Burgi Technologies

27/10/2026

Thinking about whether your IT provider is still the right fit? 🔍 We put together a practical guide: the signs that actually matter, the ones that don't, a one-afternoon self-audit you can run yourself, and what a clean handoff looks like (typically 4 to 8 weeks). Free to read, no strings. 🛠️

Signs it's time to switch managed IT providers in Orange County, a self-audit checklist, and how a clean MSP handoff works. Get a second opinion.

22/10/2026

🔐 Third-party apps connected to your Microsoft 365 tenant can hold broad access to mailboxes and files. After the ConnectWise Cloud Backup incident, it's a good time to review what's consented in your environment.

✅ Our new guide walks through a step-by-step audit of enterprise apps, permissions and sign-in logs, plus questions to ask vendors and how to keep a second backup path.

📖 Read it here:

ConnectWise suspended Cloud Backup after M365 tenants were hit. Here's how to audit third-party app access in your own tenant, step by step.

22/10/2026

A trusted backup vendor just became an attack vector for hundreds of businesses.

A China-linked hacking group used an AI agent to compromise ConnectWise Cloud Backup, attempting over 2,250 Microsoft 365 sign-ins at nearly 3,000 attempts per minute. No bug was exploited, just an over-permissioned app connection that nobody was watching.

Heres what happened and what every business should check in their own environment: https://www.burgitech.com/blog/connectwise-cloud-backup-ai-supply-chain-attack-2026

20/10/2026

Ransomware attacks are up 53% this year, and the barrier to entry keeps dropping. The same week police arrested a 16-year-old tied to the KillSec ransomware group, three security vendors confirmed attack volume is at its highest point of 2026. Here's what small businesses need to know and do about it.

08/10/2026

Fortinet confirmed a critical FortiMail vulnerability (CVE-2026-104286) is being actively exploited, and there's no full patch yet for most versions. If your business runs FortiMail for email security, here's what to check and how to mitigate it right now: https://www.burgitech.com/blog/fortimail-zero-day-cve-2026-104286-business-guide

06/10/2026

New on the blog: FTC Safeguards Rule Breach Notification: What Every Car Dealership Must Know

Car dealerships are classified as financial institutions under the FTC Safeguards Rule, and that comes with a 30-day breach notification deadline most owners don't know about. Here's what it requires and how to prepare.

https://www.burgitech.com/blog/ftc-safeguards-rule-breach-notification-dealerships

01/10/2026

Apple patched an actively exploited iPhone/Mac zero-day on Sept 28, and a public proof-of-concept exploit for it dropped just days later. If your team uses iPhones, iPads, or Macs for work, here is what to check today. https://www.burgitech.com/blog/apple-coregraphics-zero-day-cve-2026-86950-business-guide

29/09/2026

Citrix just disclosed two critical zero-day vulnerabilities in NetScaler ADC and Gateway (CVSS 9.5) that are already being actively exploited. CISA added both to its Known Exploited Vulnerabilities catalog. If your business runs NetScaler for VPN or remote access, check your patch status now. Full breakdown and a step-by-step checklist on our blog: https://www.burgitech.com/blog/citrix-netscaler-cve-2026-88771-88772-zero-day-patch-guide

24/09/2026

F5 disclosed an actively exploited zero-day in BIG-IP APM (CVE-2026-94127, CVSS 9.8). It only affects APM set up as an OAuth Authorization Server, but if that's you (or a vendor runs it for you), patch now. We break down who's affected, the fixed versions, and what to check in your logs.

https://www.burgitech.com/blog/f5-big-ip-apm-zero-day-cve-2026-94127-business-guide

17/09/2026

New on our blog: Microsoft's September 2026 Patch Tuesday set a record with over 1,000 CVEs fixed, including two Windows zero-days that CISA confirms are already under active attack. Here's what your business needs to check and patch this week.

Microsoft's record Patch Tuesday includes 2 actively exploited Windows zero-days. Here's what Orange County businesses need to patch now.