ITAdOn It Solutions

Call Directions Website Contact the business

ITAdOn It Solutions We deliver an effective and efficient service by simplifying IT complexities, optimizing technology

It's 7:40 on a Monday. Your office manager can't sign in, the shared printer is offline again, and the new hire's laptop...
10/16/2026

It's 7:40 on a Monday. Your office manager can't sign in, the shared printer is offline again, and the new hire's laptop still isn't set up. Nobody is sure who to call first.

When IT support depends on whoever has a spare minute, small problems sit in inboxes and the same issues keep coming back.

ITAdOn's IT help desk gives your team one place to go for everyday technical problems. Our agents help resolve user issues, sort out network connectivity problems, manage user accounts and set up new devices. Incidents are prioritized so the ones stopping work get handled first, and support is available 24/7.

A quick test for this week: how many IT problems did your team work around instead of reporting? If the honest answer is "a few," book a free discovery call with ITAdOn.

Microsoft's October security update fixes a Windows flaw that attackers are already using. If your office runs Windows P...
10/14/2026

Microsoft's October security update fixes a Windows flaw that attackers are already using. If your office runs Windows PCs, this one belongs on this week's list.

On October 13, Microsoft patched CVE-2026-96951, a Windows Shell flaw rated 8.8 and marked as exploited. It lets an attacker get around Mark of the Web, the tag Windows adds to files from the internet so extra warnings and protections apply.

The attack still needs a person to act. Microsoft says an attacker could send a crafted file by email or instant message, or lure someone into clicking a link. If the bypass works, the warning that would normally make an employee pause may never appear.

Three checks this week:

Confirm the October 2026 Windows updates are installed on every office PC and laptop, including remote ones.
Find machines that are behind on updates or no longer receive them.
Remind staff that a missing warning doesn't make an unexpected attachment safe.

Not sure every machine got the update? Ask your IT team, or talk to ITAdOn.

10/14/2026

Your team has work to do. IT problems shouldn’t get in the way.

Let’s discuss your business IT needs: https://itadon.com/

Tomorrow, October 13, Windows 11 version 24H2 Home and Pro PCs get their last scheduled security update.After that, Micr...
10/12/2026

Tomorrow, October 13, Windows 11 version 24H2 Home and Pro PCs get their last scheduled security update.

After that, Microsoft says these editions stop receiving monthly security updates, fixes for known issues, time zone updates and technical support. The PCs keep working. They just stop getting patched.

Pro is a business edition, so this isn't only a home-user issue. Microsoft says Home and Pro PCs that aren't managed by IT will move to version 25H2 automatically. PCs where updates are controlled through policies or management tools can stay on 24H2 until someone approves the upgrade. Enterprise and Education editions of 24H2 remain supported until October 2027.

Three checks this week:

Run winver on your office PCs, or pull a version report, and count anything still on 24H2 Home or Pro.
Review any update policy that holds feature updates back.
Schedule the move to 25H2, and test your key business apps first.

Not sure which version your office runs? Ask your IT team, or talk to ITAdOn.

A customer emails your accounts team: "Is this invoice with your new bank details real?" It came from your company's ema...
10/09/2026

A customer emails your accounts team: "Is this invoice with your new bank details real?" It came from your company's email domain. Or something that looked exactly like it.

If your domain has no DMARC record, or one still set to p=none, you aren't telling other mail systems what to do with messages that fail authentication. Microsoft notes DMARC helps stop the spoofed senders used in business email compromise and phishing.

Three checks worth doing this month:

Look up your domain's DMARC record. Missing, or p=none, means you're watching at best, not blocking.
Read the DMARC aggregate reports. They show which servers and services send mail as your domain, including ones nobody remembers setting up.
Agree a rule with customers and suppliers: bank detail changes get confirmed through a second channel, never by email alone. DMARC won't stop lookalike domains, so this step matters.

Move from p=none to quarantine, then reject, in stages so legitimate mail keeps flowing.

Not sure where your domain stands? Ask your IT team, or talk to ITAdOn.

Your backup software says last night's job succeeded. That tells you a copy was made. It doesn't tell you how long it wo...
10/08/2026

Your backup software says last night's job succeeded. That tells you a copy was made. It doesn't tell you how long it would take to get your team working again.

That gap is where many recovery plans fall apart. Nobody has timed a full restore. Nobody is sure which systems need to come back first. And the person who set up the backups may not be the one on call when something breaks.

