Subscribe now

Critical Security Update

Claude, Blackbox AI, Windows 10, LastPass, Google, Amazon/AWS

Risk 1: Medium

Issue: Check Point researchers have located a flaw within Claude Code that executed using only metadata and configuration files without event having to execute a line of code.

The flaw allowed: remote execution of commands on users’ machines, permissionless addition and utilization of unauthorized services, and theft of API keys (the same keys that share and access data).

CVEs: 2026-21852, 2025-59536

Resolution: Anthropic states they have corrected the flaws, but this serves as a real reminder that AI platforms are growing and deploying quickly; users need to be more diligent than ever protecting their data.

Risk 2: Medium

Issue: The extremely popular AI coding assistant, Blackbox, which recently exceeded 5m downloads, has had a significant flaw located in its code creation process. When invoked, the flaw will insert malicious code into your AI-code, allowing a remote user to remotely access your development machine. With any data located therein.

The code generated using code-masking schemes to hide the vulnerability, making it extremely difficult for a non-developer to recognize. This continues to set the urgent reminder that it is critical for a skilled and qualified human to review the AI output before testing or implementing.

Blackbox has not corrected the issue and has failed to respond to multiple requests from various organizations.

Until this vulnerability can be corrected, we are recommending an immediate halt usage of the application.

Resolution: Blackbox has not corrected the issue and has failed to respond to multiple requests from various organizations.

Until this vulnerability can be corrected, we are recommending an immediate halt usage of the application.

Risk 3: Medium

Issue: A vulnerability was located in Windows 10 that inhibited some users/machines from accessing the Windows recovery system. This may place their machine at risk if a recovery point is ever necessary. This vulnerability only applies to Windows 10, which is now only supported through extended support.

Resolution: Microsoft has released an update to correct this. Microsoft has not stated if all versions of Windows 10 will be updated or just those supported by extended support.

Risk 4: Low

Issue: A new phishing and credential-stealing campaign targeting LastPass users has been initiated, again. Users should be on guard for any e-mails, texts, or links referencing LastPass. The new attack requests and provides access to the entire user’s vault.

Resolution: Unless this is your first time reason one of our alerts, you are aware that we no longer consider LastPass a viable solution. While LastPass is not responsible for these phishing attacks, the more users can distance themselves, the better.

Risk 5: Low

Issue: Google and Amazon (AWS) have acknowledged data centers were damaged in the Middle East during the recent attacks. Both organizations are stating they have fully recovered and redirected traffic.

Resolution: During times of unrest, it is always safest to ensure you have backup data locations and alternative processes in place should a more extensive attack (or breach) result in the future.

Announced Data Breaches

• Cognizant

• University of Hawaii Cancer Center

Privacy Wins & Updates

• Bitwarden, a popular password manager, has added passkey support for Windows 11 login.

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

All Apple Devices, Microsoft, Microsoft Office 365, Grandstream, Google Chrome

Risk 1: High

Issue: Microsoft announced under CW1226324 that a “bug” has been detected in Copilot, their AI platform integrated deeply into Microsoft 365, that has been reading and summarizing e-mails flagged as sensitive with a Data Loss Prevention (DLP) in place. A DLP is designed to prevent access to this data, but Copilot has been bypassing these policies and reading/summarizing; the sensitive e-mails were then made available in Copilot Chat.

Microsoft is working on deploying an update/fix, but has not released a full timeline.

This on the heels of questions surrounding AI access to data through Claude Cowork continue to increase concerns over what these AI platforms have access to and, ultimately, what are they able to do with it?

Resolution: Sadly, there is no current fix. Even disabling Copilot Chat does not stop Copilot from processing this data.

Risk 2: High

Issue: Grandstream VOIP, a growing provider of internet-based telephony services, has acknowledged a flaw allowing remote attackers to listen-in on calls and conversations. The calls can be flagged as one-way increasing the risk that the listener would never be detected.

Resolution: A fix was deployed last week so Grandstream users should apply the most recent update.

Risk 3: Medium

Issue: Google has announced several severe Chrome vulnerabilities that allow both data capture/collection as well as remote system access. At least 4 mild to severe vulnerabilities have been located.

Resolution: Given the gravity of the potential for breach, anybody with Chrome installed (not just users) should apply the recently-released update.

Yes, this means you with the 500 tabs open, apply the update and restart your browser.

Risk 4: Critical

Issue: Microsoft has pushed out a collection of major and minor updates this week including a fix that had stopped Chrome from launching, a correction to Windows Notepad that allowed remote code to be executed on your machine, as well as a final fix to correct the issue with Windows not fully shutting down. Also in the last several days, Microsoft has pushed out an update of over 100 security related items, including 6 zero-day vulnerabilities (which means the vulnerability is already being utilized).

Resolution: Windows users should immediately apply the most recent update. Last week’s updates require a system restart, but this week’s updates may not.

Risk 5: High

Issue: Apple acknowledged a critical vulnerability in their entire suit of platforms (iOS, iPadOS, watchOS, tvOS, visionOS, and macOC) known as a memory corruption issue that would allow for attackers to gain access to a device’s memory and, in turn, execute code remotely impacting the device as well as potentially access the data on that device.

Resolution: Apple corrected the issue and has released an update. Anybody with an Apple device should apply the most recent update to correct the error.

Announced Data Breaches

• Figure

• Washington Hotel

• Odido

• Eurail

• PayPal

• Volvo

• Conpet

• University of Mississippi Medical Center

Privacy Wins & Updates

• Bitwarden, major password management tool, released an update to allow users to securely share a password with a second user, even if outside of their own organization.

• Louis Vuitton/Dior/Tiffany fined $25m over recent data breach.

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

n8n, MacOS Glassworm, Microsoft Windows

Risk 1: Medium

Issue: Automation platform n8n has announced a vulnerability recently located and disclosed that it is already actively being exploited. This vulnerability allows for an individual to take over the entire automation platform including access to all linked data sources and third-party tools.

