MSP

Companies seeking an MSP doubt their ability to spot cyberattacks

Barracuda Networks, MSP, News, report, resilience, Risk Management /

Companies seeking an MSP doubt their ability to spot cyberattacks 2026-11-09 at 08:00 By Anamarija Pogorelec Businesses looking to outsource cybersecurity want providers that can help them recover from attacks, manage AI risks, and explain what security problems mean for their operations, according to Barracuda What MSP Customers Need Next report. What MSP customers need […]

Companies seeking an MSP doubt their ability to spot cyberattacks Read More »

ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access

backup, ConnectWise, Don't miss, Hot stuff, Huntress, Microsoft, Microsoft 365, MSP, News /

ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access 2026-10-19 at 16:58 By Zeljka Zorz American software company ConnectWise is contending with a security incident that has allowed unknown attackers to use its application identities to break into organizations’ Microsoft 365 accounts. The intruders used a compromised credential belonging to the ConnectWise […]

ConnectWise suspends Cloud Backup service after attackers abuse its Microsoft 365 access Read More »

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255)

Don't miss, enterprise, Hot stuff, MSP, News, security update, SonicWall, vulnerability /

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) 2026-10-07 at 13:37 By Zeljka Zorz SonicWall has patched four vulnerabilities in its popular Secure Mobile Access (SMA) 1000 series of appliances, including one (CVE-2026-102255) that could allow remote unauthenticated attackers “to direct the appliance to issue requests on their behalf and reach internal functionality […]

SonicWall fixes pre-auth SSRF flaw in SMA 1000 appliances (CVE-2026-102255) Read More »

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances

0-day, access management, Arista Networks, Check Point, CISA, CVE, Don't miss, F5 Networks, firewall, Hot stuff, MSP, News, SMBs /

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances 2026-09-23 at 13:22 By Zeljka Zorz Check Point Software has released emergency fixes for a critical Check Point Management Server vulnerability (CVE-2026-93616) that has been exploited as far back as July 23, 2026. The company also confirmed that a pre-authentication remote code […]

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances Read More »

N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577

Don't miss, Hot stuff, Huntress, Microsoft, MSP, N-able, News, remote management, Sophos /

N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577 2026-08-10 at 14:34 By Zeljka Zorz To help customers fend off ongoing attacks, N-able released a second security hotfix for N‑central, its monitoring and management (RMM) solution popular with managed service providers (MSPs). “Hotfix 2 is required, even if you already applied the earlier hotfix. […]

N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577 Read More »

Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)

Don't miss, Hot stuff, Huntress, MSP, N-able, News, remote management, vulnerability /

Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577) 2026-08-03 at 17:33 By Zeljka Zorz Attackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) in N-able N-central, a remote monitoring and management (RMM) solution widely used by managed service providers, to gain access to managed endpoints. How the flaw was discovered “On July 31, 2026, […]

Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577) Read More »

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)

Blackpoint Cyber, CISA, credentials, data theft, Don't miss, Horizon3.ai, Hot stuff, Linux, macOS, Malware, MSP, News, remote management, SimpleHelp, vulnerability, Windows /

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558) 2026-06-30 at 13:25 By Zeljka Zorz Attackers are exploiting CVE-2026-48558, a recently patched authentication bypass vulnerability in SimpleHelp RMM, to drop the novel Djinn Stealer malware on victim computers. The malware is capable of targeting Windows, macOS, and Linux systems, and “collects credentials associated with cloud […]

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558) Read More »

SimpleHelp RMM flaw could give attackers full access to managed endpoints (CVE-2026-48558)

Don't miss, enterprise, Horizon3.ai, Hot stuff, MSP, News, remote management, SimpleHelp, SMBs, vulnerability /

SimpleHelp RMM flaw could give attackers full access to managed endpoints (CVE-2026-48558) 2026-06-16 at 16:33 By Zeljka Zorz A critical vulnerability (CVE-2026-48558) in SimpleHelp, a popular remote monitoring and management (RMM) tool, can be exploited remotely by unauthenticated attackers to create a new “Technician” account and use it to remote into managed endpoints, execute scripts, […]

