Galactic Research: Articles & Insights
Threat Thursday: August 20th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
AI Security
Part 2: The Security Controls Behind a Safe AI Deployment
From the Map to the Hike: The Four Controls and the Client Conversations Behind Them This is Part 2 in a series that covers your AI enablement plan. Part 1 is here if you want the full map. The Little ...
Ten of Eleven AI Coding Agents Failed a Decades-Old Attack
What GuardFall Tells Us About Where AI Security Controls Need to Live Picture a security guard stationed at the entrance of a building. Their job is to check IDs. They're good at it, fast and consistent, and the building's occupants ...
Perfect AI Guardrails Are Impossible. That's Not an Excuse for Ignoring Them.
What a NIST Mathematician Proved, Why the Internet Got it Wrong, and What Your AI Security Program Should Look Like Years ago, running an MSSP, I had a vendor pitch us a next-gen firewall on a single promise: one hundred ...
Threat Intelligence
Threat Thursday: August 20th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Threat Thursday: August 13th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Threat Thursday: August 6th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Security Education
The Browser Became the Endpoint. Your Security Stack Didn’t Notice.
An employee clicks a box that says “verify you’re human.” A prompt tells them to press a couple of keys, so they do. What they have actually done is paste and run a command that a script slipped onto their clipboard the moment they ...
Vulnerabilities Are Now the #1 Way In. The Window to Fix Them Is Closing.
Most of the time, I didn't break into a network so much as let myself in through something with a fix already out (just not installed yet): the VPN concentrator three versions behind, the firewall with a known vulnerability fixed ...
Your OSINT Reality Check: Here’s What an Attacker Is Finding in 30 Minutes or Less
Today’s connected, AI-driven digital ecosystem has made it easier than ever to build a professional brand, network with peers, and share ideas with a wider audience. It’s opened doors for businesses that simply didn't exist before: new customers, new partnerships, ...
Strategy & Leadership
An Open Letter From Your Cyber Risk Advisors
After the Water Attacks Last month, attackers reached into water treatment plants across a dozen states and started moving the controls. Some of them found out what happens when you do. I've been thinking about what to say to the ...
Building Trust in Executive Relationships: Lessons from King Lear
A Framework for Establishing the Kind of Trust that Survives Budget Season Imagine the curtain going up and a group of players act out the opening scenes of Shakespeare's King Lear, just for you. An aging king sits in his ...
Your Jokes Were Funny. They Still Didn't Renew.
How MSPs Build the Kind of Client Rapport That Survives a Budget Review You walked out of the meeting feeling good. The handshake was firm, the small talk landed, and you even got a laugh with the printer joke. You ...
All Articles
Beware Certain Sites Because Of TSA PreCheck Renewal Scam
According to a report recently released by Abnormal Security there's been a huge upsurge of instances of people getting scammed after visiting what they thought were Global Entry, NEXUS, and TSA PreCheck ...
Blue Screen On Windows 11 Could Be Audio Driver Issue
Sometimes the development process is smooth and sometimes it's not so smooth. Right now Windows 11's development is falling into that latter category. Recently Windows Engineers announced a serious issue plaguing the ...
YouTube Will Start Hiding Dislike Counts From Public
Some months back YouTube announced that it would begin experimenting with the notion of hiding the number of down votes or dislikes that displayed content receives. At present for most of the ...
How To Get Your Clients Focused On Cyber Hygiene
I’m sure there are a ton of things on your clients’ minds right now. New COVID information is coming ...
You Can Now Easily Block Users in Spotify
Are you a Spotify user? Have you found yourself wanting or needing to block another user? Until recently if you found yourself in that situation you had no choice but to contact ...
Twitter Will No Longer Auto-Crop Photos On The Web
Twitter hasn't had a very good relationship with auto-cropping. Images just haven't historically displayed very well on the platform. Fortunately that is soon changing. The company recently announced that it is dropping ...
Android Malware Named MasterFred Seeks User App Login Information
If you have an Android device be aware that there's a new strain of malware out there. Called MasterFred this new malware utilizes well-constructed fake login overlays in order to steal the ...
Most Bait Phishing Attacks Target Gmail Accounts
A new report by Barracuda was recently published. It revealed that the vast majority of baiting email attacks conducted this year were done via G-mail accounts. The firm surveyed 10,500 different organizations ...
Legacy Contacts Shares Data From Those Who Have Passed
The internet has been around for a while at this point and it has brought to mind an issue we've never had to deal with until now. What happens to your digital ...
Twitter Rolls Out New Paid Plan Called Twitter Blue
One of the things that has allowed social media platforms to grow so quickly and utterly dominate the internet is the fact that they're free to use. They're not completely free however ...
3 Simple Steps To Lower Your Clients’ Cyber Insurance Premiums
The evolving threats of cyber-attacks are not going away. And even though my mission is to help MSPs protect a million people ...
Update Microsoft Exchange Server For Important Security Patch
If you use Exchange Server to handle your company's email then you're probably already aware that a critical security flaw has been discovered that puts the server at risk. The issue is ...
