was exploited in the wild. No action needed this time—but it's a stark reminder that cloud identity is your new perimeter. SMBs: audit your MFA, conditional access, and privileged accounts now.

https://thehackernews.com/2026/08/microsoft-entra-id-flaw-cvss-100.html

Need an identity security review? https://o-cyrus.com/services/security/

Source: https://thehackernews.com/2026/08/microsoft-entra-id-flaw-cvss-100.html

On O-Cyrus: https://o-cyrus.com/blog/1d8620e3-entra-id-cve-2026-69836-exploited-wild/

A maximum-severity RCE flaw in Microsoft Entra ID (formerly Azure AD) was exploited in the wild. Microsoft patched it server-side—no action needed, but SMBs should verify identity security posture.

08/21/2026

How to Migrate Your Small Business to Microsoft 365

Step-by-step guide for small businesses moving to Microsoft 365. Learn how to plan, migrate email and files, and get your team up and running.

Step-by-step guide for small businesses moving to Microsoft 365. Learn how to plan, migrate email and files, and get your team up and running.

08/20/2026

The Adventures of O & Cyrus — When your incident response war room has more stakeholders than the actual incident has affected users.

Catch this episode:
https://o-cyrus.com/adventures/62b26777-war-room-capacity/

08/19/2026

Multi-Cloud Security Checklist for Small Businesses

A practical checklist to secure your small business when using multiple cloud providers like AWS, Google Cloud, and Microsoft Azure.

A practical checklist to secure your small business when using multiple cloud providers like AWS, Google Cloud, and Microsoft Azure.

08/18/2026

Microsoft Defender has a zero-day (ShieldBreak/CVE-2026-69414) with no patch yet. If you're relying solely on built-in AV, now's the time to verify layered defenses—email filtering, backups, segmentation—are in place. Single-vendor security isn't enough when exploits go public.

https://www.bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/

O-Cyrus helps SMBs build resilient, multi-layered security: https://o-cyrus.com/

Source: https://www.bleepingcomputer.com/news/security/microsoft-working-on-defender-patch-for-shieldbreak-zero-day/

On O-Cyrus: https://o-cyrus.com/blog/e4ebd4a3-microsoft-defender-shieldbreak-zero-day/

ShieldBreak vulnerability (CVE-2026-69414) bypasses Microsoft Defender protections while patch is in development. SMBs relying solely on built-in AV should review layered security controls now.

08/18/2026

How to Set Up SIEM for Your Small Business on AWS

A practical guide to implementing Security Information and Event Management (SIEM) on AWS for small businesses without the enterprise complexity.

A practical guide to implementing Security Information and Event Management (SIEM) on AWS for small businesses without the enterprise complexity.

08/18/2026

The Adventures of O & Cyrus — When your password policy passes audit but fails reality.

Catch this episode:
https://o-cyrus.com/adventures/628d7a51-the-compliance-checklist/

08/17/2026

Google Cloud IAM Best Practices for Small Businesses

Learn practical Google Cloud IAM security practices tailored for small businesses. Protect your cloud resources without enterprise complexity.

Learn practical Google Cloud IAM security practices tailored for small businesses. Protect your cloud resources without enterprise complexity.

08/15/2026

The Adventures of O & Cyrus — When a developer discovers the ancient art of merging your own PR at 4:47 PM on Friday.

Catch this episode:
https://o-cyrus.com/adventures/1f0a93d1-peer-review-bypass/