CinchOps

🕵️ 𝗪𝗶𝗻𝗱𝗼𝘄𝘀 𝗛𝗮𝘀 𝗔 𝗗𝗲𝘃𝗶𝗰𝗲 𝗜𝗗 𝗬𝗼𝘂 𝗖𝗮𝗻𝗻𝗼𝘁 𝗧𝘂𝗿𝗻 𝗢𝗳𝗳, 𝗔𝗻𝗱 𝗠𝗼𝘀𝘁 𝗣𝗲𝗼𝗽𝗹𝗲 𝗛𝗮𝘃𝗲 𝗡𝗲𝘃𝗲𝗿 𝗛𝗲𝗮𝗿𝗱 𝗢𝗳 𝗜𝘁
​
Microsoft assigns every Windows install a Global Device Identifier the moment it signs into a Microsoft Account. It became public because the FBI used one to trace an alleged hacker across four countries despite his VPN.
​
Last week the engineer who built Task Manager tried to defend Microsoft on X and got community noted, because he was explaining a completely different identifier.
​
Here is the part that matters for business owners. Standard privacy and telemetry toggles do not stop it. Deleting the registry key does nothing, because the value lives on Microsoft's servers and gets pulled back down. There is no way to view or reset it from Settings.
​
❓ Does device-level tracking factor into your data privacy policy at all?
📲 CinchOps can review your privacy and endpoint posture
🌐 cinchops.com/contact | 📲 281‑269‑6506
​
Full Article: https://www.windowslatest.com/2026/07/28/task-manager-creator-defended-windows-11s-gdid-tracking-and-got-community-noted-on-x/
​

📅 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗜𝘀 𝗙𝗶𝘅𝗶𝗻𝗴 𝗧𝗵𝗲 𝗖𝗮𝗹𝗲𝗻𝗱𝗮𝗿 𝗕𝘂𝗴 𝗧𝗵𝗮𝘁 𝗠𝗮𝗱𝗲 𝗦𝘄𝗶𝘁𝗰𝗵𝗶𝗻𝗴 𝗧𝗼 𝗡𝗲𝘄 𝗢𝘂𝘁𝗹𝗼𝗼𝗸 𝗠𝗶𝘀𝗲𝗿𝗮𝗯𝗹𝗲
​
If your team still runs Outlook Classic, this is the roadblock that keeps biting people. Switching to New Outlook did not carry over automapped calendars, so shared calendars simply vanished and someone had to call the admin to migrate them by hand.
​
Microsoft says the fix arrives over the next few weeks, with rollout wrapping by the end of August. Shared calendars are also moving to a faster sync model starting in August, finishing in late September.
​
The forced move to New Outlook is still coming in March 2027. This is not a reprieve, it just makes the eventual migration hurt less. Better to plan it than to have it happen to you.
​
❓ Is your office still sitting on Outlook Classic?
📲 CinchOps can plan your Outlook migration well before the deadline
🌐 cinchops.com/contact | 📲 281‑269‑6506
​
Full Article: https://www.windowslatest.com/2026/07/29/microsoft-says-the-new-outlook-switch-was-painful-for-classic-holdouts-due-to-a-calendar-bug-now-getting-fixed/
​

🚨 𝗖𝗜𝗦𝗔 𝗪𝗮𝗿𝗻𝘀 𝗢𝗳 𝗔 𝗥𝘂𝘀𝘀𝗶𝗮𝗻 𝗖𝗮𝗺𝗽𝗮𝗶𝗴𝗻 𝗧𝗵𝗮𝘁 𝗦𝘁𝗲𝗮𝗹𝘀 𝗘𝗺𝗮𝗶𝗹 𝗝𝘂𝘀𝘁 𝗕𝘆 𝗕𝗲𝗶𝗻𝗴 𝗢𝗽𝗲𝗻𝗲𝗱
​
A joint advisory issued July 23 covers a group tracked as Laundry Bear that has been compromising Western government and commercial organizations through Zimbra Collaboration Suite since at least July 2025.
​
What sets this one apart is that nobody has to click anything. Simply viewing a malicious message in a vulnerable Zimbra webmail client fires the exploit, which then pulls the previous 90 days of email, the organization's global address list, and other sensitive data out to attacker infrastructure.
​
The underlying flaw was patched back in November 2025 and is still being exploited successfully. That tells you how many mail servers never got the update. If patching a mail platform is somebody's side duty at your company, that is the real finding here.
​
❓ When did your mail server last get patched, and who confirmed it?
📲 CinchOps keeps Houston businesses current on critical updates
🌐 cinchops.com/contact | 📲 281‑269‑6506
​
Full Article: https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-204a
​

