Category: Security
Federal IT reviews signal fresh MSP opportunities ahead
Federal IT contractors have been facing major changes recently as part of the government’s broader effort to reduce overall spending. Leading systems integrators such as Accenture and Booz Allen are reportedly being asked to identify billions of dollars in savings...
Cybersecurity Threat Advisory: Critical ASUS vulnerabilities
Researchers have discovered two vulnerabilities within the ASUS DriverHub driver management tool that can allow malicious sites to execute commands on targeted devices. They have found no evidence that threat actors have exploited these vulnerabilities in real-world scenarios. Review the...
An MSP’s guide to building cybersecurity incident response plan
Last week, we spoke with industry experts about why every organization needs a solid cybersecurity incident response plan (CIRP). This week, we’re taking it a step further—breaking down the essential steps Managed Service Providers (MSPs) should follow to build a...
SOC Threat Radar — May 2025
In this edition of the SOC Threat Radar, Barracuda Managed XDR’s security solutions, threat intelligence, and SOC analysts highlight key developments from the past month that organizations should have on their radar, including: A 38% rise in attacks targeting FortiGate...
Cybersecurity Threat Advisory: Cisco critical vulnerability
Cisco has released software patches to fix a critical security flaw, CVE-2025-20188, affecting its IOS XE Wireless Controller software. With a maximum CVSS score of 10.0, the vulnerability could enable unauthenticated remote attackers to gain full root access to impacted...
Cybersecurity Threat Advisory: Critical Commvault Command Center vulnerability
Commvault Command Center has been impacted by a critical security vulnerability, CVE-2025-34028, with a CVSS score of 10. This vulnerability enables remote code execution (RCE). Review the details of this Cybersecurity Threat Advisory to minimize the risk from this threat....
Cybersecurity Threat Advisory: BYOI endpoint detection and response bypass
A sophisticated attack technique known as “Bring Your Own Installer” (BYOI) has been employed by threat actors to bypass SentinelOne’s tamper protection, facilitating the deployment of Babuk ransomware. This method leverages legitimate installers to execute malicious payloads, effectively evading endpoint...
Cybersecurity incident response plan: An essential MSP practice
Managed service providers (MSPs) are often tasked with providing cybersecurity for their clients. But what happens when a cyberattack happens? Usually, decisions need to be made rapidly and actions taken within minutes. That’s why having incident response plans is critical....
Cybersecurity Threat Advisory: Commvault Web Server vulnerability
A high-severity Commvault Web Server vulnerability, CVE-2025-3928, with a CVSS score of 8.7, has been disclosed. To mitigate your risk, continue reviewing this Cybersecurity Threat Advisory. What is the threat? CVE-2025-3928 affect Commvault Web Server versions prior to 11.36.46, 11.32.89,...
Email security under siege: How MSPs can win the war against phishing
Phishing attacks are no longer the clumsy attempts of the past. They’re evolving at an alarming rate, forcing managed service providers (MSPs) to radically adapt their email security strategies to protect their customers effectively. Automated phishing tools, the weaponization of...
