Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How Long Can a Misconfiguration Go Undetected?

Cloud applications are constantly evolving to accommodate new users, tools, and ways of working. However, every adjustment can also alter who has access to resources and what they can do with them. A misconfiguration occurs when an active setting fails to meet established security criteria. It can grant more access than necessary, keep an insecure protocol enabled, allow certain actions for too many users, or open a pathway for information to leave the organization.

The Biggest Crypto Heist Ever - The 443 Podcast - Episode 394

This week on the podcast, we cover the $6 billion cryptocurrency theft from Binance. Before that, we give an update on PHP2Shell and one active exploit campaign targeting Palo Alot devices. Additionally, we discuss a compromised Claude Code extension on the Cursor AI marketplace.

How to Stop a Malware Campaign That Can Shift Its Infrastructure

MSPs are used to blocking malicious domains, detecting suspicious IP addresses, and continuously updating their defenses against emerging threats. However, what happens when attackers can shift their infrastructure in near real-time without interrupting the campaign? The ErrTraffic campaign, analyzed by the WatchGuard Threat Lab, provides an example of how malware distribution techniques are evolving.

Tales From the Shadow AI | WatchGuard Webinar

Join WatchGuard’s Corey Nachreiner and Marc Laliberte for a deep dive into Shadow AI breaches from 2025 and 2026. You’ll hear about an AI coding agent that wiped a live database during a code freeze and a hiring chatbot whose admin login was 123456. Then they'll show you how to find the same risks across every client you manage with WatchGuard Cloud Detection and Response (CloudDR).

Skip Trace: Delivering NDR without the Complexity | WatchGuard Webinar

Network Detection and Response (NDR) has traditionally come with a heavy price tag, including complex deployments, expensive infrastructure, constant tuning, and skilled analysts to manage the workload. That model was built for enterprise SOCs, not MSPs protecting dozens or hundreds of customers.

From Detection to Decisions: What's New in ThreatSync and Rai Analyst

Security teams are managing more endpoints, identities, networks, and security events than ever. Each control adds valuable protection, but the work of connecting its signals, explaining incidents, and deciding what needs attention often falls to analysts. That is why the next evolution of WatchGuard ThreatSync and Rai Analyst matters. ThreatSync provides the foundation for cross-product detection, correlation, incident management, and coordinated response.

PHP2Shell Breaks the Internet - The 443 Podcast - Episode 393

This week on the podcast, we dive into a pair of PHP vulnerabilities dubbed PHP2Shell and the chaos they caused through uncoordinated disclosure. After that, we discuss a certificate authority who's random number generator only goes to three digits before ending with law enforcement action around ShinyHunters ransomware negotiators.

Weak Passwords Can Cost You More Than You Think

Weak or reused passwords can give cybercriminals access to your accounts, often at your expense. As a proud Cybersecurity Awareness Month Champion with the National Cybersecurity Alliance, we're reminding everyone that stronger passwords and smarter security habits make a difference. Don't make it easy for attackers.