--- title: Browse all articles description: Get the latest cybersecurity updates and threat intelligence from Acronis Research Unit. Learn about the latest emerging cyberthreats and protection strategies. canonical_url: https://www.acronis.com/en/tru/posts/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * Articles # Browse all articles Categories:[MSP News Digest](https://www.acronis.com/en/tru/categories/news/) [Cyberthreats Update](https://www.acronis.com/en/tru/categories/cyberthreats-update/) [Security Research](https://www.acronis.com/en/tru/categories/security-research/) [SMB Insights](https://www.acronis.com/en/tru/categories/smb-insights/) Search Filter articles by Year Select Month Select Author Select Cybersecurity Ransomware protection Malware protection Cyberthreats MSP cybersecurity Threat detection Phishing Email security [![Image 1: The Gentlemen: A closer look at a not-so-gentle ransomware-as-a- service operation](https://staticfiles.acronis.com/images/content/de01b4c35dad76aeb28d1931fc9955b7.png)](https://www.acronis.com/en/tru/posts/the-gentlemen-a-closer-look-at-a-not-so-gentle-ransomware-as-a-service-operation/) 21 October 2026 [The Gentlemen: A closer look at a not-so-gentle ransomware-as-a- service operation](https://www.acronis.com/en/tru/posts/the-gentlemen-a-closer-look-at-a-not-so-gentle-ransomware-as-a-service-operation/) The Gentlemen uses a double-extortion model. In addition to encrypting files, the ransomware can exfiltrate data from compromised systems. This puts additional pressure on victims to pay the ransom to restore access to their files and prevent the stolen data from being publicly leaked. Authors: **[Acronis Threat Research Unit](https://www.acronis.com/tru/authors/acronis-threat-research-unit), [Darrel Virtusio](https://www.acronis.com/tru/authors/virtusio-darrel), [Santiago Pontiroli](https://www.acronis.com/tru/authors/pontiroli-santiago)** [![Image 2: Acronis AI Copilot: Adoption is high and growing among MSPs](https://staticfiles.acronis.com/images/content/4d399dbbae1157e70772d33210e00026.png)](https://www.acronis.com/en/tru/posts/acronis-ai-copilot-adoption-is-high-and-growing-among-msps/) 15 October 2026 [Acronis AI Copilot: Adoption is high and growing among MSPs](https://www.acronis.com/en/tru/posts/acronis-ai-copilot-adoption-is-high-and-growing-among-msps/) See how users are turning to the AI assistant in Acronis Cyber Platform to get answers and complete tasks using plain-language prompts. Author: **[Acronis Threat Research Unit](https://www.acronis.com/tru/authors/acronis-threat-research-unit)** [![Image 3: Acronis Cyberthreats Update, October 2026](https://staticfiles.acronis.com/images/content/2f0531e3d396f53981b260bf218805df.png)](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-october-2026/) 13 October 2026 [Acronis Cyberthreats Update, October 2026](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-october-2026/) The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis Threat Research Unit (TRU) and Acronis sensors. Figures presented here were gathered in September 2026 and reflect threats that Acronis detected, as well as news stories from the industry. This report represents a global outlook and is based on more than one million unique endpoints distributed around the world. Author: **[Acronis Threat Research Unit](https://www.acronis.com/tru/authors/acronis-threat-research-unit)** [![Image 4: AI agents at work: What Acronis endpoint data reveals about MSP and SMB usage](https://staticfiles.acronis.com/images/content/83ee64c9bf1dc71ee6f3516f4a8e2a0f.png)](https://www.acronis.com/en/tru/posts/ai-agents-at-work-what-acronis-endpoint-data-reveals-about-msp-and-smb-usage/) 06 October 2026 [AI agents at work: What Acronis endpoint data reveals about MSP and SMB usage](https://www.acronis.com/en/tru/posts/ai-agents-at-work-what-acronis-endpoint-data-reveals-about-msp-and-smb-usage/) An AI tool that produces only text carries roughly the risk of a badly worded email. A tool that can reach into systems and change things carries the risk of whatever those systems hold. The security question is not how clever the model is. It is which systems and data the model is authorized to access. Author: **[Acronis Threat Research Unit](https://www.acronis.com/tru/authors/acronis-threat-research-unit)** [![Image 5: Acronis Cyberthreats Update, September 2026](https://staticfiles.acronis.com/images/content/1d85450246505847e39719facc2979c8.png)](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-september-2026/) 16 September 2026 [Acronis Cyberthreats Update, September 2026](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-september-2026/) The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis Threat Research Unit (TRU) and Acronis sensors. Figures presented here were gathered in August 2026 and reflect threats that Acronis detected, as well as news stories from the industry. This report represents a global outlook and is based on more than one million unique endpoints distributed around the world. Author: **[Acronis Threat Research Unit](https://www.acronis.com/tru/authors/acronis-threat-research-unit)** [![Image 6: Red Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkit](https://staticfiles.acronis.com/images/content/0de3cfc2147347f0fbff2691dcf7cbff.png)](https://www.acronis.com/en/tru/posts/red-heron-exploits-gitea-n-day-flaw-in-multinational-campaign-exposing-new-linux-rootkit/) 13 September 2026 [Red Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkit](https://www.acronis.com/en/tru/posts/red-heron-exploits-gitea-n-day-flaw-in-multinational-campaign-exposing-new-linux-rootkit/) Acronis Threat Research Unit (TRU) uncovered a multinational campaign in which a Chinese-speaking threat actor, tracked as Red Heron, rapidly weaponized CVE-2026-60004 to compromise internet-facing instances of Gitea, a self-hosted source-code management platform. The activity progressed from source-code theft to persistent access, credential collection, and lateral movement. Author: **[Subhajeet Singha](https://www.acronis.com/tru/authors/singha-subhajeet)** [![Image 7: Remote access hardening playbook: Reducing RMM tool risk for SMBs](https://staticfiles.acronis.com/images/content/4c0134c3d24298bcdce2239a0ff2c154.png)](https://www.acronis.com/en/tru/posts/remote-access-hardening-playbook-reducing-rmm-tool-risk-for-smbs/) 03 September 2026 [Remote access hardening playbook: Reducing RMM tool risk for SMBs](https://www.acronis.com/en/tru/posts/remote-access-hardening-playbook-reducing-rmm-tool-risk-for-smbs/) Widely trusted tools like ConnectWise ScreenConnect and AnyDesk may be abused by attackers, and when left unattended, they can present a problem: Their legitimate prevalence makes attacker activity harder to spot, and any vulnerabilities affecting them can turn a trusted platform into an infection vector. Author: **[Darrel Virtusio](https://www.acronis.com/tru/authors/virtusio-darrel)** [1](https://www.acronis.com/en/tru/posts/page/1/) [2](https://www.acronis.com/en/tru/posts/page/2/) [3](https://www.acronis.com/en/tru/posts/page/3/) [4](https://www.acronis.com/en/tru/posts/page/4/) [5](https://www.acronis.com/en/tru/posts/page/5/) [6](https://www.acronis.com/en/tru/posts/page/6/) [7](https://www.acronis.com/en/tru/posts/page/7/)...[49](https://www.acronis.com/en/tru/posts/page/49/)