Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

As businesses continue moving critical workloads to the cloud, attackers are increasingly targeting identities, SaaS applications, and cloud configurations. While many organizations believe their cloud environments are secure, hidden risks often go unnoticed until it's too late. For MSPs, this presents an opportunity to deliver greater value while growing recurring security revenue.

On June 3, Let’s Encrypt announced that the post-quantum web is going to run on something called Merkle Tree Certificates. The internet did what it does and turned this into a doomsday Q-Day countdown. The quantum computers are coming, your certificates are about to break, panic! Unlike every other security vendor, I’m not worried about quantum computers. But the announcement is still worth your attention. Just not for the reason you’ve been told.

First made famous by Bear Bryant in the 1970s, “defense wins championships” has since become a popular sports adage that’s at times overused. But when it comes to the sprawling attack surface of modern athletic events, like the tri-hosted 2026 World Cup or the Super Bowl, that cliché applies just as much to cybersecurity as it does to the playing field. Modern sports franchises are no longer just athletic clubs.

While organizations invest in secrets management solutions like AWS Secrets Manager—a fully managed service for storing, rotating, and retrieving credentials—security teams still face a fundamental challenge: you can’t secure what you can’t see.

Although customer password vaults were not affected, LastPass confirmed that customer information was exposed when cybercriminals compromised a third-party market intelligence platform in June 2026. This is not the first time LastPass customers have had their information put at risk; LastPass’s major 2022 breach involved cybercriminals stealing backups of customer vault data.

As state and local governments modernize critical technology systems, they must also meet growing demand for cybersecurity, reliability, operational efficiency, and fiscal accountability. From citizen services and public safety operations to transportation networks, education systems, and emerging AI initiatives, agencies are managing increasingly complex environments with limited resources.

Memorandum M-26-14 from the Office of Management and Budget (OMB) marks a significant evolution in federal cybersecurity guidance, establishing a new risk-based framework for logging and network visibility across the United States federal government. The memo replaces the prescriptive requirements of Memorandum M-21-31 with an approach that emphasizes continuous monitoring, threat detection, investigation, and forensic readiness.

Under normal conditions, experiencing our digital reflection can feel surreal or even uncomfortable. So first off, we commend our participating execs for allowing us to use their publicly available personal data to create live audio/visual doppelgangers – as we found out just how advanced, believable, and potentially malicious our identity cloning tools currently are.