Recent Topics
Attackers Are Abusing Microsoft Entra ID — What "Storm-2949" Means for Your Team
Microsoft has been tracking a threat actor dubbed Storm-2949 that's stealing data from Microsoft 365 and Azure tenants — and notably, they're doing it without malware. They're abusing the same cloud features your team uses every day. How the attack works
Memorial Day Weekend — Reduced Support Hours (May 23–26)
Hi everyone, A quick heads-up on our support coverage for the upcoming holiday weekend. 🗓️ Reduced staffing: Saturday, May 23 – Monday, May 26 ✅ Standard support resumes: Tuesday, May 27 at 8:00 AM ET Our on-call engineers will be available throughout
Tech tip — Windows 11 in-place upgrade hanging at "Getting updates 46%"? Try /DynamicUpdate Disable
We've seen this pattern come up a few times and it's worth flagging in case your team runs into it: a Windows 11 in-place upgrade (running setup.exe from a Media Creation Tool USB to keep apps + files) stalls indefinitely at "Getting updates" — 46%. No
Anatomy of a Scam: How a Fake "Attendee List" Almost Cost a Client This Week
This week, the Proofpoint email security platform we deploy for our clients quarantined an outgoing message from one of those clients — an executive assistant about to wire payment for a conference attendee list. The system flagged it as fraud with Very
When the phishing email is actually from Amazon: AWS SNS abuse in the wild
Sharing this one because it landed in a client's inbox this morning and I think it's a great teaching example — it bypasses pretty much every traditional email security control without ever spoofing a sender, faking a domain, or using a malicious link.
Microsoft 365 Doesn't Back Up Your Data — Here's What That Actually Means
If a former employee deletes a folder out of OneDrive on their last day, how long do you have to get it back? Most business owners assume the answer is "as long as it takes — Microsoft has it." That's not how Microsoft 365 actually works. And it's the
MFA Isn't Enough Anymore — and Here's What to Do About It
Multi-factor authentication used to be the gold standard for protecting business accounts. Add a second step beyond the password, and you stop most attackers cold. That's still true — but it's no longer the whole story. Over the past 18 months, attackers
Microsoft Services Outage: What Businesses Need to Know (January 22nd 2026)
Overview of the Jan 22, 2026 Outage On January 22, 2026, Microsoft’s cloud services experienced a significant outage impacting multiple Microsoft 365 services used by organizations worldwide. Core productivity and security applications – including Exchange
Service Notice: Cloudflare Outage Impacting Global Internet Connectivity (November 18, 2025)
Date: November 18, 2025 Status: Solved Related Services: Third-Party Content Delivery Networks (Cloudflare) Update: November 18, 2025 9:55AM EST - This issue has been fixed: https://www.cloudflarestatus.com/ We are writing to inform our clients of an
Service Notice: AWS Outage Impacting Multiple Online Services (October 20, 2025)
Good morning everyone, We’re currently monitoring a major outage affecting Amazon Web Services (AWS), which is impacting many cloud-hosted platforms worldwide — including productivity tools, apps, and integrations some of our clients use daily. If you’re
[Security Bulletin] Active SharePoint Server Vulnerability – What You Need to Know (CVE-2025-53770)
Hi everyone, We want to make you aware of a critical security vulnerability (CVE-2025-53770) that is currently being actively exploited in the wild. This vulnerability affects on-premises versions of Microsoft SharePoint Server and allows attackers to
12/10/2024 - Microsoft 365 Outage Disrupts Office Web Apps and Admin Center: What You Need to Know
Microsoft 365 users worldwide faced a significant disruption today as a system outage impacted key services, including Office web applications and the Microsoft 365 Admin Center. Users attempting to access web-based tools such as Outlook and OneDrive
11/25/2024 - Microsoft 365 Outage – What You Need to Know
Hey Everyone, Here is a quick update about the ongoing Microsoft 365 service issues that might be affecting your day-to-day operations. Since late evening on November 24, 2024, Microsoft has reported a widespread service degradation across several of
Understanding the Recent IT Systems Outages: What You Need to Know and How We’re Here to Help
Update: Here is the fix: Boot in safe mode: https://support.microsoft.com/en-us/windows/find-safe-mode-and-other-startup-settings-in-windows-10-7551aac3-21b5-c646-06ee-31e0e6a5e4dc Workaround Steps: Boot Windows into Safe Mode or the Windows Recovery
TeamViewer Detects Security Breach in Corporate IT Environment
TeamViewer on Thursday disclosed it detected an "irregularity" in its internal corporate IT environment on June 26, 2024. "We immediately activated our response team and procedures, started investigations together with a team of globally renowned cyber
The ConnectWise ScreenConnect Vulnerability Explained
Wondering why we use Huntress? The “exploit” is trivial and embarrassingly easy. These are words you never want to hear when talking about vulnerabilities in a widely used product, but that’s exactly how John Hammond, Principal Security Researcher at
Some users may experience multiple issues with their Microsoft Teams
User impact: Users may experience multiple issues with their Microsoft Teams. More info: Affected scenarios include, but aren't limited to: - Users performing a cold boot may not able to log into teams and will see an "oops" page - Users logging in or
Edge vs Chrome: The Battle of the Browsers - Which One Reigns Supreme?
