MSP Incident Insights

On November 8th, 2024, Palo Alto Networks issued a threat advisory confirming that they had observed threat actors actively exploiting an unauthenticated remote code execution (RCE) vulnerability. Since this update, […]

Welcome back to MSP Incident Insights, the only identity-centric threat briefing series tailored to MSPs and help desks. This week, we’re looking back at three major breaches in late 2023 […]

This article was updated July 2024 to brief readers on threat actors exploiting this outage in malicious activities. Following global Microsoft outages caused by a faulty CrowdStrike update, multiple reports […]

Situation Update The following threat briefing is an update from a February 2024 threat briefing. After initial reports that Midnight Blizzard (aka APT29 or NOBELIUM) compromised Microsoft and accessed corporate inboxes, investigations […]

What Happened?  On February 12th, 2024, the ALPHV (also known as BlackCat) ransomware gang breached Change Healthcare, an organization within UnitedHealth Group, a major healthcare provider, exposing a third of United […]