MFA takes seconds. Breaches leave lasting impact.
As a 2025 Cybersecurity Awareness Month Champion with the National Cybersecurity Alliance, WatchGuard leads by example.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
No More Weak Links: Unleashing NDR and SASE for Hybrid Networks
The perimeter is gone. Hybrid work is here to stay. And MSPs sit at the crossroads of a network security evolution. This webinar focuses on how Network Detection and Response (NDR) and Secure Access Service Edge (SASE) are changing security delivery, showing MSPs how to lead this evolution. It will help you distinguish between hype and actionable strategies, empowering you to approach hybrid environments with a security-first mindset and evolve network security beyond traditional firewalls.
How GitHub Plans to Fix the Supply Chain - The 443 Podcast - Episode 345
This week on the podcast, we discuss Cisco's recent zero-day vulnerabilities before covering a Microsoft Threat Intelligence post on a phishing campaign that abuses SVG files. After that, we review GitHub's proposed changes for securing the open source software supply chain.
Ransomware Gang Files: ALPHV BlackCat
AlphaV isn’t just another ransomware gang - they’re innovating how cybercriminals break in. Their latest move? Pass-the-Cookie attacks; hijacking session cookies to bypass MFA and silently infiltrate your cloud.
The Top 5 AI Security Risks
AI is no longer just a future concern. It is deeply embedded in both offense and defense. With new exploits surfacing, massive open-source model use, and attackers growing more creative, the risks we warned about are now very real.
Agentic AI and the Future of Cybersecurity: A Field CTO's Perspective
When I talk to customers about AI these days, I usually get two very different reactions. Some lean forward, excited about the promise: fewer alerts, faster response, maybe even lights-out SOC operations someday. Others lean back, uneasy about the risks: does this mean attackers will be able to run thousands of hacks at once, automatically? The truth is, both reactions are justified. We are at the start of a shift toward agentic AI. This is not the same as today’s AI copilots that wait for prompts.
FireCloud Total Access: Secure Every User, Connection & Workplace Everywhere
With hybrid work, cloud applications, and distributed teams now the standard, organizations face a critical challenge: how to deliver secure, seamless access to both cloud-hosted and private applications without relying on outdated remote user VPNs or complex hardware.
When Firewalls Age Out: What the Akira Attack Can Teach Us About Lifecycle Security
Cyberattacks evolve faster than aging infrastructure can keep up, and expired hardware is one of the biggest blind spots organizations face today. The recent Akira ransomware campaign targeting SonicWall VPNs is a powerful reminder of what happens when devices slip out of support.
Is your hybrid work as protected as you think?
The hybrid working model has blurred the traditional limit of corporate networks. With users accessing critical resources from remote locations, unmanaged networks and personal devices, attack surfaces have increased exponentially. This demands a cutting-edge, comprehensive and adaptive approach to security. A recent example in January 2025 makes this clear: a vulnerability in SimpleHelp - a remote access tool - let attackers compromise corporate endpoints and move laterally across the network.
No More Ransom: Why the UK's Crackdown Signals the End of Paying Hackers
For years, ransomware gangs have thrived by holding businesses hostage, forcing a terrible choice: pay up or watch your systems collapse. That era is ending. After a summer of cyber chaos that hit everything from the NHS to Harrods, the UK government has drawn a red line: no more quiet payoffs, no more sweeping attacks under the rug.
One Token to Rule Them All - The 443 Podcast - Episode 344
This week on the podcast, we cover a vulnerability in Entra ID that could have allowed attackers to gain Global Admin access to any and all Entra ID tenants. After that, we discuss the Shai Hulud NPM worm that ran rampant over the last week, infecting hundreds of packages. Finally, we end with a quick reminder to WatchGuard Firebox customers to update their devices to the latest firmware to resolve CVE-2025-9242z.
