Category: Security
Cybersecurity Threat Advisory: Critical Adobe Commerce flaw
A critical security vulnerability, tracked as CVE-2025-54236 (with a CVSS score of 9.1) is also known as “SessionReaper”. This vulnerability has been uncovered in Adobe Commerce and Magento Open Source. The flaw could allow cybercriminals to takeover customer accounts, putting...
The simplicity advantage: Why consolidating cybersecurity pays off
The cybersecurity landscape has reached a tipping point. While organizations continue to add new security tools to address emerging threats, they’re discovering that more tools often means more problems. This guide examines the costs of managing multiple security tools. It...
MSP security in the age of supply chain attacks
The numbers paint a stark picture of an escalating threat landscape. Supply chain attacks have been occurring at twice their long-term average in recent months, with Cyble researchers observing over 30 such attacks in April 2025 alone. Supply chain attacks...
WolfGPT: The “upgraded” dark AI for malware
As the landscape of cybercrime continues to evolve, WolfGPT is one tool that has emerged as a formidable player in the realm of malicious AI. A Telegram channel post by the group “KEP TEAM” marketed WolfGPT as an “upgraded version...
The hidden cost of a fragmented security stack
For manages service provider (MSP) customers, the promise of comprehensive cybersecurity protection often comes with an unexpected burden: managing their ever-expanding collection of security tools that don’t talk to each other. What starts as a strategic approach to layered defense...
Late-summer CISA alert roundup
At least once or twice a year I like to sift through the Cybersecurity and Infrastructure Security Agency (CISA) alerts and share some of the latest with SmarterMSP.com. The end of summer is one of the best times to do...
Threat Spotlight: Tycoon phishing kit reveals new techniques to hide malicious links
Phishing emails often feature malicious links (URLs) that lead victims to fake websites where they are infected with harmful software or tricked into giving away personal information such as their account credentials. Uncover how these attacks work in the latest...
Cybersecurity Threat Advisory: Passwordstate emergency patch released
Click Studios has released an emergency update for Passwordstate 9.9 to address a high-severity security vulnerability. According to the changelog, the flaw could be exploited to bypass authentication. Review the details in this Cybersecurity Threat Advisory to reduce your risk...
Cybersecurity Threat Advisory: Critical FreePBX zero-day vulnerability
Researchers have discovered a zero-day vulnerability in Sangoma FreePBX, identified as CVE-2025-57819. This flaw allows unauthenticated remote attackers to take control of affected PBX systems, potentially resulting in remote code execution (RCE), arbitrary database manipulation, and full system compromise. Review...
Back to school, back to scams part 2: Mitigation in motion
As students and faculty return to campuses across the nation this fall, they’re not the only ones getting back into the swing of things. Cybercriminals are also sharpening their pencils – or rather, their phishing emails and ransomware attacks –...
