Critical Security Update: September 25, 2025 (Cisco, SonicWall, LastPass, Malwarebytes)
Critical Security Update
Cisco, SonicWall, LastPass, Malwarebytes
Risk 1: Medium
Issue: Cisco has announced a zero-day vulnerability (one that is already being exploited) in its IOS software platform. This allows remoted users to access your entire network infrastructure, bypassing any firewalls, port blocking, and more. Once access is established, the bad actors have the ability to even clear your access logs. The logs are a key way that most network managers locate breaches.
Resolution: An update has been released so any Cisco IOS users users should update immediately.
Risk 2: Medium
Issue: We announced a vulnerability several weeks ago regarding SonicWall devices, most specifically connected to their SMA100 line of devices. The patch is now universally available.
Resolution: Any SMA100 users should update their firmware (either by logging in to your device or on SonicWall’s website.)
Risk 3: Medium
Issue: LastPass and Malwarebytes have both announced that there is a malicious/fake version of their application for macs making rounds. These fake version have two actions: it infects your computer with malware, but also releases your stored password data to the originator. The applications look and operate shockingly like the real LastPass. `
Resolution: The companies are seeking corrective action but, since it is not within their systems, it is difficult to control. If you use LastPass or Malwarebytes, it is recommended, to ensure you only download directly from their authentic sites. If you are unsure, remove your current version and install the latest from their website directly.
Announced Data Breaches
Python Software Foundation
Boyd Gaming
European Airports (large number of airports)
Stellantis
Upcoming Live CE
Brad will be presenting to the New Jersey Chapter of NATP on October 21 the topic AI, specifically in Simplifying Tax Topics for Clients and Making Tax Research for Efficient.
Financial Guardians has partnered with NAEA to provide access to our monthly Guardian Tier membership at a 30% discount.
Active NAEA members can access the online discount here.
Financial Guardians is a proud member of InCite, the recently launched online community exclusively for tax professionals, bookkeepers, and accountants. InCite members receive a 30% discount.
Join today at www.incite.tax.
Financial Guardians has partnered with the California Society of Tax Consultants to provide a 30% access discount as well as many other offers. More info can be found at www.cstcsociety.org







