Category: Featured
Cybersecurity Threat Advisory: Ivanti Connect Secure zero-day exploited in active attacks
Researchers have identified CVE-2026-104935, a high-severity authentication bypass and remote code execution (RCE) vulnerability affecting Ivanti Connect Secure (ICS) VPN appliances. The vulnerability is being actively exploited in the wild and allows attackers to execute arbitrary commands without credentials or...
Tech Time Warp: Duqu, the malware spy disguised as a Word doc
Fifteen years ago this month, reports of a new type of malware — Duqu — were opening the cybersecurity community’s eyes to the possibility of computer virus as tradecraft. Initially thought to target industrial control systems, Duqu was later discovered...
The industries driving managed services growth are changing
A report from Information Services Group (ISG) suggests that managed services growth remains steady year over year, but demand is shifting across industry sectors. ISG tracks new managed services contracts worth more than $5 million that are awarded each quarter....
The need for human intervention in AI governance
Around the 1st century CE, the Roman poet Juvenal posed the relatively well-known question, “Quis custodiet ipsos custodes?” This literally translates to, “Who will guard the guards themselves?” At the time, it was aimed at those in power and the...
Cybersecurity Threat Advisory: Milk Dragon AiTM phishing kit
Security researchers have identified Milk Dragon (also known as NaiLong), a Phishing-as-a-Service (PhaaS) platform being used in large-scale social media fraud campaigns. By impersonating well-known brands and using realistic online shopping experiences, the threat enables attackers to steal payment card...
Cybersecurity Threat Advisory: Critical SonicWall SMA1000 vulnerabilities
Barracuda Managed XDR’s Security Operations Center has observed increased scanning and profiling of internet-exposed SonicWall SMA 1000 Series appliances following the disclosure of four new vulnerabilities, including a critical pre-authentication server-side request forgery (SSRF) flaw (CVE-2026-102255, CVSS 10.0). Although SonicWall...
The AI supply chain: The vendor nobody is watching
As we sit in the middle of Cybersecurity Awareness Month, we’ve talked about supply chain attacks recently. But there’s one part of the chain that still gets overlooked, largely because it’s new. MSPs have spent years learning to scrutinize the...
How MSPs should measure the real ROI of AI in sales and marketing
AI sales and marketing tools love to tell you how much time they save. That number is usually based on the happy path: how long the task took before AI versus how long it takes after AI produces an output....
Pioneers in Tech: Remembering Dado Banatao, designer of the first PC chipset
You probably haven’t thought about your chipset lately—but if you were missing it, you would notice. Dado Banatao, who was born in 1946 in a Filipino farming village that lacked electricity, was the designer behind the first PC chipset. (For...
The smart devices putting SMBs at risk
In 2026, an office is a web of connected devices. The office aquarium. The smart thermostat in the corner. The IP camera above the reception desk. The networked printer down the hall. Most people do not view these devices as...
