Tag Archive

Allowlisting inverts the security model: instead of detecting bad software, only approved software runs. Done well, it stops ransomware protection threats and unknown malware regardless of signatures. Done badly, it breaks the business in week one. ThreatLocker scores highest for …

Patching remains the single highest-value security control most organizations execute badly. Automox leads on cloud-native simplicity, Tanium on speed at enormous scale, and Action1 offers something rare in enterprise software a genuinely free tier for smaller estates. Adopting modern patch …

Bottom line up front: if you already run Microsoft 365 E5, Defender for Endpoint’s mobile capability covers the common cases at no extra cost — start there and identify the gap. If your threat model includes targeted attacks, journalists, executives, …

A large cryptomining operation has compromised 3,562 Redis servers and turned their processing power into a source of Monero revenue. The campaign did not rely on a newly discovered software flaw. Instead, it targeted internet-facing Redis instances that accepted commands …

Bottom line up front: Microsoft Intune wins by default for Microsoft 365 organizations because you already own it. Jamf wins outright for Apple estates. Kandji and Mosyle are the modern Apple challengers worth quoting against Jamf. ManageEngine, Scalefusion, and Hexnode …

Bottom line up front: if you’re a Microsoft 365 organization, Intune is almost certainly your answer and the only real question is what it doesn’t cover. If your estate is Apple-heavy, Jamf beats every generalist. If you have rugged devices, …

Google has rolled out Chrome 153 to the stable channel for Windows, Mac, and Linux, shipping as version 153.0.8010.36 on Linux and 153.0.8010.36/.37 on Windows and Mac. The update will reach users over the coming days and weeks and includes …

Fortinet has disclosed a new high-severity vulnerability affecting its FortiSandbox platform, warning that unauthenticated attackers could exploit weaknesses in the product’s web interface to siphon off sensitive information without ever needing valid credentials. The flaw, tracked as CVE-2026-26084, stems from …

Phishing remains one of the most effective ways for attackers to gain access to corporate environments. From 2013-2023, the FBI recorded 158,436 US victims of Business Email Compromise (BEC), with over $20 billion in reported losses.  The FBI specifically warns that phishing is used to …