Resolution: Anybody using n8n should ensure they have the most recent version (2.5.2) and reset both their encryption keys and credentials.

Given the depth of this update, users are reminded to ensure they perform a backup prior to update.

Risk 2: High

Issue: A new malware of the Glassworm variant is increasing in release, specifically within the macOS platform. This malware gains access to and shares your credentials, passwords, and digital wallet (crypto) data.

Resolution: All major anti-virus / security suite applications have been updated; all individuals should ensure they are operating on the latest package release from their software provider.

Moreso, users should reinforce their general protection protocols in regards to phishing, social engineering, and other security measures targeting users directly.

Risk 3: High

Issue: Microsoft has recently released a large security and feature update including over 120 items. About a dozen of these are critical security updates with many also being minor updates or feature-related updates. Within these updates, Microsoft attempts to correct the known, outstanding failure to reboot incident occurring lately.

Resolution: Windows users should apply the most recent update if you have not already done so.

(Note: When I performed the updates myself, it did require 2 system reboots.)

Announced Data Breaches

• Flickr

• La Sapienza University

• Conpet (Oil Pipeline)

• Substack

• Betterment

• Coinbase

• Step Finance

• Panera Bread

• NationStates

• Marquis

Privacy Wins & Updates

• n/a

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

Okta Single Sign-On (SSO) Authentication, Microsoft Teams, Lastpass, Tesla

Risk 1: High

Issue: Okta, one of the largest providers of Single Sign-On (SSO) has announced an increased risk using certain forms of SSO protocols. SSO allows you to sign-on to a website or service and then use those same credentials to “automatically” sign-on to another site or service. An example of SSO is the “Sign on with Google” button.

The protocols at heightened risk include e-mail and sms/text authentication as well as authenticator apps with push and one-time codes. New phishing attempts are targeting all of these methods at a rapid pace.

With all SSO requests, even those linked to multi-factor authentication protocols, there is now an increased risk that users may not recognize given the unique way the attacks use local computer code (scripts) to execute the attacks.

Resolution: SSO is no longer consider a ‘safe’ method for authentication. Users should begin using phishing-protected methods such as hardware keys (such as YubiKey) or passkeys.

But keep in mind that both hardware keys and passkeys have vulnerabilities on their own. So, ideally, the more methods you can add, especially for critical systems, the better.

Risk 2: Warning

Issue: Microsoft is adding a fraud detection feature to Teams that will notify users receiving incoming calls/messages if there is a heightened risk of fraud or impersonations.

Resolution: This is just a warning in case you notice something being flagged different within Microsoft Teams.

Risk 3: Medium

Issue: Phishing attacks using Lastpass branding and messaging are increasing in circulation presenting urgent alerts requesting users follow a link to reset their password vault password (yes you read that correctly). Upon clicking the link, the code collects their credentials allowing a malicious actor to gain access to their entire password vault.

Important note: This is not a vulnerability within Lastpass; it is a phishing attack using their branding.

Resolution: Non-Lastpass users should just ignore any message received for a service they do not use.

Lastpass users should not rely upon e-mail communications to warrant a vault password change or review. Keep in mind, Financial Guardians has already issued a warning that users should migrate away from Lastpass.

Risk 4: Low

Issue: This one is more for acknowledgement than anything, but during a recent competition, there were 37 new vulnerabilities discovered in the Tesla automotive ecosystem (within their mobile app, their car operating system, and their hosted system).

Resolution: At this time, Tesla is continuing to work on evolving their systems; however, Tesla users should remain ever aware of the ongoing security issues related to their vehicle.

Announced Data Breaches

• Fortinet

• Zendesk

• PcCompenentes

Privacy Wins & Updates

• n/a

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

Microsoft Windows 11, Outlook, Cisco, Verizon, Chrome for Android, Telegram

Risk 1: Low

Issue: The recent Windows 11 update is causing the Outlook desktop application to freeze freeze when connecting using the POP email protocol. Most modern e-mail platforms (Google, Microsoft, etc) are not requiring POP to be used. If you use the Outlook mail configuration, you are more than likely NOT using POP.

Secondly, the recent update is also causing some (older) computers to not shut down.

Resolution: Microsoft is working on a deployment/correction.

Now would be a good time to consider migrating to a modern email platform. If you are leveraging a POP protocol, there are still minor significant issues from a performance and security perspective. You can confirm your protocol under Settings in Outlook.

The Outlook web application is not impacted.

For the shut down issue, Microsoft has released an update so please apply the most recent update.

Risk 2: High

Issue: Cisco has updated multiple recent vulnerabilities with both impact stability and security-related hits.

Resolution: Anybody using a Cisco firewall or router should apply the most recent update immediately.

Risk 3: Low

Issue: Verizon had an outage this week and they are blaming the cause related to an internal software issue. No additional details have been released.

Tracking data does show that AT&T, T-Mobile, and Voda also had regional outages. This typically is the result of routing software.

Resolution: No resolution necessary.

Risk 4: Warning

Issue: An upcoming release of Google Chrome for Androids will convert Chrome into an AI-powered (agentic) browser.

Users should determine if this is in-line with their current permitted and expected uses of AI in their environment.

Resolution: Google has not announced if there will be an option to disable this migration or not. We will provide more information as this migration occurs.

Risk 5: High

Issue: Several older Windows security certificates (allowing you to use Cloud-based credentials when logging on are set to expire. If you do not perform the most recent Windows update, you may not be able to log in using those credentials.

Resolution: Windows users should perform an update as soon as possible to ensure these certificates are ready.

Risk 6: Warning

Issue: Telegram, a popular secure messaging app, has revealed that an existing exposure allows the sender’s IP address to be revealed. This could reveal the exact location of the sender, even device-related details.

Telegram has issued a warning, although there has not been a clear statement as to whether they intend to hide this information in the future or not.

Resolution: Telegram users should just be aware that their personal information may not be as hidden as previously believed.

