Field notes

Straight talk on IT, security and staying online

Short, practical notes for New Jersey businesses. No jargon, no fear-selling. Just what to do and why.

September 1, 2026

SharePoint Flaw Being Exploited: What NJ SMBs Should Do

A patched SharePoint vulnerability is now being actively exploited. Here's what small and mid-size businesses in NJ and NYC need to do right now.

August 30, 2026

4 Actively Exploited Vulnerabilities You Should Patch Now

CISA flagged four actively exploited vulnerabilities in Microsoft, VMware, and Apple products. Here's what small businesses need to do right now.

August 29, 2026

Windows 11 24H2 End of Support: What NJ Businesses Must Do

Windows 11 24H2 Home and Pro lose support soon. Here's what that means for your business and what to do before the deadline.

August 28, 2026

Microsoft Entra ID Flaw: What NJ SMBs Should Do Now

A critical Microsoft Entra ID vulnerability is being actively exploited. Here's what small and mid-size businesses in NJ and NYC need to do right now.

August 27, 2026

Windows 11 Cursor Updates: What NJ Businesses Should Know

Windows 11 is updating accessibility and cursor features. Here's what that means for your NJ business and how to manage it without disruption.

August 24, 2026

HMI Security Flaw: What NJ Businesses Should Know

A high-severity vulnerability in Weintek HMI panels lets low-level users grab admin access. Here's what that means if you run one.

August 24, 2026

Windows Zero-Day Patch: What NJ Businesses Must Do Now

Microsoft patched a Windows kernel zero-day already used in real attacks. Here's what it means for your business and what to do this week.

August 22, 2026

Fastjson RCE Flaw: What NJ Businesses Should Do Now

A critical flaw in Fastjson lets attackers run code on your servers with no login required. Here's what small businesses need to know.

August 21, 2026

Azure Cloud Flaws: What NJ Small Businesses Must Know

A serious Azure vulnerability exposed cross-tenant database access. Here's what it means for small businesses using Microsoft cloud services.

August 20, 2026

Windows 11 License Costs Are Rising: What SMBs Should Do

Microsoft is raising Windows 11 license prices. Here's what that means for your NJ/NYC small business budget and how to get ahead of it.

August 19, 2026

Windows 10 ESU Updates: What NJ Businesses Must Do

Windows 10 is still getting security updates through ESU, but that program costs money and has a deadline. Here's what small businesses need to know.

August 18, 2026

Windows 10 Microsoft 365 Limits: What NJ Businesses Must Do

Microsoft is quietly restricting Microsoft 365 and OneDrive on Windows 10. Here's what that means for your NJ business and what to do before it bites you.

August 17, 2026

400+ Windows Bugs Fixed: What NJ Businesses Must Do Now

Microsoft just patched over 400 security bugs in Windows 11. Here's what that number actually means for your business and how to act fast.

August 16, 2026

Windows 11 August 2026 Update: What NJ Businesses Should Do

Microsoft's August 2026 Windows 11 update brings AI model controls and new security features. Here's what it means for your NJ business.

August 7, 2026

Siemens SICAM 8 Vulnerabilities: Patch Now

CISA flagged four CVEs in Siemens SICAM 8 firmware. If your facility runs this equipment, here's what the flaws mean and what to do first.

August 6, 2026

AutomationDirect Productivity Suite Has 6 Flaws

CISA flagged six vulnerabilities in AutomationDirect Productivity Suite v4.6.2.2. If your shop floor runs this software, here's what to do right now.

August 5, 2026

Microsoft’s AI Is Writing Security Patches Now

Microsoft is using AI to find and fix Windows vulnerabilities at scale. Here's what that means for your patch cycle and security posture.

August 4, 2026

GitLab RCE Flaw: What NJ Small Businesses Must Do

A working exploit for a GitLab remote code execution flaw is now public. Here's what it means if your team runs a self-hosted GitLab server.

August 3, 2026

AI-Written Code Is Now Mainstream. Is Your IT Ready?