ITAdOn's cloud disaster recovery service is built around that question. We work with you on a recovery plan that fits how your business runs, replicate critical data and applications to a secure offsite location, coordinate with your in-house or outsourced IT team, and test the plan regularly so it still works when you need it. We recommend testing at least twice a year.

When did your business last restore a full system from backup, and how long did it take? If the answer is "not sure," book a free first consultation with our team.

If your staff connect remotely through a Fortinet FortiGate firewall or SSL VPN, check who can log in to it today.On Oct...
10/07/2026

If your staff connect remotely through a Fortinet FortiGate firewall or SSL VPN, check who can log in to it today.

On October 6, the FBI and U.S. Secret Service warned that the FortiBleed campaign is still active and still scanning internet-facing FortiGate devices. There's no new software flaw here. The attackers get in with reused or leaked passwords, then crack stored password hashes, create their own admin accounts and move into the wider network. Researchers at SOCRadar verified more than 86,000 compromised devices across 194 countries.

The advisory says some administrators have been locked out of their own firewalls, and that access has been passed to ransomware groups.

Why it matters: your firewall controls who reaches your business systems. If someone else holds its admin login, they can let themselves in.

What to do now:

1. End active VPN and admin sessions, then reset those passwords.
2. Require phishing-resistant MFA for remote access and admin accounts.
3. Remove admin access from the internet and look for accounts you don't recognize.

If your team runs Jira, Confluence or Bitbucket on your own servers, put this on today's list.On October 5, Atlassian di...
10/06/2026

If your team runs Jira, Confluence or Bitbucket on your own servers, put this on today's list.

On October 5, Atlassian disclosed CVE-2026-21589, a critical flaw (CVSS 9.3) in eight self-hosted Data Center products, including Jira Software, Jira Service Management, Confluence, Bitbucket, Bamboo and Crowd. An attacker with no login can read specific files on the server, as long as they know the file's exact name and path. Atlassian says some configurations may hold sensitive files.

Atlassian Cloud has already been patched and Cloud customers don't need to do anything. Atlassian hasn't reported confirmed attacks, but it can't confirm whether self-hosted instances were affected.

Why it matters: these systems often hold project plans, support tickets, source code and user directories.

What to do now:

1. Confirm whether you run any Atlassian Data Center product.
2. Upgrade to the fixed version for your release line.
3. If you can't patch today, restrict internet access or apply Atlassian's mitigation, then review access logs.

An employee left on Friday. By Monday, nobody has turned off their email on their personal phone, and the shared folder ...
10/05/2026

An employee left on Friday. By Monday, nobody has turned off their email on their personal phone, and the shared folder links they sent to clients still open.

Offboarding often falls between HR, a manager and whoever handles IT, so each person assumes someone else closed the last door.

The cost isn't only security. It's client files nobody can find, a software license that keeps billing, or a vendor portal only the former employee could log into.

Three checks close most of the gaps:

Disable the account and sign it out everywhere. In Microsoft 365, disabling a user doesn't end every active session immediately, so revoke their sessions too.
Move ownership of their files, shared links and mailbox to a manager before anything gets deleted.
Change any shared passwords they knew and collect company devices.

Want an offboarding checklist your team can run the same way every time someone leaves? Talk to ITAdOn.

If your business filters email through a Fortinet FortiMail appliance, it needs attention today.On October 1, Fortinet d...
10/02/2026

If your business filters email through a Fortinet FortiMail appliance, it needs attention today.

On October 1, Fortinet disclosed CVE-2026-104286, a critical flaw (CVSS 9.8) that can let an unauthenticated attacker write files to a FortiMail system using crafted web requests. Fortinet confirms it is already being exploited in the wild, and CISA added it to its Known Exploited Vulnerabilities catalog the same day.

Affected releases include FortiMail 7.2, 7.4, 7.6 and 8.0 builds below the fixed versions. Fortinet lists the fixes (7.4.9, 7.6.7 and 8.0.2) as upcoming, so the workaround matters most right now.

Why it matters: your email gateway sits in the path of every message your business sends and receives. It's exactly the kind of system you don't want an outsider writing files to.

What to do now:

1. Apply Fortinet's workaround: disable the IBE feature or limit the management interface to trusted internal networks.

2. Check logs and files against Fortinet's published indicators of compromise.

3. Install the fixed release as soon as it's available.

Not sure who manages your email gateway? Make that the first question today.

Address

1500 Chestnut Street, Ste 1959
Philadelphia, PA
19102

Telephone

+18884482366

Website

Alerts

Be the first to know and let us send you an email when ITAdOn It Solutions posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to ITAdOn It Solutions:

Shortcuts

Share

Category