October 2026 Patch Tuesday: Boston Businesses Face a Record 1,411 Fixes
Microsoft’s October 2026 Patch Tuesday fixed roughly 1,411 vulnerabilities on October 13, the largest single security release the company has ever shipped, and one of those flaws was already being exploited before the fix went out. If your business runs Windows and hasn’t applied this month’s update yet, treat it as urgent rather than something […]
MFA Fatigue Attacks: Why One Approved Prompt Can Open the Door
An MFA fatigue attack, also called push bombing, happens when someone who already has your password floods your phone with login approval requests until you tap “Approve” just to make the notifications stop. It works because a second factor only protects an account if it’s answered correctly, and a tired employee getting hit with ten […]
How to Talk to Your IT Provider About Cyber Insurance and Security Requirements
Cyber insurance applications used to be one page. Name, revenue, industry, do you have antivirus, sign here. They are not one page anymore. The applications crossing my desk now ask whether multi-factor authentication is enforced on remote access and on email and on privileged accounts, as three separate questions. They ask how often backups are […]
Exchange Web Services Retirement: What Boston Businesses Need to Know
Microsoft began switching off Exchange Web Services (EWS) in Exchange Online on October 1, 2026, and any copier, CRM sync tool, backup product, or custom script your business uses to touch email, calendars, or contacts automatically could be affected. The permanent shutdown, with no exceptions, lands April 1, 2027, so this is the window to […]
Third-Party Vendor Risk Is Driving Nearly Half of All Data Breaches
Third-party vendor risk, the exposure created by outside companies and software tools with access to your systems, now plays a role in roughly half of all data breaches. That is not a typo and not a rare worst case. It means the IT contractor, payroll processor, or SaaS app you trust with a login is […]
What a Boston Managed IT Partner Should Actually Be Doing for a 20–50 Person Business
Here is the conversation I have most often with a business owner in Greater Boston. They tell me their IT is “fine.” Then, about four minutes later, they tell me the server room gets hot in the summer, nobody is quite sure who has admin rights to the accounting system, and the last time they […]
Windows Server 2022 End of Mainstream Support: What It Means for Boston Businesses
Windows Server 2022 reaches end of mainstream support on October 13, 2026, according to Microsoft’s own product lifecycle page. That date does not mean the operating system stops working or stops getting security patches. It means Microsoft moves Server 2022 into extended support, where it still gets critical security fixes through October 2031, but new […]
Massachusetts Data Breach Notification Law: What Boston Businesses Must Do When It Happens
Massachusetts Chapter 93H, the state’s data breach notification law, requires any business holding personal information on a Massachusetts resident to notify that resident, the Attorney General, and the Office of Consumer Affairs and Business Regulation (OCABR) as soon as practicable after discovering a breach. There is no employee count or revenue threshold. If you have […]
SonicWall SMA1000 Vulnerability: What Boston Businesses Need to Know
SonicWall confirmed on September 1, 2026 that two vulnerabilities in its SMA1000 series remote access appliances are being actively exploited, and one of them needs no username or password at all. If your business uses an SMA1000 to give employees VPN access into the office network, check your firmware version today. The CISA Known Exploited […]
Microsoft 365 Copilot’s Usage-Based Billing Default: What Boston Businesses Should Know
Starting November 2, 2026, every new Microsoft 365 Copilot Business license purchased through a Cloud Solution Provider comes with Copilot usage-based billing turned on automatically, according to Microsoft’s own Partner Center announcement. That means once your team uses Copilot Cowork, the Work IQ API, or apps built on Cowork beyond what’s included in your plan, […]