Geek-Guy.com

Tag: longer

How Leading Organizations Are Turning EDR Into Operational Resilience

Most organizations now recognize that endpoint protection alone is no longer sufficient. That’s why adoption of endpoint detection and response (EDR) has accelerated rapidly in recent years. Organizations understand that modern attacks move faster, evade traditional prevention controls, and require continuous visibility into suspicious activity across the environment. But owning EDR

Channel Insider Opens Nominations for 2026 AI Leaders List

Artificial intelligence is no longer an emerging technology story in the IT channel — it is rapidly becoming central to how partners deliver services, drive operational efficiency, improve cybersecurity outcomes, and create new revenue opportunities for customers. To recognize the executives and innovators leading that transformation, Channel Insider is officially opening nominations for the 2026…

AI in the UK: Driving Innovation Without Expanding Cyber Risk

Written by Sean Tilley, Senior Sales Director EMEA at 11:11 Systems  Artificial intelligence is no longer a future ambition for UK organisations. It is already shaping how decisions are made, how services are delivered, and how quickly businesses can respond to change. From automation and analytics to customer engagement and operational optimisation, AI is becoming an integral part of…

Stopping AiTM attacks: The defenses that actually work after authentication succeeds

The security industry has spent years building better authentication. Longer passwords, second factors, hardware tokens. And attackers responded by moving past authentication entirely. Adversary-in-the-middle (AiTM) phishing does not steal credentials and replay them. It sits between the user and the legitimate service, watches a real authentication succeed in real time, and walks away with the…

How to clone an AWS CloudHSM cluster across Regions

Important: As of January 1, 2025, Client SDK 3 tools (CMU and KMU) are no longer supported. This guide has been updated to use Client SDK 5 commands exclusively. Ensure you’re using the latest Client SDK 5 version (5.17 or later) for the most recent features and security improvements. You can use AWS CloudHSM to…

The AI inflection point: What security leaders must do now

AI is no longer a speculative topic for security leaders. It has moved from experimentation to implementation, and increasingly, to measurable production impact. Over the past year, my conversations with CISOs have shifted. The question is no longer whether AI belongs in cybersecurity; it’s about deploying it responsibly, strategically and at scale. For security leaders,…

AI Memory Shortage Disrupts MSP Pricing and Channel Deals

The global memory shortage is no longer just about finding chips; it’s about finding partners you can trust. What began as a straightforward supply-and-demand crunch has morphed into something messier for managed service providers and IT resellers. Vendors are rewriting the rules of engagement mid-game, eliminating long-standing partner protections and reserving the right to change…

War-Driven Outages Put MSP Data Center Strategies at Risk

Data centers are no longer insulated from geopolitical conflict, and MSPs are starting to feel the impact. Recent attacks tied to escalating tensions between Iran, the U.S., and Israel have disrupted cloud infrastructure in the Middle East, forcing hyperscalers to shift workloads and exposing new risks to uptime, supply chains, and service agreements. For managed…

Kamasers Analysis: A Multi-Vector DDoS Botnet Targeting Organizations Worldwide 

DDoS attacks are no longer only an infrastructure problem. They can quickly turn into a business issue, affecting uptime, customer experience, and operational stability. Kamasers is a strong example of this new reality, with broad attack capabilities and resilient command-and-control mechanisms that allow it to remain active under pressure. Let’s explore the Kamasers botnet through…

Kamasers Analysis: A Multi-Vector DDoS Botnet Targeting Organizations Worldwide 

DDoS attacks are no longer only an infrastructure problem. They can quickly turn into a business issue, affecting uptime, customer experience, and operational stability. Kamasers is a strong example of this new reality, with broad attack capabilities and resilient command-and-control mechanisms that allow it to remain active under pressure. Let’s explore the Kamasers botnet through…

Zluri addresses expanding identity attack surface across SaaS, cloud, and AI

Enterprise identity is undergoing a fundamental shift. Employees are no longer the only identities operating inside organizations. Service accounts, machine identities, application integrations, and AI agents now interact with enterprise systems at scale, accelerating the growth of non-human identities and expanding the identity attack surface across SaaS applications, cloud infrastructure, and on-premises systems. To address…

Ready for macOS Threats: Expanding Your SOC’s Cross-Platform Analysis with ANY.RUN 

Enterprise security teams are no longer defending a single-platform environment. They are expected to investigate threats across multiple platforms every day, often under constant pressure to move faster and make the right call early. When analysis workflows are split across different tools and environments, triage slows down, investigations take longer, and business risks grow.  To help SOC and MSSP teams handle cross-platform threats…

