Category: Security

Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: Google OAuth vulnerability

Cybersecurity Threat Advisory: Google OAuth vulnerability

In this Cybersecurity Threat Advisory, we’re looking at a critical Google OAuth vulnerability that allows ex-employees to maintain access to applications such as Slack and Zoom. After off boarding, attackers can achieve access by creating non-Gmail accounts using corporate email...

/ December 22, 2023
A look back at the top cybersecurity trends of 2023

A look back at the top cybersecurity trends of 2023

December is the time when we pause and reflect on the past year. Keeping with the mantra that the past is a prologue, looking at what occurred may help us understand and prepare for what is coming. This week, we’re...

/ December 21, 2023
AI is on track to transform managed services in 2024

AI is on track to transform managed services in 2024

Artificial intelligence is all the rage these days, but many managed service providers (MSPs) have been making use of it in some capacity for years. The main difference is with the rise of generative AI. It’s now becoming possible to...

/ December 20, 2023
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: SQL injection vulnerability with 3CX

Cybersecurity Threat Advisory: SQL injection vulnerability with 3CX

3CX advised customers that the SQL database integration has been disabled due to CVE-2023-49954. Businesses that use MongoDB or any of their web-based customer relationship management (CRM) integration templates are not affected. Read this Cybersecurity Threat Advisory to gain details...

/ December 19, 2023
HHS offers additional guidance to MSPs

HHS offers additional guidance to MSPs

An increasing number of MSPs are finding profitability in specialization. Some niche MSPs specialize in manufacturing clients, others with accounting firms, and others find plenty of work in education and healthcare. Of course, plenty of MSPs still carry a variety...

/ December 18, 2023
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: End-of-Life firewalls actively exploited

Cybersecurity Threat Advisory: End-of-Life firewalls actively exploited

Sophos recently addressed a critical vulnerability CVE-2022-3236 involving end-of-life (EOL) firewalls that had been actively exploited. The vulnerability prompted Sophos to release patches for unsupported firewalls after reports of successful attacks on these systems surfaced. Read this Cybersecurity Threat Advisory...

/ December 15, 2023
Cybersecurity Threat Advisory
Cybersecurity Threat Advisory: New malware campaign from Log4j security flaw

Cybersecurity Threat Advisory: New malware campaign from Log4j security flaw

The hacker group, known as Lazarus, is linked to a global campaign. It involves an old security flaw found in Log4j to deploy previously unknown remote access trojans (RATs) on compromised hosts. To learn more and limit the impact of...

/ December 14, 2023
Cyberthreat predictions for 2024 from Barracuda’s security frontline

Cyberthreat predictions for 2024 from Barracuda’s security frontline

Predicting the future is difficult, but you can anticipate what is likely to happen by looking at how things have evolved over the past year. This year again, Barracuda asked colleagues who work on the security frontline, from XDR and offensive...

/ December 14, 2023 / 10 Comments
Closing the Coverage Gap: Cyber insurance vs. cyber warranties

Closing the Coverage Gap: Cyber insurance vs. cyber warranties

Cyber insurance has become a must for businesses. However, the rise in premiums and application hurdles has prompted the emergence of cyber warranties, a crucial financial protection for MSPs and their customers.  Cyber insurance has become a critical form of...

/ December 13, 2023
Protecting users from web-based threats anytime, anywhere

Protecting users from web-based threats anytime, anywhere

Most cybersecurity news discusses email and web application attacks, ransomware, advanced threats, etc. Web security is discussed less often, even though most business users recognize it in action. There aren’t many strangers to messages like ‘access restricted’ or ‘download blocked’...

/ December 11, 2023