Identity & access · News & analysis
Microsoft 365 Token-Replay Cases Show Why Password Resets Leave Cleanup Unfinished
Huntress’s investigation connects stolen sessions with rogue devices, altered MFA methods and hidden mailbox rules.
NEWS · ALERTS · RESEARCH
Professional services
Original cybersecurity reporting and practical analysis, alongside headlines from trusted publications, agencies and researchers.
Original reporting & analysis
Ransomware · News & analysis
SafePay Advisory Puts Backup Administration Inside the Ransomware Threat Model
An international advisory describes attacks on recovery infrastructure, giving businesses a concrete test for who can alter their backups.
Industry & business · News & analysis
Mave’s $34 Million Launch Puts Investigation Evidence at the Center of the AI SOC Pitch
The startup promises to connect work across existing security tools. Buyers should test whether its conclusions remain inspectable when evidence is incomplete.
MSP / MSSP · News & analysis
Witness Gives MSPs a Way to Check the Build Behind a Software Delivery
The open-source attestation project offers a concrete starting point for providers that build or package client software, with policy ownership as the key operational decision.
Vulnerabilities & patches · News & analysis
Firefox Certificate Update Tests How Managed Browsers Receive Emergency Protections
Mozilla’s October 20 release brings a certificate blocklist into the browser package for systems that cannot receive the normal remote update.
Industry & business · News & analysis
Proofpoint’s Varonis Deal Puts Data Access at the Center of Its Next Chapter
The proposed $6.3 billion acquisition links two security portfolios, while customers face a longer timetable for concrete integration decisions.
MSP / MSSP · News & analysis
MSP GLOBAL’s Proactive Security Agenda Raises a Practical Question: Who Acts?
This week’s managed-services gathering puts exposure reduction and AI on the agenda. Buyers need those themes translated into accountable work.
Ransomware · News & analysis
Ransomware Investigations Trace a Route From VPN Access to Virtual Servers
Unit 42’s October update makes virtualization management a necessary part of investigating affected GlobalProtect gateways.
Data breaches · News & analysis
Gyazo’s Final Breach Report Puts Screenshot Metadata on the Retention Agenda
Helpfeel separates account records, image metadata and confirmed image access, giving businesses a clearer basis for reviewing shared screenshots.
Data breaches · News & analysis
Pediatric Data-Breach Settlement Puts Security Vendor Responsibilities in Focus
New York and Connecticut announced a settlement involving Boston Children’s Health Physicians and its IT services provider.
Identity & access · News & analysis
Auth0.js Fix Restores a Check on How Recently a User Signed In
The October advisory concerns applications that request a fresh authentication event, with implications for sensitive account actions.
AI security · News & analysis
Anthropic’s Self-Assessment Research Draws a Line Between Detecting Misuse and Blocking It
New results describe an efficient review signal, while acknowledging that the same mechanism is not a dependable standalone defense.
MSP / MSSP · News & analysis
ConnectWise Cloud Backup Incident Leaves MSPs Facing Tenant Reviews and a Recovery Gap
Services remained suspended early Monday as Huntress reported wider authentication activity and warned that credentials added to other applications need separate investigation.
Threat intelligence · News & analysis
North Korean IT Worker Crackdown Puts Remote Hiring Controls to the Test
New FBI guidance calls for checks across the employment lifecycle as facilitators take on a wider role in fraudulent hiring.
Vulnerabilities & patches · News & analysis
Exploited Windows Shell Flaw Gives October Patching a Clear First Priority
Microsoft confirms exploitation of CVE-2026-96951; businesses should establish which affected systems actually received the applicable fixes.
Identity & access · News & analysis
Okta Sets Zendesk Provisioning Migration Dates as OAuth Replaces Basic Authentication
The change affects account provisioning rather than single sign-on, making lifecycle testing the important acceptance check.
Industry & business · News & analysis
CyberCatch Deal Clears Securityholder Vote as Customers Await Closing
The October 14 approval advances Datavault AI’s proposed acquisition, with final approvals still outstanding.
Policy & compliance · News & analysis
NIST’s Career Week Gives Employers a Reason to Rethink Cybersecurity Hiring
The October 19–24 campaign connects career exploration with a practical management question: what work does a new hire actually need to do?
