Chicago IT Support & Cyber Security | Forward Technologies

Chicago-based Forward Technologies delivers IT support and cyber security to businesses in the Chicago area and nationwide.

  • Home
  • Services
    • Outsourced IT Support
    • DMARC Email Security
    • Development
      • Web Development & Facelifts
      • CustomView: Plugin for WordPress
    • Data Recovery Service
    • PPC Marketing Services
    • SEO Services
  • Email Security
    • SPF Basics
    • DKIM Basics
    • DMARC Basics
    • Email Security Consulting
  • Data Recovery Service
  • Blog
  • Contact Us

PHP2Shell: 2 Critical PHP Vulnerabilities Put Millions of Websites on Alert

October 21, 2026 by Edward Silha

A dramatic but playful cartoon showing a hooded hacker attempting to break into a large PHP-powered web server through 2 glowing security holes, while an IT administrator races to install emergency patches. WordPress, Drupal, and Joomla icons appear on smaller servers in the background.THIS IS NOT A DRILL! – If you manage a website running PHP, today would be a very good day to pay attention.

The PHP development team has taken the unusual step of announcing 2 emergency security patches before they’re even available. Both vulnerabilities carry a severity rating of 9.2 out of 10. Security researchers warn that attackers may begin exploiting them almost immediately after the fixes arrive.

The patches are scheduled for Wednesday, October 21, at 9:00 AM Central. However, PHP maintainers could release them earlier if additional technical details leak or they detect active exploitation.  [Read more…]

Filed Under: Blog, Cybersecurity Tagged With: Cloudflare, CVE-2026-109618, CVE-2026-109619, cybersecurity, Drupal, emergency security patches, Huntress, IIS, Joomla, Magento, MediaWiki, PHP, PHP security, PHP updates, PHP vulnerabilities, PHP2Shell, RCE, remote code execution, Sansec, security patches, server security, vulnerability management, watchTowr, web hosting, web server security, website security, Wordfence, WordPress security, zero-day vulnerabilities

Microsoft Finally Makes Sending From Email Aliases a Real Exchange Online Feature

October 7, 2026 by Edward Silha

A cartoon IT administrator opening an old Microsoft 365 tenant closet packed with dusty SMTP aliases, abandoned domains, migration leftovers, and forgotten addresses, highlighting why administrators should audit existing aliases before enabling Send From Alias organization-wide.This is one of those Microsoft 365 features that makes you wonder why it took this long.

Microsoft has finally moved Send From Alias in Exchange Online to general availability. The feature lets you send an email using any SMTP alias assigned to your mailbox, and the recipient actually sees that alias as the sender.

Seems pretty obvious, right?

For years, Exchange aliases were basically a one-way street. You could have sales@company.com, info@company.com, and yourname@company.com all assigned to the same mailbox and receive mail at every one of them.

But sending from one of those aliases was another story. [Read more…]

Filed Under: Blog, Tech In General Tagged With: email administration, email aliases, Exchange aliases, Exchange Online, Exchange Online PowerShell, Microsoft, Microsoft 365, Microsoft 365 administration, Outlook, Send From Alias, shared mailboxes, SMTP aliases

We Finally Got Everyone Using MFA. Now It’s Changing

October 2, 2026 by Edward Silha

A clean cartoon showing the evolution of Microsoft authentication from password, to password plus SMS code, to a passkey using Windows Hello with fingerprint, face, or PIN authentication.For years, the security advice was simple: turn on multifactor authentication.

IT people repeated it endlessly. Microsoft pushed it. Insurance companies started requiring it. Cybersecurity audits looked for it. Eventually, most businesses got the message.

Users learned the routine. Enter the password. Wait for the text message. Type in the 6-digit code. Get back to work.

Now Microsoft is changing all of that. [Read more…]

Filed Under: Blog, Cybersecurity Tagged With: credential theft, cybersecurity, FIDO2, identity security, MFA, Microsoft, Microsoft 365, Microsoft 365 security, Microsoft Authenticator, Microsoft Entra, Microsoft Entra ID, Multifactor Authentication, passkeys, passwordless authentication, phishing, phishing-resistant MFA, QR code phishing, small business security, SMS Authentication, voice authentication, Windows Hello

HalluSquatting Shows Why AI Agents Still Can’t Be Trusted on Their Own

July 8, 2026 by Edward Silha

A cartoon AI coding assistant enthusiastically downloading code from a repository with a convincing but fake name while a hooded hacker quietly celebrates in the background.I’ve said from the beginning that the biggest risk with AI isn’t that it writes bad code. It’s that people are starting to trust it to make decisions it has no business making.

New research drives that point home.

Researchers have uncovered a new attack called HalluSquatting, and it exploits one of AI’s most well-known weaknesses: it would rather make something up than admit it doesn’t know the answer.

That behavior, which we’ve all come to know as hallucination, is no longer just an annoyance. It can now be turned into a weapon.

Here’s how it works. [Read more…]

Filed Under: AI, Blog, Cybersecurity Tagged With: AI hallucinations, AI security, artificial intelligence, botnets, Cline, Cursor AI, cybersecurity, developer tools, Gemini CLI, GitHub, GitHub Copilot, HalluSquatting, large language models, LLMs, malware, prompt injection, ransomware, reverse shell, secure coding, software repositories, software supply chain, typosquatting, Windsurf

Windows 10 Gets Another Reprieve, And This Was Easy to See Coming

June 26, 2026 by Edward Silha

A humorous cartoon comparing Windows XP and Windows 10 as two stubborn old operating systems refusing to retire while Microsoft looks frustrated.Back in the fall, I said Microsoft was going to have to extend Windows 10 support again. The numbers made it obvious. There were simply too many machines still running it, and not enough realistic paths to Windows 11 for a huge chunk of users. Now here we are.

Microsoft has quietly added another year to its Extended Security Updates program for Windows 10, pushing support out to October 12, 2027. That gives users an extra twelve months of critical security patches beyond the original cutoff, and it confirms what a lot of us in IT already suspected. Windows 10 was never going away on Microsoft’s original timeline. [Read more…]

Filed Under: Blog, Tech In General Tagged With: cybersecurity, enterprise IT, ESU, extended security updates, Microsoft, Microsoft support lifecycle, operating systems, PC hardware requirements, TPM 2.0, Windows 10, Windows 11, Windows upgrades, Windows XP comparison

  • 1
  • 2
  • 3
  • …
  • 11
  • Next Page »

Social Media

  • Facebook
  • GitHub
  • LinkedIn
  • Periscope
  • Twitter

Forward Technologies
747 N LaSalle
STE 500B
Chicago, IL 60654
(312) 715-7806

Copyright © 2026 — Forward Technologies • All rights reserved. • Privacy Policy •