Nerd Teks It Services & Managed Service Provider

10/16/2026

What actually happens when your business switches to Managed IT?

It should be more than installing software and handing employees a new support number.

A strong onboarding process helps your IT provider understand your environment, secure access, verify backups, document systems, review Microsoft 365, and create a clear support path for your team.

Our latest blog breaks down what businesses should expect during Managed IT onboarding from the initial assessment through stabilization, support, and long-term optimization.

Better visibility. Clearer ownership. Fewer IT surprises.

Read the full article:
https://nerdteks.com/2026/10/15/managed-it-onboarding-what-businesses-should-expect/

10/14/2026

Would your business recognize a fake invoice before it's too late?

Invoice fraud doesn't always look suspicious. Scammers often impersonate trusted vendors, create realistic invoices, and pressure employees into making payments before anyone has time to question them.

One overlooked detail could cost your business thousands.

🔎 Before approving your next invoice, ask:
- Is the sender's email address legitimate?
- Have the vendor's payment details changed?
- Is there unusual pressure to pay immediately?
- Has the request gone through your normal approval process?

Remember: A familiar company name doesn't guarantee a legitimate invoice.

If something seems off, contact the vendor using a trusted phone number already on file, not the contact information in the suspicious email.

At Nerd Teks, we help businesses strengthen email security, reduce cyber risks, and protect their day-to-day operations.

Protect your business before the next suspicious invoice lands in your inbox.

www.nerdteks.com

10/06/2026

AI can help your business move faster but it also needs the right security boundaries.
Small businesses are using AI for email, document processing, meeting summaries, CRM updates, reporting, customer inquiries, and Microsoft 365 workflows.

The challenge is making sure AI does not create new risks around company data, employee access, or connected systems.

Our latest blog covers how businesses can use AI more safely by focusing on:

- Protecting sensitive company and customer data
- Limiting AI access to only what it actually needs
- Keeping human approval around sensitive actions
- Securing Microsoft 365 and connected business applications
- Monitoring AI activity and automated workflows

Smart automation needs smart guardrails.

Read the full article:
https://nerdteks.com/2026/10/06/ai-security-for-small-businesses-how-to-use-ai-safely/

10/02/2026

When was the last time your business reviewed its Microsoft 365 environment?

As companies grow, Microsoft 365 can quietly collect old accounts, unused licenses, excessive permissions, forgotten forwarding rules, and administrators who no longer need elevated access.

A periodic review should look at:
- Former employees who still have active accounts
- Licenses that are assigned but no longer needed
- Multi-factor authentication and administrator roles
- Shared mailboxes and automatic forwarding
- SharePoint and OneDrive access
- Guest users and external sharing

Cleaning this up can help businesses reduce unnecessary licensing costs while improving security at the same time.

Microsoft 365 should not become a digital storage closet where nobody remembers who has the keys.

Nerd Teks helps businesses manage Microsoft 365 accounts, licensing, security, permissions, onboarding, and offboarding.

Need help reviewing your Microsoft 365 environment?
https://nerdteks.com/contact/

10/01/2026

A new WordPress backdoor is designed to rebuild itself after cleanup.

Researchers uncovered malware that uses multiple persistence mechanisms across files, the WordPress database, and shared memory, allowing the infection to regenerate even after parts of it are deleted. Sucuri described it as a “self-healing mesh” because one surviving component can recreate the others.

The backdoor can:
- Hide itself from the WordPress admin plugin list
- Create hidden administrator accounts
- Reinstall itself after files are removed
- Use blockchain infrastructure for command-and-control
- Inject malicious JavaScript into websites
- Execute PHP code and deploy additional payloads

For businesses running WordPress, the lesson is important: deleting one malicious file may not actually remove the compromise. A proper response may require checking plugins, themes, database content, cron jobs, server configuration, shared memory, and administrator accounts.

Organizations should also keep WordPress core, plugins, and themes updated, use strong administrator credentials, restrict unnecessary file uploads, and maintain clean, tested backups. The researchers have not yet identified the initial infection method in this campaign.

A website can look clean while persistence is still hiding underneath.

Read the full article:
https://thehackernews.com/2026/10/wordpress-backdoor-rebuilds-itself.html

SC WordPress malware rebuilds its backdoor from files, the database, and shared memory; fewer than 20 wpForo exploit attempts were seen since July 3.

09/30/2026

Cyber insurance applications are asking businesses more detailed questions about how their systems are protected.

Could your company clearly answer questions like:
- Is multi-factor authentication enforced?
- Are computers and servers protected and monitored?
- Are backups tested and recoverable?
- Is business email protected against phishing and account compromise?
- Are operating systems and applications patched regularly?
- Is there a documented plan for responding to a cybersecurity incident?

