Category: Featured
Cybersecurity Threat Advisory: n8n vulnerability
The n8n workflow automation platform vulnerability, tracked as CVE‑2025‑68613, enables authenticated attackers to execute arbitrary code via expression injection in workflow definitions. Review this Cybersecurity Threat Advisory for actionable steps to mitigate your risk from this flaw. What is the...
Cybersecurity Threat Advisory: New SantaStealer malware
A new malware-as-a-service (MaaS) info-stealer, SantaStealer, is actively promoted on Telegram and underground forums, with operators reportedly beginning its release ahead of year-end 2025. Read this Cybersecurity Threat Advisory to learn how to reduce your risk from this emerging threat....
Cybersecurity Threat Advisory: WatchGuard Firebox firewall vulnerability
Attackers are actively exploiting a critical remote code execution (RCE) vulnerability in WatchGuard Firebox firewalls, tracked as CVE‑2025‑14733. Over 115,000 devices remain unpatched and exposed online, putting organizations at serious risk. Review this Cybersecurity Threat Advisory for remediation recommendations. What...
A look back at 2025, with an eye on 2026
It’s hard to believe 2025 is already nearing the rearview mirror. As the year winds down, SmarterMSP.com spoke with a variety of cybersecurity experts to reflect on this year’s major developments and what they anticipate as we head into 2026....
Cybersecurity Threat Advisory: SonicWall SMA 100 appliance vulnerability
A SonicWall SMA 100 vulnerability, tracked as CVE‑2025‑40602, is actively being exploited in the wild. SonicWall has issued patches, and CISA added the flaw to its KEV catalog, requiring federal agencies to patch by Dec. 24, 2025. Read this Cybersecurity...
Tech Time Warp: The transistor quietly slips on to the scene
Today it’s widely accepted one of the greatest — if not the greatest — inventions of the modern world is the transistor, and it’s well known that the defining demonstration of the transition took place Dec. 23, 1947. But this...
Cybersecurity Threat Advisory: Cisco AsyncOS zero-day vulnerability
Cisco has disclosed a zero‑day vulnerability in AsyncOS that is actively being exploited, with a CVSS of 10.0. The Cybersecurity and Infrastructure Security Agency (CISA) added the CVE to its KEV catalog. Review this Cybersecurity Threat Advisory to reduce exposure...
Customer management incentive programs fuel MSP growth
Customer retention has always been a priority for managed service providers (MSPs), but IT vendors are now placing even greater emphasis on it—and backing that focus with financial incentives. Doubling down on customer retention Amazon Web Services (AWS), for example,...
Cybersecurity Threat Advisory: FreePBX critical vulnerabilities
Several vulnerabilities in the FreePBX platform have been disclosed and patched, including a critical authentication bypass and flaws enabling SQL injection and arbitrary file upload. Read this Cybersecurity Threat Advisory for an analysis, remediation steps, and detection guidance. What is...
