--- title: Acronis Blog description: Stay up to date with the latest cybersecurity and cyber protection news, research, vulnerabilities, threats and computer attacks. canonical_url: https://www.acronis.com/en/blog/tags/msp-cybersecurity/page/27/ locale: en last_updated: 2026-10-27 --- # Acronis Blog [TRU Security → Updates from Acronis Threat Research Unit](https://www.acronis.com/en/tru/) [Acronis Blog](https://www.acronis.com/en/blog/) MSP cybersecurity # All stories in MSP cybersecurity [![Image 1: Critical php2shell vulnerabilities: What you need to know](https://staticfiles.acronis.com/images/blog-cover/4583b18850c821d2fee297544f71803f.png) 22 October 2026 — 3 min read Critical php2shell vulnerabilities: What you need to know Learn what the critical php2shell vulnerabilities mean, how Acronis is responding and the steps to patch PHP servers and check for compromise.](https://www.acronis.com/en/blog/posts/critical-php2shell-vulnerabilities-what-you-need-to-know/) [24 June 2021 — 6 min read ![Image 2: What is Social Engineering?](https://staticfiles.acronis.com/images/blog-cover/f62a350b7e35dfe1e3dd057a635af90b.png) What is Social Engineering? According to recent studies, cybercriminals use social engineering techniques to drive 98% of cyberattacks, making this an important topic of discussion for businesses and users. If your organization is a managed service provider (MSP), read on and discover how social engineering works and what you can do to help your clients protect their business from attacks.](https://www.acronis.com/en/blog/posts/social-engineering/) [24 June 2021 — 6 min read ![Image 3: Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager](https://staticfiles.acronis.com/images/blog-cover/30ed349a67c19cf8c26685d868f90f47.png) What is IT risk management? Murphy has two laws, and both apply when it comes to IT risk management. “Anything that can go wrong, will go wrong” is Murphy’s first law, which is considered accurate because, given enough time, there is a high probability that anything will go wrong. You need to be prepared for anything! Murphy’s second law states that “nothing is as easy as it looks,” and this is also true when it comes to managing business risk.](https://www.acronis.com/en/blog/posts/it-risk-management/) [10 June 2021 — 3 min read ![Image 4: How (and why) to build your cybersecurity services bundle](https://staticfiles.acronis.com/images/blog-cover/e44479aa9902652a121944102811a7bd.png) Stop email cyberthreats with Advanced Email Security 94% of all malware and 96% of all social engineering attacks today are delivered through email. For managed service providers (MSPs), that makes email security a top priority but responding to this threat takes more than just adding a new cybersecurity tool to build services on top of.](https://www.acronis.com/en/blog/posts/stop-email-cyberthreats-advanced-email-security/) [04 June 2021 — 5 min read ![Image 5: Threat analysis: DoppelPaymer ransomware](https://staticfiles.acronis.com/images/blog-cover/18a373b02d45b7c3ed01a5efacfff718.png) Threat analysis: DoppelPaymer ransomware DoppelPaymer is a successor of BitPaymer ransomware, and is part of the Dridex malware family. It’s currently being distributed in various forms, including phishing or spam emails with attached documents that are embedded with malicious code — either JavaScript or VBScript. On execution, this code downloads DoppelPaymer’s first-stage loader on the victim’s machine. The attackers then use the PowerShell Empire toolkit to run a brute-force attack on Active Directory. The Mimikatz module is used to dump passwords from the system memory.](https://www.acronis.com/en/blog/posts/doppelpaymer-ransomware/) [04 June 2021 — 5 min read ![Image 6: How (and why) to build your cybersecurity services bundle](https://staticfiles.acronis.com/images/blog-cover/e44479aa9902652a121944102811a7bd.png) Threat analysis: Pysa (Mespinoza) ransomware Pysa takes an approach commonly referred to as “big game hunting,” meaning that the ransomware group targets high-value assets in organizations that are particularly sensitive to data loss or system downtime. The idea is that victims — which may include healthcare providers, government agencies, and managed service providers — are more likely to quickly pay the ransom, regardless of its cost.](https://www.acronis.com/en/blog/posts/pysa-ransomware/) [04 June 2021 — 8 min read ![Image 7: Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager](https://staticfiles.acronis.com/images/blog-cover/30ed349a67c19cf8c26685d868f90f47.png) Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager Conti ransomware shuts down backup services and unlocks files with Windows Restart Manager before