Even Linus Torvalds now accepts AI-generated code in Linux. Here's what that shift means for small businesses running Windows and managed IT.

August 2, 2026

Check Point Flaw: What NJ SMBs Should Do Now

A critical Check Point authentication bypass is being actively exploited. Here's what small and mid-size businesses running Check Point firewalls need to do right now.

August 1, 2026

Azure Outage Blocked Windows Updates: What SMBs Should Know

A recent Azure outage stopped Windows 11 updates from downloading. Here's what that means for small businesses and how to avoid getting caught off guard.

July 31, 2026

Windows 11 Touchpad Update: What NJ Businesses Should Know

Windows 11's July 2026 update lets users resize the touchpad right-click zone. Here's what that means for your team and your IT setup.

July 30, 2026

Microsoft Scout Sign-In Loop: What NJ Businesses Should Know

Microsoft Scout is Microsoft's new AI automation tool, but a sign-in bug is blocking users. Here's what it means if your team uses it.

July 29, 2026

When Hackers Use Telegram as a Weapon

Attackers are hiding malware command channels inside Telegram. Here's what that means for small businesses using everyday apps.

July 28, 2026

Linux Kernel Updates: What NJ SMBs Should Know

Linux 7.2 is nearly ready. Here's what kernel release cycles actually mean for small businesses running Linux workloads or mixed environments.

July 23, 2026

Citrix NetScaler Flaws: What NJ Businesses Should Do

Citrix just patched serious NetScaler flaws. If your business uses NetScaler ADC or Gateway, here's what that means and what to do right now.

July 22, 2026

Windows 11 Bug Can Eat 500GB of Storage Space

A confirmed Windows 11 bug silently consumes up to 500GB of disk space. Here's what NJ small businesses should check right now.

July 21, 2026

Roundcube Exploit: What SMBs Need to Know

State-linked hackers are exploiting unpatched Roundcube webmail flaws. Here's what small businesses running open-source email need to do right now.

July 20, 2026

EV Charger Hacks: What NJ Businesses Should Know

A critical flaw in EV charging infrastructure is a reminder that connected hardware on your property carries real cyber risk. Here's what to do.

July 19, 2026

Bigger Windows 11 Patches Are Coming. Are You Ready?

Microsoft is using AI to find bugs faster, which means bigger monthly patches. Here's what that means for your NJ business and what to do now.

July 18, 2026

Zimbra XSS Flaw: What NJ Small Businesses Should Do

A critical Zimbra flaw lets malicious emails run code in your browser session. Here's what small businesses running Zimbra need to do right now.

July 17, 2026

Windows 11 Copilot: Useful or Just RAM Hungry?

Windows 11 Copilot can flag what's slowing your PC, but it uses 1GB of RAM to do it. Here's what that trade-off means for small businesses.

July 16, 2026

570 Windows Vulnerabilities: What NJ Businesses Must Do

Microsoft's July Patch Tuesday fixed 570 Windows vulnerabilities. Here's what that number means for your business and what to do this week.

July 15, 2026

Microsoft’s AI OS Leak: What It Means for Your Business

Microsoft is reportedly building a web-based AI operating system. Here's what that shift could mean for NJ small businesses running Windows today.

July 14, 2026

Microsoft 365 Price Hike 2026: What NJ Businesses Should Do

Microsoft 365 prices are rising up to 43% in July 2026. Here's what that means for your NJ small business and how to prepare now.

July 13, 2026

Ubuntu End of Life: What NJ Small Businesses Should Do

When a Linux distro hits end of life, security patches stop. Here's what that means for your business and the steps to take right now.

July 12, 2026

Ubiquiti UniFi Flaw: What NJ Businesses Must Do Now

A critical Ubiquiti UniFi OS flaw puts small business networks at real risk. Here's what it means and what to do this week.

July 11, 2026

AI Is Finding More Bugs. Your Patches Can’t Wait.

AI-assisted code reviews are uncovering vulnerabilities faster than ever. Here's what that means for your business and your patch schedule.

