Tag: cybersecurity
The smart devices putting SMBs at risk
In 2026, an office is a web of connected devices. The office aquarium. The smart thermostat in the corner. The IP camera above the reception desk. The networked printer down the hall. Most people do not view these devices as...
AI drives changes to MSP certification
A certification many managed service providers (MSPs) use to validate their IT service practices now covers AI-enabled services, privileged identities, and third-party providers. The latest version of the Unified Certification Standard for Cloud and Managed Service Providers from MSPAlliance also...
The MSP guide to managing supply chain risk
In 2026, supply chain attacks have become one of the most feared threats in cybersecurity, and for good reason. When attackers compromise a vendor with privileged access to multiple environments, they do not just breach one organization. They can potentially...
How MSPs can bridge the security leadership gap
CISOs and SMBs are not a combination you often see. Not because SMBs don’t need security leadership. Regulatory pressure, cyber insurance requirements, and customer security questionnaires are making strategic security leadership a necessity. The challenge is cost. A skilled CISO...
The MSP playbook for agentic AI
For years, AI helped security teams detect threats faster while humans remained responsible for taking action. Agentic AI changes that model. Today’s tools can isolate endpoints, disable accounts, block traffic, and launch remediation workflows automatically. The speed benefits are clear,...
Cybersecurity Threat Advisory: Malicious Notepad++ plugins
CERT-UA has identified an ongoing campaign in which threat group UAC-0099 distributes trojanized Notepad++ bundles that install malware on Windows systems. The campaign primarily targets organizations in Ukraine and is linked to activity associated with APT44 (Sandworm). What is the...
Cybersecurity Threat Advisory: Credential-stealing RAT
Researchers have identified a new remote access trojan (RAT) called ChonkyChicken, which threat actors use to steal browser credentials, hijack active browser sessions, and move laterally across Windows networks. Barracuda advises organizations to focus on detection, monitoring, and security hardening,...
Deepfakes are now an MSP problem
Not long ago, creating a convincing deepfake required a team of specialists, weeks of production, and significant technical expertise. What a difference a few years make. That world is gone. According to the 2026 HYPR State of Passwordless Identity Authentication...
Cybersecurity Threat Advisory: SonicWall SMA1000 exploits
SonicWall has reported active exploitation of two SMA1000 zero-day vulnerabilities. Organizations should immediately install available hotfixes, as there are no workarounds. Read this Cybersecurity Threat Advisory for more details on how to protect you and your clients’ environments. What is...
Why MFA fatigue attacks keep working
MFA was supposed to be a virtual panacea. For a while, it worked well. But attackers found a reliable workaround that requires no sophisticated malware or cryptographic expertise—just patience and an understanding of human behavior. MFA fatigue attacks, also called...
