What are the opening hours?

Monday 8am - 5pm Tuesday 8am - 5pm Wednesday 8am - 5pm Thursday 8am - 5pm Friday 8am - 5pm

Rhinotech

Name: Rhinotech
Address: 820 Harvey Fields Drive, Canton, GA, 30114, US
Telephone: +16787446601

At rhinotech, we provide cost-effective network management and IT support services in Canton, GA - both on-premise and for cloud-based environments.

As your trusted IT partner, count on the rhinotech team to keep your data secure and systems running. Rhinotech's team of IT experts in Canton, Georgia, offers cost-effective network management, IT support services, and security solutions, both on-premises and in the cloud. Rhinotech is committed to protecting your data and keeping your systems running smoothly, so you can focus on what truly matters: growing your business. Rhinotech is the trusted IT partner who helps you stay connected, secure, and competitive in the digital age.

11/04/2026

MFA on, but the session still stolen?

Huntress tracked Microsoft 365 token replay across 79 organizations. Attackers reused post-MFA sign-in tokens, registered rogue devices, swapped MFA methods, and hid mail with short inbox rules. One case included a payroll-related outbound message.

This week for your tenant:
1. Revoke sessions, then reset the password
2. Check unfamiliar Entra devices
3. Audit MFA methods
4. Review odd inbox rules
5. Tighten Conditional Access / device-code flow

Calm prevention beats a hidden payroll email. Full post linked in bio.

11/04/2026

This week's SMB cyber brief: stolen Microsoft 365 sessions can keep working after MFA.

Huntress (Oct 22) tracked a token spray and replay campaign from July 14 to September 22 across 79 organizations: at least 497 successful sign-ins, more than 200,000 failed attempts, at least 48 rogue Entra devices, wiped and replaced MFA methods, and short-named inbox rules that hid mail. In one case, a compromised mailbox sent a payroll-related message. Attackers stole post-MFA session tokens (AiTM relays, device-code phishing, and social engineering), then replayed them from hosting IPs. A password reset alone is not enough.

No need to panic. Five calm checks:
1. Revoke sessions, then reset the password
2. Audit unfamiliar Entra devices
3. Audit MFA methods for anything the user does not recognize
4. Review short-named or payroll-hiding inbox rules
5. Tighten Conditional Access and restrict device-code flow where you can

Full breakdown for Canton, North Atlanta, and Upstate SC SMBs.

11/02/2026

Still running Plex at the office? CISA flagged four exploited flaws.

Plex2Shell can let attackers run code on unpatched, internet-facing Media Servers. Plex fixed it in 1.43.3.10861. Patching alone is not enough if miners or proxies were already planted.

This week for your box:
1. Confirm version 1.43.3.10861 or newer
2. Turn off unneeded remote access / port 32400
3. Check Codecs files and odd Plex processes
4. Rebuild cleanly if anything looks wrong
5. Keep business backups separate and tested

Calm prevention beats a slow NAS and a surprise power bill. Full post linked in bio.

11/02/2026

This week's SMB cyber brief: four Plex Media Server flaws are on CISA's exploited list.

On October 20, CISA added CVE-2026-96652, CVE-2026-96654, CVE-2026-96655, and CVE-2026-96656 (chained as Plex2Shell) based on evidence of active exploitation. Plex fixed them in Media Server 1.43.3.10861 and on October 19 confirmed widespread attacks against internet-facing unpatched servers. Compromised boxes have been used for crypto miners and proxy software that can route other people's traffic through your connection. No Plex password is required on a vulnerable, reachable server.

No need to panic. Five calm checks:
1. Confirm Media Server is 1.43.3.10861 or newer
2. Turn off remote access and port 32400 forwarding if you do not need them
3. Look for odd Plex processes, unexpected Codecs files, and high CPU while idle
4. If anything looks wrong, rebuild cleanly and change the Plex password
5. Keep business backups separate and tested

Full breakdown for Canton, North Atlanta, and Upstate SC SMBs.

10/30/2026

Magento store owners: CISA just flagged a file-upload flaw.

CVE-2026-48356 (PolyShell) is on the exploited list. Adobe patched it in July. Patching alone is not enough if files were already planted.