Announced Data Breaches

• Grubhub

• Kyowon

• Cloud Marketplace

• Department of Education, Victoria AU

• Monroe University

• Central Maine Healthcare

• AZ Monica (Hospital)

• Betterment

• Target (development servers)

• University of Hawaii Cancer Center

Privacy Wins & Updates

• The FTC has banned GM form setting driver location data for 5 years.

• France has fined Free Mobile €42 million for improper protection of user data

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

Microsoft Exchange, Cisco, ChatGPT Ads, D-Link

Risk 1: High

Issue: Microsoft Exchange Online users (typically larger corporate users, but not always) are currently experiencing problems accessing their mailbox. This is a known issue and Microsoft is working to correct it.

Resolution: There is no need to modify or adjust any settings. This is not a known security incident and adjusting settings could hinder your connectivity. If you experience a brief outage, just wait for the service to return.

Risk 2: Medium

Issue: There is a known vulnerability in Cisco Identity Management (ISE) that allows non-authenticated users to gain access to systems. Cisco issued a warning and does not believe this vulnerability has been exploited yet. That is good news, but their announcement will make the vulnerability public and open to greater exploit.

Resolution: Any one using the Cisco Identity Service Engine should ensure they have applied the most recent update (this week).

Risk 3: Low

Issue: OpenAI has begun testing the use of placing ads in ChatGPT. The initial push is just to employees, but they have an aggressive plan to push out to users very quickly. It is clear that the free plan will include adds, but no full explanation has been provided on who will see ads one deployed. There is a high probability that the Go paid plan will, but their other higher paid plans more than likely will not.

Resolution: This serves as notices in case you start seeing ads in the near future.

More so, this is a great time to start finalizing your AI platform selection and purchasing a solid, paid plan.

Risk 4: High

Issue: D-Link, a manufacturer of low-cost firewalls and routers, has once again issued another warning about vulnerabilities connected to their DSL routers. DSL is an internet protocol similar to fiber or cable. These devices can be purchased, but may also have been provided by your internet service provider.

Resolution: We have already issued a stop usage on D-Link devices. Our formal recommendation is to just move away from these devices entirely.

Announced Data Breaches

• Sedgwick

• Brightspeed (under investigation)

• NordVPN (claimed as not a breach)

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

Fortinet, Glassworm (Crypto Wallets), ClickFix, Gmail

Risk 1: High

Issue: Fortinet, a manufacturer of corporate firewalls, has announced a large vulnerability currently being exploited on their systems that allows for users to bypass multi-factor authentication and gain access to your environment. This vulnerability is several years old, but is still being actively leverage on over 10,000 devices.

Resolution: If you have a Fortinet devices that is current on updates, you should be fine from this vulnerability. However, please confirm that you are currently using the latest version of the Fortinet operating systems and firmware to ensure you are protected.

Risk 2: Medium

Issue: An ongoing, but modified, version of Glassworm (a malware designed to attack cryptocurrency wallets through the use of browser-based extensions) has been increasing in its attack radius. These worms attach themselves to your crypto wallets and syphon your crypto assets. The current line of attacks focus on Apple devices.

Resolution: The most important thing some one can do to avoid this risk is utilize a corporate security suite that scans for malware and viruses.

More so, it is important that wallet holders know and recognize the origins of the browser extensions they download and use. The crypto-market tends to be slightly more aggressive with trying new tools and applications; as such, they need to be just as aggressive on deploying new security measures.

Risk 3: High

Issue: ClickFix attacks have been modified yet again to target unsuspecting users. ClickFix is a social engineering method used to scare or entice people into clicking for help or support and, in return, downloading malicious software. The latest version, ErrTraffic, installs on a webserver and makes the website appear to have a ‘glitch’ or error and displays a pop-up enticing the user to try and correct the problem. Clicking the link downloads malware onto the users’ machines.

Resolution: While a security suite may detect and, hopefully, stop the malware upon download, the best way to stop these types of attacks is through user education and limiting web usage on the machines containing or with access to PII as much as possible.

The usage of ClickFix is growing so ongoing education is important.

Risk 4: Warning

Issue: Google is starting the process of allowing users to change their gmail e-mail accounts. As a result, people you typically contact or from whom you receive communications may adjust their e-mail address. This may create a problem for many spam and filtering software, as well as many inbox rules you may have.

Resolution: This is just a warning to be prepared for this transition as it may cause havoc on some of your systems.

Announced Data Breaches

• Unleash Protocol

• European Space Agency

• Oltenia Energy Complex

• Korean Air

• Rainbox Six Siege (game)

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

BitLocker/Windows 11 Pro, MongoDB, Google Chrome

Risk 1: Low

Issue: MongoDB, a popular NoSQL database system, has recently announced a sever vulnerability that allows for “memory reads” to occur. A memory read allows for a malicious actor to openly see what is currently active in the computer memory. This is a significant risk, especially for those in financial services.

Resolution: If you use an installed or managed version of MongoDB, you should immediately apply the recent update. If you do not have a list of underlying technology used by your vendors, now would be a good time to check if any of your vendors use MongoDB and ensure they have applied the update.

MongoDB is one of the largest and fastest growing “modern web database” platforms on the market today.

Risk 2: Low

Issue: The most recent release-update to Windows 11 Professional (24H2, 25H2) how supports hardware acceleration for BitLocker, Microsoft’s encryption platform for Windows-based devices. This acceleration will only function on very specific hardware devices, but are tracking at a speed of 70% less-processing. That is a massive performance boost for encryption-related hardware that is typically known for being slower in performance. This new process leverages the memory-optimized storage for their cryptographic algorithms as opposed to legacy software-based systems.

Resolution: This is not a vulnerability so no required action.

However, I wanted to list it here since it has a huge performance boost and users should be aware that buying enterprise hardware and software has extreme advantages over retail hardware.

Looking for new equipment? Please check with Financial Guardians to determine if the hardware you are considering qualifies.

