Blog

Micro Advantage now operates a self-hosted AI platform and delivers private AI and data transformation solutions, on our infrastructure or deployed on your premises. Your data never leaves.

Introducing our new blog, plus a look at the behind-the-scenes upgrades we've made to microadv.com and what's coming next.

Microsoft is warning businesses about a phishing campaign that takes a different approach to compromising computers: instead of immediately installing obvious malware, attackers are installing legitimate remote monitoring and management (RMM) software.

A critical vulnerability affecting ConnectWise ScreenConnect, a remote-support platform widely used by IT departments and managed service providers, is now associated with active exploitation in the wild. The flaw, tracked as CVE-2026-84869, carries a CVSS score of 9.9 out of 10 and affects ScreenConnect versions earlier than 26.6.5. ConnectWise released a security update on September 8, and the vulnerability was subsequently added to CISA's Known Exploited Vulnerabilities catalog.

Cybercriminals are using generative AI to create increasingly convincing executive impersonation and invoice-fraud emails. In research published on September 10, 2026, Microsoft described a campaign involving more than one million fraudulent emails that impersonated company executives and attempted to convince accounts-payable employees to send nearly $50,000 ACH payments to attacker-controlled bank accounts. For small and midsize businesses, the lesson is important: cybersecurity is no longer o

A security researcher has disclosed a new Microsoft Defender zero-day dubbed ShieldCrash, which reportedly bypasses Microsoft’s recent fix for the ShieldBreak vulnerability and can allow local attackers to access sensitive files with SYSTEM-level privileges on fully patched Windows systems. Microsoft has not yet published a dedicated security advisory for ShieldCrash, so businesses should treat the issue as an active zero-day watch and monitor for new Defender and Windows security updates.

Microsoft’s September 2026 Patch Tuesday addressed 966 vulnerabilities, including two zero-days that were already being actively exploited. With more than 100 Critical vulnerabilities and dozens capable of remote code execution, businesses should treat this month’s updates as a high-priority security deployment

Microsoft 365 suffered a widespread outage beginning August 31 that disrupted Exchange Online, Teams, SharePoint, OneDrive, Defender, and other cloud services because of a shared authentication configuration issue. By September 2, Microsoft reported availability above 99%, but the incident reinforced the need for businesses to have cloud-outage plans, independent backups, and strong continuity procedures.

Major Microsoft 365 Outage Disrupts Exchange Online, Teams, SharePoint, Defender and More

Cybercriminals are actively exploiting vulnerabilities affecting Microsoft SharePoint Server. Learn what these vulnerabilities could mean for businesses, why simply installing patches may not be enough, and what organizations should do to reduce their cybersecurity risk.