Category: Security
The data loss risk hiding in AI prompts
Data loss prevention (DLP) is still largely frozen in place. But what worked well in 2016 doesn’t work so well today. Back then, data loss occurred in recognizable ways. Someone sent an email, hackers gained access, or a file left...
Cybersecurity Threat Advisory: Cisco ASA & FTD VPN Flaw
A high-severity vulnerability affecting Cisco Secure Firewall ASA and FTD is under active exploitation. Tracked as CVE-2026-76418, the flaw poses a significant availability risk to vulnerable, internet-facing devices. What is the threat? The primary threat is CVE-2026-76418, a flaw in...
Cybersecurity Threat Advisory: Critical Brotli RCE flaw
A critical buffer-overflow vulnerability, tracked as CVE-2026-111497 and referred to as “Node2Shell,” affects Google Brotli and numerous applications and platforms that rely on Brotli decompression. Attackers are actively exploiting the vulnerability, which may allow remote execution of arbitrary code on...
Why MSPs need AI governance, not AI bans
The instinct is understandable. A client hears that employees are pasting sensitive data into ChatGPT, panics, and says the words every MSP has heard: “Just block it.” It feels like a decision. It feels like control. It is neither. The...
Cybersecurity Threat Advisory: Critical PHP2Shell RCE vulnerabilities
PHP recently shipped an out-of-cycle emergency release fixing two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, collectively dubbed PHP2Shell. Both are rated 9.2 on CVSS v4.0 and can allow unauthenticated attackers to run code on vulnerable web servers. The...
Cybersecurity Threat Advisory: Trojanized PuTTY installers target IT admins
Threat actors are using malicious Google Search ads to distribute weaponized PuTTY installers that target IT administrators. These ads direct victims to fake websites that mimic legitimate PuTTY download pages. Once installed, the trojanized software deploys malware that enables remote...
Your clients are already using AI, you just don’t know it yet
What better way to mark Cybersecurity Awareness Month than by talking about one of today’s most overlooked workplace risks: AI. AI is now woven into most workplace IT environments. Employees use ChatGPT, Copilot, Gemini, and dozens of other AI tools...
Cybersecurity Threat Advisory: ConnectWise Cloud Backup compromise
ConnectWise Cloud Backup (formerly SkyKick) has confirmed unauthorized access to application credentials used by its backup platform. Attackers reportedly used the compromised credentials to access Microsoft 365 tenants where the application was installed. As a result, they may have gained...
Cybersecurity Threat Advisory: Ivanti Connect Secure zero-day exploited in active attacks
Researchers have identified CVE-2026-104935, a high-severity authentication bypass and remote code execution (RCE) vulnerability affecting Ivanti Connect Secure (ICS) VPN appliances. The vulnerability is being actively exploited in the wild and allows attackers to execute arbitrary commands without credentials or...
Cybersecurity Threat Advisory: Milk Dragon AiTM phishing kit
Security researchers have identified Milk Dragon (also known as NaiLong), a Phishing-as-a-Service (PhaaS) platform being used in large-scale social media fraud campaigns. By impersonating well-known brands and using realistic online shopping experiences, the threat enables attackers to steal payment card...