📊 𝗔𝗜 𝗜𝘀 𝗙𝗶𝗻𝗱𝗶𝗻𝗴 𝗠𝗼𝗿𝗲 𝗕𝘂𝗴𝘀 - 𝗕𝘂𝘁 𝗔𝘁𝘁𝗮𝗰𝗸𝗲𝗿𝘀 𝗔𝗿𝗲 𝗡𝗼𝘁 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗶𝗻𝗴 𝗧𝗵𝗲𝗺 𝗙𝗮𝘀𝘁𝗲𝗿
​
VulnCheck tracked 1,061 vulnerabilities credited to AI-assisted discovery in the first half of 2026. Fourteen of them, about 1.3 percent, were actually exploited in the wild. That matches the rate for flaws found the old-fashioned way, so the fear that AI-found bugs are inherently more dangerous is not holding up.
​
Two other numbers do matter. Average time from disclosure to exploitation dropped from 120 days in 2025 to 80 days this year. And Microsoft's July update alone carried 622 fixes, an all-time record.
​
The threat level did not change. The volume did, and volume is what buries a small IT team.
​
❓ How long does it take your business to install a critical patch?
📲 Ask CinchOps about managed patching and vulnerability tracking
🌐 cinchops.com/contact | 📲 281‑269‑6506
​
Full Article: https://cyberscoop.com/ai-assisted-security-tools-are-finding-more-bugs-but-the-threat-level-has-not-changed/
​

🖥️ 𝗥𝗲𝘀𝗲𝗮𝗿𝗰𝗵𝗲𝗿𝘀 𝗙𝗼𝘂𝗻𝗱 𝟯𝟲,𝟴𝟳𝟮 𝗦𝗲𝗿𝘃𝗲𝗿 𝗠𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁 𝗜𝗻𝘁𝗲𝗿𝗳𝗮𝗰𝗲𝘀 𝗦𝗶𝘁𝘁𝗶𝗻𝗴 𝗪𝗶𝗱𝗲 𝗢𝗽𝗲𝗻
​
A baseboard management controller is the chip that lets you power-cycle, reimage, and reconfigure a server remotely, even when the operating system is completely dead. It is the most privileged thing in the rack, and most security tools never see it.
​
Researchers scanned the internet and found 36,872 of them exposed. About two-thirds leaked password-derived hashes before login thanks to a protocol flaw from 2013. Roughly 30 percent of those passwords came back from common wordlists or predictable factory sticker formats. They also found one displaying a ransom note on the login page.
​
Older platforms are under scrutiny from new attack methods. Do you have an IT partner that stays informed on new exploits and their risks to your business?
​
❓ Do you actually know whether your server management port is exposed?
📲 CinchOps can audit your network perimeter
🌐 cinchops.com/contact | 📲 281‑269‑6506
​
Full Article: https://lavahq.io/research/bmc-exposure-alert
​

🔐 𝗔𝗻 𝗔𝗜 𝗠𝗼𝗱𝗲𝗹 𝗝𝘂𝘀𝘁 𝗙𝗼𝘂𝗻𝗱 𝗔 𝗥𝗲𝗮𝗹 𝗪𝗲𝗮𝗸𝗻𝗲𝘀𝘀 𝗜𝗻 𝗣𝗼𝘀𝘁-𝗤𝘂𝗮𝗻𝘁𝘂𝗺 𝗘𝗻𝗰𝗿𝘆𝗽𝘁𝗶𝗼𝗻
​
Anthropic says its Mythos Preview model derived a working key-recovery attack against HAWK-256, a test parameter of a post-quantum signature scheme still under NIST review. It also made an attack on a reduced seven-round version of AES-128 somewhere between 200 and 800 times faster.
​
Before anyone panics: neither result affects production systems. Full-strength HAWK parameters remain out of practical reach, and the AES work still needs an absurd volume of chosen plaintexts.
​
The process is the story. The model did most of the research on its own over roughly 60 hours. Two human researchers then spent close to a month confirming it was actually correct.
​
❓ Does encryption ever come up in your IT planning, or only after an audit?
📲 Ask CinchOps how we protect data for Houston businesses
🌐 cinchops.com/contact | 📲 281‑269‑6506
​
Full Article: https://thehackernews.com/2026/07/claude-ai-just-cracked-post-quantum.html
​

🪟 𝗧𝗵𝗲 𝗡𝗲𝘄 𝗪𝗶𝗻𝗱𝗼𝘄𝘀 𝟭𝟭 𝗢𝗽𝘁𝗶𝗼𝗻𝗮𝗹 𝗨𝗽𝗱𝗮𝘁𝗲 𝗜𝘀 𝗠𝗼𝘀𝘁𝗹𝘆 𝗔𝗯𝗼𝘂𝘁 𝗦𝗽𝗲𝗲𝗱
​
KB5101684 is rolling out now, bumping 25H2 to build 26200.8973. It is an optional preview release, not a security update, so nothing installs until somebody clicks Download and Install.
​
What you get: File Explorer finally shows file sizes in megabytes and gigabytes instead of cramming everything into kilobytes, Search tolerates typos so a misspelled setting still turns up, and the Start menu stops forgetting pinned apps and stuttering on older machines. Sign-in and lock screen behavior improved too.
​
Fair warning, the download runs about 5.6 gigabytes. Stage it on one machine before you push it across the office.
​
❓ Do you test Windows updates before they hit every desk, or roll the dice?
📲 CinchOps manages update testing and rollout for Houston businesses
🌐 cinchops.com/contact | 📲 281‑269‑6506
​
Full Article: https://www.windowslatest.com/2026/07/29/windows-11-kb5101684-out-with-a-speed-boost-direct-download-links-for-offline-installer-msu/
​