SimpleHelp RMM flaw could give attackers full access to managed endpoints (CVE-2026-48558) Read More »

Unpatched ScreenConnect servers open to attack (CVE-2026-3564)

ConnectWise, Don't miss, Hot stuff, MSP, News, remote management, vulnerability /

Unpatched ScreenConnect servers open to attack (CVE-2026-3564) 2026-03-20 at 11:44 By Zeljka Zorz ConnectWise has patched a critical vulnerability (CVE-2026-3564) that could enable attackers to hijack ScreenConnect sessions by abusing ASP.NET machine keys to forge trusted authentication. About CVE-2026-3564 The ScreenConnect remote access platform is popular with managed service providers, IT departments, and technology solution […]

Unpatched ScreenConnect servers open to attack (CVE-2026-3564) Read More »

SolarWinds fixes critical Web Help Desk RCE vulnerabilities, upgrade ASAP!

Don't miss, Horizon3.ai, Hot stuff, MSP, News, security update, SMBs, SolarWinds, vulnerability, WatchTowr /

SolarWinds fixes critical Web Help Desk RCE vulnerabilities, upgrade ASAP! 2026-01-29 at 11:34 By Zeljka Zorz SolarWinds has fixed six critical and high-severity vulnerabilities in its popular Web Help Desk (WHD) support ticketing and asset management solution, and is urging customers to upgrade to v2026.1 as soon as possible. The vulnerabilities The WHD vulnerabilities fixed […]

SolarWinds fixes critical Web Help Desk RCE vulnerabilities, upgrade ASAP! Read More »

Product showcase: NAKIVO v11.1 advances MSP service delivery with secure multi-tenant management

backup, Don't miss, MSP, Nakivo, News, Product showcase /

Product showcase: NAKIVO v11.1 advances MSP service delivery with secure multi-tenant management 2025-12-19 at 08:24 By Help Net Security NAKIVO Backup & Replication v11.1 brings a host of benefits to MSPs and their clients. It eliminates the need for client-side port configuration, enhances security with encrypted multi-platform support, and introduces automated failover capabilities. These features […]

Product showcase: NAKIVO v11.1 advances MSP service delivery with secure multi-tenant management Read More »

Proofpoint Completes $1.8 Billion Acquisition of Hornetsecurity 

Funding/M&A, Hornetsecurity, M&A, M&A Tracker, Microsoft 365, MSP, Proofpoint /

Proofpoint Completes $1.8 Billion Acquisition of Hornetsecurity  2025-12-09 at 14:24 By Eduard Kovacs Enterprise cybersecurity giant Proofpoint has completed the acquisition of Germany-based Microsoft 365 security solutions provider Hornetsecurity. Financial details were not officially disclosed when news of the transaction came to light, but it was reported that Proofpoint would be paying $1 billion for […]

Proofpoint Completes $1.8 Billion Acquisition of Hornetsecurity  Read More »

UK’s new Cyber Security and Resilience Bill targets weak links in critical services

critical infrastructure, cyber resilience, data center, Don't miss, energy sector, healthcare, Hot stuff, legislation, MSP, News, public sector, transportation, UK /

UK’s new Cyber Security and Resilience Bill targets weak links in critical services 2025-11-12 at 18:17 By Zeljka Zorz The UK government has introduced the Cyber Security and Resilience Bill, a major piece of legislation designed to boost the country’s protection against cyber threats. The new law aims to strengthen the digital defenses of essential […]

UK’s new Cyber Security and Resilience Bill targets weak links in critical services Read More »

Inside the messy reality of Microsoft 365 management

access control, cybersecurity, identity management, Microsoft 365, MSP, News, report, Syncro /

Inside the messy reality of Microsoft 365 management 2025-10-20 at 07:00 By Anamarija Pogorelec Most MSPs agree that Microsoft 365 is now the backbone of business operations, but a Syncro survey shows that complexity, incomplete backups, and reactive security continue to slow their progress in managing it. About 60% of MSPs said Microsoft 365 powers […]

Inside the messy reality of Microsoft 365 management Read More »

Attackers are exploiting Gladinet CentreStack, Triofox vulnerability with no patch (CVE-2025-11371)