Agent-to-Agent Attacks Are Coming: What API Security Teaches Us About Securing AI Systems

AI systems are no longer just isolated models responding to human prompts.  In modern production environments, they are increasingly chained together – delegating tasks, calling tools, and coordinating decisions with limited or no human oversight. Almost all that communication happens through APIs.  This shift offers enormous productivity benefits. But it has also complicated security. Because…

Where Multi-Factor Authentication Stops and Credential Abuse Starts

Organizations typically roll out multi-factor authentication (MFA) and assume stolen passwords are no longer enough to access systems. In Windows environments, that assumption is often wrong. Attackers still compromise networks every day using valid credentials. The issue is not MFA itself, but coverage.  Enforced through an identity provider (IdP) such as Microsoft Entra ID, Okta,…

SIEM vs Log Management: Observability, Telemetry, and Detection

Security teams are no longer short on data. They are drowning in it. Cloud control plane logs, endpoint telemetry, identity events, SaaS audit trails, application logs, and network signals keep expanding, while the SOC is still expected to deliver faster detection and cleaner investigations. That is why SIEM vs log management is not just a…

Q&A: AI Fuels ERP Modernization Surge in the Channel

ERP modernization is no longer a discretionary IT refresh; it has become a strategic inflection point.  As organizations confront end-of-maintenance deadlines, mounting security exposure, talent attrition, AI-driven competitive pressure, and rising expectations for real-time performance, the question is shifting from whether to modernize to how, and how fast.  In this Q&A, Henrik Wagner, the chief…

Phishing Evolves Into Multi-Platform Fraud Systems

Phishing no longer announces itself with obvious red flags or clumsy impersonations.  New research from Bolster AI shows today’s most effective scams are engineered to blend into routine digital interactions, hiding in search results, paid ads, document workflows, and online marketplaces rather than obvious spoofed emails.  “Attackers are designing scams that look and feel real…

How Emerging Threats Are Forcing a Reboot of Defence Industrial Base Security Policy

Cyber threats to the defence industrial base are no longer theoretical or confined to classified systems; they are an operational reality affecting personnel, contractors and supply networks worldwide. A newly published Google Threat Intelligence Group report positions the DIB as a contested environment where state-sponsored operations and criminal actors alike apply relentless pressure on digital infrastructure…

The MSP Guide to Building an AI Strategy for SMBs in 2026

AI is no longer an experimental add-on for managed service providers. In 2026, it’s becoming a baseline expectation for small and midsize businesses looking to scale, improve efficiency, and stay competitive. For MSPs, that shift creates a clear opportunity, and a growing challenge. Many providers understand AI’s potential but still struggle to turn it into…

The MSP Guide to Building an AI Strategy for SMBs in 2026

AI is no longer an experimental add-on for managed service providers. In 2026, it’s becoming a baseline expectation for small and midsize businesses looking to scale, improve efficiency, and stay competitive. For MSPs, that shift creates a clear opportunity, and a growing challenge. Many providers understand AI’s potential but still struggle to turn it into…

The MSP Guide to Building an AI Strategy for SMBs in 2026

AI is no longer an experimental add-on for managed service providers. In 2026, it’s becoming a baseline expectation for small and midsize businesses looking to scale, improve efficiency, and stay competitive. For MSPs, that shift creates a clear opportunity, and a growing challenge. Many providers understand AI’s potential but still struggle to turn it into…

⚡ Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More

Cyber threats are no longer coming from just malware or exploits. They’re showing up inside the tools, platforms, and ecosystems organizations use every day. As companies connect AI, cloud apps, developer tools, and communication systems, attackers are following those same paths. A clear pattern this week: attackers are abusing trust. Trusted updates, trusted marketplaces, trusted…

Attackers Don’t Need to Breach Your API -They’ll Breach the Tools That Touch It

The API supply chain is the new security blind spot. Attackers no longer need to breach your APIs directly; they can target the third-party services that connect to them. These unmanaged dependencies are now the shortest path to your sensitive data. The recent Mixpanel incident is a stark reminder of that fact.  What Happened During…

Attackers Don’t Need to Breach Your API -They’ll Breach the Tools That Touch It

The API supply chain is the new security blind spot. Attackers no longer need to breach your APIs directly; they can target the third-party services that connect to them. These unmanaged dependencies are now the shortest path to your sensitive data. The recent Mixpanel incident is a stark reminder of that fact.  What Happened During…