July 8, 2026

Windows 11 Slow Shutdown Bug: What NJ Businesses Should Do

Microsoft confirmed a Windows 11 bug causing slow shutdowns and blank taskbar icons. Here's what it means for your NJ business and what to actually do about it.

July 7, 2026

XZ Utils Flaw Hits Industrial Gear: What SMBs Should Know

A flaw in XZ Utils is affecting B&R industrial automation products. Here's what small businesses running that equipment need to do right now.

July 6, 2026

SharePoint Exploit Is Active. Patch It Now.

A SharePoint Server vulnerability is being actively exploited. Here's what small businesses running SharePoint need to do right now.

July 5, 2026

Windows 11 Copilot Key: What It Means for Your Business

Microsoft's Copilot key is getting a remap option. Here's what NJ small businesses should know before their next PC purchase or Windows 11 rollout.

July 3, 2026

Microsoft 365 Store Version Losing Support: What To Do

Microsoft is dropping support for the Store version of Microsoft 365 apps. Here's how to check which version your team is running and fix it fast.

July 2, 2026

Apple Patched 30+ Flaws. Is Your Team’s iPhone Safe?

Apple just pushed a major security update fixing 30+ flaws across iOS, macOS, and Safari. Here's what NJ small businesses need to do right now.

July 1, 2026

Windows Secure Boot Certs Expire: What NJ Businesses Must Do

Old Secure Boot certificates are expiring on Windows 11 PCs. Here's what that means for your business and the steps to take now.

June 30, 2026

Windows 11 Built-In Apps Just Got Smarter

Microsoft updated eight Windows 11 inbox apps. Here's what actually changed and whether your team needs to care.

June 29, 2026

AI Coding Tools Can Steal Cloud Creds: What to Know

A patched flaw in Amazon's AI coding assistant let malicious repos steal cloud credentials. Here's what it means for small businesses using AI dev tools.

June 28, 2026

Cisco UCM Exploit: What NJ Businesses Should Do Now

A Cisco Unified Communications Manager flaw is being actively exploited. Here's what it means for your business phone system and what to do about it.

June 27, 2026

PowerToys Memory Leaks: What NJ Businesses Should Know

Microsoft patched memory leaks in PowerToys. Here's why that matters for small businesses running Windows and what your IT setup should do about it.

June 26, 2026

Windows 10 Security Updates Extended to 2027 – Read the Fine Print

Microsoft extended free Windows 10 ESU to October 2027, but the free path is the consumer program. Here's what it means for NJ and NYC businesses.

June 26, 2026

Chrome Update: What NJ Small Businesses Should Do

Chrome just pushed another round of bug fixes. Here's why that matters for your business and what you should actually do about it.

June 24, 2026

Email Alert Fatigue Is a Real Security Risk for SMBs

Too many security alerts and not enough hands to review them? Here's what that actually costs small businesses and what to do about it.

June 23, 2026

Microsoft 365 Copilot Auto-Install: What NJ Businesses Should Do

Microsoft is pushing the Copilot app to Windows 11 PCs with Microsoft 365 Business. Here's what that means and how to get ahead of it.

June 22, 2026

Still on Windows 10 at home? You can get free security updates until October 2026

Microsoft stopped patching Windows 10 in October 2025. Home users can still get free security updates through October 13, 2026. Here is how to turn them on.

March 18, 2026

Moving your NJ business to the cloud without nasty surprises

Cloud migration goes wrong in predictable ways: surprise costs, a security gap, unplanned downtime. Here is what I plan for so a move for a New Jersey business stays boring, in the best way.

March 2, 2026

The Real Cost of Downtime

Downtime is rarely a disaster. It is usually a coffee spill or a failed update. The real cost is how long you take to recover, and that part you can fix.

February 17, 2026

AI-powered scams are hitting NJ businesses. Here is what to watch for

AI has made phishing, deepfakes, and ransomware cheap and convincing. Here is what is hitting NJ businesses, and five things you can do this week to cut the risk.

