Dear Client,
This is an URGENT notice regarding a critical security issue in a widely used compression component called Brotli. It affects Node.js, Microsoft .NET, Visual Studio, PowerShell 7, Linux systems, and other software. CISA has confirmed that attackers are actively exploiting this issue.
IMPORTANT NOTE REGARDING PROTEK’S SCOPE OF CONTROL
NOTE: ProTek IT Solutions is working to get you important updates such as this, so please keep an eye out for these types of emails as they may have critical impacts.
If you are concerned about the validity of this email, call our known support number to have any of our technicians confirm.
As your Managed IT Service Provider, we are not involved with the management of any custom hosted web servers, cloud-hosted websites, or custom-built applications, as we do not offer any web development or support. It is therefore imperative that you review the steps below so you know what happened and what you need to do.
ProTek is reviewing the systems we do manage, including firewalls, servers, and workstations, and will apply vendor updates as they are released. We will contact you directly if anything we manage in your environment requires action.
WHAT HAPPENED?
Because Brotli is built into many products, the issue reaches well beyond Node.js. The fix is to install updated versions; there is no workaround for Node.js, so updating is the only complete fix. The most common places it is found include:
WHAT DO I NEED TO DO?
Reference Articles
In this article
WHAT HAPPENED?
WHAT DO I NEED TO DO?
Reference Articles
Need it support?
Call our known support number and a technician will confirm.