0-day, Don't miss, enterprise, file-sharing, Gladinet, Hot stuff, MSP, News, remote access, SMBs /

Attackers are exploiting Gladinet CentreStack, Triofox vulnerability with no patch (CVE-2025-11371) 2025-10-10 at 13:40 By Zeljka Zorz CVE-2025-11371, a unauthenticated Local File Inclusion vulnerability in Gladinet CentreStack and Triofox file-sharing and remote access platforms, is being exploited by attackers in the wild. While Gladinet is aware of the vulnerability and of its active exploitation, a […]

Attackers are exploiting Gladinet CentreStack, Triofox vulnerability with no patch (CVE-2025-11371) Read More »

ScreenConnect admins targeted with spoofed login alerts

Don't miss, Hot stuff, MFA, Mimecast, MITM, MSP, News, Sophos, spear-phishing /

ScreenConnect admins targeted with spoofed login alerts 2025-08-25 at 17:56 By Zeljka Zorz ScreenConnect cloud administrators across all region and industries are being targeted with fake email alerts warning about a potentially suspicious login event. The goal of the attackers is to grab the login credentials and MFA tokens of Super Admins: users who have […]

ScreenConnect admins targeted with spoofed login alerts Read More »

Vulnerabilities in MSP-friendly RMM solution exploited in the wild (CVE-2025-8875, CVE-2025-8876)

0-day, CISA, Don't miss, Hot stuff, MSP, N-able, News, remote management, vulnerability /

Vulnerabilities in MSP-friendly RMM solution exploited in the wild (CVE-2025-8875, CVE-2025-8876) 2025-08-14 at 13:33 By Zeljka Zorz Two vulnerabilities (CVE-2025-8875, CVE-2025-8876) in N-central, a remote monitoring and management (RMM) solution by N-able that’s popular with managed service providers, are being exploited by attackers. There are no public reports of exploitation, but the confirmation came from […]

Vulnerabilities in MSP-friendly RMM solution exploited in the wild (CVE-2025-8875, CVE-2025-8876) Read More »

Critical Wing FTP Server vulnerability exploited in the wild (CVE-2025-47812)

Censys, Don't miss, exploit, file-sharing, Hot stuff, Huntress, MSP, News, PoC, RCE Security, SMBs, vulnerability, Wing FTP server /

Critical Wing FTP Server vulnerability exploited in the wild (CVE-2025-47812) 2025-07-11 at 15:32 By Zeljka Zorz Threat actors are actively exploiting a recently fixed remote code execution vulnerability (CVE-2025-47812) in Wing FTP Server, security researchers have warned. Wing FTP Server and CVE-2025-47812 Wing FTP Server is a commercial file transfer server solution used by businesses, […]

Critical Wing FTP Server vulnerability exploited in the wild (CVE-2025-47812) Read More »

Attackers breached ConnectWise, compromised customer ScreenConnect instances

ConnectWise, cyber espionage, Don't miss, government-backed attacks, Hot stuff, MSP, News, remote access, tech support /

Attackers breached ConnectWise, compromised customer ScreenConnect instances 2025-06-02 at 20:19 By Zeljka Zorz A suspected “sophisticated nation state actor” has compromised ScreenConnect cloud instances of a “very small number” of ConnectWise customers, the company has revealed on Wednesday. “We have not observed any additional suspicious activity in ScreenConnect cloud instances since the patch was released […]

Attackers breached ConnectWise, compromised customer ScreenConnect instances Read More »

Attackers hit MSP, use its RMM software to deliver ransomware to clients

Don't miss, Hot stuff, MSP, News, Ransomware, remote management, SimpleHelp, SMBs, Sophos, vulnerability /

Attackers hit MSP, use its RMM software to deliver ransomware to clients 2025-05-28 at 14:36 By Zeljka Zorz A threat actor wielding the DragonForce ransomware has compromised an unnamed managed service provider (MSP) and pushed the malware onto its client organizations via SimpleHelp, a legitimate remote monitoring and management (RMM) tool. “Sophos MDR has medium […]

Attackers hit MSP, use its RMM software to deliver ransomware to clients Read More »

Scroll to Top