Discover the best products, open-source tools & builder insights

Why AI-driven threats are exposing the limits of MSP security stacks

AI-driven threats are accelerating attack timelines and exposing the weaknesses of fragmented MSP security stacks. To keep pace, MSPs need unified, AI-powered security platforms that tightly integrate detection, automation, and recovery, reducing tool sprawl and speeding response. Kaseya argues that platforms like Kaseya 365 Endpoint can enable faster remediation, clearer reporting, and sustainable cybersecurity value—and invites MSPs to join its partner community.

Microsoft patches Exchange Server zero-day exploited in attacks

Jun 10, 2026

Microsoft patches Exchange Server zero-day exploited in attacks

Microsoft patched CVE-2026-42897, a high-severity cross-site scripting vulnerability in Exchange Server that attackers could exploit by sending a crafted email to a user; when opened in Outlook Web Access under certain conditions, arbitrary JavaScript could run in the browser. The flaw affects Exchange Server 2016, 2019, and Exchange SE, and was already being exploited in the wild. Microsoft released June 2026 security updates and urged admins to apply them and keep the embedded EEMS mitigations for added protection. The vulnerability was added to the CISA Known Exploited Vulnerabilities catalog on May 15, with federal agencies ordered to patch by May 29; this continues a trend of Exchange-related exploits over the last five years.

The 5 Best Practices for Secure Identity Verification

Jun 10, 2026

The 5 Best Practices for Secure Identity Verification

Sponsored content highlights five best practices to strengthen identity verification amid rising credential theft (up 160% in 2025): deploy fatigue-resistant MFA with phishing-resistant methods; secure the service desk from social engineering; integrate device trust into authentication decisions; explore passwordless options like passkeys; and protect biometric data with encryption and privacy-preserving techniques. It also promotes Specops solutions for password policy, secure service desk, and verified ID.

China-Linked JDY Botnet Expands Targeting of U.S. Military Networks

Jun 10, 2026

China-Linked JDY Botnet Expands Targeting of U.S. Military Networks

Black Lotus Labs warns that the China-linked JDY botnet has expanded its reach in the United States, with a focus on military networks and a growing pool of compromised SOHO and IoT devices (over 1,500, up from about 650 in January 2024). Rather than a traditional DDoS botnet, JDY functions as a distributed scanning and fingerprinting network that rapidly targets newly disclosed vulnerabilities, including CVE-2026-35616 after Fortinet’s disclosure. The botnet operates via hidden Tor-based C2s (and sometimes the Platypus framework), surveying devices from vendors like Cisco, Ubiquiti, Hikvision, and others for TCP/SSL/UDP/ICMP scanning, banner grabbing, TLS certificate harvesting, and service fingerprinting. Security guidance urges patching devices, disabling exposed admin interfaces, restricting remote management, rotating default credentials, and monitoring for unusual outbound scanning.

Free Developer Tools

65+ browser-based tools that work instantly with no signup

View all tools

JSON

JSON Formatter

Format, validate, and beautify JSON with syntax highlighting

NetworkNew

cURL → Fetch

Convert cURL commands to JavaScript fetch() calls instantly

JSON

JSON → TypeScript

Convert JSON to TypeScript interface and type definitions

Encoding

Base64 Encoder / Decoder

Encode plain text to Base64 or decode Base64 back to text

TextNew

Slug Generator

Generate URL-friendly slugs from any text

AINew

llms.txt Generator

Generate llms.txt files for LLM crawler guidance