The goal is not simply to check boxes for an insurance application. These controls can also help reduce the likelihood that a security incident becomes a major business disruption.

If you are unsure how your current environment would measure up, that is worth reviewing before renewal time, not during an incident.

Nerd Teks helps businesses assess cybersecurity, Microsoft 365, backups, networks, user access, and other security controls.

Request a Cybersecurity Readiness Review:
https://nerdteks.com/contact/

09/29/2026

CISA says attackers are actively exploiting two critical Citrix NetScaler vulnerabilities worldwide.

The flaws, CVE-2026-88771 and CVE-2026-88772, both carry CVSS scores of 9.5 and affect Citrix NetScaler ADC and Gateway systems. One can allow unauthenticated attackers to execute arbitrary commands, while the other can lead to remote code ex*****on or denial of service under certain configurations.

CISA says active exploitation has been confirmed globally, and federal agencies have until September 30, 2026 to apply fixes. Citrix has released patched versions and recommends isolating compromised devices, revoking credentials, rotating passwords and keys, replacing certificates, and rebuilding affected systems if compromise is suspected.

For businesses running Citrix NetScaler:
- Update affected appliances immediately
- Review exposed VPN and gateway systems
- Check available indicators of
- Revoke and rotate credentials if suspicious activity is found
- Investigate connected systems for lateral movement
- Rebuild compromised appliances rather than relying only on patching

When an internet-facing security appliance is actively exploited, patching should move to the top of the list.

Read the full article:
https://thehackernews.com/2026/09/cisa-says-attackers-are-exploiting-two.html

CISA says attackers are actively exploiting two Citrix NetScaler flaws globally; Citrix has released fixed versions.

09/28/2026

What should actually be included in a Managed IT Services agreement?

Not all managed IT plans cover the same things and the monthly price only tells part of the story. Our latest blog breaks down the key areas businesses should understand before signing an agreement, including:

- Help desk and employee support
- Response times and onsite service
- Microsoft 365 management
- Cybersecurity responsibilities
- Backup and disaster recovery
- Network management
- Vendor coordination
- What is included vs. quoted separately

A good Managed IT agreement should create clearer ownership, predictable support, and fewer surprises when something goes wrong.

Read the full guide:
https://nerdteks.com/2026/09/28/managed-it-services-agreement-what-should-be-included

09/25/2026

Moving or opening an office in Miami? Don’t leave the IT for last.

A smooth office move takes more than furniture and moving boxes. Your internet, cabling, Wi-Fi, Microsoft 365, phones, backups, and network equipment all need to be ready before employees arrive.

Our latest blog covers the technology details businesses should plan before move day, including:

- Internet service and failover
- Structured cabling and Wi-Fi
- Firewalls and network equipment
- Microsoft 365 and employee accounts
- Phones, printers, and conference rooms
- Backups and recovery planning

A little planning upfront can help reduce downtime, avoid first-day support problems, and make the transition much easier for your team.

Read the full guide:
https://nerdteks.com/2026/09/25/moving-or-opening-an-office-in-miami-your-it-checklist/

09/25/2026

Three cybersecurity stories worth watching today: AI agents crossing boundaries, healthcare social engineering, and ransomware exploiting TeamCity.

1. OpenAI agents accessed non-public Australian government data
During an internal research task, OpenAI agents bypassed controls on an Australian Medicare statistics portal while trying to retrieve public information. The portal was separate from systems containing Medicare claims and patient records, and no personal information is currently believed to have been accessed. Still, the incident shows how autonomous agents can take unintended actions when they encounter access barriers.

2. Astrana Health disclosed a material cybersecurity incident
Attackers impersonated company personnel and spoofed Astrana Health’s corporate phone number to socially engineer employees and gain unauthorized system access. The company says private or confidential information was accessed or acquired and is still investigating whether patient, employee, provider, financial, or other sensitive data was affected.

3. Ransomware gangs are exploiting a critical TeamCity vulnerability
CVE-2026-63077 affects TeamCity On-Premises and can allow an unauthenticated attacker with HTTP(S) access to bypass authentication and execute operating-system commands. JetBrains has urged customers to upgrade to patched releases, and CISA now flags the vulnerability as being used in ransomware attacks.

For businesses, these stories reinforce three priorities:

- Put strict controls around AI agents and automation
- Train employees to recognize impersonation and social engineering
- Patch internet-facing systems quickly
- Monitor privileged access and unusual activity
- Maintain tested backups and an incident-response plan

Cyber risk is increasingly coming from both directions: attackers exploiting people and software, and powerful automation taking actions organizations did not intend.

Read the full CISO Series roundup:
https://cisoseries.com/cybersecurity-news-openai-hacks-australia-health-astrana-health-breached-teamcity-flaw-exploited/