Pexo It Solution LTD

Pexo It Solution LTD Pexo is a leading IT consulting firm providing expert advice and solutions to businesses of all size

It’s Cyber Security Awareness Month in Canada, and this year’s theme is “Your best defence is you.” For a small business...
10/11/2026

It’s Cyber Security Awareness Month in Canada, and this year’s theme is “Your best defence is you.”

For a small business, that means four habits for your team: pause before you click, make MFA and strong passwords the default, keep client data where it belongs, and make it easy to report anything suspicious.

None of them needs new software.

Having security tools is not the same as using them. In a 2026 survey of 1,000 US small business leaders by the National...
10/09/2026

Having security tools is not the same as using them. In a 2026 survey of 1,000 US small business leaders by the National Cybersecurity Alliance and Cybersecurity and Infrastructure Security Agency, 86.8% had multi-factor authentication, but only 51.1% required it on all key accounts. 88.4% had backups, but only 61.4% had tested them. And 56.1% could not confirm a clean security record over the past year.

October 13 is a hard date for two things many offices still run.Windows Server 2012 and 2012 R2 get their last security ...
10/05/2026

October 13 is a hard date for two things many offices still run.

Windows Server 2012 and 2012 R2 get their last security update that day, and Office 2021 stops receiving security updates with no extension available. Both keep working afterwards, but every new flaw stays open for good.

With less than two weeks left, start by listing what you run.

Our full breakdown is in the first comment.

Your email security gateway is meant to protect the inbox. This week, one became a way in.Fortinet lists a critical f...
10/02/2026

Your email security gateway is meant to protect the inbox. This week, one became a way in.

Fortinet lists a critical flaw (CVE-2026-104286, rated 9.8 out of 10) as exploited in the wild. No login is needed, and CISA has added it to its Known Exploited Vulnerabilities list.

As of October 2, the fixed firmware is still listed as upcoming. Fortinet's interim advice: switch off Identity Based Encryption or keep the management interface off the public internet.

Security appliances are software too. If a device sits at the edge of your network, someone needs to own its patches, its exposure and its logs.

41% of security leaders have faced a deepfake voice call aimed at their own employees in the past year, according to a n...
09/27/2026

41% of security leaders have faced a deepfake voice call aimed at their own employees in the past year, according to a new Gartner survey. 79% report a phishing or business email compromise incident overall.

Worth a reminder to your team: if a request to move money or share access comes in by phone or video, a second channel to confirm it is worth the 30 seconds.

A critical VPN flaw was patched September 9. By September 22, Cybersecurity and Infrastructure Security Agency confirmed...
09/25/2026

A critical VPN flaw was patched September 9. By September 22, Cybersecurity and Infrastructure Security Agency confirmed it was being actively exploited, along with three more flaws across other network vendors.

Two weeks between patch and confirmed attack. If your firewall and VPN patches aren't centrally tracked, that gap is the risk.

Full breakdown in the comments.

An email security appliance had its own SQL injection flaw actively exploited this week.On September 14, Cybersecurity a...
09/19/2026

An email security appliance had its own SQL injection flaw actively exploited this week.

On September 14, Cybersecurity and Infrastructure Security Agency added CVE-2026-76461 to its Known Exploited Vulnerabilities catalog. It's an unauthenticated SQL injection vulnerability in Cisco Secure Email Gateway, the product responsible for filtering malicious email before it reaches inboxes. The flaw allowed a remote attacker to send crafted email content that ran arbitrary SQL against the appliance's own database.

The pattern to notice isn't the vendor. It's that the tools defending your perimeter have themselves become an attractive target, precisely because of the access they carry.

Federal patch deadline was September 17. The same urgency applies to anyone running the affected version.

The tool your IT provider uses to reach your network is a high-value target, and often the least talked-about part of yo...
09/17/2026

The tool your IT provider uses to reach your network is a high-value target, and often the least talked-about part of your security setup.

On September 11, CISA added a critical ConnectWise ScreenConnect vulnerability to its Known Exploited Vulnerabilities catalog. ScreenConnect is one of the most widely used remote-support platforms in the managed services industry. For most small and mid-sized businesses, this isn't really about one product, it's about the category of tools sitting between your MSP and your network.

Huntress Labs reported this year that remote-monitoring tool abuse now accounts for 24% of all observed incidents, up from 7% the year before. The provider layer is where attackers are aiming.

We wrote a short piece with 5 questions every SMB should be asking their MSP. Link in the first comment.

A critical Zoom vulnerability patched in August let an attacker take over a device just by joining a meeting, no click r...
09/11/2026

A critical Zoom vulnerability patched in August let an attacker take over a device just by joining a meeting, no click required.

What stood out: researchers built a fully working exploit in under a day using publicly available AI tools, work that used to take skilled teams months.

The line between "a bug exists" and "someone can use it" is getting shorter, and that changes how fast businesses need to move on patching too.

Microsoft just patched a record 972 vulnerabilities in its September 2026 update, and two are already being used in real...
09/10/2026

Microsoft just patched a record 972 vulnerabilities in its September 2026 update, and two are already being used in real attacks.

A dozen of the critical fixes need no click at all, just previewing a file is enough. We break down what matters and what to check first.

Link in the comments.

Address

500-7030 Woodbine Avenue, 500
Markham, ON
L3R6G2

Opening Hours

Monday 9am - 5pm
Tuesday 9am - 5pm
Wednesday 9am - 5pm
Thursday 9am - 5pm
Friday 9am - 5pm

Website

Alerts

Be the first to know and let us send you an email when Pexo It Solution LTD posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Pexo It Solution LTD:

Shortcuts

Share

Category