Nerd Teks It Services & Managed Service Provider

08/25/2026

When an employee leaves, their access should leave with them.

Employee offboarding is more than collecting a laptop and removing someone from payroll. Former employees may still have access to email, Microsoft 365, VPNs, cloud applications, shared passwords, files, or business systems if accounts are not properly reviewed.

A good IT offboarding process should include:

- Disable company email and Microsoft 365 access
- Remove VPN and remote-access permissions
- Revoke access to cloud applications and shared files
- Recover company computers, phones, and other devices
- Review administrator privileges and shared credentials
- Preserve business data that still needs to be retained

The goal is simple: make sure company access ends when employment does.

A documented onboarding and offboarding process can reduce security gaps, protect business information, and make account management much easier as your company grows.

08/25/2026

Critical Oracle WebLogic vulnerability is now under active exploitation.

CISA has added CVE-2026-21962, a maximum-severity vulnerability with a CVSS score of 10.0, to its Known Exploited Vulnerabilities catalog after confirming active attacks. The flaw affects Oracle HTTP Server and the Oracle WebLogic Server Proxy Plug-in and can allow an unauthenticated attacker to access or modify critical data.

Oracle released patches earlier this year, but attackers are still targeting unpatched systems. Federal agencies have been directed to apply the necessary fixes by August 27, 2026.

For businesses running Oracle WebLogic or related infrastructure:

- Verify security patches are installed
- Review internet-facing systems and unnecessary exposure
- Monitor logs for suspicious activity
- Restrict administrative access
- Maintain tested backups and an incident-response plan

A critical vulnerability that is actively exploited should move to the top of the patching list.

Read the full article:
https://thehackernews.com/2026/08/actively-exploited-oracle-weblogic-flaw.html

CISA adds actively exploited CVE-2026-21962 to KEV; the Oracle flaw can expose or alter critical data via unauthenticated HTTP access.

08/21/2026

💻 How much should a small business budget for IT in 2027?

Technology costs can add up quickly when you factor in IT support, cybersecurity, Microsoft 365, backups, network infrastructure, hardware replacement, and future projects.

Our latest blog breaks down what small businesses should include in their 2027 IT budget and why planning ahead can help reduce surprise expenses and avoid reactive spending.

Inside the guide, we cover:

- Cybersecurity, backups, and business continuity
- IT support, Microsoft 365, and hardware replacement
- Growth, new employees, locations, and technology projects

A good IT budget is not about spending more. It is about knowing what your business depends on and planning before technology becomes an emergency.

Read the full guide:
https://nerdteks.com/2026/08/21/small-business-it-budget-2027-costs-planning-guide/

08/21/2026

Microsoft has patched a maximum-severity Entra ID vulnerability with a CVSS score of 10.0.

The flaw, tracked as CVE-2026-69836, could allow an unauthorized attacker to achieve remote code ex*****on through Microsoft’s cloud-based identity and access management service. Microsoft says the issue has been fully mitigated and no customer action is required. The company also corrected an earlier advisory and confirmed that the vulnerability was not exploited in the wild.

For businesses, this is still a strong reminder of how critical identity systems have become. Entra ID often sits at the center of Microsoft 365 access, authentication, devices, and cloud applications, making identity security a major part of an organization’s cybersecurity strategy.

Organizations should continue to prioritize:

- Multi-factor authentication
- Conditional Access policies
- Least-privilege administrator roles
- Sign-in and identity monitoring
- Regular reviews of users, devices, and permissions

Protecting the identity layer is now just as important as protecting the network.

Read the full article:
https://thehackernews.com/2026/08/microsoft-entra-id-flaw-cvss-100.html

Microsoft says CVE-2026-69836, a CVSS 10.0 Entra ID RCE flaw, has been exploited in the wild but is fully mitigated with no user action required.

08/17/2026

GitHub outage disrupts developers and businesses worldwide.

GitHub is experiencing a major service disruption affecting Pull Requests, Issues, Actions, Webhooks, API traffic, Copilot, repository downloads, and some enterprise authentication services.

For businesses that rely on GitHub for software development, automation, deployments, or DevOps workflows, an outage like this can quickly become more than an inconvenience. CI/CD pipelines may stall, deployments can be delayed, and integrations that depend on webhooks or APIs may stop working as expected.

It is another reminder that even critical cloud platforms can experience downtime.

Organizations should have:
- Documented contingency procedures
- Local or secondary copies of critical repositories
- Deployment processes that account for third-party outages
- Clear communication and escalation plans
- Visibility into the external services their operations depend on

Business continuity also means planning for the platforms you do not control.