Risk 3: High

Issue: Google Chrome has, again, announced another round of highly sensitive extensions being installed that syphons off user data and credentials. While the extensions (connected with names that begin with Phantom) appear to operate correctly, they are stealing data and sharing it to third-parties.

Resolution: Users should double-check their Chrome extensions and ensure that all extensions are known, form reputable sources, and installed from the Google Chrome Store directly.

Additionally, extension malware is a growing trend in Chrome. Users may want to review alternative browser options, such as Brave, to ensure ongoing security.

Announced Data Breaches

• France

• Baker University (2024 data breach now actively being sold)

• University of Phoenix

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

Microsoft, Cisco, WatchGuard, WhatsApp, Microsoft 365

Risk 1: Low

Issue: A growing concern recently with the usage of WhatsApp is hackers taking advantage of the ease to add additional devices. Once a malicious actor links to. your account and adds it to their (typically virtual) device, they have ongoing 24/7 access to your account.

Resolution: WhatsApp users should ensure they have multifactor authentication enabled and that they are regularly checking the devices connected to their account. Due to the ease of this access, accounts should be checked regularly.

Due to the recent and ongoing concerns connected to WhatsApp, we are downgrading the overall security value linked to WhatsApp. Users should increase ongoing caution when using this app.

Risk 2: High

Issue: Microsoft 365 credentials currently have a raised risk factor through third-party authentication sites using technology known as 0Auth. 0Auth is the technology enabling “Login With Your Microsoft/Facebook/Google/Etc Account”. There has been nearly triple the number of phishing attacks going after Microsoft 365 0Auth accounts.

Resolution: Users should exercise added caution when logging in to accounts using these shared credentials. Similarly, and I sound like a broken record, ensure MFA is enabled on all your shared credential accounts.

Additionally, since the heightened risk is currently connected to phishing attacks, users should go directly to the website they wish to use instead of click a link or redirecting from an e-mail.

Risk 3: Medium

Issue: WatchGuard, a maker of enterprise firewalls, has recently announced a sever vulnerability currently being exploited across their collection of devices. This vulnerability allows full remote access and control over the network behind the firewall. This is a pretty severe vulnerability.

Resolution: WatchGuard has deployed a patch and all WatchGuard users should immediately download and apply the patch/update.

Risk 4: Medium

Issue: A recent vulnerability connected to Cisco VPNs has been located in connection to password spraying attempts. Password spraying is when a large number of passwords are tried against an account, or collection of accounts, trying to find a matching combination. Cisco VPN products are currently under heightened attack.

Resolution: Any Cisco VPN user should ensure they are regularly changing their passwords and using a complicated series of characters. If your version of Cisco VPN permits locking or timing out an account after X failed attempts, you should immediately enable that feature.

Risk 5: Low

Issue: Microsoft has announced that it will begin limiting access to its online services. This first limitation will be users using Exchange Online beginning March 1, 2026. The first push will block access to devices under an iPhone 10. For Android users, Google is currently working with Microsoft to rollback changes to older versions. No details are currently available.

Resolution: For users on Microsoft Online services, they should ensure they are using a modern iPhone to maintain connectivity. Android users will need to verify closer to the cut-off date, but users with devices less than 8 years old can expect to be fine.

Announced Data Breaches

• Denmark

• France

• Coupang

• University of Sydney

• PDVSA

• SoundCloud

• PornHub

• 700Credit

Upcoming Live & Webinar CE (External)

• Week of Jan 5: 3-Hour AI Bootcamp (Webinar - Pending)

Subscribe to Guardian Tier

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

React/Next.js, New Malware, Communication Changes, Android

Risk 1: High

Issue: A huge vulnerability has been located in a toolset known as React / Next.js. This may or may not sound familiar, but it is one of the largest tools used in most modern websites and website applications. This vulnerability allows for remote code execution and can, ultimately, lead to malware execution as well as breach of data connected to those websites.

This is believed to be one of the largest web-based vulnerabilities recently.

This is the issue that caused the Cloudflare outage today, December 5, 2025.

Resolution: People should reach out to their website provider to determine if React/Next.js is in use and what the plan is to rectify.

Similarly, users should reach out to any web-based software provider (including workflow management, tax preparation, and ledger software) to determine if any exposure occurred.

Risk 2: Medium

Issue: An increase in a ransomware product known as Scattered Spider and DragonForce has been detected. SS/DF is shared typically through very sophisticated social engineering (fake accounts/contacts that try to extract information from unsuspecting users). If installed, SS/DF has been known to steal and sell the data they encrypt, not just lock it from the user. This makes it particularly more dangerous.

Resolution: Users should be particularly careful when interacting with people and accounts online, ensuring the authenticity of the account. This is very crucial, especially during the holiday season when there is an overall increased interaction online.

Most enterprise-level security products are currently detecting this malware, but it is important to act quickly if there is a concern over potential infection.

Risk 3: Low

Issue: Over concerns related to terrorist activities, Russia has started blocking Snapchat, FaceTime, and some WhatsApp activity. Users with clients, family, or friends may be unable to use standard communication channels to communicate.

Similarly, Russia has also blocked Roblox activity.

Resolution: No resolution.

Risk 4: Medium

Issue: Google has announced a fix for over 100 known vulnerabilities in their Android operating system, including two that are zero-day exploits (meaning they are currently being utilized and exploited). Most of the vulnerabilities are minor, but a few do provide remote execution of malware.

Resolution: Any one with an Android device should update their device immediately. There are no known operational issues with the current update.

Announced Data Breaches

• Inotiv

• Marquis (Including 74 banks/credit unions)

• Leroy Merlin

• Freedom Mobile

• University of Phoenix

• University of Pennsylvania (again)

Upcoming Live & Webinar CE (External)

• Week of Jan 5: 3-Hour AI Bootcamp (Webinar - Pending)

Subscribe to Guardian Tier

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

ASUS, ClickFix Malware, SonicWall

Risk 1: High

Issue: ASUS, a manufacturer of hardware devices, recently announced a vulnerability in their AiCloud routers. This is one of their more recent product lines. The vulnerability allows remote individuals to bypass the device’s security and gain access to both the device configuration as well as access the internal network. This is a severe issue and has the potential for significant harm.

