The FBI warns that scammers are increasingly using artificial intelligence to improve the quality and effectiveness of their online fraud schemes, ranging from romance and investment scams to job hiring schemes.
Your Backups Might Not Save You: What a New Ransomware Recovery Study Means for Small and Mid-Sized Businesses
A new field study of 800+ real-world ransomware recoveries found that only four organizations hit their 24-48 hour recovery target — and the reason usually wasn't missing backups, it was an untested, incomplete recovery plan.
The First AI-Agent Data Breach Is Here: What Spain's Regulator Just Told Every Small Business
A European regulator has confirmed that autonomous AI agents are now breaking into real company systems, and its advice is a checklist any small or mid-sized business can start on this week.
Business Continuity and Disaster Recovery: Could Your Business Keep Running Tomorrow?
Data BackupBackups aren't the whole recovery plan. Learn how business continuity and disaster recovery help protect your operations when technology fails.
CMMC Audits Are Paused: Here's Why Your Compliance Risk Just Went Up, Not Down
The Pentagon just paused third-party CMMC audits and made it permanent policy, but a $507,000 settlement from June shows that "paused" doesn't mean "off the hook," and the lesson applies well beyond defense contracting.
22,000 Exchange Servers Are Still Exposed to a Live Hijack Flaw; And the Clock Is Running Out
A live, actively targetable flaw in on-premises Microsoft Exchange is sitting unpatched on roughly 22,000 servers worldwide and for many small and mid-size businesses, the safety net (extended security support) runs out next month, turning a patching task into a hard deadline.
Urgent N-central Hotfix: What Businesses Need to Know About the September 2026 Security Update
If your IT provider or internal technology team uses N-able N-central, there is a new security update you should know about.
N-able released N-central 2026.3 Hotfix 3 on September 5, 2026, to address two high-severity security vulnerabilities. The flaws could allow an unauthorized person to bypass authentication controls and potentially gain full access to the N-central platform.
The MSP Loyalty Paradox: Why Satisfied Clients Are Still Shopping Around
A new industry survey has turned up a number that should make every business using a managed service provider stop and think: 66% of organizations say they're considering switching MSPs within the next 12 months.
Here's the part that doesn't add up at first glance. That same survey found that 96% of those organizations say their current MSP genuinely acts in their best interests. Eighty-seven percent are satisfied with the strategic guidance they're getting. Seventy-nine percent are confident in how their MSP handles security and day-to-day operations.
CIRCIA Is Almost Here
After more than four years of waiting, the federal government's most far-reaching cybersecurity reporting law is finally close to taking real, enforceable shape. The Cybersecurity and Infrastructure Security Agency (CISA) has told stakeholders it intends to publish the long-delayed final rule for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) in September 2026 — and once that happens, the clock starts ticking toward mandatory reporting for hundreds of thousands of U.S. businesses.
AI Coding Tools Got Hacked Into Hacking: What It Means for Your Business
Hackers didn't need to write new malware, they just told a trusted AI coding assistant it was "running a test," and it happily helped them break into ten companies. If a $9-billion AI tool can be talked into attacking its own users, what's stopping the AI plugins already running inside your business?
CMMC Level 2 Is on Hold: What Defense Contractors Need to Know
If you've been preparing your company for a CMMC Level 2 certification assessment, you may have heard some confusing news: the federal government has put CMMC Phase II on hold.
That part is true.
What isn't true is that CMMC has disappeared.
On July 13, 2026, the Department announced the immediate suspension of CMMC Phase II, which had been scheduled to begin November 10, 2026. At the same time, officials launched a 60-day review of the program. Phase I self-assessment requirements remain in place.
4796 Hits
Multinational telecommunications giant BT Group (formerly British Telecom) has confirmed that its BT Conferencing business division shut down some of its servers following a Black Basta ransomware breach.
4531 Hits
Threat update
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added critical vulnerabilities in Progress Kemp LoadMaster (CVE-2024-1212) and VMware vCenter Server (CVE-2024-38812, CVE-2024-38813) to its Known Exploited Vulnerabilities (KEV) catalog. These vulnerabilities allow attackers to execute arbitrary commands, gain remote code execution (RCE), and escalate privileges. Continue reading this Cybersecurity Threat Advisory to reduce your risk of exploitation from these vulnerabilities.
2401 Hits
Threat update
BabbleLoader is a newly identified malware loader designed for delivering information-stealing payloads such as WhiteSnake and Meduza. It demonstrates sophisticated evasion techniques that challenge both traditional antivirus solutions and modern AI-driven detection systems. Read this Cybersecurity Threat Advisory to learn how to protect against this cutting-edge malware loader.
2386 Hits
Threat update
Recent reports have uncovered that a threat actor known as RomCom has been exploiting two zero-day vulnerabilities, one in Mozilla Firefox and another in Microsoft Windows, to deploy their proprietary backdoor malware. These vulnerabilities, CVE-2024-9680 and CVE-2024-49039, have been actively targeted in attacks across Europe and North America. Continue reading this Cybersecurity Threat Advisory to learn how to defend against RomCom.
2244 Hits