Month: October 2026
Cybersecurity Threat Advisory: Critical PHP2Shell RCE vulnerabilities
PHP recently shipped an out-of-cycle emergency release fixing two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, collectively dubbed PHP2Shell. Both are rated 9.2 on CVSS v4.0 and can allow unauthenticated attackers to run code on vulnerable web servers. The...
Tech Time Warp: The long goodbye to Windows XP
Windows XP turns 25 this Oct. 25 — a fitting moment to remember that even beloved software eventually reaches its “end of life.” This week’s AI-driven discovery of a PHP vulnerability reinforces the lesson: Keep software updated, apply patches, and...
Cybersecurity Threat Advisory: Trojanized PuTTY installers target IT admins
Threat actors are using malicious Google Search ads to distribute weaponized PuTTY installers that target IT administrators. These ads direct victims to fake websites that mimic legitimate PuTTY download pages. Once installed, the trojanized software deploys malware that enables remote...
Why many MSPs aren’t seeing returns from AI
A survey of 153 decision-makers at managed service providers (MSPs) that manage Microsoft 365 and Azure cloud services found that 32 percent use AI internally. However, only 12 percent reported measurable productivity gains. The survey, conducted by market research firm...
Automate MSP lead follow-up and win more deals
Key takeaways Every uncontacted lead represents potential lost revenue. Calculate what’s at stake using your average contract value and lead close rate. Faster follow-up and consistent nurturing help MSPs convert more marketing leads into qualified sales opportunities. A structured lead...
Your clients are already using AI, you just don’t know it yet
What better way to mark Cybersecurity Awareness Month than by talking about one of today’s most overlooked workplace risks: AI. AI is now woven into most workplace IT environments. Employees use ChatGPT, Copilot, Gemini, and dozens of other AI tools...
Cybersecurity Threat Advisory: ConnectWise Cloud Backup compromise
ConnectWise Cloud Backup (formerly SkyKick) has confirmed unauthorized access to application credentials used by its backup platform. Attackers reportedly used the compromised credentials to access Microsoft 365 tenants where the application was installed. As a result, they may have gained...
Cybersecurity Threat Advisory: Ivanti Connect Secure zero-day exploited in active attacks
Researchers have identified CVE-2026-104935, a high-severity authentication bypass and remote code execution (RCE) vulnerability affecting Ivanti Connect Secure (ICS) VPN appliances. The vulnerability is being actively exploited in the wild and allows attackers to execute arbitrary commands without credentials or...
Tech Time Warp: Duqu, the malware spy disguised as a Word doc
Fifteen years ago this month, reports of a new type of malware — Duqu — were opening the cybersecurity community’s eyes to the possibility of computer virus as tradecraft. Initially thought to target industrial control systems, Duqu was later discovered...
The industries driving managed services growth are changing
A report from Information Services Group (ISG) suggests that managed services growth remains steady year over year, but demand is shifting across industry sectors. ISG tracks new managed services contracts worth more than $5 million that are awarded each quarter....