Browsers. They're our gateways to the digital world, the windows through which we navigate information, entertainment, and connection. But with so many options available, the choice can be overwhelming. Today, we're pitting two heavyweights against each
Azure AD name is changing to Microsoft Entra ID
AzureAD -> Entra ID Key points: No action is required from you Only the name is changing Name will change on October 1, 2023 No license, prices, terms and service level agreements (SLAs) changes. Read More: https://learn.microsoft.com/en-us/azure/ac
Bluehost DNS is down
We are aware of an issue affecting the DNS service of Bluehost, one of our hosting providers. This may cause some of our websites to be temporarily unavailable or slow to load. We apologize for any inconvenience this may cause and we are working with
BMIT is now on Threads
➡Follow us here: https://www.threads.net/@bmitmsp ➡Read more herehttps://www.bostonmit.com/news/hello-threads/ Threads by meta: A New Text-Based Conversation App If you are active on social media, you may have heard of a new app called Threads by Meta.
Microsoft 365 is Getting a New Assistant Called Copilot (brace yourselves)
If you are a Microsoft 365 user, you already know how awesome it is. But what if I told you that it could get even more awesome? That’s right. Microsoft has just launched a new feature that will make your work easier and more fun. It’s called Copilot,
Juneteenth 2023
While our physical offices may be closed, we want to assure you that we have dedicated staff on call to address any urgent IT needs or emergencies that may arise. As we approach Juneteenth, a significant and joyous occasion in African American history,
How to protect your organization from the global cyberattack by CLOP
https://www.bostonmit.com/news/how-to-protect-your-organization-from-the-global-cyberattack-by-clop/ The recent news of several US government agencies being hit by a global cyberattack by a Russian ransomware group called CLOP has raised serious concerns
US government agencies hit in global cyberattack
Russian cybercriminals have hacked several US federal government agencies and hundreds of companies and organizations in the US. The hackers exploited a vulnerability in widely used software called MOVEit. No ransom demands have been made of federal agencies.
Surge in spam and phishing emails.
Hello everyone, I want to share something we have been seeing for the past few weeks. There has been a surge in spam and phishing emails. Spam and phishing emails are both types of unwanted and potentially harmful messages that you might receive in your
Popular Articles
Recover an Earlier Version of a File
Recover an Earlier Version of a File Overview If you saved over a file with the wrong changes, or a teammate made an edit you want to reverse, you can roll back to an earlier version. OneDrive, SharePoint, and Google Drive all keep version history ...
Schedule and Run a Google Meet
Schedule and Run a Google Meet Overview Google Meet is the built-in video meeting tool in Google Workspace. This guide shows you how to schedule a meeting from Google Calendar and run it smoothly when the time comes. Before You Begin Your work Google ...
Browse the Web Safely at Work
Browse the Web Safely at Work Overview Most cyberattacks start with a web browser. A fake login page, a malicious ad, or a sketchy download can hand over your credentials in seconds. This article covers the safe-browsing habits that protect you and ...
Install Microsoft 365 Apps on Your Computer
Install Microsoft 365 Apps on Your Computer Overview Microsoft 365 Apps include Word, Excel, PowerPoint, Outlook, and Teams. Your work account already has a license, so you can install them from the Microsoft 365 portal in a few minutes. This guide ...
Connect to Your Office Network From Home
Connect to Your Office Network From Home Overview Working from home often means reaching internal resources like file shares, line-of-business apps, or printers that only exist on the office network. This guide shows you how to get connected from ...