Emry Networks

10/29/2026

Law firm owners and office managers: if someone calls tomorrow and says "this is IT," would your team let them in? 👇

CrowdStrike's new 2026 legal report says attacks on the legal sector nearly doubled between 2023 and 2026. One crime group targets U.S. law firms almost exclusively. Its callers pretend to be the IT help desk, open a remote session, and take files within minutes. Another group used a VMware flaw to run commands that never showed up in the logs. CISA added that flaw to its exploited list on October 28.

Quick checks for this week:
✅ Call back any "IT" caller on a number you already have
✅ Block remote access tools your IT provider did not approve
✅ Keep a copy of your logs where an attacker cannot change them
✅ Get an alert any time a new MFA device is added

Standard IT trusts whoever calls. Defensible IT verifies the caller and keeps the proof.

Emry Networks | Jacksonville, FL & Manchester, NH | Serving law firms nationwide

The full breakdown and the link to book a 30-Minute Risk Assessment are in the first comment. 👇

10/29/2026

Does your practice or firm use Microsoft 365? Ask your IT provider one question today: was ConnectWise Cloud Backup, formerly SkyKick, ever connected to our account? 👇

On October 15, attackers used a stolen key for that backup app to sign in to customer Microsoft 365 accounts. Huntress confirmed 162 affected tenants. Because the attacker signed in as an app, MFA never came into play. ConnectWise shut the service down on October 17, so many small businesses have had no new Microsoft 365 backups since.

What to ask for this week:
✅ A list of every outside app that can read your email and files
✅ Proof that no new admin accounts or app passwords were added since October 13
✅ Sign-in logs saved before Microsoft deletes them
✅ Your last good backup date and a second backup until restores return

Standard IT says the vendor is handling it. Defensible IT shows you the proof.

Emry Networks | Jacksonville, FL & Manchester, NH | Serving regulated businesses nationwide

The full breakdown and the link to book a 30-Minute Risk Assessment are in the first comment. 👇

10/27/2026

Does your advisory firm use a website, a client login portal, or an online document upload form? Then this week's PHP2Shell alert applies to your firm. 👇

On October 26, CISA confirmed attackers are actively exploiting two critical PHP flaws (CVSS 9.2) that let them take over unpatched web servers without logging in. PHP powers roughly 70% of websites, including many wealth management sites and the third-party vendors behind them.

Under amended SEC Regulation S-P, your firm is responsible for overseeing those service providers in writing. What to do this week:
✅ Map every website, client portal, and upload tool that touches client data
✅ Ask each vendor in writing which PHP version they run and when they upgraded to a patched release (8.5.12, 8.4.27, 8.3.36, or 8.2.35)
✅ Confirm whether they checked exposed servers for signs of a break-in
✅ File the dated vendor answers in your Regulation S-P oversight records

Standard IT assumes the vendor patched. Defensible IT has the dated written proof ready for an SEC examiner.

Emry Networks | Jacksonville, FL & Manchester, NH | Serving regulated firms nationwide

The full RIA breakdown and the link to book a 30-Minute Risk Assessment are in the first comment. 👇

10/26/2026

If your medical or dental office orders labs through Quest's Quanum portal, here is what to check this week. 👇

Quest Diagnostics confirmed unauthorized access to its Quanum LSM lab portal on October 21. Quest believes certain patient records were accessed and is still investigating the exact scope.

Quest says it will handle required patient notifications as the covered entity. Your practice is still responsible for your side of the login:

✅ Remove former employees from the Quanum portal immediately
✅ Replace shared front-desk logins with individual named accounts
✅ Enforce phishing-resistant MFA on the portal and on the email inbox that resets those passwords
✅ Log what you reviewed and the date you completed it in your HIPAA risk analysis file

Need a Quanum password reset? Quest's official notice lists its IT Connectivity Help Desk at 1-800-697-9302. Never call a phone number or click a reset link from an unexpected email.

Standard IT waits for the vendor to call. Defensible IT already knows who had access and can prove to an auditor when old logins were removed.

📄 Full HIPAA Third-Party Portal Breakdown: https://www.emrynetworks.com/post/quest-quanum-lab-portal-breach-hipaa-risk-analysis
✅ Interactive 2026 HIPAA Audit Checklist (Live Score + .PDF Download): https://www.emrynetworks.com/services/regulated-industries/hipaa
📅 Book a 30-Minute Risk Assessment: https://www.emrynetworks.com/contact-us

Emry Networks | Jacksonville, FL & Manchester, NH | Serving regulated businesses nationwide

10/26/2026

If your computers turn on and your Wi-Fi works, does that mean your business is actually protected against a cyberattack or a compliance audit? 🛡️

For medical & dental practices, law firms, financial advisers, and defense manufacturers across the United States—and right near our hubs in the Jacksonville, FL and Manchester, NH areas—the rules changed in 2026:

⚠️ 152 actively exploited vulnerabilities in CISA's federal catalog now target the exact VPN gateways, remote support tools, and IT management software that traditional IT providers use every day—with gateway flaws exploited in a median of just 1 day.
⚠️ Once an attacker gets in, average lateral breakout time across a network is just 29 minutes (CrowdStrike 2026)—long before a standard daytime IT ticket queue even opens the alert.
⚠️ Over 1 in 4 ransomware victims with backups fail to restore them cleanly during an emergency because those backups were never test-restored.

