Decian perspective
Threat Advisories
CISA has added a new command injection vulnerability to its KEV Catalog. Here is what IT leaders and MSPs need to know about CVE-2026-8037 and the immediate steps required for risk-based remediation.
MSP & IT Leadership
Selecting an MDR vendor requires moving beyond feature checklists to assess operational reality, response times, and integration capabilities.
Industry Spotlight
Manufacturing organizations face distinct cybersecurity pressures driven by the convergence of IT and OT systems, complex supply chain dependencies, and evolving regulatory requirements.
Products & Solutions
Mid-market organizations often face a silent risk: threats that emerge while their internal IT teams are asleep. We explore why 24/7 SOC monitoring is not just a luxury but a necessity for modern risk management.
Security Fundamentals
Backups are useless without verified recovery procedures. This article explains why mid-market teams must test restoration regularly to ensure true resilience against ransomware and data loss.
Compliance & Regulatory
The FTC's GLBA Safeguards Rule mandates a comprehensive information security program. Here is how mid-market organizations can close critical gaps without waiting for a perfect audit.
Threat Advisories
A detailed examination of CVE-2026-18064 affecting the NASA Core Flight System and actionable guidance for IT teams managing embedded and industrial control systems.
Tools & Techniques
Not all logs are created equal. Learn which specific log sources provide the highest signal for threat detection and how to prioritize them in your security architecture.
MSP & IT Leadership
Moving from a break-fix model to a co-managed security approach requires more than just adding new tools. It demands a fundamental shift in operational philosophy and resource allocation to effectively manage modern threats.
Products & Solutions
Managed Detection and Response goes beyond alerting to active threat containment. Learn how to evaluate if MDR fits your mid-market security strategy and what to ask potential providers.
Security Fundamentals
Mid-market IT teams often lack the resources for full-scale EDR but can still implement fundamental endpoint detection to catch threats early.
Threat Advisories
A CISA advisory highlights critical vulnerabilities in MZ Automation libIEC61850 that could crash industrial systems or allow remote code execution. This analysis breaks down the impact for mid-market organizations and outlines immediate mitigation steps.
Threat Advisories
A breakdown of the Johnson Controls XAAP Android vulnerability affecting critical manufacturing and actionable security measures for mid-market organizations.
Threat Advisories
Russian state-sponsored actors have shifted tactics to exploit a zero-day vulnerability in Zimbra Collaboration Suite, allowing them to harvest email data with a single view of a malicious message.
Threat Advisories
A Russian state-supported group called LAUNDRY BEAR is actively exploiting a zero-day vulnerability in Zimbra Collaboration Suite to exfiltrate email data. This campaign targets Western government and commercial entities with a novel, view-only attack.
Threat Advisories
A new path traversal vulnerability in Rockwell Automation ThinManager allows authenticated attackers to write files to restricted system directories. This advisory outlines the affected versions, risk levels, and immediate remediation steps for mid-market organizations.
Threat Advisories
A new CISA advisory details four high-severity vulnerabilities in the Weintek cMT3092X HMI, allowing privilege escalation and credential theft. For mid-market operators and MSP partners, this represents a tangible risk to industrial control systems requiring immediate patch management attention.
© 2025 Decian, Inc. All rights reserved.