Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

MFA fatigue campaigns work on a simple bet: eventually, someone taps “approve” just to make the notifications stop. It paid off. The attacker was in. The first move was quiet — deactivate SMS authentication, a small settings change easy to miss on a busy queue, and exactly the kind of thing that buys room to work without tripping an alarm. Then came the real work: AWS credentials pulled from one system, SSH keys from another, and a slow and methodical pull of internal source code.

Government teams are under growing pressure to modernize and improve efficiency while continuing to meet rigorous requirements for security, governance, and accountability. Meeting both demands requires technology that can support innovation without sacrificing control. That’s why we’re proud to share that Tines has achieved TX-RAMP Level 2 certification for both Tines Stories and Tines 3B.

Email remains the primary entry point for cyberattacks, making effective email security more critical than ever. That’s why we’re especially proud that customers ranked Acronis Cyber Protect Cloud in the G2 Fall 2026 Cloud Email Security Grid Report. Because G2 rankings are based on verified customer reviews, this recognition reflects the experience of the organizations and service providers that rely on Acronis to protect their users, data and business communications every day.

There is no shortage of guidance available to MSPs on how they should secure customer environments. Security frameworks, industry standards, regulatory requirements and insurance obligations all provide recommendations on the controls organizations should have in place. Yet despite this abundance of guidance, cyber incidents remain common and continue to increase. At the same time, requirements are becoming more complex.

Public sector software, from defense platforms to K-12 student information systems, is accumulating a dangerous backlog of unresolved vulnerabilities. That’s the headline finding from Veracode’s 2026 State of Software Security report, and the data behind it is unambiguous: the pace of vulnerability discovery has structurally outrun the capacity to fix them.

Privileged accounts have elevated access that can be used to rewrite system configurations, alter sensitive databases, create new admin users, and exfiltrate confidential customer data. This makes them attractive targets for attackers and risky when poorly managed. Basic passwords and network firewalls aren’t enough to protect them. You need to monitor them continuously. This is where Privileged Account and Session Management (PASM) becomes essential.

Your sales representative logged into Outlook from a coffee shop laptop that isn't enrolled, isn't encrypted, and hasn't seen a security patch in eight months. Should Microsoft 365 let that sign-in through just because the password was correct? That single question is why conditional access exists. Passwords tell you who someone claims to be. They say nothing about whether the device behind that login is safe to trust with your company's email, SharePoint files, or Teams chats.

For years, managed service providers (MSPs) have secured customer cloud environments through periodic reviews of each tenant. That approach worked when a customer ran two or three cloud applications. As organizations adopt more SaaS applications, the number of environments, identities, and configurations to monitor also increases. The challenge is already visible.

A company too young or too small to have an incident history still has to answer the underwriter at renewal, the enterprise customer running a security review, and the board asking what the exposure is. The usual objection is that quantification needs a baseline and there is none. ‍ The objection rests on a mistaken assumption about how these models work.