At Emry Networks (based in the Jacksonville, FL & Manchester, NH areas and serving regulated businesses nationwide), we don't just close helpdesk tickets—we build Defensible IT:
✅ 24/7/365 Human-Led Threat Detection & Response (4-minute average response time)
✅ Quarterly Tested Backup Restores with timestamped proof
✅ Live Production Compliance for HIPAA, SOC 2, CMMC, PCI DSS 4.0.1 & SEC Reg S-P

Before you renew your IT contract or cyber insurance policy, ask your IT provider for the exact date and screenshot of your last full backup test restore.

Want a clear, plain-English look at where your network stands? Book a 30-Minute Risk & Compliance Assessment with the Emry Networks team:
👉 https://www.emrynetworks.com/contact-us
📞 (603) 202-3200

10/19/2026

If an auditor asked for your access reviews or latest backup test today, how much digging would it take to find them?

That’s where audit prep gets expensive: tracking down records and catching up on work that slipped between reviews.

Our latest article covers practical ways to keep things current throughout the year and make the next audit a little less stressful.

How small and midsize businesses can stay audit-ready all year with continuous oversight, maintained evidence, and regular compliance drift checks.

09/28/2026

You haven't had a breach. That's exactly why it feels safe to stay where you are, but in a regulated business, weak security bills you every quarter with no breach required — it just never arrives as its own line item. It shows up as an outage on an ordinary Tuesday (37% of SMBs put one hour of downtime at $1,000 to $5,000).

It shows up as three weeks of audit rework instead of three days. As a renewal premium that climbed for no stated reason, or a claim denied because a control you attested to wasn't actually enforced (MFA). As a deal that stalled in a security review and never came back. And as your team's evenings.

Nobody adds these up, which is why they're the easiest costs to keep paying.

The article breaks down all five, with what to fix first. https://www.emrynetworks.com/post/real-cost-of-good-enough-security

Have a question? Ready for a free Cybersecurity and Compliance assessment? Book a consultation, we'd be happy to help! https://www.emrynetworks.com/contact-us

Get in touch with Emry Networks to discuss managed IT services, cybersecurity protection, and compliance support. Schedule a consultation or request more information today.

09/20/2026

Which compliance frameworks actually apply to your business?

The answer starts with the data you handle, the contracts you’ve signed, and the customers you serve. Some obligations come from law, others from contractual commitments, and some frameworks help you organize your security program.

Our latest article explains how HIPAA, SOC 2, ISO 27001, NIST, PCI DSS, CMMC, and HITRUST fit into that picture—and which questions to ask before investing in a compliance program.

The practical takeaway: identify your obligations, understand where requirements overlap, and maintain evidence that your controls work.

At Emry Networks, we help businesses connect compliance requirements to everyday IT operations.

Read the full article: https://www.emrynetworks.com/post/which-compliance-framework-applies-to-your-business

HIPAA, SOC 2, ISO 27001, NIST, PCI DSS, CMMC, HITRUST: what triggers each one, and why most regulated SMBs carry more than one.

09/14/2026

Your HIPAA binder is in order. The computer wired to your X-ray machine is still running Windows 10, which stopped getting security updates in October 2025.

That's what most HIPAA gaps in small practices actually look like — not a missing policy, but a piece of equipment nobody thought of as IT.

And there's no small-practice exemption: OCR's Right of Access Initiative has passed 50 enforcement actions, including a solo dental practice that settled at $3,500 over a records request.

This article walks through the six places IT usually breaks down in small medical and dental offices, why "addressable" doesn't mean optional (and why the written decision is the part that protects you), and what a real readiness review should examine — most of which has nothing to do with your documents.

If your policies are in place but you're not certain your systems match them, that uncertainty is a finding on its own.

Start a HIPAA readiness review:

The HIPAA gaps in small practices are rarely policy failures. They are operational: unpatched workstations, shared logins, unmapped vendor access.

09/10/2026

https://www.emrynetworks.com/post/why-compliance-feels-broken-for-small-businesses

Compliance feels like paperwork because most programs measure documents, not systems. See what regulators and insurers actually verify.