Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Rubrik MSP Unscripted - Episode 3 - Featuring Eddie Wlazlowski

In this episode of MSP Unscripted, Nawaz Ali sits down with Eddie Wlazlowski to discuss the evolution of Microsoft 365 Cyber Resilience. They explore why managing Microsoft 365 is no longer enough, what’s driving the shift toward cyber resilience, the gaps many organizations still have in protecting Microsoft 365, and how MSPs can evolve their offerings to deliver greater value. The conversation concludes with practical advice for MSPs looking to build differentiated, resilient Microsoft 365 services.

Warning: Vishing Attacks Open the Door to Ransomware Gangs

An initial access broker for ransomware gangs is targeting organizations with voice phishing (vishing) attacks through Microsoft Teams, according to researchers at Zscaler’s ThreatLabz. “From January through June 2026, ThreatLabz examined a cluster of related campaigns that used Microsoft Teams vishing and Quick Assist for initial access, followed by PowerShell-based staging,” the researchers write.

Rubrik MSP Unscripted - Episode 2 - Featuring Mallika Swaminathan

In this episode of MSP Unscripted, Nawaz Ali sits down with Mallika Swaminathan to discuss why Identity Resilience has become a critical component of cyber resilience. They explore why identity is increasingly targeted by attackers, the difference between identity security and identity resilience, common misconceptions organizations have, and what MSPs can do to help customers strengthen their identity recovery strategy.

ClickFix campaign abuses Deno runtime for infostealer delivery

Counter Threat Unit (CTU) researchers investigated a June 2026 campaign in which threat actors used the Deno JavaScript runtime as a core execution mechanism within a ClickFix-driven intrusion chain. On June 3 and June 4, compromised WordPress sites served Cloudflare-themed ClickFix lures that prompted users to execute a clipboard-delivered PowerShell command. This command initiated an MSI-based staging process that installed Deno and enabled retrieval and execution of remote JavaScript.

Cl0p-Linked Activity Targets PTC Windchill and FlexPLM in Data Theft Campaign

Foresiet reviewed a batch of 42 masked victim listings associated with the Cl0p extortion operation. The listings describe alleged exposure of project repositories, databases, CAD files, engineering drawings, backups, software and Windchill-related files. Those references recur with unusual consistency across the batch. The pattern resembles the type of information commonly managed within product lifecycle management (PLM) environments more than the contents of a general file share.

Intel Chat: Shai-Hulud is back, model pinning & the token spend problem [343]

Intel Chat with Matt Bromiley and Chris Luft — recorded in person at Black Hat USA in Las Vegas, day two. No prep doc, no script: just what Matt and Chris were actually hearing on the floor. Stories covered: Chapters: The Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly. Subscribe wherever you listen.

Best Ransomware Protection Tools to Protect Your Business

Ransomware attacks remain one of the most damaging cyber threats facing businesses today. These attacks mostly begin through phishing links, malicious downloads, exposed services, or stolen credentials. Once attackers gain access, they begin encrypting data to demand ransom and disrupt overall business operations. To mitigate this risk, organizations need to implement strong ransomware protection that blocks malicious activity early and detects suspicious behavior.

You Can't Buy Your Way Out of Downtime

A ransomware note doesn’t take down a business. The weeks of downtime after it does. That’s the distinction I hear missed most in boardroom conversations about cyber risk. Leaders ask what it costs to stop an attack. The harder question, and the one that actually decides whether a business comes out the other side, is what it takes to keep operating while you recover from one.

Havoc Malware: Techniques, Targets, and Threat Overview

Security analysts have noticed a trend among threat actors shifting towards adopting a novel open-source command and control (C2) framework called Havoc as an alternative to paid solutions like Cobalt Strike and Brute Ratel. Developed in the C language and introduced in 2022, Havoc’s Main branch received updates in 2023.