Month: August 2024
Neal Bradbury on driving innovation for the channel at Barracuda
For our long-term subscribers and those who have been in the managed services industry for the past two decades, you may be familiar with Neal Bradbury, who co-founded Intronis, a managed service provider (MSP) focused data protection company. Recently appointed...
Cybersecurity Threat Advisory: Exploited Jenkins vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability found in Jenkins, identified as CVE-2024-23897 with a CVSS score of 9.8, to its Known Exploited Vulnerabilities (KEV) catalogue. This vulnerability is a path traversal flaw within the...
Cybersecurity Threat Advisory: Exploited Microsoft zero-day flaw
The hacker group Lazarus recently exploited a patched, zero-day flaw in Microsoft Windows. The vulnerability, tracked as CVE-2024-38193 with a CVSS score of 7.8, is a Bring Your Own Vulnerable Driver (BYOVD) vulnerability for Winsock. Continue reading this Cybersecurity Threat...
Threat Spotlight: How ransomware for rent rules the threat landscape
This year’s annual review of ransomware attacks looks at the threat from two perspectives. First, for the third year running we’ve taken a global sample of reported ransomware attacks and analyzed what they tell us about ransomware attackers and their...
Tip Tuesday: Budget-friendly IT upgrades
As a managed service provider (MSP), you undoubtedly encounter clients who need to upgrade their IT capabilities but want to do so while staying mindful of their budgets. Sticking to a budget can: Prevent unwanted financial consequences. Show investors the...
Why one “human” call to action on your MSP’s website is the right approach
When was the last time you went to a website and handed over your email address to download a white paper, video, or eBook? You probably can’t remember. A few years back, sure, it might have made sense. These days,...
How MSPs can turn IT crisis management into opportunity
Newton’s third law of physics holds that every action has an equal and opposite reaction. The recent global IT outage, impacting roughly 8.5 million devices running older variants of Windows, is no exception. The two most immediate impacts will be...
Cybersecurity Threat Advisory: Critical SAP vulnerabilities
SAP issued its August 2024 security patch update which included two critical flaws that enable attackers to bypass authentication and fully compromise affected systems. Review the details in this Cybersecurity Threat Advisory to learn how you can protect your SAP...
Cybersecurity Threat Advisory: EDRKillShifter, a growing threat
A cybercrime group associated with the RansomHub ransomware has been observed using a newly developed tool named “EDRKillShifter” to disable endpoint detection and response (EDR) software on compromised systems. This tool is the latest in a growing list of EDR-killing...
Cybersecurity Threat Advisory: Another zero-click Windows TCP/IP vulnerability
Another critical zero-click Windows vulnerability, identified as CVE-2024-38063, has been discovered in the Windows TCP/IP stack, affecting all systems with IPv6 enabled. Review this Cybersecurity Threat Advisory now to mitigate potential exploitation and protect your systems. What is the threat?...
