--- title: Browse all articles description: Get the latest cybersecurity updates and threat intelligence from Acronis Research Unit. Learn about the latest emerging cyberthreats and protection strategies. canonical_url: https://www.acronis.com/en/tru/posts/page/2/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * Articles # Browse all articles Categories:[MSP News Digest](https://www.acronis.com/en/tru/categories/news/) [Cyberthreats Update](https://www.acronis.com/en/tru/categories/cyberthreats-update/) [Security Research](https://www.acronis.com/en/tru/categories/security-research/) [SMB Insights](https://www.acronis.com/en/tru/categories/smb-insights/) Search Filter articles by Year Select Month Select Author Select Cybersecurity Ransomware protection Malware protection Cyberthreats MSP cybersecurity Threat detection Phishing Email security [![Image 1: Acronis Cyberthreats Update, August 2026](https://staticfiles.acronis.com/images/content/2f73b711e396f537de594e9d3020f762.png)](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-august-2026/) 01 September 2026 [Acronis Cyberthreats Update, August 2026](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-august-2026/) The Acronis Cyberthreats Update covers current cyberthreat activity and trends, as observed by Acronis Threat Research Unit (TRU) and Acronis sensors. Figures presented here were gathered in July 2026 and reflect threats that Acronis detected, as well as news stories from the public domain. This report represents a global outlook and is based on more than one million unique endpoints distributed around the world. Author: **[Acronis Threat Research Unit](https://www.acronis.com/tru/authors/acronis-threat-research-unit)** [![Image 2: Cambodia-focused cluster uses multistage infection chain with localized lures](https://staticfiles.acronis.com/images/content/e755985950e142be434e70c26caa87ce.png)](https://www.acronis.com/en/tru/posts/cambodia-focused-cluster-uses-multi-stage-infection-chain-with-localized-lures/) 26 August 2026 [Cambodia-focused cluster uses multistage infection chain with localized lures](https://www.acronis.com/en/tru/posts/cambodia-focused-cluster-uses-multi-stage-infection-chain-with-localized-lures/) Acronis’ Threat Research Unit (TRU) identified a recent campaign focused on Cambodia. The analyzed archives, discovered while hunting for related activity, use several lure themes, including Cambodian government notices, public health announcements, dental examination records, real estate documents, and promotional offers. Authors: **[Darrel Virtusio](https://www.acronis.com/tru/authors/virtusio-darrel), [Subhajeet Singha](https://www.acronis.com/tru/authors/singha-subhajeet)** [![Image 3: Grandoreiro goes north: From Brazil to Mexico with a new DLL sideloading campaign](https://staticfiles.acronis.com/images/content/32aca4b590414db167f1685f4a3045d6.png)](https://www.acronis.com/en/tru/posts/grandoreiro-goes-north-from-brazil-to-mexico-with-a-new-dll-sideloading-campaign/) 19 August 2026 [Grandoreiro goes north: From Brazil to Mexico with a new DLL sideloading campaign](https://www.acronis.com/en/tru/posts/grandoreiro-goes-north-from-brazil-to-mexico-with-a-new-dll-sideloading-campaign/) Grandoreiro is a notorious banking trojan that has been operating across Latin America since at least 2016, targeting financial institutions and their customers through phishing campaigns and social engineering techniques. Written in Delphi and Brazilian in origin, it is one of the many of Latin American banking trojans (alongside Guildma, Javali and Melcoz). Author: **[Santiago Pontiroli](https://www.acronis.com/tru/authors/pontiroli-santiago)** [![Image 4: How patch quality varies by vendor across SMB Windows fleets](https://staticfiles.acronis.com/images/content/0b2eb7d42b5f4a90ee4ce4d763c76aa0.png)](https://www.acronis.com/en/tru/posts/how-patch-quality-varies-by-vendor-across-smb-windows-fleets/) 18 August 2026 [How patch quality varies by vendor across SMB Windows