What are the opening hours?

Monday 7am - 6pm Tuesday 7am - 6pm Wednesday 7am - 6pm Thursday 7am - 6pm Friday 7am - 6pm Saturday 9am - 5pm

LG Tech MSP

Managed IT & cybersecurity for NH & MA businesses. Proactive support from our Pelham, NH office.
(1)

11/04/2026

Synology is warning that C3RB3R ransomware is encrypting NAS devices running outdated DiskStation Manager (DSM), using flaws patched in December 2024. If your office stores files or backups on a Synology NAS, update DSM now, turn on automatic updates, and make sure the management page is not open to the internet. Keep one backup copy off the NAS.

https://www.bleepingcomputer.com/news/security/synology-warns-customers-of-ongoing-c3rb3r-ransomware-attacks/

11/03/2026

AI has made scams harder to spot: no more typos, cloned voices on the phone, and faster attacks. Here's a plain-English 10-point checklist to protect your Massachusetts or New Hampshire business: https://lgtechmsp.com/ai-cybersecurity-threats-nh-ma-businesses/

11/02/2026

Ivanti has patched two more zero-days in Connect Secure VPN that attackers chained to take full control of gateways since October 1. If you updated in October to 25.1.1.2 or 22.8R2.5, you still need to upgrade again to 25.1.1.3 or 22.8R2.6. Attackers stole credentials and erased logs, so reset VPN passwords and check logs too.

https://www.securityweek.com/ivanti-patches-two-more-zero-days-exploited-in-connect-secure-attack-chain/

10/30/2026

Cisco confirmed on October 29 that attackers are exploiting a new zero-day (CVE-2026-76418) to crash ASA and FTD firewalls running SSL VPN. Over 51,000 of these devices are exposed online. A crash means remote staff lose VPN and the office may lose internet. If you run a Cisco firewall, upgrade to the fixed release now.

https://www.bleepingcomputer.com/news/security/cisco-warns-of-firewall-zero-day-exploited-to-crash-ssl-vpn-devices/

10/28/2026

953 online stores, mostly on Magento, were caught serving hidden code to shoppers, and CISA confirmed on October 27 that the PolyShell flaw (CVE-2026-48356) behind many of them is being actively exploited. Adobe's fix has been out since July. If your business runs Adobe Commerce or Magento, confirm patch APSB26-73 is installed and review your admin accounts today.

https://thehackernews.com/2026/10/hackers-infect-953-online-stores-with.html

10/26/2026

Attackers took over 97 Microsoft 365 accounts at 79 organizations by stealing sign-in tokens through fake Microsoft login pages, getting past MFA entirely. They then added their own authenticator apps, registered rogue devices and hid payroll emails with inbox rules. Check your Microsoft 365 tenant this week for unfamiliar MFA methods, unknown devices and odd inbox rules, and consider passkeys or security keys.

https://thehackernews.com/2026/10/microsoft-365-token-replay-attacks.html

10/23/2026

A critical PHP flaw called PHP2Shell is being exploited at massive scale, with Cloudflare reporting millions of attack attempts since Wednesday. PHP runs about 70% of websites, including WordPress. If your business has a website, client portal or web app, ask your host or developer today to confirm PHP is updated to 8.5.12, 8.4.27, 8.3.36 or 8.2.35. Older versions should be upgraded or taken offline.

https://www.theguardian.com/technology/2026/oct/22/websites-across-world-hit-by-millions-of-attempts-to-exploit-php-code-flaw

10/21/2026

CISA and the FBI warn that SafePay ransomware has hit at least 600 organizations. Attackers break in through weak passwords and unpatched Cisco, SonicWall and Veeam systems, then wipe backup NAS devices before encrypting files. Check that your firewall, VPN and backup servers are patched, require MFA on VPN logins, and keep one backup copy offline.

https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-293a

10/20/2026

One stolen vendor credential gave attackers access to 173 Microsoft 365 tenants. The ConnectWise Cloud Backup (formerly SkyKick) app credential was used to read data the backup tool could reach: mailboxes, OneDrive, SharePoint and Teams. Password resets don't stop this. Ask your IT provider if the app is in your tenant and review which third-party apps still have access.

https://thehackernews.com/2026/10/hackers-use-compromised-connectwise.html

10/16/2026

Microsoft and partners just took down a phishing network behind more than 1 billion scam emails and texts sent to 75,000+ organizations this year. The crews hijacked real Microsoft 365 accounts and hosted fake pages on SharePoint and OneDrive, using lures like unpaid tolls and delivery problems. The takedown helps, but the tactics will return. Treat unexpected shared links with caution and verify by phone.

https://thehackernews.com/2026/10/microsoft-disrupts-3-phishing-kits.html

Address

2 Beaver Brook Way, Unit C
Pelham, NH
03076

Opening Hours

Monday	7am - 6pm
Tuesday	7am - 6pm
Wednesday	7am - 6pm
Thursday	7am - 6pm
Friday	7am - 6pm
Saturday	9am - 5pm

Website

https://www.lgtechmsp.com/

Alerts

Be the first to know and let us send you an email when LG Tech MSP posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.