Resolution: ASUS has issued an update. If you use an AiCloud router, please update your device firmware to the most recent version.

Risk 2: Medium

Issue: A new malware, ClickFix, is growing in popularity. This malware generates a realistic pop-up informing the user that there is a Windows Update available and they should click to update. The full depth of the exposure is not fully known, but it does provide system-level access.

Resolution: Users should not initiate a Windows Update from a pop-up. It is recommended that users go to Settings to confirm the update and run it from the source.

Risk 3: High

Issue: SonicWall, a manufacturer of network devices, including firewalls, recently announced a vulnerability in their firewall device line for devices over model 5000. These models are currently highly susceptible to Denial-of-Service (DoS) attacks. A DoS attack occurs when multiple systems target a system to the point that it runs out of resources and either operates slowly or crashes. SonicWall has stated that these devices crash under pressure, and the recovery is challenging. You can access the list of impacted devices here.

Resolution: SonicWall has now officially released an update so anybody with an impacted model should apply the update immediately.

Announced Data Breaches

• OpenAI (API)

• London Councils

• CrowdStrike

• Almaviva

• Crisis24

• Dartmouth

• SitusAMC

• Iberia

• Cox Enterprises

• Harvard

Upcoming Live & Webinar CE (External)

• Week of Jan 5: 3-Hour AI Bootcamp (Webinar - Pending)

Subscribe to Guardian Tier

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

Gmail, Microsoft Teams, Microsoft Windows, Cisco, WatchGuard

Risk 1: Low

Issue: Gmail has changed its policy and algorithm related to bulk, unsolicited e-mail. They are now strictly enforcing new rules that will drastically limit the bulk e-mail they receive and deliver to recipients. It is has been reported that the current daily limit is 5,000 messages.

Resolution: While this may look good, initially. Please be on the lookout. During this transition, e-mails you had been receiving may now be delivered to your spam/junk folder. Moreso, some e-mails may no longer be delivered at all. You may have to double-check for expected e-mails. Similarly, you may need to warn those you send e-mails to or check with them if they do not immediately respond to a message to ensure they received it. Google has provided this support document to help users improve their deliverability rates.

Warning: the Google support doc is technical because the settings are deep within their administration screens. They involve updates to your DNS, SPF, DKIM, and DMARC at both Google and your domain registrar. If you are currently on a free Gmail account, you will more than likely not be able to adjustthese settings.

Risk 2: Medium

Issue: Microsoft has released a new version of Teams, its messaging tool, with a feature that lets users prevent screen capture during meetings or recordings. The feature is only available for Premium users.

Resolution: This is a really nice feature for users who share their screen during calls. If this feature is valuable, you may want to consider upgrading to Premium. After the upgrade, you will be prompted the first time you initiate a meeting to configure this setting.

Risk 3: High

Issue: Both Cisco AND WatchGuard firewalls have been found susceptible to a new vulnerability. Yes, the same vulnerability; yeah, you can think that’s odd, too. This allows for a network breach with administrative access. Neither company has fully disclosed just how many of their devices are impacted.

Resolution: Given the limited details provided, any user of Cisco or WatchGuard devices should check their device to determine if an update is available.

Risk 4: Medium

Issue: Microsoft has released a large weekly update, including 118 security-related updates. Most of the updates are minimal; however, there is one that removes inaccurate End-of-Support alerts for Windows 10 users who purchased the Windows 10 Extended Support.

Resolution: All Windows users should apply the latest update when convenient.

Announced Data Breaches

• Collins Aerospace

• Francis Frith

• DoorDash

• Washington Post

• Synnovis

• GlobalLogic

Upcoming Live & Webinar CE (External)

• Nov 20: Fortify Your Office Security with Improvements to Your WISP (Webinar)

• Week of Jan 5: 3-Hour AI Bootcamp (Webinar - Pending)

Subscribe to Guardian Tier

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

Claude Desktop, Gootloader, Microsoft Windows, Microsoft BitLocker

Risk 1: Medium

Issue: Researchers have discovered that Claude Desktop from Anthropic has significantly minimized security walls from local data, web-based data, and their applications. Using poorly worded prompts, Claude is able to locate data locally on your machine and share it with others online. More so, there is little to no sanitization on prompt presentation, meaning that prompts are not vetting prior to execution. In a nutshell, leveraging Claude Desktop is presenting large concerns over privacy and access to data locally and on the cloud.

Resolution: Users should hold off using Claude Desktop until a more stable, secure version is available.

Risk 2: Medium

Issue: An existing piece of malware known as Gootloader is regaining popularity. We had briefly talked about this one previously a while ago but wanted to highlight it again as its usage has drastically increased. Gootloader conducts what is known as SEO poisoning. SEO stands for Search Engine Optimization and is used to move certain sites to the top of search results or provide improved placement. So what is happening? Malicious websites are being created and then improper SEO is being implemented to guide traffic. This is similar to phishing attacks, but through SEO instead of e-mail or websites. People search, receive incorrect SEO/search results, and then invertedly get directly to a malicious site with malware.

Resolution: This is a really scary one because it requires proactive response from users. To stay protected:

• Double-check all search results to determine accuracy

• Review search results but go directly to intended website instead of clicking on search result links

• Minimize use of QR code scanning or AI tools for searching as they may not be able to detect

• Implement website scanner tools that will review links prior to clicking to ensure accuracy

Risk 3: Low

Issue: There is a bug on the recent Microsoft Windows updates that will reboot a Windows machine into BitLocker Recovery Mode. BitLocker is the drive encryption software from Microsoft. The reboot may be randomly triggered during an update.

Resolution: If a user gets hit with a reboot, the recovery screen will appear. The user should enter their recovery passcode to continue and enter into Windows normally. Users should NOT continue moving forward with recovery.

