What are the opening hours?

Monday 8am - 5pm Tuesday 8am - 5pm Wednesday 8am - 5pm Thursday 8am - 5pm Friday 8am - 5pm

Infortech - Managed I. T. and Cyber Security Services Company

Name: Infortech - Managed I. T. and Cyber Security Services Company
Address: Santa Clara, CA, 95054, US
Telephone: +18007418530

Home
United States
Santa Clara, CA
Infortech - Managed I. T. and Cyber Security Services Company

- Managed IT Services
- CoManaged IT Services
- Managed Cloud Services
- Managed Security Services

Since 1999 we have been enabling MANUFACTURING Businesses in the Bay Area to take advantage of better, disruptive technologies to improve their operations by bringing efficiencies, and lowering their cost. We offer end-to-end managed services keep the businesses running reliably and securely. Our Services include...
- ExpertCare Managed IT Services
- CoManaged IT Services
- Managed Cloud & Datacenter Services
- Managed Security Services
- Managed VOIP Telecom Solutions
- Global Networks and Unified Communications

10/14/2026

Heads up for any business running Windows computers — Microsoft just set a hard deadline that is worth knowing about now rather than later.

Devices running older or unsupported versions of Windows will permanently stop receiving security updates after May and June 2027, when Microsoft rotates the certificates that power Windows Update. Once that happens, there is no way for those machines to receive patches without upgrading the operating system first.

A lot of businesses keep older computers running because they still get the job done. But after mid-2027, an unpatched machine is not just an old computer — it is a permanently exposed door into your network.

The fix is straightforward: find out what Windows versions are running on your devices and make a plan to upgrade anything that will not make the cut. The deadline is about 18 months away, which sounds like plenty of time until you factor in procurement, migration, and testing.

Not sure where your devices stand? That is what we are here for.

Full details in this week’s blog — link in the comments. Share this with a business owner who might have older Windows machines on their network.

10/06/2026

Google is testing a new feature for its Gemini AI assistant on Mac that would give it access to every file on the device, the ability to open and use apps like Mail and Safari, and the ability to take actions without stopping to ask permission each time.

It is not live yet. But when it arrives, employees on your team may be prompted to enable it on their work Macs during a routine setup or update.

That is worth thinking about now rather than later.

A work Mac used for business operations, client communication, or financial management contains a lot more than personal files. Granting any tool unrestricted access to everything on it is a meaningful decision — and one that should involve IT, not just a click through a settings screen.

Here is what makes sense to do right now. Take stock of what AI tools your team has installed on work devices and what access those tools currently have. Then decide as an organization what your policy is before employees are making that choice individually.

Full details in this week's blog — link in the comments. Share this with anyone on your team who uses Gemini or any AI assistant on a work Mac.

09/29/2026

Heads up for any business using Microsoft 365 — a significant change is coming that could lock your employees out of their accounts if you are not prepared for it.

Microsoft is retiring text message sign-in for Microsoft 365 on February 1, 2027. If anyone on your team currently logs in by entering their phone number and receiving a text code, that method is going away in five months and they will need to switch to something more secure before the deadline.

The replacement is the Microsoft Authenticator app, passkeys, or a hardware security key. All are more secure than a text message code, which can be intercepted or stolen in ways that these newer methods cannot.

Here is what makes this urgent now rather than later. The migration needs to be identified, planned, tested, and communicated to your team before February. That takes longer than most people expect. And Microsoft has already started prompting some affected users to register a passkey when they sign in this month.

If you are not sure whether your organization is affected or what steps to take, that is exactly what we are here for.

Full details in this week's blog — link in the comments. Share this with anyone who manages Microsoft 365 for their business.

09/22/2026

Good news for anyone whose business uses Microsoft Teams — Microsoft just announced several new security features coming over the next few months that will give businesses much better control over what can and cannot be shared through Teams conversations.

The biggest one is the ability for administrators to customize which file types get blocked in Teams, coming in November. Right now that list is fixed and cannot be changed. That is about to get a lot more flexible.

Also coming: the ability to report suspicious guest invitations directly from Teams, automatic blocking of external bots from meetings, QR code blurring for messages from outside your organization, and the ability to block specific external users through Microsoft's security portal.

These are real improvements. But they are not here yet, and they do not replace employee awareness.

While you are waiting for these updates to arrive, it is worth checking that your current Teams security settings are configured correctly and reminding your team that a file arriving through Teams deserves the same careful look as an email attachment from an unknown sender.

Full details in this week's blog — link in the comments. Share this with anyone who manages Microsoft Teams for their business.

09/15/2026

Earlier this year we warned about attackers impersonating IT staff over Microsoft Teams. That attack is back, and it has gotten more sophisticated.

The new version starts the same way — someone calls or messages an employee pretending to be IT, telling them to update their passkey or lose access to their accounts. But this time the phishing link goes to the employee's personal phone by text message, not through company systems. And what happens after a successful attack is far more serious than before.

Once attackers are in a Microsoft 365 account, they quietly map every connected app, access SharePoint, email, and cloud files, add their own MFA method so they can keep accessing the account independently, and then slowly collect data over multiple days to avoid being detected.

