Most attacks show up in your logs first. This one can show up on the invoice first. On November 2, Google Threat Intelligence Group and Mandiant published a report on LLMjacking: attackers hijack an organization’s access to large language models, run huge volumes of requests through it, and leave the victim to pay. In incidents […]

Patch Tuesday comes once a month. According to Rapid7, the attackers now show up in three days. In its Q3 2026 Quarterly Threat Landscape Report, Rapid7 found an average of three days between a high-severity vulnerability going public and its exploitation. And 71% of the exploitation it tracked happened within the first seven days. Rapid7 […]

They Passed MFA. So Did the Attacker. The user did everything right. They typed their password. They approved the MFA prompt. Twelve minutes later, someone else was in their mailbox. That’s one of the incidents in a 10-week Microsoft 365 campaign tracked by Huntress. Between July 14 and September 22, 2026, Huntress responded to related […]

Picture the worst night of a client’s year. Files are encrypted or stolen, an extortion note is waiting, and the insurance hotline is handing you names. Within hours, a stranger will know the client’s backup status, how much cyber coverage it carries, and how badly it needs to be back online by Monday. Most organizations […]

Nobody got phished. Nobody’s password was guessed. No MFA prompt was approved by a tired employee at midnight. On October 15, an attacker signed in to customer Microsoft 365 tenants as a backup application. According to Huntress, a credential belonging to ConnectWise Cloud Backup (formerly SkyKick) was used to request Microsoft Graph access tokens across […]

Your clients are stacking frameworks. NIST CSF for the board. HIPAA for healthcare. SOC 2 for procurement. CMMC for defense contracts. Each one needs evidence, policies, and an audit trail. When you manage them separately across a growing client base, you collect the same proof over and over. A Compliance-as-a-Service platform built for multi-framework delivery […]

Overnight on October 11 and 12, refrigerators and freezers in hundreds of French supermarkets began to warm up. By morning, display cases had reached around 50 °C, stores were throwing out their fresh and frozen stock, and the Paris prosecutor’s office was investigating what it called a “large-scale cyber-attack,” according to BleepingComputer. Reported victims include […]

A cyber insurance policy looks like a financial product. More and more, it works like a contract whose terms are your client’s security controls. That’s the core of a September 2026 client alert from Mark Lehman of Shumaker, published in the National Law Review. It describes a market that has become “an evidence-driven discipline.” Carriers […]

The most common way into a client endpoint right now doesn’t involve malware. It’s the same kind of software your technicians use every day. Help Net Security, reporting on Huntress research, says attackers used legitimate remote monitoring and management (RMM) software in 45% of the endpoint incidents Huntress recorded in Q1 2026. Huntress calls the […]

If every client review starts with finding the current policy, chasing approvals, and reconstructing last quarter’s risk decisions, the problem is bigger than document storage. Your compliance service needs a repeatable operating process. Policy and risk automation should make that process easier to run: fewer duplicate entries, clearer ownership, and better visibility into unfinished work. […]