Risk 4: High (Advance Warning)

Issue: Microsoft is going to be sunsetting Microsoft Defender Application Guard (MDAG) within Office beginning in 2026. MDAG is the tool that opens your unknown or unrecognized office files in a protected manner on your computer. Since this is linked to an individual set of applications, Microsoft is going to migrate to Windows Defender Application Control (WDAC) that it will be using moving forward to try and secure these unknown files.

Resolution: Please be aware about this change so when some wording changes or the way your unknown files open changes, you are aware.

Secondly, with this shift, there is an increased potential that files may be stored locally prior to being secured through WDAC. It is also recommended that users ensure that they have a current and valid enterprise-grade security solution.

Announced Data Breaches

• University of Pennsylvania

• Hyundai AutoEver

• Nevada (the state of….)

• Miljodata

• Gemini Group

• Il Manifesto

• Nikkei

Upcoming Live & Webinar CE (External)

• Nov 13: Cybersecurity Update – Preparing for the 2026 Filing Season (Webinar)

• Nov 20: Fortify Your Office Security with Improvements to Your WISP (Webinar)

• Week of Jan 5: 3-Hour AI Bootcamp (Webinar - Pending)

Subscribe to Guardian Tier

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

Microsoft Windows, Microsoft Azure, Linux, TP-Link, NFC Devices

Risk 1: Low

Issue: A growing trend in Europe is the usage of NFC (near-field communication) devices to steal credit card data. NFC devices are typically small, sometimes hidden, devices that are able to communication wireless. This technology allows tap-to-pay and other mobile-phone or credit card features. There has been a 40% uptick in NFC-related credit card theft this month in Europe. While Europe is not the US, trends tend to float between regions.

Resolution: Please be extra cautious of using your tap-to-’anything’ features. If the device is regularly not monitored, the risk increases. This is common among gas stations. While it is convenient, there are risk with the wireless communication.

To be extra cautious, users can use apps named “Local NFC” or “NFC Tools & RFID Scanner” (there are several options based upon your phone) to detect the presence of malicious devices.

Risk 2: Medium

Issue: A large vulnerability in the standard Linux kernel was announced overnight. Linux is an operating systems (similar to Windows or MacOS) that allows your computer to run applications; Linux is used heavily in servers globally. The kernel is the part of the operating system that handles its core logic and processing, i.e. the ‘brain.’ This vulnerability allows remote attackers to gain local administrative privileges on that machine.

Resolution: A patch has been made available so system administrator should apply this patch. However, given the infrastructure-related focus of this type of vulnerability, taking the system offline may not be an option. If that is the case, one can add “nf_tables” to their internal blocklist.

Risk 3: Low

Issue: The US Commerce Department has reportedly submitted a proposal (again) to ban the sale of TP-Link routers and products within the US cited security concerns. This is now the fourth attempt the US government has made in this direction; each time, TP-Link has made minor adjustments to allow at leas short-term continued use. TP-Link currently makes up about 10-15% of the US market due to their low cost.

Similarly, last year, a similar request was made for Kaspersky’s security quite.

Resolution: Financial Guardians has already publicly stated to not purchase or use TP-Link hardware (or Kaspersky software).

Risk 4: Low

Issue: Microsoft experienced a DNS-related issue similar to the AWS outage last week. As reported last week, the DNS is essentially the roadmap that most online services utilize to know where different data and servers are located. When this goes out, their products/services typically suffer a significant outage. Microsoft and those hosted on their platform experienced an outage ranging form 1-3 hours.

Resolution: As discussed in our Substack last week, there is little that can be done to fully mitigate these outages, but there are several tips there to help prepare and offset the potential impact.

Risk 5: High

Issue: Microsoft has pushed out a mid-sized update patching several issues resulting from their previous update. Yes, you read that correctly. At least four of these patches are related to security-critical systems.

Resolution: The most recent update was pushed out Thursday, October 30, so please complete an update if you have not done so yet.

Announced Data Breaches

• Canada (multiple utility/infrastructure organizations)

• Conduent

• Ribbon

• Merkle

• L3Harris

Upcoming Live & Webinar CE (External)

• Nov 13: Cybersecurity Update – Preparing for the 2026 Filing Season (Webinar)

• Nov 20: Fortify Your Office Security with Improvements to Your WISP (Webinar)

• Week of Jan 5: 3-Hour AI Bootcamp (Webinar - Pending)

Subscribe to Guardian Tier

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

DNS0.EU, AWS, WatchGuard, TP-Link, WordPress, LastPass, OpenAI, Perplexity

Risk 1: Low

Issue: In response to the recent Amazon outage with a route cause related to their DNS service and an amazon-created database, one of the largest privacy-focused DNS services in Europe shut down this week. DNS is the service that manages the ‘behind-the-scenes’ IP addresses that convert them into human-readable domain names. These services are one of the first tiers to protect online privacy and DNS0.EU, the largest privacy-focused one, shut down this week.

Resolution: Internet service and access to or from European-based services may continue to experience brief outages while the changes propagate (share) through the Internet. Firms present in Europe or who have clients in Europe may want to locate another DNS service to continue uninterrupted service.

Risk 2: Medium

Issue: There has been a significant increase in the number of attacks being conducted against dated WordPress plug-ins and themes. The attacks are using broad-sweeping scanners to determine which sites use WordPress and is NOT host-specific. WordPress is very popular framework for designing and managing websites. Once breached, all information stored within your hosting environment may be accessible, including any contacts or form-based data.

Resolution: If you use WordPress, it is crucial to constantly be managing and updating your website plugins. This takes minimum time and can be a great first-step to mitigation. If you used a third-party to design your website and are unsure how to manage your plugins, there are plenty of hosts out there who will manage your plug-ins for you. Of course, for a small fee. My WordPress host charges about $5/mo for this service.

