
Browse all articles
Filter articles by
Year
Month
Author
November 11, 2026
Every PC has a junk drawer, and attackers know it
New Acronis research reveals how outdated software, unsupported apps and delayed security updates create hidden risks for SMBs and MSPs.
November 11, 2026
Remote access hardening playbook: Reducing RMM tool risk for SMBs
Widely trusted tools like ConnectWise ScreenConnect and AnyDesk may be abused by attackers, and when left unattended, they can present a problem: Their legitimate prevalence makes attacker activity harder to spot, and any vulnerabilities affecting them can turn a trusted platform into an infection vector.
November 10, 2026
The remote access blind spot: An analysis of RMM tool risk for SMBs
Remote monitoring and management (RMM) tools are widely used in modern IT operations, but they are increasingly exploited by cybercriminals. Here, in this first blog, in a two-part series, we analyze the data to discover where RMM-associated risks lie.
November 04, 2026
BOSSAI: Inside the AI attack mesh that targeted Taiwan’s emergency services
Acronis TRU reveals how one operator used a 12-agent AI attack mesh to target organizations across 11 countries and transform cyberthreat operations.
October 29, 2026
Configured to protect: How to properly use security policies
Buying protection is not the same as being protected. What decides the outcome is how the protection is configured and used every day. This report looks at that gap. It uses the live configuration records behind a large managed fleet, more than 1.6 million active endpoints, to see how protection plans are actually set up, how administrators and the providers who manage them choose to structure plans and what those choices tel
October 28, 2026
Inside Qilin ransomware: ESXi attacks, affiliate networks and double extortion
Qilin, also known as Agenda, is a Russian-speaking ransomware-as-a-service (RaaS) operation that first appeared in 2022.
October 21, 2026
The Gentlemen: A closer look at a not-so-gentle ransomware-as-a- service operation
The Gentlemen uses a double-extortion model. In addition to encrypting files, the ransomware can exfiltrate data from compromised systems. This puts additional pressure on victims to pay the ransom to restore access to their files and prevent the stolen data from being publicly leaked.












