Netchex

A high-priority vulnerability is currently impacting Apple devices (iPhone, iPad, Mac, Apple Watch, Apple TV, and Apple Vision). While Netchex has not been impacted, we are sharing this information so you can take immediate steps to protect your organization and your employees. ### Immediate Actions 1. Update All Hardware: Ensure every Apple device (work and personal) is updated to the latest software version released after February 11, 2026. 2. Audit Connected Devices (on iPhone/iPad): - Text Message Forwarding: Go to Settings > Messages > Text Message Forwarding. Disable any unrecognized devices immediately. - Linked Devices: Go to Settings > \[Your Name]. Scroll to the bottom to review all signed-in devices. Remove any hardware you do not recognize. 3. Audit via iCloud.com (Web): - Log in to icloud.com/find. - Click All Devices at the top of the screen. - Review the list and select Remove from Account for any unrecognized or old hardware. ### Securing Your Netchex Account Our team is actively monitoring for unusual activity and will contact any impacted users directly. We strongly recommend you take these proactive steps within your Netchex account: - Turn on Multi-Factor Authentication (MFA): Navigate to Account Management -> Multi-Factor Authentication to add a vital extra layer of security. - Review your Master Audit Report: Go to Reports -> Audit to check for any…

We are pleased to introduce this upgraded portal, replacing our previous site at security.netchex.com. This transition was designed to streamline your experience, making it easier to find our certifications and compliance data. New Feature: AI-Powered Q&A This portal now supports AI chat functionality. You can use the chat interface to ask questions directly about our security controls or specific details contained within our documents, getting you the answers you need faster than ever. Please remember to update your bookmarks to trust.netchex.com.

Hi everyone, we want to address the recent supply chain attack that has been nicknamed “Shai-Hulud” and assure you that Netchex is not impacted. What Happened A recent and widespread supply chain attack has been identified, impacting numerous software packages. You can read more about the specifics of the attack in this TechRadar article. Netchex Is Not Affected We want to be clear that our team has thoroughly investigated this matter and we can confirm that Netchex is not affected by this attack. Our systems and your data remain secure. We have taken the following steps to ensure this: - Internal Code Scanning: We have robust internal controls in place to continuously scan all of our code dependencies for any potential issues. - Third-Party Verification: A third-party security provider has also scanned our code and confirmed that none of the impacted packages are being used. - Continuous Monitoring: We utilize a Security Information and Event Management (SIEM) platform to monitor for any unusual activity across our systems. - Secure Storage: All of our secrets are securely stored using Azure Key Vaults. What You Should Do While Netchex is not affected, we recommend that you check in with your other critical vendors to ensure that they are also aware of this attack and have taken the necessary steps to protect your data. Please do not hesitate to reach out to our support team…

Many businesses across the globe are currently experiencing outages due to an update released by a popular security vendor, Crowdstrike. As a current client or a business considering Netchex, we believe it is vital for you to know: 1. This event has not impacted Netchex services. Netchex does not utilize Crowdstrike for any internal services, and we are currently monitoring our critical vendors for any downstream impact. 2. If this event has impacted you, Crowdstrike has released guidance on how to recover. In the meantime, you and your employees can still access Netchex on non-Windows, personal, and mobile devices.

Several national payroll companies have become aware that a phishing campaign is currently being conducted against clients and their users using Google Ads to steal their login credentials. We are advising everyone to use and bookmark this direct link to the Netchex login portal: https://na3.netchexonline.net/n/Login/#/ Do not use Google to search for the Netchex login portal. As a precautionary measure, we advise any employees who may have entered credentials into a website found through Google to change their passwords immediately. This will help safeguard their personal and professional information. Furthermore, we have already taken steps to request the removal of the fraudulent website from Google search results. While this process may take some time, we are committed to ensuring that our clients are protected from such malicious activities. If you have any further questions or require additional assistance, please do not hesitate to contact us. We are here to support you and ensure the security of your data.