The VITI Security Blog
Practical writing on managed IT + cybersecurity.
By the engineers doing the work - not a marketing team summarizing it. We write when we have something to say, not when the calendar says we should.
The True Cost of Data Neglect: Lessons from a €500K Hospital Fine
France's CNIL fined a hospital €500,000 for a data breach, highlighting critical lessons for organizations on accountability and risk. This penalty underscores the severe financial and reputational consequences of inadequate data protection.
Protecting Your Business from the Surge in RMM Phishing Attacks
Attackers are aggressively targeting Remote Monitoring and Management (RMM) tools via sophisticated phishing. Secure your critical IT infrastructure with these vital controls.
Sangoma Switchvox Exploit: Hardening Your VoIP and Network Edge
The active exploitation of Sangoma Switchvox highlights critical gaps in VoIP security and network edge protection. Learn concrete steps to protect your infrastructure.
Securing AI in Your Business: Practical Steps for SMBs
SMBs integrating AI must prioritize robust data governance, access controls, and continuous monitoring to mitigate AI-specific risks. This isn't just for enterprise giants; every business needs a practical approach to AI security from day one.
Legitimate Tools, Malicious Intent: Protecting Your Endpoint Management
Attackers are increasingly abusing legitimate IT management tools to compromise environments. Learn how to secure your critical infrastructure against these sophisticated attacks.
Threat Actors Prefer Repeatable Attacks: What to Do About It
Threat actors are optimizing for low-friction, repeatable attacks that exploit basic human psychology and common system misconfigurations. Our defense strategy must shift from chasing novel exploits to mastering robust foundational controls and continuous user education.
Exploiting Logic: Why Blockchain Hacks are a Warning for Every SMB's Business Systems
Recent exploits targeting blockchain systems highlight a critical vulnerability in business logic and external data integrity, a threat SMBs must urgently address in their own applications and integrations.
Manchester Airports Hack: What Security Practitioners Must Do Now
The Manchester Airports Group breach highlights critical security gaps. This article explains what security engineers should prioritize to protect their organizations from similar sophisticated cyberattacks.
TerminalFix: Hardening Windows Against User-Triggered Shell Attacks
The TerminalFix variant bypasses traditional endpoint security by tricking users into pasting malicious commands into Windows Terminal or PowerShell. Learn concrete steps to protect your environment.