Topic tag

MSP

6 articles tagged MSP. Browse the full archive or jump to all posts.

September 20, 2026 · 11 min read

SolarWinds shipped a hard-coded key in Access Rights Manager - unauthenticated RCE is the result

SolarWinds patched a CVSS 8.8 unauthenticated RCE in Access Rights Manager on 17 September 2026, caused by a hard-coded key shipped in the product.

September 6, 2026 · 9 min read

CrowdStrike 'FalconFlank' zero-day - what the third EDR zero-day in five weeks tells ANZ blue teams about containment, not patching

On 3 September 2026, security researcher Chaotic Eclipse (aka MSNightmare / Nightmare-Eclipse) released FalconFlank - a local privilege-escalation PoC targeting CrowdStrike Falcon Sensor. CrowdStrike is investigating and has issued a mitigation. This is the third endpoint-security zero-day from the same researcher in five weeks. The durable lesson is not the patch - it's that containment planning is now the load-bearing IT-pro discipline.

September 6, 2026 · 7 min read

153 million drivers licences on the dark web - what the IDScan.net breach means for ANZ SMBs that scan IDs at the counter

On 1 September 2026, KrebsOnSecurity reported that 153 million drivers licences were being sold on a Russian dark-web forum. The FBI opened a formal investigation the same day. If you are an ANZ MSP or SMB whose retail, hospitality, or aged-care clients use third-party KYC, you are downstream of this incident whether you know it or not.

September 6, 2026 · 8 min read

Two SonicWall SMA 1000 zero-days are being exploited right now - the 48-hour patch playbook for ANZ branch offices

SonicWall disclosed two zero-days on 2 September 2026 affecting SMA 1000 series VPN appliances. One is CVSS 10.0. Active exploitation is confirmed. If you operate an SMA 1000 for branch offices or as an MSSP front-end, this is the patch-window briefing you need today.

August 30, 2026 · 12 min read

PaperCut NG/MF: print server fire drill before Monday

PaperCut shipped a second emergency patch in 48 hours on 28 August because researchers bypassed the first. ANZ schools, libraries and MSP print rooms are at risk if v25 or v26 is not in place.

August 8, 2026 · 10 min read

TrueConf shipped backdoored installers. How to check your fleet

Attackers breached TrueConf and trojanized its client installers with backdoors. MSPs and SMB IT teams: the fleet check is cheap, the rebuild is not, and the discipline is the part worth keeping.