encryption.](https://www.acronis.com/en/blog/posts/conti-ransomware/) [04 June 2021 — 8 min read ![Image 8: Sekhmet ransomware Analysis](https://staticfiles.acronis.com/images/blog-cover/8d171c9d5dce1ca04801e22dc732de75.png) Sekhmet ransomware Analysis Sekhmet ransomware, which first appeared in March 2020, has already disclosed the stolen data from at least six victims to date. One recent known attack that occurred on 20 June 2020 targeted SilPac, a gas handling solutions company based in Santa Clara, California.](https://www.acronis.com/en/blog/posts/sekhmet-ransomware/) [04 June 2021 — 7 min read ![Image 9: Analysis of Ragnar Locker Ransomware](https://staticfiles.acronis.com/images/blog-cover/701297a7531d17743bf6f7c5f50e97c8.png) Analysis of Ragnar Locker Ransomware The threat actor begin the attack by compromising the company’s network via RDP service, using brute force to guess weak passwords or with stolen credentials bought on the Dark Web. Next, the attacker performs second-stage reconnaissance. To elevate privileges, the attacker exploits the CVE-2017-0213 vulnerability in the Windows COM Aggregate Marshaler to run arbitrary code with elevated privileges.](https://www.acronis.com/en/blog/posts/ragnar-locker/) [01 June 2021 — 3 min read ![Image 10: How (and why) to build your cybersecurity services bundle](https://staticfiles.acronis.com/images/blog-cover/e44479aa9902652a121944102811a7bd.png) Will liability waivers help when clients won’t pay for cybersecurity? The rise in cberthreats requires MSPs to make the cybersecurity of their clients a top priority. But what happens when an existing client or a prospect doesn’t think their business is at risk – and they don’t want to enforce the policies or pay for preventative measures you know will keep them secure? Many experts recommend using liability waivers to reduce the risk to your business when stubborn clients refuse to get on board with security. Sometimes, just presenting a waiver can get clients to realize the severity of the risk.](https://www.acronis.com/en/blog/posts/will-liability-waivers-help-when-clients-wont-pay-cybersecurity/) [26 May 2021 — 2 min read ![Image 11: Acronis wins Most Innovative Solution award at ASCII Success Summit](https://staticfiles.acronis.com/images/blog-cover/74dd033305077b8ad219667201379601.png) Acronis wins Most Innovative Solution award at ASCII Success Summit We’re thrilled to announce that Acronis has been awarded Most Innovative Solution at the first live ASCII Summit of 2021. This award acknowledges the significant evolution that Acronis has made from backup vendor to cyber protection partner of the global MSP channel community.](https://www.acronis.com/en/blog/posts/acronis-wins-most-innovative-solution-award-ascii-success-summit/) [20 May 2021 — 3 min read ![Image 12: What goes into a strong, modern cyber protection stack](https://staticfiles.acronis.com/images/blog-cover/bd62a55daae50fdec0d6a6b238034607.png) What goes into a strong, modern cyber protection stack For service providers, cybersecurity services are in demand. Building tailored cybersecurity bundles that ensure client protection while earning you the most profit, however, is more complicated than it seems. Build your security services bundle (or bundles) with this handy guide to the services and components that help you find the best results for your organization and your clients.](https://www.acronis.com/en/blog/posts/what-goes-strong-modern-cyber-protection-stack/) [20 May 2021 — 2 min read ![Image 13: How (and why) to build your cybersecurity services bundle](https://staticfiles.acronis.com/images/blog-cover/e44479aa9902652a121944102811a7bd.png) How (and why) to build your cybersecurity services bundle MSPs looking to build an impenetrable cybersecurity wall face a complex and process. Targets are shifting quickly as AI and other technologies give offenders more firepower and stealthier weapons for their attacks. And while foolproof cybersecurity may not always be possible, your clients still need and deserve the best protection available. Designing bundled cybersecurity services within your offering is the best way to deliver them.](https://www.acronis.com/en/blog/posts/how-and-why-build-your-cybersecurity-services-bundle/) [1](https://www.acronis.com/en/blog/tags/msp-cybersecurity/page/1/)...[25](https://www.acronis.com/en/blog/tags/msp-cybersecurity/page/25/) [26](https://www.acronis.com/en/blog/tags/msp-cybersecurity/page/26/) [27](https://www.acronis.com/en/blog/tags/msp-cybersecurity/page/27/) [28](https://www.acronis.com/en/blog/tags/msp-cybersecurity/page/28/) [29](https://www.acronis.com/en/blog/tags/msp-cybersecurity/page/29/)...[34](https://www.acronis.com/en/blog/tags/msp-cybersecurity/page/34/)