RESEARCH
Threat Thursday: June 4th, 2026
Welcome to Threat Thursday, Galactic's weekly threat intelligence roundup. This week's stories have a clear pattern: attackers didn't find obscure entry points or novel techniques but instead went after the things you were already using and already trusting. As always, ...
Communicating Risk
The Silent Killer in Your MSP: Ambiguity
You think you’re being clear. You told the client they needed MFA. You recommended better backups. You flagged that firewall. But when things go sideways—when data’s lost, insurance denies the claim, or the lawyers come knocking—they don’t remember your recommendations. ...
The #1 Role Every MSP Must Embrace Before a Competitor Replaces You
Your Clients Don’t Need Another IT Vendor. They Need a Cybersecurity Leader. If you’re still selling managed services like it’s 2015, you’re already losing. The MSP market has shifted. The stakes are higher. Clients aren’t asking how many tickets you ...
Your Marketing Sounds Like It Was Written by a Robot—Because It Was
Let’s be honest. You’re slammed with tickets, chasing down weird user issues, and trying not to lose your mind over Janet’s printer—again. So when someone suggests using AI to handle your marketing, it sounds like a miracle. Here’s the problem: ...
Dark Web Monitoring & Threat Intelligence
Google Predicts Top Cybersecurity Threats for 2025
Staying on top of cybersecurity threats as a business owner is no walk in the park. These strides demand the right antivirus programs, firewalls, and security teams, to name a few. However, because online attacks are always evolving, your business ...
Human Layer Security
The Deepfake Was Convincing. So Was My Backpack.
Why Social Engineering Still Works, Why AI is Making it Sharper, and the One Habit that Stops it In early 2024, an employee at Arup, a global engineering firm, joined a video call with several colleagues, including someone who appeared ...
New State Cyber Rules Are Coming—Will You Be Ready, or Be the One They Blame?
California. New York. Massachusetts. One by one, states are turning up the heat on cybersecurity regulations—and if you're not preparing your clients for what’s coming, you're not just behind. You're exposed. Last week I blogged about upcoming California rules requiring ...
16 Billion Reasons to Change Your Password—Now
You ever wake up and feel like the bad guys are winning? I do. Today especially. Because if you thought May’s headline—184 million stolen credentials splashed across the dark web—was terrifying, you’d better sit down for this one. The latest ...
More Articles
Your Marketing Sounds Like It Was Written by a Robot—Because It Was
Let’s be honest. You’re slammed with tickets, chasing down weird user issues, and trying not to lose your mind over Janet’s printer—again. So when someone suggests using AI to handle your marketing, it sounds like a miracle. Here’s the problem: ...
The Ice Cream That Cost Him a Client (And Made Him Thousands)
I was having an ice cream cone with the owner of an MSP recently. Yes—ice cream. I’m a fan. Anyway, we’re talking shop, and he drops this bomb on me: “Bruce, your team ran a pen test on one of ...
WARNING: Why Your Clients’ AI Habits Could Become YOUR Legal Nightmare
If you think AI tools like ChatGPT are harmless for your clients, think again. Last week, Sam Altman—the CEO of OpenAI—publicly warned that conversations with ChatGPT are not covered under legal privilege. People using ChatGPT as a “therapist” or “confidant” ...
Stop Handing Hackers the Keys: Why CVSS 8.2 Credential Leaks Just Made Legacy Scanning Obsolete
When two high-risk CVEs (CVE-2025-32353 and CVE-2025-32354) hit last week, the message was loud and clear: the way most MSPs perform security assessments is no longer just outdated—it’s risky. These vulnerabilities revealed that some widely used scanning tools store administrative ...
Tribal Knowledge Will Sink Your MSP: Why “Sorta Documented” Is a Lawsuit Waiting to Happen
There is a silent killer inside most MSPs. It is not ransomware. It is not an unpatched firewall. It is not even a missed backup. It is tribal knowledge. Walk into any MSP and you will see the same thing. ...
Business Risks in 2025: When Tools Fail, What’s Next
Meta Description (≈155 characters): Every tool your business relies on can fail. In 2025, risk assessments and planning for disruptions are essential to protect revenue and reputation. In business, tools are everywhere. They are the systems, services, and partnerships we ...
Is Your Business Ready to Defend Its Cybersecurity Program?
You probably think your business is covered when it comes to cybersecurity. You’ve got IT support. You have tools in place. You’re investing in the right software. But if a regulator, auditor, insurer—or worse, a lawyer—asked you tomorrow to prove ...
Your PSA Won’t Save You From a Breach
I had dinner the other night with one of our partners. Great guy. Smart. Ambitious. Doing all the right things to grow his MSP… except one. He’s rebuilding his PSA. And his RMM. At the same time. Which sounds productive—until ...
Cyber Disasters Are Coming—Will Your Clients Be Ready?
Before the Guadalupe River surged 33 feet in Texas this past July, the alerts were already out. Phones buzzed. Radios screamed. ...
Who’s Going to Pay When the Lawyers Show Up? (Hint: Probably You)
Look, I’ll make this simple. You didn’t build your MSP so some lawyer could come along and tear it to pieces. Or so some regulator could slap you with fines that would make your next quarterly tax bill look like ...
Your Guest Users Could Be Your Biggest Threat—Here’s Why
Collaboration is the heartbeat of your business. It’s how deals get done, how partners stay aligned, and how you keep growth on track. But the same tools that let you collaborate might also be the fastest way to burn your ...
Why Smart CEOs & CFOs Document Every Tech Decision
What’s the cheapest, most effective way to protect your business from a cyber disaster, insurance denial, or legal attack? Write stuff down. Seriously. If you're making decisions about IT security, risk, or compliance—and especially when you're turning down recommendations—documenting the ...
