Broadtek

05/20/2026

Insecure browser extensions are one of the main causes of business email compromise (BEC) attacks. You should avoid adding browser extensions where possible, but you can also look them up on the LayerX Entensionpedia to see if they are flagged as particularly risky. (The link is posted in comments)

05/06/2026

You may have heard the name, but do you know that Broadtek can help you purchase and setup Threatlocker on your systems? We've been using their Zero Trust software for years. It blocks users from installing unapproved applications, and unexpected downloads, DLLs or malicious programs from attacking your PC's.

04/16/2026

There is currently a significant exploit in Adobe Acrobat Reader. Make sure you are running version 2026.001.21431. Check under Menu > Help > About Acrobat Reader. If you are running an older version, use the Check for Updates link on the same menu. See CVE-2026-34621 for details.

10/21/2025

Phishing attacks may use important looking encrypted emails from known vendors or contacts to compromise your hosted email accounts. Be very careful about providing credentials and approving multi-factor requests to any links from emails, even from well-known friends or contacts. Should a malicious actor get into your account they can then use your information to email your contacts, and it can cascade quickly.

10/14/2025

In what marks the end of an era, Microsoft has released the Windows 10 KB5066791 cumulative update, the final cumulative update for the operating system as it reaches the end of its support lifecycle. The Windows 10 update is mandatory, as it contains Microsoft's October 2025 Patch Tuesday security updates, which address six zero-day vulnerabilities and 172 other flaws.
More info at Bleepingcomputer.com

09/22/2025

Windows 10 goes end of support on October 14th 2025. If you have machines which you are not intending to upgrade or replace you can purchase Extended Security Updates (ESU's) for up to 3 years. For businesses the cost is $61 (1st year), $122 in year 2 and then $244 in year 3. Home users have the option to purchase at a reduced rate and should see notifications during the final series of Windows updates.

If your business needs year 1 ESU's then contact Broadtek and we can arrange them for you.

09/10/2025

Training your employees to avoid phishing attacks can not only help them avoid potential email compromise but it may also give you extra insight into your team members. A California study of 20,000 employees of San Diego health employees in 2023 showed that employees who completed their trainings were 19% less likely to fall for simulated phishing emails. But also a large number of employees never completed the trainings. This showed that the more conscientious employees are less likely to put your business at risk. If you are using security awareness training then make sure you have a process to tackle those employees who fail to complete their training.

08/19/2025

It is with sadness that we learnt of the sudden passing of Allen Stegall. I'd worked through some issues with him on the phone just recently and I was shocked to hear of his passing. He was an upbeat and pleasant client to work with and he will be missed. Our condolences go out to his family. Gavin

View Allen Ray Stegall's obituary, send flowers, find service dates, and sign the guestbook.

06/11/2025

Are you running Dell PC's with 13th or 14th Gen Intel Processors? Dell is recommending that you upgrade your BIOS to the latest (May 2nd 2025 or newer) to avoid any potential stability issues.

05/05/2025

If you are using one of these older Meraki MX firewalls, then now is a good time to be considering replacements. Below is a list of common firewalls and their last day of support:

MX65 - May 28th 2026
MX84 - October 31st 2026

MX100 - February 1st 2027
MX64 - July 26th 2027
MX64W - July 26th 2027

Many of these devices are based on designs several years old. New models bring improvements in throughput and security performance.

04/11/2025

"Call-Back" phishing techniques are on the rise. Educate your end users to be aware of these kinds of scams. Targeted emails notify users of pending charges for services like internet, phones or subscriptions like Duolingo, anti-virus software or even Masterclasses. Sometimes these notifications can even happen via phone message. The email / message tells the user to contact them back by phone. Once the call is made the scammer convinces the user to initiate a remote desktop session or install AnyDesk on a PC to correct the issue. Once that connection is active the remote user is able to completely control the PC, access the network and steal data. They can then extort the user / company by saying they will leak or sell their data.

Admins can actively restrict outbound data exports by blocking Port 22 traffic and also tighten firewall rules. Restrict permissions and block the ability to install applications. Look at products like ThreatLocker to protect from malicious libraries and extensions. You should also consider security awareness training for employees through companies like KnowBe4 or Arctic Wolf. Broadtek can help you on that journey. Your employees are your greatest asset and occasionally your largest liability too.