Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

A cyberattack at the University of New Mexico Health Sciences Center did more than interrupt computers. It disrupted the systems that support emergency care and medical education, forcing operational changes that reached ambulances, patients, students and faculty. The incident is a reminder that in health care, a cyber event can become a patient-care and business-continuity crisis within minutes.

A reported $1 million reward for information that could identify an alleged hacker is the kind of number that grabs attention. But the more important story for security teams is what sits behind the headline: Attackers continue to pursue access to financial accounts, identities and credentials, and organizations need defenses that assume those attacks will keep coming.

Halloween is full of disguises, but a cyberattacker does not need a costume to get inside a Microsoft 365 environment. A stolen password or malicious app consent can be enough. From there, the intruder may appear to be an ordinary user doing ordinary work. That is what makes identity compromise so unsettling: The front door can look perfectly familiar. Phishing can trick users into sharing credentials or granting access.

In October 2026, Reuters reported that supermarket operator Ahold Delhaize still had websites and apps offline five days after a cyber incident. Coverage from The Packer framed the wider issue around the cold chain and produce security, while Fox News highlighted the effect on major U.S. grocery chains. The latest cyber incidents affecting grocery retailers are a useful reminder that the impact of an attack is measured in more than encrypted endpoints or exposed data.

On October 21, 2026, the PHP project published fixes for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2 and collectively known as php2shell. Since then, we have received questions about what to do.

Until October 14, 2026, services providers have known Cyber Platform as Acronis Cyber Protect Cloud, whereas corporate customers have known Cyber Platform as Acronis Cyber Protect. To simplify partner, customer and user experience, Acronis offerings for both service providers and end-customers are renamed to Acronis Cyber Platform.

In May, Acronis introduced its vision for the future of IT. In July, we showed the progress. At the recent Acronis Accelerate: Time to Act event, we showed why now is the moment to start putting that future to work. Consider what is happening around us. Business AI adoption reached 47%. Codex surpassed five million weekly active users. Bots now generate roughly 57% of web requests. Gartner forecasts $2.7 trillion in worldwide AI spending this year.

MSPs rely on an expanding mix of tools to protect clients, manage services and keep everyday operations moving. But when those tools are disconnected, technicians face more logins, manual handoffs and repetitive work. With new integrations joining the Acronis Technology Ecosystem almost every week, there is always another way for managed service providers (MSPs) to simplify operations, strengthen service delivery and get more from the tools they already use.

Cyberattacks do not respect normal business hours: They can happen at night, on weekends and during holidays. Acronis MDR by Acronis TRU gives partners 24/7/365 expert monitoring, investigation and response without having to build their own security operations center (SOC). Acronis is expanding the MDR service with capabilities that make this expertise easier to deliver and help partners address more risks. The developments build on a broader commitment to managed security.