Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Microsoft has made significant gains in the cybersecurity market, earning top rankings from leading analyst firms such as IDC and Forrester for its endpoint protection and threat detection and response capabilities. Solutions like Microsoft Defender XDR and Microsoft Sentinel provide powerful, integrated security across endpoints, identities, email, cloud workloads, and data. But technology alone does not deliver outcomes.

The Asia-Pacific region is home to the highest concentration of manufacturing sites on the planet, so it comes as no surprise that manufacturers here absorb more attacks than the rest of the world combined. LevelBlue SpiderLabs compiled the Manufacturing Threat Landscape 2025 report, which noted that 56% of all attacks targeting the manufacturing sector occurred in the APAC region. This is compared to 22% in North America, Europe (16%), and Africa (2%).

A Chief Information Officer’s (CIO) life is rarely simple or easy. Many are concerned about threat actors using AI to attack their organization, while at the same time attempting to convince their leadership to invest in AI as a defensive measure. A recent LevelBlue report Persona Spotlight: CIO, found that CIOs understand the threat, but many organizations are still behind the curve when it comes to certain aspects of their cyber defense.

I have managed Alliances for more years than I can count on two hands, and the best results I’ve seen come from genuine collaboration. Shared planning and learning, along with honest conversations about what’s working and what needs to improve. When that happens, clients benefit most.

Connected products, whether IoT, IIoT, embedded, mobile, or other such devices, serve to either strengthen or undermine an organization’s security posture and reputation. As device ecosystems grow in complexity, manufacturers must secure embedded hardware, firmware, over-the-air (OTA) update mechanisms, companion mobile applications, cloud services and APIs, and RF interfaces. Each layer introduces distinct attack surfaces that adversaries actively target.

Managed Detection and Response (MDR) providers are indispensable to organizations seeking to bolster their cybersecurity posture, but it’s important to know what questions to ask during the search process. Here are nine essential questions and follow up inquiries to ask when assessing an MDR vendor to ensure the right fit for your organization.

The cybersecurity industry’s leading channel publication CRN, named LevelBlue to CRN’s Managed Service Provider (MSP) 500 list for 2026 in the Security MSP 100 category. “The companies on our 2026 MSP 500 list are redefining what exceptional managed services look like—helping organizations of every size stay agile, maximize their IT investments and scale with confidence,” said Jennifer Follett, VP of U.S. Content and Executive Editor, CRN, The Channel Company.

LevelBlue is proud to announce it has been named a Representative Vendor in the just-released 2026 Gartner Market Guide for Outsourced Managed Security Services (OMSS). OMSS, which is a subset of Managed Security Services, provides organizations with specialized external expertise and operational support for critical cybersecurity functions.

The Cybersecurity Infrastructure Security Agency (CISA) issued an alert this week based on an attack that struck Poland’s energy sector in late 2025. The attack compromised the operational technology (OT) and industrial control systems (ICS) in 30 renewable energy and heating plants, impacting 500,000 people and also that nation’s manufacturing sector.

A fragmented collection of security tools and services can’t deliver the protection modern organizations require. True resilience comes from integrating those capabilities into a unified, coordinated defense. LevelBlue recognizes that the full value of Managed Detection and Response (MDR) is realized when it operates as more than a standalone service. When positioned as the central nervous system of a broader security ecosystem, MDR connects signals, actions, and intelligence across the environment.

Chief Information Security Officers are realizing, in greater numbers than ever before, that cybersecurity can no longer be viewed as a siloed technical function but instead as a core enabler of business growth, innovation, and AI adoption, according to LevelBlue’s latest Persona Spotlight: CISO.

Ransomware attack groups have ramped up their efforts, launching attacks on the education sector with recent incidents striking a range of targets from an Australian institution of higher learning to a school district in North Carolina. These facilities contain a large amount of very valuable data, such as student records, intellectual property, and financial information that threat groups can leverage for financial gain. An additional reason education is targeted is that it must stay in operation.

For many organizations, the challenge isn't a lack of security tools, it’s the overwhelming "noise" those tools create. When your team is sifting through 12 million events per day, they are not doing anything else and are likely having tremendous difficulty finding threats. LevelBlue Managed Detection and Response (MDR) is an industry-leading service operated by the world’s largest pure-play Managed Security Services Provider (MSS) that will change that narrative.

There are many NSFW instances in which substituting a single letter in a word can make the difference between a person retaining their job and finding themselves scanning career sites for a new position. Luckily, this does not carry over when looking at the difference between SASE (Secure Access Service Edge) and SSE (Security Service Edge). Both deliver security, but the two solutions deliver different outcomes, so choosing which is right for your organization is key.

AT&T, through a partnership with LevelBlue, has been positioned in the Leaders Category in the IDC MarketScape: Worldwide Managed SASE Services 2025 Vendor Assessment (doc October 2025). The IDC MarketScape noted, “AT&T offers managed SASE services globally through a strategic partnership with LevelBlue — AT&T's spun-off cybersecurity arm, now a joint venture with WillJam Ventures.

The January 2026 edition of LevelBlue SpiderLabs ransomware tracker noted a sharp fall in the number of attacks launched compared to December 2025. Qilin remained the top attacker, but there was a reshuffling of the remaining top five attackers for the month.

Few cybersecurity knowledge repositories are as broad, deep, or widely respected as LevelBlue Security Colony. Industry analyst firm IDC has recognized the value of Security Colony, noting that clients and other organizations interested in understanding their cybersecurity posture download thousands of resources each month, many of which are available at no cost.