Critical cPanel vulnerability exploited to target government and MSP networks
Ravi LakshmananMay 4, 2026Vulnerability/Network Security A previously unknown attacker was observed exploiting a recently disclosed cPanel vulnerability to target small clusters of managed service providers (MSPs) and hosting providers in the Philippines, Laos, Canada, South Africa, and the United States, as well as government and military organizations in Southeast Asia. This activity, detected by Ctrl-Alt-Intel […]
Zscaler ThreatLabz 2026 VPN Risk Report
Your VPN is helping attackers move as fast as AI of Zscaler ThreatLabz 2026 VPN Risk Report A dangerous disconnect is revealed. While attackers use AI to move at machine speed, legacy VPNs blind defenders and leave them exposed. Not being able to see what is happening greatly reduces response time and the likelihood of […]
Global crackdown arrests 276 people, shuts down 9 crypto fraud centers and seizes $701 million
A coordinated international operation involving U.S. and Chinese authorities has resulted in the arrest of at least 276 suspects and the closure of nine fraud centers used in a cryptocurrency investment fraud scheme targeting Americans, resulting in millions of dollars in losses. The crackdown was led by Dubai Police, part of the United Arab Emirates […]
A technical guide to secure Vibe coding: Prompts to production
Important pointsVibe Coding introduces a new shared responsibility modelAI platforms generate and host applications, but they do not secure them. Organizations remain responsible for authentication, data access, secrets, and application logic.Insecure defaults can spread risk across all applicationsIf security gaps exist in platform templates or generated code, they will be replicated to all apps built […]
CISA actively exploited Linux root access bug CVE-2026-31431 added to KEV
Ravi LakshmananMay 3, 2026Vulnerabilities / Container Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added recently revealed security flaws affecting various Linux distributions to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of them being exploited in the wild. This vulnerability is tracked as CVE-2026-31431 (CVSS score: 7.8) and is a case […]
Trellix confirms source code breach due to unauthorized repository access
Ravi LakshmananMay 2, 2026Data Breach/Enterprise Security Cybersecurity company Trellix has announced that it has suffered a breach that allowed unauthorized access to “portions” of its source code. The company said it had “recently identified” a breach of its source code repository and had begun working with “leading forensic experts” to immediately resolve the issue. He […]
Google AppSheet phishing campaign hacks 30,000 Facebook accounts
Ravi LakshmananMay 1, 2026Malware/Threat Intelligence A newly discovered Vietnam-related operation was observed using Google AppSheet as a “phishing relay” to distribute phishing emails aimed at compromising Facebook accounts. The operation was codenamed AccountDumpling by Guardio, and the plan was to sell stolen accounts back through illegal storefronts operated by threat actors. In total, it is […]
Cybercriminal groups exploit Vishing and SSO in rapid SaaS extortion attacks
Ravi LakshmananMay 1, 2026 Cybersecurity researchers are warning of two cybercrime groups that are carrying out “fast, high-impact attacks” mostly within the confines of SaaS environments, while minimizing the footprint of their activities. The clusters Cordial Spider (also known as BlackFile, CL-CRI-1116, O-UNC-045, and UNC6671) and Snarky Spider (also known as O-UNC-025 and UNC6661) are […]
China-linked hackers target Asian governments, NATO states, journalists, activists
Cybersecurity researchers have revealed details of a new Chinese-linked espionage operation targeting government and defense sectors across South, East and Southeast Asia, as well as European governments in NATO. Trend Micro has determined that this activity is the result of a threat activity cluster tracked under the temporary designation SHADOW-EARTH-053. This hostile group is assessed […]
5 sales challenges impacting MSP cybersecurity revenue
Managed security services market is projected to grow from $38.31 billion in 2025 to $69.16 billion by 2030[1]cybersecurity is the fastest growing field[2]. Despite this opportunity, many MSPs are holding back on revenue because their go-to-market strategies fail to connect technical expertise with business needs. This execution gap is what causes most trades to stall. […]