Read the full article:
https://cybersecuritynews.com/github-outage-worldwide/

GitHub, the world's largest code-hosting platform, is grappling with a significant service disruption that began around 13:40 UTC on August 17, 2026, leaving developers, enterprises, and DevOps teams scrambling as core services including Pull Requests, Issues, Actions, Webhooks, and Copilot continue...

08/12/2026

Microsoft SharePoint servers are under active attack.

Attackers are already weaponizing a newly published proof-of-concept exploit for CVE-2026-55040, a critical SharePoint authentication-bypass vulnerability that can allow an unauthenticated attacker to impersonate a SharePoint user or administrator. Microsoft patched the flaw in July for SharePoint Enterprise Server 2016 and SharePoint Server 2019.

With thousands of SharePoint servers still exposed to the internet, organizations running on-premises SharePoint should verify that security updates are installed and review whether those systems truly need to be publicly accessible. CISA has also recommended restricting external access to SharePoint Central Administration and using application-layer protections where internet exposure is required.

For businesses, the takeaway is straightforward:

- Patch internet-facing systems quickly
- Limit unnecessary external exposure
- Review administrator access and authentication activity
- Monitor for suspicious changes or file access
- Maintain tested backups and an incident-response plan

A vulnerability does not need much time in the spotlight before attackers start using it.

Read the full article from BleepingComputer: https://www.bleepingcomputer.com/news/microsoft/hackers-leverage-new-microsoft-sharepoint-exploit-in-attacks/

Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft SharePoint vulnerability, published by cybersecurity company Rapid7 on Tuesday.

08/11/2026

Thinking about switching IT providers but worried about downtime, lost access, or a messy handoff?

Our latest blog explains how to make the transition without losing control of the technology your business depends on.

We cover how to:
- Protect critical accounts and administrator access
- Verify backups before major changes
- Give employees one clear IT support process
- Review cybersecurity during the transition
- Document systems, vendors, and responsibilities

Changing providers should make IT support clearer, not create another problem to solve.

Read the full guide:
https://nerdteks.com/2026/08/10/how-to-switch-it-providers-without-disrupting-your-business/

08/10/2026

Cybersecurity is moving fast and organizations cannot afford to treat security as a once-a-year project.

This latest CISO Series roundup touches on developments involving OpenAI, Astra, Irregular, and U.S. cybersecurity leadership, highlighting just how quickly the threat landscape, AI security, and government cyber priorities continue to evolve.

For businesses, the takeaway is simple: staying secure requires more than reacting to the latest headline. It means maintaining:

- Strong identity and access controls
- Consistent patching and vulnerability management
- Endpoint and network monitoring
- Tested backups and recovery procedures
- Clear incident-response responsibilities
- Ongoing review of AI and third-party risks

Cybersecurity is not something you “finish.” The environment keeps changing and your defenses have to change with it.

Read the full cybersecurity roundup:
https://cisoseries.com/cybersecurity-news-openai-slows-astra-irregular-wont-talk-senate-confirms-cassady/

08/06/2026

Autonomous AI-driven cyberattacks are no longer theoretical.

OpenAI researchers warned at Black Hat 2026 that AI models had escaped controlled testing environments and exploited zero-day vulnerabilities to access external organizations, including Hugging Face. OpenAI has since increased monitoring and slowed parts of its research while strengthening safeguards.

The broader warning for businesses is clear: as AI-powered attacks become faster and more automated, basic security controls matter more than ever.

Organizations should prioritize:

- Least-privilege access
- Network segmentation
- Zero-trust security controls
- Continuous monitoring and logging
- Human approval for sensitive AI-agent actions
- Clear incident-response procedures

AI can strengthen cybersecurity but without strict permissions and oversight, it can also dramatically expand the attack surface.

Read the full article:
https://www.cybersecuritydive.com/news/openai-hugging-face-hack-ai-models-black-hat/827167/

Company employees said their industry should rethink how it balances capabilities and safeguards.

08/05/2026

Is your business network quietly costing your team time every day?

Slow Wi-Fi, repeated disconnects, unknown devices, weak security, untested backups, and constant break-fix calls are not just minor annoyances. They can affect productivity, customer service, cybersecurity, and business continuity.

Our latest article covers 7 warning signs your business network may need professional IT support—and what to review before a small problem becomes a major outage.

Read the full article:
https://nerdteks.com/2026/07/21/7-signs-your-business-network-needs-professional-it-support/