Short perspectives and service guides on managed IT, cybersecurity, and SOC operations from the engineers and analysts behind HI Tech Hui and Cyberuptive. Each card summarizes a viewpoint and links to the related service for full detail.
Cybersecurity
Microsoft Azure MFA mandate: the July 1, 2026 deadline Hawaii businesses cannot postpone again
Microsoft’s Phase 2 mandatory MFA enforcement for the Azure Resource Manager layer — CLI, PowerShell, REST APIs, and Infrastructure-as-Code tools — reaches its final postponement deadline on July 1, 2026. Here’s the five-week readiness audit we’re running for Hawaii managed IT clients: role inventory, user-identity automation migration, break-glass FIDO2, and Conditional Access for Azure Management.
Using the CISA KEV catalog as a patching SLA for Hawaii businesses
CVSS tells you a vulnerability is dangerous in theory. CISA’s Known Exploited Vulnerabilities catalog tells you it is being used against real organizations this week. Here’s how we wire KEV into a defensible patching SLA for Hawaii managed IT clients — inventory, daily monitoring, internal due dates, and exception governance.
AiTM phishing and Microsoft 365 token theft: a defense plan for Hawaii businesses
Microsoft’s April 2026 adversary-in-the-middle campaign reached 35,000 users across 13,000 organizations in 72 hours, with healthcare, finance, and professional services in the crosshairs. Ordinary MFA does not stop it. Here’s the phishing-resistant MFA, Conditional Access, and detection plan we’re running for Hawaii clients now.
Still on Windows 10 in May 2026? The ESU Year One plan for Hawaii businesses
Windows 10 reached end of support on October 14, 2025. Seven months later, the fleet has not gone away — and Year Two ESU pricing doubles in October 2026. Here’s the practical inventory, enrollment, and Windows 11 migration plan we’re running for Hawaii clients still on Windows 10.
Verifying May 2026 patch compliance: day 3–7 checks for Hawaii IT teams
The first 48 hours after Patch Tuesday is deployment. The next several days are verification. Here’s the out-of-band evidence model we use for the May 2026 cumulative update — KB reconciliation, reboot validation, KEV monitoring, and exception handling that holds up to an audit.
Kerberos RC4 hardening (CVE-2026-20833): what breaks in April/July 2026 and how to fix it
Microsofts April 2026 updates start enforcing an AES-first posture for Kerberos on domain controllers when encryption types arent explicitly configured. Heres what commonly breaks (service accounts, keytabs, Azure Files) and the remediation plan.
May 2026 Microsoft Patch Tuesday: Netlogon, CVE-2026-41089, and what to fix first
Microsoft’s May 12, 2026 release includes a critical Windows Netlogon RCE (CVSS 9.8) reachable over the network without authentication. Here’s the patch priority list we’re running for Hawaii managed IT clients this month, and how the timeline maps to CISA BOD 22-01.
Why most Hawaii businesses don’t need a bigger security stack
Most environments we audit have plenty of tools and not enough operational discipline. The fix isn’t another product — it’s configuration, identity, monitoring, and a tested runbook.
The difference between a paid alert subscription and a SOC: detection engineering, threat hunting, and live human triage at three in the morning. Here’s how to tell which one you’re buying.
The five HIPAA gaps we still find in Hawaii clinics
Audit logs not reviewed, MFA missing on owner accounts, vendor access never reviewed, backups never restored, and an IR plan that exists only on paper.
Looking for press, awards, or partnership announcements? See Resources.
Archive
More from the HI Tech Hui archive
Selected articles from our archive on cybersecurity, managed IT, and protecting Hawaii businesses. Originally published on our blog and preserved here.
Talk with a Honolulu-based engineer about managed IT, cybersecurity, or a 24/7 SOC handoff. We’ll review your current environment, identify the highest-impact gaps, and outline a clear next step — with no obligation.
