Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

knowbe4

Anatomy of an Agent Tesla BEC Attack: From Inbox to In-Memory Infostealer

Aug 20, 2026 By KnowBe4 Threat Lab In KnowBe4
Phishing is a form of social engineering that has evolved beyond simple lures into complex, multi-stage attacks exploiting trusted software, cloud identities and business platforms to bypass traditional security. Attackers leverage these campaigns to deliver trojans capable of stealing credentials and also establishing remote code execution, which might serve as a gateway for lateral movement.
Read Post
knowbe4

Ransomware Has Changed and Your Defenses Need to Change With It

Aug 19, 2026 By Erich Kron In KnowBe4
For years, ransomware was treated mostly as a malware problem. A user clicked something bad, files were encrypted, a ransom note appeared and everyone had a very bad week. That version still exists, of course, because cybercriminals love recycling old hits. But ransomware has changed significantly over the last year.
Read Post
acronis

How to prevent ransomware damage: a 12-step checklist for IT teams and MSPs

Aug 16, 2026 By Acronis In Acronis
No combination of controls guarantees that ransomware actors will never gain access or cause any impact. What the 12 controls below do is reduce the attacker's opportunities, accelerate containment and preserve the ability to restore operations without relying on ransom payment. Think of ransomware resilience as a continuous lifecycle rather than a fixed sequence: govern and identify, harden and prevent, detect and contain, roll back and recover, and improve and patch.
Read Post
acronis

Ransomware protection for businesses and MSPs: the complete guide

Aug 15, 2026 By Acronis In Acronis
Ransomware protection is a coordinated set of controls that reduces the likelihood of compromise, detects and contains malicious activity, protects recovery infrastructure and restores operations when an attack succeeds. It spans identity security, vulnerability and patch management, endpoint protection, EDR or XDR, incident response, targeted rollback, immutable backup and disaster recovery. No single control covers the complete ransomware lifecycle.
Read Post

Rubrik MSP Unscripted - Episode 3 - Featuring Eddie Wlazlowski

Aug 14, 2026 By Rubrik In Rubrik
In this episode of MSP Unscripted, Nawaz Ali sits down with Eddie Wlazlowski to discuss the evolution of Microsoft 365 Cyber Resilience. They explore why managing Microsoft 365 is no longer enough, what’s driving the shift toward cyber resilience, the gaps many organizations still have in protecting Microsoft 365, and how MSPs can evolve their offerings to deliver greater value. The conversation concludes with practical advice for MSPs looking to build differentiated, resilient Microsoft 365 services.
View Video
knowbe4

Warning: Vishing Attacks Open the Door to Ransomware Gangs

Aug 13, 2026 By KnowBe4 Team In KnowBe4
An initial access broker for ransomware gangs is targeting organizations with voice phishing (vishing) attacks through Microsoft Teams, according to researchers at Zscaler’s ThreatLabz. “From January through June 2026, ThreatLabz examined a cluster of related campaigns that used Microsoft Teams vishing and Quick Assist for initial access, followed by PowerShell-based staging,” the researchers write.
Read Post

Rubrik MSP Unscripted - Episode 2 - Featuring Mallika Swaminathan

Aug 11, 2026 By Rubrik In Rubrik
In this episode of MSP Unscripted, Nawaz Ali sits down with Mallika Swaminathan to discuss why Identity Resilience has become a critical component of cyber resilience. They explore why identity is increasingly targeted by attackers, the difference between identity security and identity resilience, common misconceptions organizations have, and what MSPs can do to help customers strengthen their identity recovery strategy.
View Video
sophos

ClickFix campaign abuses Deno runtime for infostealer delivery

Aug 11, 2026 By Sophos Counter Threat Unit Research Team In Sophos
Counter Threat Unit (CTU) researchers investigated a June 2026 campaign in which threat actors used the Deno JavaScript runtime as a core execution mechanism within a ClickFix-driven intrusion chain. On June 3 and June 4, compromised WordPress sites served Cloudflare-themed ClickFix lures that prompted users to execute a clipboard-delivered PowerShell command. This command initiated an MSI-based staging process that installed Deno and enabled retrieval and execution of remote JavaScript.
Read Post
foresiet

Cl0p-Linked Activity Targets PTC Windchill and FlexPLM in Data Theft Campaign

Aug 10, 2026 By Foresiet In Foresiet
Foresiet reviewed a batch of 42 masked victim listings associated with the Cl0p extortion operation. The listings describe alleged exposure of project repositories, databases, CAD files, engineering drawings, backups, software and Windchill-related files. Those references recur with unusual consistency across the batch. The pattern resembles the type of information commonly managed within product lifecycle management (PLM) environments more than the contents of a general file share.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.