Cybercrime & fraud · News & analysis
Money-Laundering Guilty Plea Exposes the Business Behind Cyber Theft
The Your Mule Cashout case connects stolen business funds with a recruitment and transfer operation, underscoring the need to join technical response with payment controls.
Identity & access · News & analysis
Okta Event-Hook Postmortem Highlights a Blind Spot in Identity Automation
An October postmortem reports delayed and dropped events, showing why access workflows need verification beyond successful sign-ins.
Industry & business · News & analysis
Netsec’s Funding Round Backs a Single-Operator Model for IT and Security
A raise exceeding $10 million puts service ownership, automation and the economics of managed security in the spotlight for mid-market buyers.
MSP / MSSP · News & analysis
WatchGuard’s October Platform Rollout Gives MSPs an Automation Test
New investigation, application-discovery and access features put the focus on how managed providers validate changes across customer environments.
AI security · News & analysis
Anthropic’s Free OSS Scanner Moves the Bottleneck From Discovery to Triage
An optional stream of unreviewed AI findings gives open-source maintainers faster access to potential flaws—and a new decision about how much investigation they can absorb.
Vulnerabilities & patches · News & analysis
Atlassian File-Access Flaw Puts Self-Hosted Collaboration Systems on the Patch List
A critical advisory spans eight Atlassian products, making a complete installation inventory the first response task.
Ransomware · News & analysis
MonsterCloud Charges Put Ransomware Recovery Promises Under Scrutiny
Federal prosecutors allege that a recovery provider secretly paid attackers while selling clients a different explanation.
Cybercrime & fraud · News & analysis
U.S. Reward Offer Renews Attention on the HAFNIUM Investigation
Rewards for Justice seeks information on Zhang Yu as the case highlights the lasting value of stolen research and correspondence.
AI security · News & analysis
AWS’s AI Triage Guidance Puts Evidence Ahead of Confident-Sounding Findings
New guidance describes repository checks and deployment context for assessing AI-generated vulnerability reports.
MSP / MSSP · News & analysis
Power BI Phishing Shows Why MSPs Must Track Who Owns Remote Access
Huntress describes trusted-service lures followed by multiple unauthorized ScreenConnect clients on affected endpoints.
Vulnerabilities & patches · News & analysis
FortiMail Zero-Day Forces a Decision Before Patches Arrive
Fortinet reports active exploitation of an email-security flaw and directs customers to workarounds while fixed releases remain forthcoming.
Threat intelligence · News & analysis
AI Policy Invitations Become a Doorway to Cloud Accounts
Proofpoint’s new TA419 research puts trusted professional outreach under scrutiny at universities, think tanks and law firms.
MSP / MSSP · News & analysis
Auvik and Acronis Plan a Shared Console for Network and Endpoint Management
The September partnership targets January 2027 availability, giving MSPs time to test access boundaries and service workflows before changing their toolsets.
AI security · News & analysis
A Patched Manus Flaw Shows Why AI Email Access Needs Tighter Boundaries
Salt Labs’ October 1 research describes a repaired email-to-code attack. For businesses connecting AI agents to inboxes, the practical question is how much authority each task receives.
Data breaches · News & analysis
DIVD Links Its Breach to Zammad Zero-Days as Investigation Continues
The Dutch security organization has identified an entry point but has not yet closed its investigation into the affected information.
Identity & access · News & analysis
Entra’s October Sign-In Change Calls for a Browser-Extension Check
Microsoft plans tighter script controls on browser sign-in pages; businesses should test tools that modify the authentication experience.
AI security · News & analysis
OpenAI’s Distillation Disclosure Raises Questions for AI Service Providers
A newly disclosed extraction campaign illustrates why providers need to protect intermediate model artifacts as well as final answers.
MSP / MSSP · News & analysis
Signed Remote-Support Tools Are Becoming a Phishing Foothold
Microsoft describes attackers using MSP360 and ScreenConnect together, making authorization more important than a familiar product name.
Industry & business · News & analysis
Wiz’s New MSP Program Makes Service Accountability a Buying Question
Centralized tenant management and consumption billing promise a more scalable service model; customers still need clear ownership of remediation.
Threat intelligence · News & analysis
Lunex Shows Why a Running Security Agent May Still Be Blind
Ontinue’s research describes an information stealer that interferes with endpoint visibility and persists beyond a simple file removal.
