Most MSPs have seen some version of this call. A client says their finance login stopped working. Someone in sales got bounced out of a cloud app mid-session. The office Wi-Fi feels unstable, but only in odd bursts. Nothing looks dramatic enough to trigger full incident mode, yet something clearly isn't right. Those are the […]
A lot of providers still hear the same line from clients with Ubuntu or Debian servers. “We're on Linux, so we're less of a target.” That belief used to buy some comfort. It doesn't buy much now. For MSPs, hosting firms, telecom providers, and IT resellers, security in Linux has moved from a niche technical […]
A client rings after seeing another politically motivated cyber attack in the news. They're not asking about ransomware this time. They want to know whether their business could be targeted because of who they serve, what sector they're in, or what issue they're seen to represent. That question matters because hacktivism sits in an awkward […]
Your client calls because a machine is “acting oddly”. Antivirus is installed. The firewall is in place. Backups exist. Yet somebody in accounts opened what looked like a routine invoice, or a user approved a fake software update on a home laptop used for work, and now credentials are exposed, remote access is possible, and […]
A client rings your service desk because someone accessed a cloud account they shouldn't have. The password still works. The user didn't approve a login prompt. MFA was enabled. The obvious controls all seem intact, yet the account was still used. That's the situation more MSPs are dealing with now. The weak point often isn't […]
A client rings just after opening time. Their Microsoft 365 account has sent messages they didn't write. A finance user can't log in. Someone has added a forwarding rule to an inbox that nobody in the business admits creating. For an MSP or IT provider, that's rarely a neat technical ticket. It's a trust problem, […]
Data logging is the automated process of recording system events, creating a permanent evidence trail for troubleshooting, security investigations, and compliance. In the UK, that matters more than ever because half of businesses (50%) and a third of charities (32%) experienced a cybersecurity breach or attack in the 12 months to April 2024, rising to […]
A client rings at 08:17. Someone in accounts clicked a Microsoft 365 reset email that looked genuine enough. By 08:25, your support desk is checking mailbox rules, password resets, MFA prompts, and whether the attacker moved sideways into finance approval flows. You fix the immediate problem, but the awkward part comes after. The client asks […]
A lot of MSPs are in the same position right now. A client asks for a website security review, but what they really mean is broader. They want to know whether the customer portal is exposed, whether the login flow can be abused, whether a form can be used to steal data, and whether you […]
The call usually comes at the wrong time. A client's finance manager can't log in. Someone in sales has sent a strange Microsoft 365 message. A mailbox rule has appeared out of nowhere. Your team drops what it's doing, starts checking accounts, pulls together fragments of evidence and tries to work out whether this is […]