Microsoft Releases March 2021 Security Updates

Microsoft Releases March 2021 Security Updates

This article is contributed. See the original author and article here.

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

SSL

Secure .gov websites use HTTPS A lock (lock icon) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Adobe Releases Security Updates

This article is contributed. See the original author and article here.

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary updates.

Microsoft Releases March 2021 Security Updates

Apple Releases Security Updates

This article is contributed. See the original author and article here.

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

SSL

Secure .gov websites use HTTPS A lock (lock icon) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Guidance on Remediating Networks Affected by the SolarWinds and Active Directory/M365 Compromise

This article is contributed. See the original author and article here.

Since December 2020, CISA has been responding to a significant cybersecurity incident involving an advanced persistent threat (APT) actor targeting networks of multiple U.S. government agencies, critical infrastructure entities, and private sector organizations. The APT actor added malicious code to multiple versions of the SolarWinds Orion platform and leveraged it—as well as other techniques, including—for initial access to enterprise networks. After gaining persistent, invasive access to select organizations’ enterprise networks, the APT actor targeted their federated identity solutions and their Active Directory/M365 environments. CISA has published two new resources on the follow-on activity from this compromise:

CISA encourages affected organizations to review and apply the necessary guidance in the Remediating Networks Affected by the SolarWinds and Active Directory/M365 Compromise web page and CISA Insights. For general information on CISA’s response to SolarWinds Orion compromise activity, refer to www.cisa.gov/supply-chain-compromise.

What to do if you’re billed for an SBA EIDL loan you don’t owe

What to do if you’re billed for an SBA EIDL loan you don’t owe

This article was originally posted by the FTC. See the original article here.

Did you get a bill for a Small Business Administration (SBA) loan, but you didn’t apply for one? It’s likely that an identity thief applied for the loan using your personal or business information. The SBA has new guidance about reporting the fraud, and the FTC has tips to help you clear up any credit problems it may cause.

The SBA’s Office of Disaster Assistance has been issuing the loans under its COVID-19 Economic Injury Disaster Loan (EIDL) program. They’re designed to give financial help to small businesses and non-profit organizations. Criminals have taken advantage of the program by using stolen information to get loans in someone else’s name, or in the name of that person’s company. And now, the bills are landing in the mailboxes of people and businesses that never applied.

If you or your business is billed for an SBA EIDL loan you don’t owe:

  • Report the problem right away to the SBA’s Office of Disaster Assistance and follow their guidance on what to do.
  • While the SBA processes your identity theft report, you may still get monthly invoices. Keep these invoices until the SBA has finished reviewing your identity theft report.

If you run into other problems caused by the misuse of your personal information:

  • Visit IdentityTheft.gov/steps, which will guide you through placing a free, one-year fraud alert on your credit, checking your free credit reports for other accounts you did not open, closing fraudulent accounts opened in your name, and adding a free extended fraud alert or credit freeze to your credit report.
  • Report on IdentityTheft.gov all instances of fraudulent accounts that you find, including the SBA loan. You will get an Identity Theft Report that you can use to clear fraudulent information from your credit reports. Your personal credit may be affected by the identity theft. Keep a close eye on what’s in your credit report by checking it regularly. Visit annualcreditreport.com to get a free credit report every year from each of the three national credit agencies.

Brought to you by Dr. Ware, Microsoft Office 365 Silver Partner, Charleston SC.