Rhinotech

Spam, viruses, phishing attempts, server outages... email problems don't just waste time, they put your business at real financial risk.

At rhinotech, our Hosted Email Security keeps your inbox safe and your business running:

✅ Blocks spam and viruses before they reach your team
✅ Keeps email working even if your server goes down
✅ Automatic security updates, no manual work required
✅ Smart archiving so old emails are easy to find
✅ 99%+ spam filtering that still lets real messages through

We've spent over 10 years helping Canton and Cherokee County businesses lock down their email and stay productive. Setup is fast (often just 1-2 days), and you keep your current email addresses. We just handle the protection in the background.

Don't let an email problem become an expensive one. 📞 Call us at (678) 744-6601 for a free email security check or send us a message to get started.

rhinotech | Canton, GA | Protecting your business, one inbox at a time.

Ransomware attacks usually start with something small. An employee opens an email attachment that looks legitimate, clicks a dangerous link, or downloads an infected file. Sometimes it even comes in through a USB drive. That one click is often all it takes to get ransomware into your system.

Once inside, it does not sit still. It searches your computer for files to encrypt, then spreads across your network looking for other machines to infect. It also hunts for your backups and tries to delete or encrypt them, since backups are what let you recover without paying. Often the attackers quietly steal your data first, giving them extra leverage.

Then the damage becomes impossible to ignore. Your documents, photos, databases, and everything else get locked behind strong encryption you cannot break on your own. A message appears demanding payment, and your business grinds to a halt because the systems you rely on are no longer usable.

Finally comes the demand itself. The criminals ask for payment, usually in Bitcoin, and set a deadline, threatening permanent data loss if you do not pay. What many business owners do not realize is that paying is no guarantee you will get your files back, and many businesses that do pay end up targeted again later.

At Rhinotech, we help businesses in Easley, SC, Canton, GA, and surrounding areas stay ahead of these risks with reliable managed IT support, robust cybersecurity solutions, and expert guidance tailored to small and mid-sized organizations. Whether it’s implementing stronger defenses, conducting security assessments, or ensuring your systems are up to date, our team is here to protect what matters most to you.

Stay secure! Visit us at https://rhinotech.io to learn more about how we can support your technology needs.

Rhinotech's Security Assessments find the weak spots first. We check your network, your devices, your passwords, your email, your backups, and your compliance status. This means you can fix problems before they turn into a breach.

You will get a clear written report on what we found. It will also include exactly how to fix each issue. There is no jargon and no guesswork.

We have served Canton, GA and Easley, SC businesses since 2011.

Stay secure! Visit us at https://rhinotech.io to learn more about how we can support your technology needs.

At rhinotech, we keep all your business devices safe from viruses, malicious software, and cyberattacks. rhinotech installs and manages advanced security software that protects computers, laptops, tablets, and mobile devices from online threats.

Our computer security service includes comprehensive endpoint protection solutions. We’ve helped businesses nationwide secure all their devices with professional endpoint protection that stops attacks before they cause damage. Let us handle your device security worries so you can focus on running your business.

Rhinotech is here to help businesses in Easley, SC, Canton, GA, and surrounding areas stay ahead of these risks with reliable managed IT support, robust cybersecurity solutions, and expert guidance tailored to small and mid-sized organizations. Whether it’s implementing stronger defenses, conducting security assessments, or ensuring your systems are up to date, our team is here to protect what matters most to you.

Stay secure! Visit us at https://rhinotech.io to learn more about how we can support your technology needs.

Attackers have been breaking into Wi-Fi gateways at hotels and conference venues and altering their DNS settings so guests get sent to fake Microsoft 365 sign-in pages instead of the real ones. ReliaQuest, which uncovered the campaign, says it’s been running since at least June and has hit compromised gateways in several U.S. cities plus India and Saudi Arabia. Victims span finance, legal, professional services, healthcare, energy, and retail — the researchers say that spread points to traveling employees being the target rather than any one industry. The activity resembles earlier router-hijacking campaigns tied to the Russian group APT28 (Fancy Bear).