Here is what your team needs to know. IT will never call out of the blue and send a login link to your personal phone. If that happens, stop, do not click anything, and call your IT provider directly through a number you already have.

Full details in this week's blog — link in the comments. Share this with anyone on your team who uses Microsoft 365.

09/08/2026

Quick question for anyone whose business uses Google Workspace — Gmail, Google Drive, Google Calendar.

How many apps and tools has your team connected to those accounts over the past few years? And how many of those connections have ever been reviewed or removed?

For most businesses, the answer to the second question is zero. And that is a real security problem.

Every app connected to Google Workspace has ongoing access to your business data — email, files, contacts — until someone specifically removes it. It does not expire when the employee stops using it. It does not expire when the employee leaves the company. It just stays there, with full access, until someone looks.

Real-world business breaches have been traced back to exactly this kind of forgotten, never-revoked app access. Attackers do not need a password when they can go through an authorized app connection that nobody remembers approving.

The good news is the fix is simple. Log into your Google Workspace Admin Console, go to Security, then API Controls, and look at what is connected. Remove anything you do not recognize or no longer use. And check that your offboarding process includes revoking app access when someone leaves.

Full details in this week's blog — link in the comments. Share this with anyone who manages a Google Workspace account.

09/01/2026

Did your Outlook stop working yesterday? You were definitely not alone.

A major Microsoft email outage hit on Monday morning, August 31st, and affected businesses across the globe for most of the day. Email delivery failures, login errors, and disruptions to OneDrive and SharePoint all came along with it. Nearly 6,000 users reported problems, and as of this morning Microsoft is still working through the recovery.

Outages like this are a good reminder that even the tools we rely on most can go down without warning — and there is nothing you can do locally to fix a platform-level problem.

What you can do is have a plan ready before it happens:

Know what alternative communication channel your team will use when email is unavailable. Make sure customers can still reach you through a phone number or contact form if Outlook is down. Know where to check Microsoft's official service status so you are not wasting time troubleshooting something outside your control.

It does not take much preparation to handle an outage smoothly. It just has to happen before the outage, not during it.

Full details in this week's blog — link in the comments. Share this with a business owner who was impacted yesterday.

08/26/2026

Heads up for anyone running a WordPress website that uses the miniOrange Single Sign On plugin.

Hackers are actively exploiting two security vulnerabilities in that plugin right now that let them log into a WordPress site as an administrator without any username or password. And many of the site owners at risk have no idea because the company behind the plugin never publicly warned paid customers that they needed to update.

If your site uses any version of miniOrange SAML SSO, you need to manually check whether your version is up to date. WordPress may not be showing you a notification about this one.

Here is what to do:

Log into your WordPress admin dashboard and check which version of the miniOrange plugin is installed. Then log into your miniOrange vendor account and update to the latest patched release. After updating, check your list of WordPress admin users for anything unfamiliar.

If you are not sure whether your site uses this plugin, get your web developer or IT provider to check today.

Full details including the specific patched version numbers for each edition are in this week's blog — link in the comments. Share this with anyone who manages a WordPress site.

08/18/2026

Urgent alert for anyone using a Mac — especially in a business environment.

A critical security vulnerability in macOS is being actively exploited right now that allows attackers to take full control of a Mac with Screen Sharing enabled — without needing a password.

In confirmed attacks, hackers have been installing cryptocurrency mining software that runs silently in the background, draining the Mac's processing power and electricity while the attacker profits.

Apple has already released a fix. Here is what to do right now:

Click the Apple menu, then System Settings, then General, then Software Update, and install any available update immediately.

If you cannot update right now, go to General, then Sharing, and turn Screen Sharing off until you can.

If you have a Mac with Screen Sharing turned on that you do not actively use — turn it off regardless.

This one is actively being exploited today. Do not wait.

Full details in this week's blog — link in the comments. Share this with anyone who uses a Mac for work.

08/12/2026

Here is something worth thinking about this week.

A strong password and a two-factor code confirm that someone knows the right information. They do not confirm who is actually at the keyboard or what device they are using.

AI is now making it faster and cheaper than ever to steal that information. Phishing attacks are more personalized. Credential theft is more automated. Two-factor codes sent by text message can be intercepted. And stolen passwords from old data breaches get reused constantly.

The security concept gaining traction in response is called device trust. The idea is simple: even if an attacker has the right username, password, and two-factor code, if the login is coming from a device the organization has never seen before, access should not be automatically granted.

For businesses with employees working remotely or using personal devices for work, this is more relevant than ever.

Here is where to start:

Review which devices are accessing your business systems. Move away from text message two-factor codes toward an authenticator app. And if your business has never run a Dark Web Scan, now is a good time to find out whether your employee credentials are already out there.

Full details in this week's blog — link in the comments. Share this with a business owner who relies on passwords and two-factor authentication and thinks that covers it.

Address

Santa Clara, CA
95054

Opening Hours

Monday	8am - 5pm
Tuesday	8am - 5pm
Wednesday	8am - 5pm
Thursday	8am - 5pm
Friday	8am - 5pm

Telephone

+18007418530

Website

http://www.INFORTECH.com/

Alerts

Be the first to know and let us send you an email when Infortech - Managed I. T. and Cyber Security Services Company posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.