fleets](https://www.acronis.com/en/tru/posts/how-patch-quality-varies-by-vendor-across-smb-windows-fleets/) Patch prioritization in SMB environments often starts with software vendor severity. Critical patches go first, then high-severity patches, then everything else. Severity answers only one question: How risky is it to leave a vulnerability unresolved? It says nothing about how hard the fix is to deploy, how often it causes issues or how much testing it needs. Author: **[Acronis Threat Research Unit](https://www.acronis.com/tru/authors/acronis-threat-research-unit)** [![Image 5: PATCHCORD: New malware cluster targets Afghan telecom and South Asian critical infrastructure](https://staticfiles.acronis.com/images/content/1dc3697faa3f648b08f5cb2146a8222c.png)](https://www.acronis.com/en/tru/posts/patchcord-new-malware-cluster-targets-afghan-telecom-and-south-asian-critical-infrastructure/) 13 August 2026 [PATCHCORD: New malware cluster targets Afghan telecom and South Asian critical infrastructure](https://www.acronis.com/en/tru/posts/patchcord-new-malware-cluster-targets-afghan-telecom-and-south-asian-critical-infrastructure/) Acronis Threat Research Unit (TRU) has identified an ongoing campaign delivering a previously undocumented custom backdoor against Afghan telecom providers and South Asian critical infrastructure organizations. The backdoor, tracked as PATCHCORD, is a compiled C/C++ implant delivered through sector-specific lures, including fake VPN installers impersonating Afghan Telecom (AFTEL) and telecom management tools. Authors: **[Acronis Threat Research Unit](https://www.acronis.com/tru/authors/acronis-threat-research-unit), [Darrel Virtusio](https://www.acronis.com/tru/authors/virtusio-darrel), [Santiago Pontiroli](https://www.acronis.com/tru/authors/pontiroli-santiago), [Subhajeet Singha](https://www.acronis.com/tru/authors/singha-subhajeet)** [![Image 6: Advancing toward agent health and self-recovery for MSP operations](https://staticfiles.acronis.com/images/content/b31ea03f0b108b52156c74e2b37a4221.png)](https://www.acronis.com/en/tru/posts/advancing-toward-agent-health-and-self-recovery-for-msp-operations/) 06 August 2026 [Advancing toward agent health and self-recovery for MSP operations](https://www.acronis.com/en/tru/posts/advancing-toward-agent-health-and-self-recovery-for-msp-operations/) The business value of better agent health assurance is straightforward. MSPs spend less time on repetitive checks and manual service recovery. Technicians can focus on issues that require judgment instead of routine restarts. Service managers can see which customers or services have repeated problems. Customers receive more stable protection and management coverage. Author: **[Acronis Threat Research Unit](https://www.acronis.com/tru/authors/acronis-threat-research-unit)** [![Image 7: Two ways to scale your scripts](https://staticfiles.acronis.com/images/content/6f54cbcc71f21c0ad3e0345b7f272ef5.png)](https://www.acronis.com/en/tru/posts/two-ways-to-scale-your-scripts/) 30 July 2026 [Two ways to scale your scripts](https://www.acronis.com/en/tru/posts/two-ways-to-scale-your-scripts/) Every script you run on a customer endpoint is operational software with administrator privileges. It deserves the same lifecycle discipline you would apply to any other production code — review, attribution, versioning and retirement. Whether a script was written by a senior engineer last Tuesday, cloned from a vendor template or generated by AI, the standards expectation is identical. Author: **[Acronis Threat Research Unit](https://www.acronis.com/tru/authors/acronis-threat-research-unit)** [1](https://www.acronis.com/en/tru/posts/page/1/) [2](https://www.acronis.com/en/tru/posts/page/2/) [3](https://www.acronis.com/en/tru/posts/page/3/) [4](https://www.acronis.com/en/tru/posts/page/4/) [5](https://www.acronis.com/en/tru/posts/page/5/) [6](https://www.acronis.com/en/tru/posts/page/6/) [7](https://www.acronis.com/en/tru/posts/page/7/)...[49](https://www.acronis.com/en/tru/posts/page/49/)