Security Insights
Expert tips, industry trends, and practical advice to keep your business secure.
Attackers Hijacking Backup Servers: AhsayCBS Zero-Day Active Since October 7
Two critical AhsayCBS vulnerabilities are being exploited in the wild. Huntress observed attacks on at least five organizations since October 7, 2026, with threat actors deploying webshells and cryptominers on unpatched backup servers.
Read Article →
87% of SMBs Have MFA, But Only Half Require It Everywhere
A 2026 survey of 1,000 SMB leaders found 86.8% have multi-factor authentication, but only 51.1% require it on all key accounts. That gap leaves attackers a path around the control.
Read Article →
Managed Security Provider for Canada and the US: What to Check
A managed security provider for Canada and the US has to cover PIPEDA, 50 state breach laws and 24/7 monitoring across time zones. Here is what to check before you sign.
Read Article →
Vulnerability Scan vs Penetration Test: Which to Buy First
Vulnerability scan vs penetration test: a scan finds known weaknesses fast, a pen test proves what an attacker can actually do. Here is how US and Canadian small businesses should choose.
Read Article →
Microsoft 365 Security Checklist: 7 Settings to Check First
A Microsoft 365 security checklist for small businesses: 7 settings to verify, covering MFA, legacy authentication, admin accounts, email forwarding, sharing links and more, based on Microsoft and CISA guidance.
Read Article →
Google Calendar Phishing: How to Stop Fake Meeting Invites from Reaching Your Team
Attackers are using Google Calendar invites to bypass email filters. As of August 2026, Google Workspace admins can restrict calendar invitations to known senders only, blocking phishing events before they reach employees.
Read Article →
Cyber Insurance Questionnaire: What Carriers Ask at Renewal and How to Prepare
Cyber insurance questionnaires now probe MFA, EDR, backups, and incident response plans. Answer inaccurately and a claim may be reduced or denied. Here is what to verify before renewal.
Read Article →
Bill C-8 and Canadian SMB Suppliers: A Practical Checklist for Compliance
Canada's Critical Cyber Systems Protection Act became law June 15, 2026. SMBs supplying critical infrastructure face new contractual requirements.
Read Article →
Evaluating a Managed IT or Cybersecurity Provider: Criteria That Matter and Red Flags to Watch
Vetting an IT support partner is due diligence. Here are the questions, criteria, and warning signs to use before signing a contract.
Read Article →
Vendor Payment Fraud: How Fake Supplier Emails Steal Real Money
FBI data shows US$3.05 billion in BEC losses in 2025. Here is how fake supplier bank-detail emails work and how to stop the wire.
Read Article →
Microsoft 365 Anyone With the Link: Finding and Fixing Anonymous Sharing
Microsoft 365 'anyone with the link' sharing creates unauthenticated access that cannot be audited. Here is how to find and close these links.
Read Article →
Ransomware Now Targets Cloud Credentials: Lessons from a Claimed Attack on a Canadian Distributor
Ransomware groups now target cloud credentials and API keys, not just files. Here are the questions every SMB should be asking.
Read Article →