Category: Security

How artificial intelligence is changing the threat landscape

How artificial intelligence is changing the threat landscape

the There has been a lot of talk about artificial intelligence (AI) and its impact on businesses. In this particular post, we will try to answer the most pertinent question: How has AI changed the threat landscape? This is like...

/ April 1, 2024
Data tampering is an underrated threat — get your backup ready

Data tampering is an underrated threat — get your backup ready

World Backup Day is an annual reminder of how important it is to have an up-to-date, readily accessible copy of everything that matters to your business. Resilient backups allow you to recover more quickly from data damage, disruption, or loss, particularly...

/ March 31, 2024
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: AWS ‘FlowFixation’ vulnerability

Cybersecurity Threat Advisory: AWS ‘FlowFixation’ vulnerability

The AWS “FlowFixation” vulnerability, while patched in September 2023, may still pose account hijacking risks within its Amazon Managed Workflows Apache Airflow (MWAA) service. Read this Cybersecurity Threat Advisory to learn the impact and security measures to mitigate risks associated...

/ March 28, 2024
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: GitHub supply chain attack

Cybersecurity Threat Advisory: GitHub supply chain attack

Malicious actors have launched a software supply chain attack targeting developers on the GitHub platform. Barracuda MSP recommends taking proactive measures detailed in this Cybersecurity Threat Advisory to mitigate the risk. What is the threat? A variety of techniques were...

/ March 28, 2024
CISA and NSA weigh in on best cybersecurity practices for MSPs

CISA and NSA weigh in on best cybersecurity practices for MSPs

The Cybersecurity and Infrastructure Security Agency (CISA), along with the National Security Agency (NSA), have defined a set of best cloud security practices that specifically call for managed services providers (MSPs) to provide more visibility into their IT operations. The...

/ March 27, 2024
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: New vulnerability in Apple M-chip

Cybersecurity Threat Advisory: New vulnerability in Apple M-chip

A new security exploit, GoFetch, was found in Apple’s M-chip architecture. It takes advantage of data memory-dependent prefetchers (DMPs) and could use the device as a new attack vector. Continue reading this Cybersecurity Threat Advisory to learn how you can...

/ March 27, 2024
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: StrelaStealer malware targets organizations

Cybersecurity Threat Advisory: StrelaStealer malware targets organizations

A new email threat, StrelaStealer malware, is targeting Europe and United States organizations. It spreads through phishing emails with attachments that execute its dynamic-link library (DLL) payload designed to steal email login data. This Cybersecurity Threat Advisory reviews the threat...

/ March 27, 2024
AI
An in-depth look at the role of AI in today’s email threats

An in-depth look at the role of AI in today’s email threats

IT business growth expert Richard Tubb and Senior Director of Product Marketing Nishant Taneja dive into the ever-evolving email threats in the age of AI during a recent webinar. They shared how AI has transformed phishing attacks as well as...

/ March 21, 2024
Tip Tuesday: Educating customers on the importance of backup for World Backup Day

Tip Tuesday: Educating customers on the importance of backup for World Backup Day

World Backup Day, recognized on March 31 every year, serves as a reminder for managed service providers (MSPs) to reprioritize their client’s data security. As the threat landscape continues to evolve and cyber attacks grow increasingly sophisticated, a robust and...

/ March 19, 2024
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: Fortinet FortiClientEMS critical vulnerability

Cybersecurity Threat Advisory: Fortinet FortiClientEMS critical vulnerability

Fortinet has released security updates for an unauthorized code execution vulnerability impacting their FortiClientEMS (Endpoint Management Server) product. The vulnerability, CVE-2023-48788, is related to a flaw that allows unauthenticated malicious actors to execute code or commands onto the server via...

/ March 18, 2024