How it works

Nobody’s confirmed how the attackers get in, but exposed management interfaces (SSH, SNMP, web admin) or unpatched vulnerabilities are the likely entry point. Once they have admin access, they repoint DNS to their own infrastructure. At least four lookalike domains have been registered for the phishing portals: m365-owa[.]com, owa-ms365[.]com, ms365-device[.]com, and ms365-live[.]com.

Some victims got a device-code authentication prompt instead. Approving it hands the attacker a valid OAuth token for a session they started — no password stolen, and MFA never comes into play.

In about a third of cases, the attackers also tried abusing WPAD, answering Windows’ automatic lookup with a malicious PAC file to push traffic through their own proxy. ReliaQuest couldn’t confirm whether that part worked.

Worth noting: setting DNS to 8.8.8.8 doesn’t help. The gateway intercepts the plain-text queries before they ever reach Google.

Defenses

Always-on, full-tunnel VPN
Encrypted DNS in strict mode
Disable WPAD
Turn off Device Code flow in Entra ID unless you actually need it
Review logs for anything unusual
At Rhinotech, we help businesses in Easley, SC, Canton, GA, and surrounding areas stay ahead of these risks with reliable managed IT support, robust cybersecurity solutions, and expert guidance tailored to small and mid-sized organizations. Whether it’s implementing stronger defenses, conducting security assessments, or ensuring your systems are up to date, our team is here to protect what matters most to you.

Stay secure! Visit us at https://rhinotech.io to learn more about how we can support your technology needs.

Two SonicWall SMA1000 VPN bugs got chained together and exploited as zero-days for weeks before patches came out.

CVE-2026-15409 (SSRF, critical): let attackers hit an internal-only endpoint (/wsproxy) to tunnel into services that should've been walled off, like CouchDB and the management console. From there they grabbed the device's product_uuid, needed for step two.
CVE-2026-15410 (command injection, high): using that UUID, attackers hit an RPC method in the Appliance Management Console to run commands as root — full device takeover.

Affects SMA1000 6210/7210/8200v. Patches are out (12.4.3-03453 and 12.5.0-02835) — install now.

Once attackers had root, they dropped a malware loader (KNUCKLEBALL) that installed two custom Java tools built specifically for these appliances:

Sou5 – reverse proxy for tunneling traffic through the box
ORANGETAIL – a webshell for remotely running encrypted commands

They also tweaked the nginx config to expose the webshell externally and added a root-privilege-escalation tool (ROOTRUN).

Volexity (who helped SonicWall investigate) attributes this to a new group they call UTA0533, active since at least June 22 — weeks before SonicWall's public disclosure. Despite the sophisticated toolkit, the attackers reportedly struggled to pivot further into victims' internal networks.

Bottom line for you: if you or any clients run SMA1000 6210/7210/8200v, patch immediately and check for signs of the wsproxy/CouchDB abuse pattern, since exploitation predates the disclosure by weeks.

At Rhinotech, we help businesses in Easley, SC, Canton, GA, and surrounding areas stay ahead of these risks with reliable managed IT support, robust cybersecurity solutions, and expert guidance tailored to small and mid-sized organizations. Whether it’s implementing stronger defenses, conducting security assessments, or ensuring your systems are up to date, our team is here to protect what matters most to you.

Stay secure! Visit us at https://rhinotech.io to learn more about how we can support your technology needs.

Microsoft's still working on a fix for a WSUS sync bug that's been going on over a week, with things getting worse starting July 13, 2026. Affected servers can't pull the latest metadata, so admins can't push new Windows updates through WSUS or Configuration Manager, hits both client (Win10 1607+) and server (2012+) builds.

As of Saturday, Microsoft's mitigation covers new/rebuilt WSUS installs, those are syncing fine again. But servers that were already hit are still broken, and Microsoft is now working on a way to safely strip the bad metadata from those environments.

Worth noting this isn't a one-off — WSUS has had sync issues crop up repeatedly (July 2025, August 2025, and again this past May).

