Decian perspective
Threat Advisories
A new advisory highlights a weakness in Rockwell Automation OTTO Fleet Manager where password hashes are stored with insufficient computational effort. This vulnerability lowers the barrier for offline brute-force attacks if an attacker compromises a backup.
Threat Advisories
CISA has added a critical Zimbra vulnerability to its Known Exploited Vulnerabilities catalog. Here is what this means for mid-market organizations and how to prioritize remediation.
Tools & Techniques
Security teams often struggle with alert fatigue. This article explains the mechanics of correlation rules, their logical flow, and how they bridge the gap between raw events and incident response.
Industry Spotlight
Mid-market law firms face distinct cybersecurity challenges driven by client data sensitivity and strict ethical obligations. Understanding these pressures is key to protecting your practice.
Products & Solutions
Internal IT teams are stretched thin. A co-managed SOC model fills capability gaps while keeping your team in control, providing 24/7 coverage without the overhead of full staffing.
Security Fundamentals
Traditional multi-factor authentication is increasingly vulnerable to sophisticated phishing attacks. Discover why phishing-resistant methods are the new standard and how to implement them.
MSP & IT Leadership
Building an in-house SOC requires significant investment and talent. Learn the specific cost and capability thresholds where buying a managed security service becomes the strategic choice for mid-market organizations.
Products & Solutions
Standard alerts only reveal what a system flags. Threat hunting proactively searches for threats that slipped past automated defenses. This article explains the value of this service for mid-market leaders.
Security Fundamentals
Most organizations operate with excessive user permissions by default. This article outlines a practical approach to implementing least-privilege access to contain potential breaches.
Threat Advisories
CISA has added a new command injection vulnerability to its KEV Catalog. Here is what IT leaders and MSPs need to know about CVE-2026-8037 and the immediate steps required for risk-based remediation.
MSP & IT Leadership
Selecting an MDR vendor requires moving beyond feature checklists to assess operational reality, response times, and integration capabilities.
Industry Spotlight
Manufacturing organizations face distinct cybersecurity pressures driven by the convergence of IT and OT systems, complex supply chain dependencies, and evolving regulatory requirements.
Products & Solutions
Mid-market organizations often face a silent risk: threats that emerge while their internal IT teams are asleep. We explore why 24/7 SOC monitoring is not just a luxury but a necessity for modern risk management.
Security Fundamentals
Backups are useless without verified recovery procedures. This article explains why mid-market teams must test restoration regularly to ensure true resilience against ransomware and data loss.
Compliance & Regulatory
The FTC's GLBA Safeguards Rule mandates a comprehensive information security program. Here is how mid-market organizations can close critical gaps without waiting for a perfect audit.
Threat Advisories
A detailed examination of CVE-2026-18064 affecting the NASA Core Flight System and actionable guidance for IT teams managing embedded and industrial control systems.
Tools & Techniques
Not all logs are created equal. Learn which specific log sources provide the highest signal for threat detection and how to prioritize them in your security architecture.
MSP & IT Leadership
Moving from a break-fix model to a co-managed security approach requires more than just adding new tools. It demands a fundamental shift in operational philosophy and resource allocation to effectively manage modern threats.
Products & Solutions
Managed Detection and Response goes beyond alerting to active threat containment. Learn how to evaluate if MDR fits your mid-market security strategy and what to ask potential providers.
Security Fundamentals
Mid-market IT teams often lack the resources for full-scale EDR but can still implement fundamental endpoint detection to catch threats early.
Threat Advisories
A CISA advisory highlights critical vulnerabilities in MZ Automation libIEC61850 that could crash industrial systems or allow remote code execution. This analysis breaks down the impact for mid-market organizations and outlines immediate mitigation steps.
Threat Advisories
A breakdown of the Johnson Controls XAAP Android vulnerability affecting critical manufacturing and actionable security measures for mid-market organizations.
Threat Advisories
Russian state-sponsored actors have shifted tactics to exploit a zero-day vulnerability in Zimbra Collaboration Suite, allowing them to harvest email data with a single view of a malicious message.
Threat Advisories
A Russian state-supported group called LAUNDRY BEAR is actively exploiting a zero-day vulnerability in Zimbra Collaboration Suite to exfiltrate email data. This campaign targets Western government and commercial entities with a novel, view-only attack.
Threat Advisories
A new path traversal vulnerability in Rockwell Automation ThinManager allows authenticated attackers to write files to restricted system directories. This advisory outlines the affected versions, risk levels, and immediate remediation steps for mid-market organizations.
Threat Advisories
A new CISA advisory details four high-severity vulnerabilities in the Weintek cMT3092X HMI, allowing privilege escalation and credential theft. For mid-market operators and MSP partners, this represents a tangible risk to industrial control systems requiring immediate patch management attention.
© 2025 Decian, Inc. All rights reserved.