Local Circuit

Is your VoIP system a silent observer? A critical flaw in Grandstream GXP1600 series phones now allows unauthenticated attackers to gain root access and eavesdrop on private conversations. If your office relies on these devices, update your firmware immediately to keep your meetings private.

Flaw in Grandstream VoIP phones allows stealthy eavesdropping A critical vulnerability in Grandstream GXP1600 series VoIP phones allows a remote, unauthenticated attacker to gain root privileges and silently eavesdrop on communications.

You waste time receiving, configuring, and shipping laptops to remote employees.

When hiring remote staff, the traditional IT process requires shipping new hardware to a central office, manually installing software, configuring security settings, and shipping the device a second time to the employee.

These delays onboarding and doubles shipping costs.

Microsoft 365 Business Premium includes Windows Autopilot.

You purchase hardware from a vendor and instruct them to ship it directly to the new employee.

When the employee powers on the device, connects to Wi-Fi, and enters their company email address, Autopilot automatically connects to your Microsoft tenant.

It applies your specific security policies, installs required applications, and configures the desktop environment automatically.

The device is fully configured for business use without an IT administrator ever physically touching the hardware.

If you need help doing this for your business, comment below with “configure”.

Quick but important heads-up: there's been a significant global increase in email spoofing attacks over the last two weeks, and one trend we're seeing affect our clients is "self-spoofing" emails that appear to come from your own address and are sent to you. I started noticing this on my own account last week and have since seen many online discussions about it. So, this is not something that is localized but something that's a part of a larger global event.

In nearly every case, your account has not actually been compromised; attackers are just forging the sender's name, which is unfortunately easy to do. The bad news is, these messages are convincing, and we need everyone on your team to stay alert. Please don't click links, open attachments, or respond to any suspicious email, especially one that looks like it came from you.

Please pass this warning along to all of your staff as soon as possible; the weakest point in any defense is a single distracted click.