Risk 3: High

Issue: LastPass is under attack (again). This time, however, there is little they can do directly. There is an increase in phishing e-mails stating that LastPass is shutting down and to click on the link to download your passwords. Once the user clicks on the link, they are asked to provide their vault password, giving access to all passwords within.

Resolution: We have not been a fan of LastPass for a while now and this is just an ongoing trend reducing favor as well. If you have received this e-mail and clicked on it, it is urgent that you obtain a new password manager and change all of your passwords immediately.

Risk 4: Medium

Issue: Greater vulnerabilities within the new round of “AI-owned browsers” such as OpenAI’s Atlas and Perplexity’s Comet are continuing to open us users to greater vulnerability through their enhanced AI-sidebars.

Resolution: Your enterprise machine is now the place to be testing out new products, especially those with direct access to your data. For the moment, it is best to stay with a standard, trusted browser to reduce your risk.

Risk 5: High

Issue: TP-Link has, yet again, acknowledged a vulnerability within its Omada collection of devices, allowing administrative access to your entire network.

Resolution: Users should apply the latest update. But more importantly, given the ongoing issues and lack of security measure within TP-Link’s products, we are issue both a “Stop Purchase” and a “Replace” on their entire product line. TP-Link does not prioritize security.

Risk 6: High

Issue: WatchGuard, a provider of enterprise-level firewall devices, has announced a significant vulnerability in a collection of their firewall devices. This vulnerability would allow even a non-administrative user to access and attack your network without permission.

Resolution: WatchGuard has released a firmware update. Any WatchGuard user should apply the firmware update immediately to avoid disruption.

Note: AWS Follow-Up

If you have not had a chance to review our AWS-outage-follow-up, you can access it here: AWS Post-Op: The Dark Side of the Cloud.

Announced Data Breaches

• Toys ‘R’ Us

• Gerar

• Dublin Airport

• Dukaan

• Summit Golf Brands

• Discord

Upcoming Live & Webinar CE

• Nov 13: Cybersecurity Update – Preparing for the 2026 Filing Season (Webinar)

• Nov 20: Fortify Your Office Security with Improvements to Your WISP (Webinar)

• Week of Jan 5: 3-Hour AI Bootcamp (Webinar - Pending)

Subscribe to Guardian Tier

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

This causes a significant issue from a security perspective. As systems are partially operable or working in an error-state, it drastically increases the risks associated with your data, access to your data, and potentially increased vulnerabilities.

The best thing to do right now? Go. Touch. Grass. Seriously. Stop trying to work on systems that aren’t fully restored or operational. Shut things off and go enjoy a break. The work will be here after everything is fully recovered.

If you have any issues or questions during this outage, please reach out. We will send a breakdown once everything is restored.

.

Subscribe now

Financial Guardians is the premiere provider of cybersecurity and technology assistance, education, and support to the tax preparation, accounting, and financial services industry. With a network of several thousand firms and professionals, we are the largest source of unbiased security information in the industry. More information can be located at www.cybersecurity.tax.

Financial Guardians has partnered with NAEA to provide access to our monthly Guardian Tier membership at a 30% discount.

Active NAEA members can access the online discount here.

Subscribe to NAEA Guardian Tier

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

Android Devices, Oracle, SonicWall

Risk 1: Low

Issue: A new spyware application on Android-based devices allows their code to mimic TikTok, YouTube, WhatsApp, as well as multiple Google Apps. These replicas appear to be legitimate but ultimately infect the host machine with spyware that collects on-machine data, on-screen data, and passwords; the data is then leveraged to gain deeper access to the machine or is transferred back to a host for collection.

Resolution: Android should be extra cautious when installing new apps, particularly focusing on the publisher and only download apps directly from the source. Using links provided to download an app is extremely risky.

Risk 2: High

Issue: SonicWall, a hardware firewall manufacturer, has reported a breach on their cloud backup environment. If you use a SonicWall device and rely upon their cloud backup solution to backup your configuration and data, you may have been put at risk for your credentials being shared.

Resolution: Any SonicWall cloud backup users should immediately change their passwords, enable multi-factor authentication, and (if possible) change their IP address to ensure their the released information is not able to be utilized.

Keep in mind, if you recycle passwords, then your password may have just be released and you should start the process to change all systems that use the same password.

Risk 3: Medium

Issue: Oracle has a zero-day (known vulnerability) that is currently being exploited in their E-Business Suite. At the moment, Oracle is fully working on a fix. A fix has been released, but multiple businesses are expressing challenges updating to the fix.

Resolution: E-Business Suite users should apply added caution until a full correction can be applied. Please consult your IT professional for more exact next steps as this is still an on-going concern.

Announced Data Breaches

• SonicWall

• Qilin

• Red Hat

• LinkedIn (third-party API scraper)

Upcoming Live CE

Brad will be presenting to the New Jersey Chapter of NATP on October 21 the topic AI, specifically in Simplifying Tax Topics for Clients and Making Tax Research for Efficient.

Register Here

Subscribe to Guardian Tier

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

Microsoft Windows 11, Adobe Analytics, Microsoft Office 365

Risk 1: Medium

Issue: Microsoft has officially released Windows 11 25H2. This has been a much anticipated update as it includes significant security features. There is an improved vulnerability protection integrated in Windows Defender. More so, there are significant improvements to the Windows-integrated AI, WiFi 7, and (probably my favorite) finally, the ability to remove a lot of unused pre-installed software.

Resolution: While not urgent, this is a significant update and Windows 11 users should update when possible.

Reminder, Windows 10 support ends in a few days - now is the time to update!

Risk 2: High

Issue: Adobe Analytics, a powerful visualization and analysis platform, announced a large bug that allowed customer data to be viewed by other customers in their visuals. This was a significant breach, although it has been resolved.

Resolution: Any Analytics users should reach out to Adobe to determine if they were impacted by this breach. If so, breach protocols should be enacted.