Identity & access · News & analysis
Blueprint Alliance Puts AI Agent Ownership at the Center of Identity Security
A cross-vendor initiative proposes a shared architecture for agents, while implementation and interoperability remain the tests ahead.
MSP / MSSP · News & analysis
Cork Cyber Expands Automated Remediation, Putting Patch Results Under the Microscope
New automation claims give MSPs a practical buying question: what exactly does a closed ticket prove?
Industry & business · News & analysis
Barracuda Targets the Small-Business AI Security Gap
An upcoming AI governance product puts a familiar buying question in focus: can a lean IT team prove its controls work in everyday use?
Cybercrime & fraud · News & analysis
Rydox Guilty Plea Shows the Long Afterlife of Stolen Personal Data
A federal prosecution illustrates why identity information can remain useful to criminals well beyond the incident that first exposed it.
Cloud security · News & analysis
Cloud Security Reviews Need to Follow the Token, Not Just the Login
Final CISA and NIST guidance brings token issuance, validation and lifecycle controls into the same security conversation.
AI security · News & analysis
SalesBleed Puts the AI Agent’s Data Permissions Under Scrutiny
Patched Agentforce research shows how an ordinary external business record can become an instruction an AI system should never obey.
MSP / MSSP · News & analysis
MSP Process Buys Triggr as Service-Desk Automation Moves Closer to Identity
The acquisition combines workflow ambitions with user verification, giving providers a reason to examine how automated requests are authorized.
MSP / MSSP · Company profile
Beyond the Help Desk: UMIT Technologies’ Push Into AI, Cybersecurity and Defense
From its Virginia managed IT roots to SBA 8(a) certification, UMIT Technologies is building a broader future around business technology, cybersecurity and practical AI.
Headlines from our sources
9 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source
The Record
UK Legal Aid Agency hack worse than thought, with stolen records dating back to 1978 ↗
Industry newsSecurityWeek
UK Legal Aid Agency Hack Scope Widens After Forensic Review ↗
Industry newsDataBreaches.net
Legal Aid Agency cyberattack: Compromised data goes back to 1978 ↗
Industry newsWIRED Security
ICE Agent at NYC Shooting Has History of Alleged Violence and Illegal Arrests ↗
Industry newsCloudflare Blog
Building for good: How civil society organizations are automating on Cloudflare ↗
ResearchCloudflare Blog
One year later: Sovereign AI and the fight for choice ↗
ResearchPalo Alto Networks Unit 42
3 Consulting Myths Debunked by Unit 42 Experts ↗
ResearchCisco Talos
Trust and the enticing consultancy offer ↗
ResearchUK NCSC
Helping small businesses with free, hands-on cyber consultancy ↗
AgencyCross-industry security developments
These broader alerts and reports apply across business sectors; they are not reports of incidents specific to this industry.
1257 sourced updates · Publication dates or labeled coverage weeks shown · Read full coverage at the source
The Hacker News
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass ↗
Industry newsSecurityWeek
Long-Hidden Flaws Patched in EPICS Research Facility Control Software ↗
Industry newsThe Hacker News
American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed ↗
Industry newsSecurityWeek
Hackers Start Probing Fresh Oracle EBS Vulnerability ↗
Industry newsSecurityWeek
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts ↗
Industry newsThe Hacker News
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits ↗
Industry newsSOCRadar
n0n Ransomware: Inside an AI-Assisted Extortion Operation ↗
ResearchThe Hacker News
FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money Laundering ↗
Industry newsThe Hacker News
Japan's GMO Offers $1 Million Bounty to Catch Hackers Behind FX Trading Cloud Breach ↗
Industry newsHelp Net Security
Bellini Capital CISO on AI security governance and the limits of patching faster ↗
Industry newsThe Hacker News
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers ↗
Industry newsThe Hacker News
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws ↗
Industry newsThe Hacker News
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges ↗
Industry newsHelp Net Security
NIST starts the countdown to retire quantum-vulnerable encryption ↗
Industry newsCIS / MS-ISAC
Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution ↗
Threat sharingSANS Internet Storm Center
ISC Stormcast For Wednesday, October 28th, 2026 https://isc.sans.edu/podcastdetail/10154, (Wed, Oct 28th) ↗
ResearchCIS / MS-ISAC
A Vulnerability in Brotli Library Could Allow for Remote Code Execution ↗
Threat sharingAWS Security Blog