MNRisk

08/31/2026

This is very true, just looking for the poor spelling and grammar doesn't work with phishing any longer. Read More:

AI-powered phishing makes old warning signs obsolete, forcing security training to focus on verification.

08/31/2026

Checkpoint released a threat intel report.

Read more HERE: https://research.checkpoint.com/2026/31th-august-threat-intelligence-report/

08/29/2026

Add cyber safety to the back-to-school list.

Our summer review kept surfacing the same risks: phishing, stolen passwords, malicious game downloads, invasive app permissions, compromised devices, and ransomware.

Before the first login:
✅ Update every tablet, laptop, browser, router, and app.
✅ Turn on screen locks, MFA, passkeys, and device tracking.
✅ Never share a password or one-time code, even with “school IT.”
✅ Install only school-approved apps and review camera, microphone, photo, contact, and location access.
✅ Keep personal photos, private chats, and family passwords off school-owned devices.
✅ Avoid “free” games, cheats, QR codes, and urgent links unless verified.
✅ Kids: if someone pressures, threatens, or asks for secrecy, stop and tell a trusted adult. You will not be in trouble.

Small businesses: put school devices on guest Wi-Fi, protect email and admin accounts with MFA, and test your backups.

Five minutes of setup can prevent a very long school year.

08/28/2026

Small businesses aren’t poor. They’re busy.

Payroll. Customers. Production. Problems that need fixing today. Cybersecurity gets whatever time, money, and attention remain.
That’s the cyber poverty line—and it isn’t an insult. It’s a capacity problem.
A few focused hours can reveal what’s working, what’s missing, what your MSP owns, and what you probably don’t need to buy.
Pay for clarity before paying for another product.
Read more: https://mnrisk.com/posts/cyber-poverty-line/

08/26/2026

Small business website alert: 40 WordPress vulnerabilities were published today, including two critical flaws that could allow attackers to take over affected sites.

⚠️ ERP plugin through 1.17.8
⚠️ Avada through 7.16 with Fusion Builder through 3.16

Update these components now, or disable them until patched. No evidence currently suggests Minnesota businesses are being specifically targeted.

08/26/2026

Small business security alert: Ubiquiti published 22 UniFi and EdgeMAX vulnerabilities, 21 rated critical.

If your business uses Dream Machines, Cloud Keys, NVRs, UniFi cameras, access control, or Talk:

✅ Install updates today
✅ Keep management interfaces off the public internet
✅ Confirm automatic updates are working

Details: https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9
This is a global advisory, not evidence of local targeting.

08/23/2026

Cyber threat snapshot for Hutchinson-area businesses:

A review of the past seven days of threat activity, excluding historical backfill, shows three practical concerns:

• Malware targeting routers, cameras, printers, and other connected devices remains active.
• Attackers continue abusing legitimate remote-support tools such as ConnectWise and ScreenConnect.
• Ransomware activity remains concentrated in manufacturing, healthcare, finance, education, and professional services.

Nine vulnerabilities were also added to CISA’s Known Exploited Vulnerabilities catalog. These are security flaws attackers are already using, including issues affecting VMware vCenter, SharePoint, Windows, Zimbra, and macOS.

There is no evidence of a campaign specifically targeting Hutchinson or Minnesota. However, these patterns are highly relevant to our local mix of manufacturers, healthcare providers, retailers, schools, and small professional firms.

This week, businesses should:

• Patch internet-facing systems
• Audit remote-support software
• Require MFA
• Separate connected devices from business computers
• Test critical backups

You do not need a large security team to reduce risk. Consistent attention to these fundamentals makes a meaningful difference.

08/11/2026

If the internet were a physical highway, “the 511 Building in downtown is the largest, most critical highway intersection in the upper Midwest.” A client there has confirmed the Aug. 6 telecommunications outage originated in the building, but its cause isn’t publicly known.

08/11/2026

NIST stopped recommending routine password rotation in 2017. Here is what organizations should do instead.

Read More: https://mnrisk.com/posts/why-are-you-still-forcing-password-rotation/

08/11/2026