October 4, 2025

Decommissioning old servers without leaving data behind

Retiring an old server is easy to get wrong. Here is how I decommission servers cleanly: dependencies, a verified backup, proper drive wipes, and the compliance paperwork.

September 11, 2025

Windows 10 is past end of life. Here is what to do if you are still on it

Windows 10 hit end of life on October 14, 2025. The machines still run, but the security patches stopped. Here is what that means and your three real options.

April 17, 2025

Cyber resilience: planning for the breach you cannot prevent

Prevention is only half of security. Some attack eventually gets through. Cyber resilience is making sure that when it does, your business bends instead of breaks. Here is how.

February 14, 2025

Your backups are not real until you have restored them

Most businesses have backups. Far fewer have backups they have actually restored. That gap is where disasters happen. Here is how to test backups so they work when you need them.

January 29, 2025

What a network penetration test actually finds (and why small businesses need one)

A penetration test is a controlled attack on your own network, to find the holes before a real attacker does. Here is what it is, what it turns up, and why small businesses need one.

January 22, 2025

How I run a Windows 11 rollout without losing a day of work

With Windows 10 past end of life, moving to Windows 11 is no longer optional. The upgrade is easy. Rushing it is what breaks things. Here is how I run a migration so it stays boring.

December 24, 2024

How ransomware works now, and how to not become a statistic

Ransomware changed. The crews now steal your data before they lock it, so a clean backup is not enough on its own. Here is how it works today and how to keep your business off the list.

December 11, 2024

Cyber hygiene: simple habits that keep your business safe online

Most online security is not expensive tools. It is a handful of habits, the digital version of locking your front door. Here is the short list that shuts down the common attacks.

December 8, 2024

SPF records: how to stop scammers from spoofing your business email

If someone can send email that looks like it came from your domain, they can phish people using your name. An SPF record is the simple fix. Here is how it works and how to set it up.

December 7, 2024

Practical cybersecurity for small businesses on a budget

Real cybersecurity does not need an enterprise budget. A handful of the right basics, done consistently, stops most attacks that hit small businesses. Here is where to spend first.

November 26, 2024

Two layers every small business should have: endpoint and email security

Most small business breaches come through an infected device or a phishing email. Here is why I put endpoint protection and email filtering in place first, and how they cover each other.

November 19, 2024

What managing Microsoft 365 actually involves (and what it saves you)

Setting up Microsoft 365 is easy. Managing it well is where small businesses overpay or leave gaps. Here is what real Microsoft 365 management covers: access, security, licenses, migrations.

November 18, 2024

Migrating a client off the Meraki vMX100 before it ages out

I moved a client from the Meraki vMX100 to vMX-M. Here are the end-of-life dates, the exact dashboard steps, and the site-to-site VPN gotcha to plan around.

November 15, 2024

Microsoft’s November 2024 Patch Tuesday: four zero-days worth patching now

Microsoft's November 2024 Patch Tuesday fixed 91 bugs, including four zero-days, two already exploited. Here is what mattered, the four to know, and what to actually do.

November 2, 2024

Getting off Classic Teams: remove the old client, install the new one

Classic Teams is end of support. Here is the clean way to remove the old client, by hand or in bulk with PowerShell, and install the new Teams on one machine or across the org.

November 2, 2024

Citrix Workspace for Windows: CVE-2024-7889 and CVE-2024-7890

Two serious bugs hit Citrix Workspace for Windows: CVE-2024-7889 (credential exposure) and CVE-2024-7890 (remote code execution). Update now. Here is what they are and what to do.

November 2, 2024

How to find a lost Android phone

Lost an Android phone? Here is how to find it: Google Find My Device, Family Link for kids, Maps location sharing, and what to do when the phone is offline.

November 1, 2024

What an IT advisor actually does for a small business

IT consulting sounds vague. For a small business it is simple: someone senior who owns your technology decisions. Here is what an IT advisor actually does, beyond a help desk.