Four things worth knowing from the past fortnight, and one worth doing something about.
A Roku screensaver is going, and the reason is a licensing decision
Roku's popular "Aquatic Life" screensaver will stop working on 1 December, after its creator chose not to renew the licence. He told Ars Technica the decision followed Fox's purchase of Roku, a deal that closed on 6 November. Roku will switch affected devices to its Roku City screensaver, which carries advertising.
SonicWall firewalls have a VPN sign-in flaw that attackers are already using
On 6 November SonicWall released updates for seven flaws in SonicOS, including one in its SSL-VPN that can let someone get around SAML sign-in, and potentially the multi-factor check attached to it. The US cyber agency CISA added it to its catalogue of vulnerabilities known to be exploited the same day. It only affects firewalls with SSL-VPN set up to use SAML, and SonicWall says there is no workaround, only the update.
Fake prize invitations are tricking staff into approving attackers on Microsoft 365
Security firm Push Security spotted phishing pages in late October posing as events from OpenAI, SpaceX and Anthropic, promising rewards such as free ChatGPT Pro. Choosing "Continue with Microsoft" shows the victim a code to type into Microsoft's genuine sign-in page. That approves the attacker's device, and no password is needed.
iOS 27.2 fixed well over 150 security flaws on 26 October
Apple released iOS 27.2 and iPadOS 27.2 on 26 October, alongside macOS 27.2 and updates for the previous generation of its systems. Apple's security notes list well over 150 fixes across WebKit, the kernel and image handling. None is marked as exploited in attacks.
Before the Christmas break, write down who is reachable and who can approve
Problems do not wait for the holidays, and the people who would normally deal with them are away. The Australian Cyber Security Centre's reporting page lists the Australian Cyber Security Hotline, 1300 CYBER1 (1300 292 371), for reporting a cybercrime or incident.
Benefits of Managed IT Services for Melbourne Businesses
Our latest post sets out seven benefits of managed IT, from a forecastable monthly cost to cover when someone is away. Each comes with what it looks like in practice and a question you can put to your own provider, and it is honest about when managed IT does not pay, so it suits owners deciding whether it is worth it.
Three ways to stay informed
Take the ones you want, leave the ones you don't. Free resources for your SMB.
Something here you want to talk through? Email helpdesk@1300intech.com.au or call 1300 468 324.
