preloader

Service

  1. Home
  2. Service
Next IT

Services We Provide

Remote Work

service-image

Secure remote access for your team: VPN options such as OpenVPN, WireGuard and Tailscale, set up properly for Windows, macOS, Linux, Android and iOS.

Read More

Ransomware Remediation

service-image

Worried about ransomware, or already hit? Learn how attacks work, how to protect your business, and how Next IT Inc can help you respond and recover.

Read More

Managed Services

service-image

Complete or partial IT management for small and medium businesses: patching, antivirus and network security, backups, password management and more.

Read More
Some of the

Platforms we trust

These are some of the platforms we recommend and support. From office productivity to network security, we work with trusted industry products to insure that your business processes are secure and reliable.

  • client-logo
  • client-logo
  • client-logo
  • client-logo
  • client-logo
  • client-logo
CVE

Current Vulnerabilities

clients-image

Microsoft is developing a patch for two actively exploited zero-day vulnerabilities in Microsoft Exchange Server. The flaws, tracked as CVE-2022-41040 and CVE-2022-41082, were discovered in Microsoft's enterprise mail server by Vietnamese cybersecurity firm GTSC. Microsoft said it is aware of “a small number of targeted attacks” exploiting the flaws, which impact on-prem Microsoft Exchange Server versions 2013, 2016, and 2019.

Microsoft Exchange

CVE-2022-41040 and CVE-2022-41082

Vulnerabilities in a third-party module within the firmware of NETGEAR routers and Orbi WiFi Systems could lead to arbitrary code execution on affected devices. Now patched, the high severity flaws included an unauthenticated command injection flaw (CVE-2022-40619), and an insecure auto-update mechanism (CVE-2022-40620) that enabled manipulator-in-the-middle (MitM) attacks, potentially leading to remote code execution (RCE).

NETGEAR Routers

CVE-2022-40619 and CVE-2022-40620

BackupBuddy, which is used to backup WordPress sites, and has around 140,000 active installations. WordPress security firm Wordfence has revealed that its firewall has blocked more than 4.9 million exploit attempts related to the flaw since abuse was first detected on August 26. The issue - tracked as CVE-2022-31474 with a CVSS score of 7.5 - enables unauthenticated attackers to download sensitive files from vulnerable sites.

Wordpress - BackupBuddy

CVE-2022-31474