🎣 𝗧𝗵𝗲 𝗣𝗵𝗶𝘀𝗵𝗶𝗻𝗴 𝗞𝗶𝘁𝘀 𝗛𝗶𝘁𝘁𝗶𝗻𝗴 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝟯𝟲𝟱 𝗥𝗶𝗴𝗵𝘁 𝗡𝗼𝘄 𝗗𝗼 𝗡𝗼𝘁 𝗡𝗲𝗲𝗱 𝗬𝗼𝘂𝗿 𝗣𝗮𝘀𝘀𝘄𝗼𝗿𝗱
​
Researchers logged 7,295 phishing kit uploads in a single week, and the fastest growing technique is device-code phishing. Instead of a fake login page, you get an email that looks like a document share or a Teams invite asking you to enter a short code on a real Microsoft page.
​
You approve it. The attacker walks away with a valid session token, and your multi-factor prompt never even fires. Kits named EvilTokens and Kali365 are built entirely around this, and one of them runs reconnaissance on a target for 10 to 15 days before the first email ever arrives.
​
Text message and app-based multi-factor will not save you here. Passkeys and conditional access will.
​
❓ Has your team been trained on device-code requests they did not start themselves?
📲 CinchOps sets up phishing-resistant login for Houston businesses
🌐 cinchops.com/contact | 📲 281‑269‑6506
​
Full Article: https://cybersecuritynews.com/top-10-phishing-kits-used-by-hackers/
​

🌙🛻 𝗧𝗵𝗲𝘆 𝗙𝗼𝗹𝗱𝗲𝗱 𝗔 𝗖𝗮𝗿 𝗜𝗻𝘁𝗼 𝗧𝗵𝗲 𝗦𝗶𝗱𝗲 𝗢𝗳 𝗔 𝗦𝗽𝗮𝗰𝗲𝘀𝗵𝗶𝗽
​
Apollo 15 touched down near Hadley Rille on July 30, 1971. Dave Scott and Jim Irwin carried something no crew had brought before - a battery powered car folded flat against the side of the lunar module.
​
Boeing and General Motors built it to come down on pull cords and gravity. No power tools. No spare parts. If it jammed halfway, that was the end of it.
​
Every piece had to work the first time because there was no second time.
​
Most small businesses do not need to build to that standard, and they should not have to. Your backup restore is the exception. It either works on the day you need it or it does not, and the day you need it is a terrible day to find out.
​
We test client restores on a schedule for exactly this reason. A backup job that reports success is not evidence of anything.
​
❓ When did somebody last actually restore a file from your backup, not just confirm the job ran green?
📲 CinchOps runs real restore tests for Houston area businesses.
🌐 cinchops.com/contact | 📲 281-269-6506
​

💧 𝗔 𝗖𝗼𝗼𝗿𝗱𝗶𝗻𝗮𝘁𝗲𝗱 𝗔𝘁𝘁𝗮𝗰𝗸 𝗞𝗻𝗼𝗰𝗸𝗲𝗱 𝗪𝗮𝘁𝗲𝗿 𝗦𝘆𝘀𝘁𝗲𝗺𝘀 𝗢𝗳𝗳𝗹𝗶𝗻𝗲 𝗜𝗻 𝟯𝟬+ 𝗠𝗶𝗻𝗻𝗲𝘀𝗼𝘁𝗮 𝗧𝗼𝘄𝗻𝘀
​
Over a single weekend, attackers disrupted water and wastewater utilities across more than 30 Minnesota communities. One town of 1,700 posted that its plant was offline and asked residents to cut back. A Minneapolis suburb pulled the affected equipment off the network entirely to stop the spread.
​
Water quality was not affected anywhere, and nobody has been publicly named as responsible yet.
​
Why a Houston business owner should care: these were small operations running internet-connected control equipment on thin budgets. That describes a lot of local companies with remote-access gear nobody has looked at in years. Federal agencies have been warning about exactly this for months.
​
❓ Do you know what equipment at your business is reachable from the internet today?
📲 CinchOps can map your exposure - reach out
🌐 cinchops.com/contact | 📲 281‑269‑6506
​
Full Article: https://statescoop.com/coordinated-cyberattack-disrupts-water-utilities-in-30-minnesota-communities/
​