Practical guidance on IT support, Microsoft 365, cybersecurity, and AI adoption - for small businesses and nonprofits in Pennsylvania.
Run
On November 3, 2026, CISA added CVE-2026-119977 - a WordPress Core flaw that lets attackers run code on a site during its own update - to its Known Exploited Vulnerabilities catalog after confirming active attacks. Here's what small businesses should check this week.
Read more →Run
On October 27, 2026, CISA added CVE-2026-48356 - a critical Adobe Commerce and Magento file-upload flaw nicknamed PolyShell - to its Known Exploited Vulnerabilities catalog after confirmed attacks on hundreds of online stores. Here's what small businesses should check this week.
Read more →Run
Year 1 of Microsoft's paid Windows 10 Extended Security Updates program ends October 13, 2026. Business PCs still on Windows 10 stop receiving security patches after that unless Year 2 is purchased. Here is what small businesses and nonprofits should do this week.
Read more →Run
Microsoft disclosed on September 29, 2026 that phishing campaigns are tricking people into installing legitimate, digitally signed remote-management software (MSP360), which then silently installs a second remote-access tool. Here's what small businesses and nonprofits should do this week.
Read more →Run
On September 14, 2026, attackers used a stolen Cloudflare API key to push malicious code through Brevo's email marketing scripts - including a hidden backdoor planted on WordPress sites. Here's what small businesses and nonprofits should check this week.
Read more →Run
Microsoft's September 2026 Patch Tuesday fixed a record 966 security flaws, including two Windows zero-days already being exploited in the wild. Here's what small businesses and nonprofits should do this week.
Read more →Run
On August 24, 2026, CISA added a maximum-severity Oracle WebLogic vulnerability (CVE-2026-21962) to its Known Exploited Vulnerabilities catalog - seven months after Oracle patched it. Here's what happened and what small businesses should do this week.
Read more →Run
CISA added a critical Microsoft SharePoint Server vulnerability to its Known Exploited Vulnerabilities catalog on August 18, 2026. Here's what happened, why it matters for small businesses, and what to do this week.
Read more →Local
What Harrisburg-area and Cumberland County small businesses should look for in a local IT support provider - and the specific questions to ask before signing anything.
Read more →Transform
How Merit IT helped MAV Flooring replace manual, paper-and-spreadsheet material tracking with a live inventory app - saving hours and eliminating confusing back-and-forth conversations.
Read more →Transform
How Merit IT helped R.S. Mowery & Sons replace a manual, SharePoint-and-Excel buyout process with a custom application - and unlocked reporting that was impossible before.
Read more →Transform
How Merit IT helped Walter's Services Inc. recover after a departing IT employee sabotaged network access, deleted an app's source code, and wiped database records.
Read more →Transform
A step-by-step checklist for small businesses and nonprofits adopting AI tools safely - what to pilot first, how to protect data, and mistakes to avoid.
Read more →