The VITI Security Blog
Practical writing on managed IT + cybersecurity.
By the engineers doing the work - not a marketing team summarizing it. We write when we have something to say, not when the calendar says we should.
Don't Get Phished By 'Passkey Phishing': Hardening Microsoft Cloud Accounts
Attackers are now using passkey-themed social engineering to breach Microsoft cloud accounts. This guide details how to implement robust technical controls and strengthen your human defenses against these evolving threats.
When AI Tools Become Your Biggest SOC Alert Generator
AI tool adoption across the enterprise is creating a new class of security alerts. This isn't about attacks *on* AI, but the ordinary operational footprint that generates noise, new risks, and demands a fresh approach to your security operations.
AI's Dark Side: What Rogue AI Weapon Attempts Mean for Your SMB Security
Recent reports of AI being used in attempts to develop advanced weapons highlight a critical shift: sophisticated attack capabilities are now accessible to more threat actors. For SMBs, this means bolstering fundamental cybersecurity defenses is more urgent than ever.
Beyond the GitLab Patch: Why Path Traversal Still Demands Your Attention
GitLab's recent max-severity path traversal vulnerability highlights how fundamental file system access controls remain vital. This flaw allows attackers to access critical system files, making strong input validation and least privilege essential for every environment.
Android Malware Evolves: Defending Against Blended Mobile Threats
New Android malware strains are combining ransomware, spyware, and harassment tactics, signaling a critical evolution in mobile threats. This means our defense strategies need to adapt to multi-faceted attacks beyond simple data theft.
CISA Flags Exploited Flaws: Why Your SMB Needs to Patch Now
CISA recently added critical Cisco, Citrix, and Fortinet flaws to its Known Exploited Vulnerabilities catalog. This isn't just a federal mandate; it's a clear signal that these vulnerabilities are actively being weaponized, and every SMB needs to act immediately.
When Your Firewall's Brain is Vulnerable: Lessons from CVE-2026-20079
A critical authentication bypass in Cisco's Secure Firewall Management Center (FMC) is being actively exploited, highlighting the severe risk of vulnerabilities in core security infrastructure. This incident underscores the urgent need for robust management plane security and proactive patching.
Answering Are We Exposed Faster After a New CVE Drop
Learn how security teams can cut through the noise of tool-hopping and accurately answer whether their infrastructure is exposed to a newly dropped CVE.
Navigating Microsoft's New Age-Awareness APIs: A Security Engineer's Guide
Microsoft's new age-awareness APIs simplify age categorization for applications, which introduces both operational convenience and significant new data privacy and compliance challenges for security teams. Practitioners must proactively integrate these APIs into their data governance frameworks and secure their use from day one.