At Rhinotech, we help businesses in Easley, SC, Canton, GA, and surrounding areas stay ahead of these risks with reliable managed IT support, robust cybersecurity solutions, and expert guidance tailored to small and mid-sized organizations. Whether it’s implementing stronger defenses, conducting security assessments, or ensuring your systems are up to date, our team is here to protect what matters most to you.

Stay secure! Visit us at https://rhinotech.io to learn more about how we can support your technology needs.

LastPass and Bitwarden are both warning customers about a phishing campaign targeting master passwords. Fake "security policy update" emails come from lookalike domains (lastpassnewsletter.com / bitwardennewsletter.com, registered July 13, 2026), pushing recipients to click through or risk losing vault access.

The link leads to a fake compliance page (lastpasscompliance.com / bitwardencompliance.com) spoofing DocuSign, which prompts a "DocuSign" download that's actually malware — already flagged by Microsoft Defender and Cloudflare, though its exact payload is still being investigated.

Our advice is don't click links in these emails, don't enter credentials on sites reached through them, and if anyone already entered their master password on the phishing page, change it immediately and check the vault for suspicious activity.

At Rhinotech, we help businesses in Easley, SC, Canton, GA, and surrounding areas stay ahead of these risks with reliable managed IT support, robust cybersecurity solutions, and expert guidance tailored to small and mid-sized organizations. Whether it’s implementing stronger defenses, conducting security assessments, or ensuring your systems are up to date, our team is here to protect what matters most to you.

Stay secure! Visit us at https://rhinotech.io to learn more about how we can support your technology needs.

Microsoft is blocking July's Windows 11 update (KB5101650) on some Dell PCs with Intel chips after finding it causes shutdowns, poor performance, overheating, and battery drain. Affected devices won't be offered the update until a fix ships.

The root cause traces to June's optional KB5095093 update, which some users installed anyway. It introduced a new USB-C Connection Manager interface that conflicts with Intel's Innovation Platform Framework Processor Participant driver, showing up as a yellow warning icon in Device Manager. Microsoft and Dell are working on a fix, expected "in coming days" but not yet released.

Microsoft hasn't named which Dell models are affected or how widespread the issue is — and since the driver in question is a general Intel power/thermal management component (not Dell-exclusive), other brands could potentially see similar problems too.

At Rhinotech, we help businesses in Easley, SC, Canton, GA, and surrounding areas stay ahead of these risks with reliable managed IT support, robust cybersecurity solutions, and expert guidance tailored to small and mid-sized organizations. Whether it’s implementing stronger defenses, conducting security assessments, or ensuring your systems are up to date, our team is here to protect what matters most to you.

Stay secure! Visit us at https://rhinotech.io to learn more about how we can support your technology needs.

US, UK, Canada, and several other allied nations issued a joint advisory warning that Russia's FSB Center 16 (aka Berserk Bear/Energetic Bear/Static Tundra) is hacking into poorly secured routers to breach critical infrastructure. The group scans for devices with weak or default SNMP credentials, spoofs IPs to pull config files, and exfiltrates them via TFTP. They've also exploited a known Cisco Smart Install flaw (CVE-2018-0171) since 2021. Energy, healthcare, finance, defense, and government sectors are most exposed. Agencies recommend moving to SNMPv3, disabling Smart Install, using strong unique passwords, blocking TFTP/SNMP at the firewall edge, and patching or retiring old gear.

This comes right after authorities took down FrostArmada, a separate APT28 (Fancy Bear) operation that had hijacked DNS on 18,000+ MikroTik and TP-Link routers worldwide to steal Microsoft 365 credentials — the FBI got court authorization to remotely fix the DNS settings on affected devices.

At Rhinotech, we help businesses in Easley, SC, Canton, GA, and surrounding areas stay ahead of these risks with reliable managed IT support, robust cybersecurity solutions, and expert guidance tailored to small and mid-sized organizations. Whether it’s implementing stronger defenses, conducting security assessments, or ensuring your systems are up to date, our team is here to protect what matters most to you.

Stay secure! Visit us at https://rhinotech.io to learn more about how we can support your technology needs.