Your MSP Backup Console Got Webshells, Fake Edge XMRig, and a CISA KEV Stamp
Exploitation since October 7, hotfixes that actually close the door, KEV on October 14. Hunt MicrosoftEdgeUpdateSvc and rebuild dirty boxes.
MSP
Read Full News
Fake WatchGuard VPN Site Steals Creds Then Hands You the Real Installer
No malware file. Just a browser form, a forced retry, and WatchGuard’s own signed client from the CDN. Endpoint tools see nothing. Your VPN gateway sees everything.
Your MSP’s Backup Console Got Rooted and the Patch Does Nothing
AhsayCBS backup consoles are getting rooted by a no-creds exploit chain, and the version Ahsay shipped as the fix closes neither flaw. The call is coming from inside the MSP.