Microsoft says China-aligned attackers took over the identities of several ConnectWise cloud apps, including ConnectWise Cloud Backup, and used their credentials to sign in to customer Microsoft tenants. Sign-in attempts reached more than 2,250 tenants at up to 2,900 a minute, and Microsoft says most were unsuccessful and that a sign-in does not by itself mean data was taken.

Most 10-to-50-person firms never buy ConnectWise themselves. Their managed IT provider does. If that provider backs up your Microsoft email and files through ConnectWise's cloud backup, the attackers may have been able to sign in through that app's credentials that does not depend on your staff's passwords or MFA prompts. Take a 20-person CPA firm in the middle of October extension season: 20 mailboxes full of client returns, Social Security numbers and bank details, backed up by its IT provider through ConnectWise. That firm needs three answers: is the ConnectWise backup app connected to our Microsoft account, has its access been removed or its credentials replaced, and do the sign-in and mailbox logs show anyone reading data who should not have. Microsoft also advises keeping the affected ConnectWise app connections disabled until ConnectWise issues restoration instructions, so backups may not be running; it needs a stopgap. Accounting firms, law practices and anyone holding client financial or medical data should care most. If you manage Microsoft 365 yourself with no third-party backup, or your provider confirms it does not use ConnectWise backup, you can stop here.

Amazon Threat Intelligence says its MadPot honeypots caught exploitation attempts against PHP2Shell, two PHP flaws tracked as CVE-2026-109618 and CVE-2026-109619, starting Oct. 17, four days before PHP released patches on Oct. 21. Amazon says upgrading to the fixed PHP versions is the only complete fix; if you cannot patch right away, it suggests blocking multi-part file uploads after testing.

If your website runs on WordPress, it runs on PHP, and so does any quote form, booking form or customer portal built on it. Take a 15-person plumbing company with a WordPress site on $30-a-month shared hosting and a web contractor at an assumed $100 an hour. Managed WordPress hosts usually patch PHP for you. On cheaper shared plans you may have to pick the PHP version yourself in the control panel. Sites stuck on old, unsupported PHP versions may have no patch at all and need a real upgrade, which could run 4 to 10 contractor hours. A hacked site can be defaced, used to send spam, or leak the names and addresses your quote form collects. Agencies that host client sites have the most exposure and should audit every site. Hosted apps such as your field-service or accounting software are the vendor's job to patch.

On Oct. 22, 2026, the U.S. Department of Labor announced a consent judgment in federal court requiring New Jersey drywall installer P & B Partitions Inc. to pay $725,000 in back wages, damages and civil money penalties to 48 workers. The Wage and Hour Division found the company did not pay employees for pre-shift work while they waited for transportation to jobsites, violating the Fair Labor Standards Act's overtime provisions.

The DOL's headline says $700K and its text says $725,000; the split between wages, damages and penalties is not given. The risk is the morning gap. Crews meet at the shop, load materials, wait for the truck, and the clock starts at the jobsite. Take an 18-person remodeling contractor with 12 field staff at $28/hr who already work 40-hour weeks. Twenty unpaid minutes a morning is overtime at $42/hr. That is $14 per worker per day. Over 240 workdays it comes to $3,360 per worker and about $40,000 a year for the crew. The FLSA lets workers recover two years of back pay, or three if the violation is willful, plus an equal amount in liquidated damages. Two years in this example is about $161,000 before penalties and legal fees. This matters to any trade that musters at a yard or shop. Firms whose crews drive straight from home to the site, with no shop stop, can mostly ignore it.

Google said on Oct. 22, 2026 that Gemini-powered speech translation in Google Meet now handles any combination of 63 languages in a single meeting, with automatic detection of the spoken language and per-listener controls, on web, Android and iOS. It is included in Business Standard and Plus, Enterprise Standard and Plus, and Frontline Plus, is capped at 90 minutes per meeting on base plans, and rolls out to Rapid Release domains from Oct. 22 and Scheduled Release domains from Nov. 2.

Only the meeting organizer needs an eligible plan. Everyone else in the call gets translation, including guests from other domains. Take a 28-person commercial cleaning company with 4 office staff and 24 cleaners, 12 of whom prefer Spanish and 3 Portuguese. The ops manager, on Business Standard, runs a 45-minute weekly safety huddle on Meet. Each cleaner can now switch on translation in the Meet app and hear the manager in Spanish or Portuguese, and the manager hears their questions in English. One meeting, no interpreter, well inside the 90-minute cap. The catches are real. It does not work for anyone who dials in by phone, so cleaners must join through the updated Meet app. Recordings are not translated. Speech from a conference-room Meet device is not translated for remote listeners. Google publishes no accuracy figures for trade jargon. Landscaping, cleaning and remodeling firms with bilingual crews should care. So should accounting and law firms with non-English-speaking clients. All-English teams, Business Starter shops, and businesses that meet on Zoom or Teams can ignore it.

As of Oct. 22, 2026, ServiceTitan's pricing page lists three per-technician packages, Starter, Essentials and The Works, and each one says "Request Pricing" instead of a dollar figure. The page describes The Works as the full ServiceTitan suite and says the software is trusted by more than 100,000 contractors.

The page changed on Oct. 22, but the visible text does not show a new price, a new tier or an effective date. Treat this as a reminder, not a price move. ServiceTitan still charges per technician and still does not publish the number. That matters most if you are within 90 days of renewal, or if you are comparing ServiceTitan against field-service tools that do post their prices. Example: a 20-person HVAC shop with 8 techs. Assume $300 per tech per month. That is our assumption, not ServiceTitan's figure. At that rate the shop pays $2,400 a month, or $28,800 a year. A move from Essentials to The Works, or a renewal increase of $25 per tech, adds $2,400 a year at that size. Without a written quote you have nothing to compare. If you are not on ServiceTitan and not shopping for it, you can ignore this.