Burgi Technologies

24/09/2026

F5 disclosed an actively exploited zero-day in BIG-IP APM (CVE-2026-94127, CVSS 9.8). It only affects APM set up as an OAuth Authorization Server, but if that's you (or a vendor runs it for you), patch now. We break down who's affected, the fixed versions, and what to check in your logs.

https://www.burgitech.com/blog/f5-big-ip-apm-zero-day-cve-2026-94127-business-guide

17/09/2026

New on our blog: Microsoft's September 2026 Patch Tuesday set a record with over 1,000 CVEs fixed, including two Windows zero-days that CISA confirms are already under active attack. Here's what your business needs to check and patch this week.

Microsoft's record Patch Tuesday includes 2 actively exploited Windows zero-days. Here's what Orange County businesses need to patch now.

27/08/2026

CISA just added an actively exploited Citrix NetScaler vulnerability (CVE-2026-8452) to its Known Exploited Vulnerabilities catalog - with a patch deadline of this Saturday, August 29. 🔒

If your organization uses NetScaler ADC or NetScaler Gateway for remote access, now is the time to check your firmware version and configuration.

Our latest post walks through exactly who is affected, how to verify your exposure in a few CLI commands, what to look for if your device may already be compromised, and the full patching process. 🛡️

Read the full guide here: https://www.burgitech.com/blog/citrix-netscaler-cve-2026-8452-rce-patch-guide

Questions about your network security posture? We're happy to help. 💻

25/08/2026

Something new happened in cybersecurity last month that's worth knowing about.

Researchers at Sysdig documented the first fully autonomous AI ransomware attack - an AI agent that broke into a server, harvested credentials, moved to a production database, and encrypted the data with no human involved. They named it JADEPUFFER.

The techniques it used weren't cutting-edge. It exploited a known vulnerability, tried default credentials (which still worked), and swept environment variables for API keys. What's different is that all of this happened automatically, faster than any human-paced response could catch.

For small businesses, this is a useful reminder that the basics matter more than ever:
- Patch internet-facing software regularly
- Change default credentials on every system
- Keep backups isolated from your production environment
- Make sure someone is monitoring for unusual behavior

We wrote up a detailed breakdown of what happened and what to actually do about it. Worth a read if you manage IT for a business of any size.

https://www.burgitech.com/blog/ai-ransomware-jadepuffer-what-small-businesses-need-to-know

25/08/2026

Four critical vulnerabilities just got added to CISA's Known Exploited Vulnerabilities catalog, and one of them (a VMware vCenter flaw) was actively exploited within 5 days of the patch going public, hitting 361 organizations across 47 countries.

If your patch testing cycle takes 1-3 weeks, you're now behind the attackers before you even finish testing.

We break down what happened, what it means for small and mid-size businesses, and what you should do this week:

CISA flagged 4 critical CVEs actively exploited within days of patching. Here's what Orange County businesses need to do now.

20/08/2026

If your business uses on-premises Microsoft SharePoint Server, there is an active security issue that needs your attention.

CISA updated its alert on August 18, flagging 6 SharePoint vulnerabilities that ransomware operators are actively exploiting. The attack lets someone with low-level network access run code on your server and deploy ransomware without admin credentials.

SharePoint Online (Microsoft 365) is NOT affected. This only applies to on-premises SharePoint 2016, 2019, and Subscription Edition.

Our new post walks through what the 6 CVEs do, how to check your patch status, and when to migrate to SharePoint Online.

Read it: https://www.burgitech.com/blog/sharepoint-ransomware-cves-2026-patch-guide

Need help checking your environment? We are happy to take a look. 🛡️💻

20/08/2026

New research from CISA: 4 critical vulnerabilities are being actively exploited right now, including a macOS Screen Sharing bug letting attackers in without a password. If your business runs Macs, VMware, or SharePoint, this is a 10-minute must-read. We break down what happened and exactly what to check this week.

CISA confirmed active exploitation of 4 critical flaws in macOS, VMware, SharePoint & Windows. Here's what SMBs need to check this week.

18/08/2026

Cisco confirmed attackers are actively exploiting CVE-2026-20349 - a flaw that crashes Cisco ASA and FTD firewalls with a single unauthenticated HTTP request.

If your office uses Cisco firewalls for remote VPN access, check your firmware version this week. Cisco released hot fixes for ASA 9.16-9.24 and FTD 7.0-10.0, but there are version-specific details that can trip you up during patching.

We wrote a practical guide covering which builds are affected, which hot fix to apply, and a key ASDM compatibility note for ASA 9.16 or 9.18.

Full guide: https://www.burgitech.com/blog/cisco-firewall-cve-2026-20349-vpn-flaw-small-business-guide

18/08/2026

The FTC is actively enforcing the Safeguards Rule against car dealerships in 2026, with fines up to $100,000 per violation. Our latest post breaks down the 9 required IT controls, the most common compliance gaps, and how a recent 21% jump in fake ID fraud connects to your data security obligations. Read it here: https://www.burgitech.com/blog/ftc-safeguards-rule-enforcement-2026-car-dealerships

13/08/2026

Microsoft's August 2026 Patch Tuesday: 400+ vulnerabilities, 3 zero-days, one actively exploited by North Korean hackers before the patch was ready.

Here's what Orange County businesses need to do RIGHT NOW:
- Apply the August 11 Windows updates
- Patch Exchange Server (critical RCE fixes this month)
- Test your backups this week
- Train staff on fake job offer phishing (Lazarus's delivery method)

Full guide for SMBs on our blog: https://www.burgitech.com/blog/microsoft-august-2026-patch-tuesday-what-businesses-need-to-know

Need help with patch management? (949) 381-1010