Risk 3: High

Issue: Well hot dang, this is an ugly one. Microsoft 365 users need to take immediate action to determine their WISP compliance. Microsoft announced that they will begin to automatically install the Microsoft 365 Companions on machines that have M365 desktop apps installed. These apps include People, Files, and Calendar and provide significant integration into Microsoft’s new AI integration. More so, this integration will also migrate some of your data from the M365 cloud to your local machine.

Additionally, Microsoft will begin installing Copilot Chat into Office Apps AND the Copilot 365 app on M365 machines as well.

Resolution: Let’s break this one down a bit because there are a lot of moving parts. I posted an entire Substack publicly today to talk through the options. Please do not ignore this. It’s a big one.

Announced Data Breaches

• Red Hat

• Motility (car dealership software)

• WestJet

• Asahi Group Holdings

• Harrods

Upcoming Live CE

Brad will be presenting to the New Jersey Chapter of NATP on October 21 the topic AI, specifically in Simplifying Tax Topics for Clients and Making Tax Research for Efficient.

Register Here

Subscribe to Guardian Tier

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

Cisco, SonicWall, LastPass, Malwarebytes

Risk 1: Medium

Issue: Cisco has announced a zero-day vulnerability (one that is already being exploited) in its IOS software platform. This allows remoted users to access your entire network infrastructure, bypassing any firewalls, port blocking, and more. Once access is established, the bad actors have the ability to even clear your access logs. The logs are a key way that most network managers locate breaches.

Resolution: An update has been released so any Cisco IOS users users should update immediately.

Risk 2: Medium

Issue: We announced a vulnerability several weeks ago regarding SonicWall devices, most specifically connected to their SMA100 line of devices. The patch is now universally available.

Resolution: Any SMA100 users should update their firmware (either by logging in to your device or on SonicWall’s website.)

Risk 3: Medium

Issue: LastPass and Malwarebytes have both announced that there is a malicious/fake version of their application for macs making rounds. These fake version have two actions: it infects your computer with malware, but also releases your stored password data to the originator. The applications look and operate shockingly like the real LastPass. `

Resolution: The companies are seeking corrective action but, since it is not within their systems, it is difficult to control. If you use LastPass or Malwarebytes, it is recommended, to ensure you only download directly from their authentic sites. If you are unsure, remove your current version and install the latest from their website directly.

Announced Data Breaches

• Python Software Foundation

• Boyd Gaming

• European Airports (large number of airports)

• Stellantis

Upcoming Live CE

Brad will be presenting to the New Jersey Chapter of NATP on October 21 the topic AI, specifically in Simplifying Tax Topics for Clients and Making Tax Research for Efficient.

Register Here

Subscribe to Guardian Tier

Financial Guardians has partnered with NAEA to provide access to our monthly Guardian Tier membership at a 30% discount.

Active NAEA members can access the online discount here.

Subscribe to NAEA Guardian Tier

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today

Subscribe now

Critical Security Update

Apple iPhone/iPad, Microsoft Office, Google Chrome, Watchguard, FBI

Risk 1: Low

Issue: The FBI has issued a notice that multiple malicious sites impersonating their Crime Complaint Center (IC3 - www.ic3.gov). There was a notice sent out back in April regarding this, but the fakes have increased. IC3 is the avenue that Americans have to report criminal activity, internet crimes, and more to the FBI. The site is being faked to collect information about malicious actors, inhibit the information from going to the IRS, and to distribute malware.

Resolution: Verify the website address and authenticity anytime you reach out to the IC3. Additionally, invest extra care if you receive any communication from the IC3. It is possible that you receive e-mails from them, so diligence is critical.

Risk 2: High

Issue: Watchguard, a developer of firewall and routing devices, has announced a vulnerability on their Firebox devices. These are their most popular line of firewall devices. This exposure allows for full remote code execution, ultimately giving the malicious actor full access to your environment. This is a high-level concern if you use any Firebox device.

Resolution: A patch is available so please go in and update your firmware or ensure that your IT provider has recently updated the firmware for this device.

Risk 3: High

Issue: Google has had a rough few days. They have now announced their SIXTH zero-day exploit in Chrome over the last several days. Zero-day means that this vulnerability is both known and currently being exploited. In other words, the bad guys know about it and are using it.

Resolution: Google has released a patch. However, this patch recommends both fully closing Chrome as well as not retaining any open tabs upon restart.

Risk 4: Medium

Issue: Similar to the upcoming end of life for Windows 10 on October 14, 2025, Microsoft has also announced the end of support for Office 2016 and Office 2019 on October 14, 2025.

Resolution: If you are still using Office 2019 or earlier, you should plan to upgrade immediately as support, updates, and security patches will no longer be available after this date.

Risk 5: Medium

Issue: Apple has recognized a large zero-day vulnerability that impacts both current iPhone/iPad devices as well as legacy devices. The severity so large that Apple has extended the patch to iOS devices that had previously been outside of support. We reported this vulnerability last month for existing iOS devices, but Apple has extended support all of the way back to iPhone 6s, iPhone 7, iPhone SE, iPhone 8, and iPhone X as well as a large collection of iPads.

Resolution: If you have a newer iDevice, you should already have the patch. If you have an older device, please check the system settings as a new update should be available. This is a zero day vulnerability so please do this as soon as possible.

Announced Data Breaches

• Insight Partners

• SonicWall

Upcoming Live CE

Brad will be leading a webinar for NAEA’s Practice Education series on Thursday October 2 at 3pm. The webinar will be about Cybersecurity and the essential components of a WISP (Written Information Security Plan).

Register Here

Brad will be presenting to the New Jersey Chapter of NATP on October 21 the topic AI, specifically in Simplifying Tax Topics for Clients and Making Tax Research for Efficient.

Register Here

Subscribe to Guardian Tier

Financial Guardians has partnered with NAEA to provide access to our monthly Guardian Tier membership at a 30% discount.

Active NAEA members can access the online discount here.

Subscribe to NAEA Guardian Tier

Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.

Join today at www.incite.tax.

Join InCite Today

Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org

Join CSTC Today