WatchGuard Firebox T185
This week’s highlight: Firebox T185 – the most powerful T Series tabletop firewall. Built for MSPs, ready for heavy traffic loads, and ideal for demanding environments.
What does your firewall see that your EDR doesn't? Lessons from recent cyberattacks
The APT group known as Librarian Ghouls has managed to infiltrate the networks of technical universities and industrial companies in Russia, Belarus, and Kazakhstan without arousing suspicion. How did the gang get inside? By using legitimate logins and moving laterally through internal networks, relying on legitimate access credentials without generating alerts.
Gang Files: Inside The Ransomware Playbook
Over the next few weeks, we’re unpacking the playbooks of today’s most active ransomware gangs. This week: Akira – a group that spent two quiet weeks mapping an entire network, all because a few alerts went unchecked. Every missed alert is an open door. Next week: AlphaV.
Should Microsoft Be More Accountable for Security? - The 443 Podcast - Episode 343
This week on the podcast, we cover a massive software supply chain compromise involving widely-used NPM packages. After that we discuss an increase in social engineering attacks called ClickFix. Finally, we end with a discussion of Senator Wyden's recent letter to the FTC demanding Microsoft being held accountable for "gross cybersecurity negligence" and whether his claims have any merit. The 443 Security Simplified is a weekly podcast that gets inside the minds of leading white-hat hackers and security researchers, covering the latest cybersecurity headlines and trends.
Ransomware Techniques Are Changing. Are MSPs Ready for This Shift?
Ransomware is evolving ‒ not fading. Despite a decline in attack detections based on WatchGuard Firebox telemetry, data from extortion sites and media reporting tells a different story: ransomware activity is actually on the rise, both quarter-over-quarter and year-over-year. The number of active ransomware groups is also increasing, as is the average ransom demand. In fact, the typical payout jumped from $400,000 in 2023 to $2 million in 2024 ‒ a staggering 500% spike.
WatchGuard Becomes Official Cybersecurity Supplier of Girona FC with New Partnership
The Spanish football club adopts WatchGuard's Unified Security Platform architecture to protect its digital environments.
Girona FC Kicks Off Security Partnership with WatchGuard
In an era where professional sports organizations increasingly rely on digital infrastructure, the risks associated with cyber threats are greater than ever. Girona FC, one of LaLiga’s rising professional football clubs, has taken a significant step to enhance its cybersecurity posture by partnering with WatchGuard Technologies. This move reflects the Club’s broader commitment to digital resilience and operational security.
Does Security Training Work? - The 443 Podcast - Episode 342
This week on the podcast, we discuss a recently published research study from UC San Diego on the effectiveness on security awareness training on phishing prevention. After that, we discuss a security researcher's work on identifying vulnerabilities in four separate employee webapps at Intel. Finally, we end with our analysis of a Ponemon Institute research report called The State of File Security.
Less ransomware, same risk. How can it be prevented?
Just because ransomware attacks have decreased doesn’t mean that the risk has disappeared. Indeed, it remains one of the most disruptive threats to any organisation. Headlines can convey a false sense of relief: Ransomware attacks are down 15%, according to Verizon's latest DBIR report. But for those of us who work in cybersecurity, we know that this doesn't tell the whole story, especially when the real issue isn't how often an attack occurs, but what happens when it does.
SIEM vs. XDR: 5 Things to Consider
As IT environments become more complex, organizations face rising threat volumes, persistent cybersecurity talent shortages, and adversaries capable of dwelling undetected for days and moving laterally within hours. In this context, choosing between SIEM and XDR is no longer a technical preference; it’s a strategic decision that shapes how your organization defends itself.
Defeating Ransomware with Unified Security
Ransomware is getting smarter, so your security better be, too. The old playbook of scattered tools and siloed defenses no longer cuts it. Every business needs to connect the dots to stay ahead. In this webinar, we’ll show you how bringing together SASE, XDR, NDR, and automation under a unified platform creates a powerful security force that works with your team, not against it.