RESEARCH
Threat Thursday: June 4th, 2026
Welcome to Threat Thursday, Galactic's weekly threat intelligence roundup. This week's stories have a clear pattern: attackers didn't find obscure entry points or novel techniques but instead went after the things you were already using and already trusting. As always, ...
Communicating Risk
The Silent Killer in Your MSP: Ambiguity
You think you’re being clear. You told the client they needed MFA. You recommended better backups. You flagged that firewall. But when things go sideways—when data’s lost, insurance denies the claim, or the lawyers come knocking—they don’t remember your recommendations. ...
The #1 Role Every MSP Must Embrace Before a Competitor Replaces You
Your Clients Don’t Need Another IT Vendor. They Need a Cybersecurity Leader. If you’re still selling managed services like it’s 2015, you’re already losing. The MSP market has shifted. The stakes are higher. Clients aren’t asking how many tickets you ...
Your Marketing Sounds Like It Was Written by a Robot—Because It Was
Let’s be honest. You’re slammed with tickets, chasing down weird user issues, and trying not to lose your mind over Janet’s printer—again. So when someone suggests using AI to handle your marketing, it sounds like a miracle. Here’s the problem: ...
Dark Web Monitoring & Threat Intelligence
Google Predicts Top Cybersecurity Threats for 2025
Staying on top of cybersecurity threats as a business owner is no walk in the park. These strides demand the right antivirus programs, firewalls, and security teams, to name a few. However, because online attacks are always evolving, your business ...
Human Layer Security
The Deepfake Was Convincing. So Was My Backpack.
Why Social Engineering Still Works, Why AI is Making it Sharper, and the One Habit that Stops it In early 2024, an employee at Arup, a global engineering firm, joined a video call with several colleagues, including someone who appeared ...
New State Cyber Rules Are Coming—Will You Be Ready, or Be the One They Blame?
California. New York. Massachusetts. One by one, states are turning up the heat on cybersecurity regulations—and if you're not preparing your clients for what’s coming, you're not just behind. You're exposed. Last week I blogged about upcoming California rules requiring ...
16 Billion Reasons to Change Your Password—Now
You ever wake up and feel like the bad guys are winning? I do. Today especially. Because if you thought May’s headline—184 million stolen credentials splashed across the dark web—was terrifying, you’d better sit down for this one. The latest ...
More Articles
The Day They Found Out Their Insurance Was Useless
It happened again. Last Monday morning, 7:44 AM. The office lights flicked on, the smell of burnt coffee filled the breakroom—and every single computer screen was black. Everything was locked down by ransomware. Hackers had another successful weekend. They did ...
“We Just Can’t Afford That.”
(The Five Words That Will Haunt Your MSP—And How to Make Sure They Don’t) Have you ever had a client look ...
The Dangerous Compliance Shortcut That Could Put Your MSP on the Hook for Negligence
Imagine sitting across from your best client. They tell you they’ve found a company that can build out their entire HIPAA compliance program in under three days. No heavy lifting. Fully automated. ...
Your Help Desk Tickets Will Be Used Against You in a Court of Law
Most MSPs don’t realize the real danger of their ticket documentation — until it’s too late. They think tickets are just ...
How Can You Look Yourself in the Mirror?
Be honest—how much are you spending every month on security tools? $5,000? $10,000? More? Now tell me this: do you have a written incident response plan? Not a vague idea. Not “oh yeah, we’d figure it out.” I mean a ...
Think Your Team Has You Covered? You Might as Well Wear a “Hack Me” Sign
If you’re an MSP owner or operations leader and you think you’re covered because your engineers figured out how to run a few open-source pen testing tools, or because your vendor does your pen test right after patching your servers—congratulations. ...
The Backdoor Microsoft Won’t Talk About—And Why It’s Already Wide Open
You didn’t ask for this. But here we are. Hidden in plain sight, buried deep inside Microsoft Entra ID, lies a backdoor so dangerous it might as well come with a sign that says, “Hack Me.” This isn’t fearmongering. It’s ...
If You Think Getting Risk Acceptance Signed Is “Adversarial”—You’re doing it wrong
I’ve heard it more times than I can count. “I don’t like making my clients sign risk acceptance documents. It feels ...
If You’re Measuring the Wrong Metrics, You Can’t Tell If Your MSP Is Already Drowning
I was talking to an MSP owner the other day who wanted to “get to the next level.” I asked him what metrics he was tracking. He said, “Profitability.” Good start Then, “Topline revenue.” Meh. And then, “Number of employees.” ...
Shame. The Most Underrated Security Tool in Your Business
It’s 3:17 AM in Tokyo. The city is asleep. I’m not. Jet lag has me wandering quiet streets, watching the world work without me—and wondering how security works when no one’s looking. Here’s what I’ve noticed: There are no fences. ...
Are You Running an MSP or a Hardware Store?
Stop selling security like it’s the power tools aisle at your local hardware store. Start building a strategy. Start with a plan. Then pour the foundation. I got an email from a partner this week. It started with the usual ...
16 Billion Reasons to Change Your Password—Now
You ever wake up and feel like the bad guys are winning? I do. Today especially. Because if you thought May’s headline—184 million stolen credentials splashed across the dark web—was terrifying, you’d better sit down for this one. The latest ...