This week for your store:
1. Confirm the July Magento security release landed
2. Search custom-options uploads for odd PHP files
3. Check for backdoors and unexpected admins
4. Inspect CMS blocks for injected scripts
5. Confirm backups restore cleanly

Calm prevention beats a rushed cleanup. Full post linked in bio.

10/30/2026

This week's SMB cyber brief: a Magento file-upload flaw is now on CISA's exploited list.

On October 27, CISA added CVE-2026-48356 (Adobe Commerce and Magento, nicknamed PolyShell) based on evidence of active exploitation. Adobe fixed it in July (APSB26-73) and rates it Critical. Attackers can upload dangerous files through the store's cart API without logging in. Sansec has tied the flaw to a Magento CMS-block campaign affecting 953 stores since July 2025, including a March wave of 471 stores in one hour.

No need to panic. Five calm checks:
1. Confirm the July Magento / Adobe Commerce security release actually landed
2. Search the custom-options upload folder for unexpected PHP or polyglot files
3. Look for leftover backdoors and unexpected admin accounts, then rotate passwords
4. Inspect CMS blocks and pages for injected scripts
5. Confirm backups are clean and restorable

Full breakdown for Canton, North Atlanta, and Upstate SC SMBs.

10/28/2026

Spam flood. Then "IT" on Teams.

Arctic Wolf tracked more than 400 cases where attackers flood an inbox, then pose as IT support in a Microsoft Teams chat. The sender often looks internal. Teams still marks them External.

This week for your business:
1. Do not trust unexpected external "IT" chats
2. Verify out of band before any remote session
3. Limit who can reach you on Teams from outside
4. Restrict Quick Assist and unapproved remote tools
5. Tell your team how real IT contacts you

Calm prevention beats a rushed "fix." Full post linked in bio.

10/28/2026

This week's SMB cyber brief: fake IT help is showing up inside Microsoft Teams.

Arctic Wolf tracked more than 400 cases where attackers flood an employee's inbox with spam, then message them on Teams while posing as IT support. Display names often look like "Help Desk" or "IT Support (Internal)," even though Teams labels the sender as External. The goal is usually a remote session, often with Windows Quick Assist. Once someone engages, researchers say malicious code can start in under 15 minutes.

No need to panic. Five calm checks:
1. Treat unexpected external "IT" chats as suspicious, especially after a spam flood
2. Verify out of band before any remote session
3. Limit Teams external chat to partner domains you actually use
4. Restrict Quick Assist and unapproved remote tools
5. Tell your team how real IT reaches out

Full breakdown for Canton, North Atlanta, and Upstate SC SMBs.

10/26/2026

New ransomware warning. Familiar ways in.

The FBI and CISA say SafePay ransomware has affected at least 600 victims since August 2024, often through old patches and weak logins.

This week for your business:
1. Update your firewall, VPN, and backup software
2. Turn on multifactor authentication
3. Use long, unique passwords
4. Keep an offline, tested backup
5. Review unfamiliar admin accounts and remote tools

Calm prevention beats panic. Full post linked in bio.

10/26/2026

This week's SMB cyber brief: a new FBI and CISA warning shows how ordinary the way in can be.

On October 20, the FBI, CISA, and the U.S. Secret Service warned about SafePay ransomware, which has affected at least 600 victims since August 2024. It gets in through stolen or guessed passwords, phishing, VPN logins, and old firewall, VPN, and backup software flaws that have had fixes for well over a year. Then it goes after backups.

No need to panic. Five calm steps close the most common gaps:
1. Update your firewall, VPN, and backup software first
2. Turn on multifactor authentication for email, VPN, and key systems
3. Use long, unique passwords (at least 15 characters)
4. Keep an offline, tested backup that sits apart from your network
5. Review admin accounts and remote access tools you do not recognize

Address

820 Harvey Fields Drive
Canton, GA
30114

Opening Hours

Monday	8am - 5pm
Tuesday	8am - 5pm
Wednesday	8am - 5pm
Thursday	8am - 5pm
Friday	8am - 5pm

Telephone

+16787446601

Website

https://rhinotech.io/

Alerts

Be the first to know and let us send you an email when Rhinotech posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.