Galactic Research: Articles & Insights
An Open Letter From Your Cyber Risk Advisors
After the Water Attacks Last month, attackers reached into water treatment plants across a dozen states and started moving the controls. Some of them found out what happens when you do. I've been thinking about what to say to the ...
AI Security
Part 2: The Security Controls Behind a Safe AI Deployment
From the Map to the Hike: The Four Controls and the Client Conversations Behind Them This is Part 2 in a series that covers your AI enablement plan. Part 1 is here if you want the full map. The Little ...
Ten of Eleven AI Coding Agents Failed a Decades-Old Attack
What GuardFall Tells Us About Where AI Security Controls Need to Live Picture a security guard stationed at the entrance of a building. Their job is to check IDs. They're good at it, fast and consistent, and the building's occupants ...
Perfect AI Guardrails Are Impossible. That's Not an Excuse for Ignoring Them.
What a NIST Mathematician Proved, Why the Internet Got it Wrong, and What Your AI Security Program Should Look Like Years ago, running an MSSP, I had a vendor pitch us a next-gen firewall on a single promise: one hundred ...
Threat Intelligence
Threat Thursday: August 13th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Threat Thursday: August 6th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Threat Thursday: July 30th, 2026
Welcome to Threat Thursday, Galactic's weekly threat intelligence roundup. Every Thursday we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Security Education
The Browser Became the Endpoint. Your Security Stack Didn’t Notice.
An employee clicks a box that says “verify you’re human.” A prompt tells them to press a couple of keys, so they do. What they have actually done is paste and run a command that a script slipped onto their clipboard the moment they ...
Vulnerabilities Are Now the #1 Way In. The Window to Fix Them Is Closing.
Most of the time, I didn't break into a network so much as let myself in through something with a fix already out (just not installed yet): the VPN concentrator three versions behind, the firewall with a known vulnerability fixed ...
Your OSINT Reality Check: Here’s What an Attacker Is Finding in 30 Minutes or Less
Today’s connected, AI-driven digital ecosystem has made it easier than ever to build a professional brand, network with peers, and share ideas with a wider audience. It’s opened doors for businesses that simply didn't exist before: new customers, new partnerships, ...
Strategy & Leadership
An Open Letter From Your Cyber Risk Advisors
After the Water Attacks Last month, attackers reached into water treatment plants across a dozen states and started moving the controls. Some of them found out what happens when you do. I've been thinking about what to say to the ...
Building Trust in Executive Relationships: Lessons from King Lear
A Framework for Establishing the Kind of Trust that Survives Budget Season Imagine the curtain going up and a group of players act out the opening scenes of Shakespeare's King Lear, just for you. An aging king sits in his ...
Your Jokes Were Funny. They Still Didn't Renew.
How MSPs Build the Kind of Client Rapport That Survives a Budget Review You walked out of the meeting feeling good. The handshake was firm, the small talk landed, and you even got a laugh with the printer joke. You ...
All Articles
Sneaky Malware Stealing Sensitive Gamer Information On Gaming Sites
Are you a gamer? Do you have an account on Steam, EA Origin, or the Epic Games Store? If so there's an emerging threat you should be aware of. A new strain ...
Hackers Find Security Vulnerability With Apple Pay
Do you have an iPhone? Do you make use of the Apple Pay service? If so there is a security issue you need to be aware of. Researchers have discovered a means ...
Google Is The Most Popular Search Result On Bing
It's good to be the King and in the world of search Google is the undisputed King. That fact has made the tech giant something of a target however. Google has been ...
Taking Your DNS Security Seriously?
You’ve all already know DNS. The internet’s phone book. When I was running my MSP, I’d ask each and every ...
With Upcoming Release, You Can Sync Excel And Quickbooks
Are you a QuickBooks user? If so you're going to be thrilled by the company's recent announcement that Excel integration is coming soon. You read that correctly. Soon you will be able ...
DDOS Attackers Are Targeting VoIP Providers
Hackers around the world are flexing their muscles. For reasons that aren't yet clear they have been launching distributed denial of service (DDOS) attacks against Voice over Internet Protocol (VoIP) providers and ...
Zero Day Bug Found In MacOS
A new Zero Day vulnerability in macOS has been discovered. The flaw impacts all macOS versions up to the latest release Big Sur. The bug was found by Park Minchan an independent ...
Youtube Video Downloads May Be Coming To Computers
If you use the YouTube app on your phone and you're a premium subscriber you've currently got the ability to download videos from the service. As of this date however those are ...
Recent Study Shows Alarming Insights On People And Passwords
A new study recently published by the digital identity firm Beyond Identity contains a number of surprises relating to passwords and password security. This is information that IT professionals and small or ...
Increasing Online Love Scams Are Costing Victims Big Money
Since the start of the Covid-19 pandemic online dating sites have seen a tremendous surge in memberships. People are seeking romance online since in person dating was sharply curtailed by lock downs. ...
M365 Remediation: 7 Simple Steps
Someone got access to one of your clients' M365 mailboxes, now what? Every minute counts. That’s the truth when it comes to recovering a ...
Apple Has Released iOS 15 With New Features
Apple recently released iOS 15 and iPadOS 15 for its phone/pad products. The latest update brings a number of new features to Apple users. Here's a quick overview: Improvements to Do Not ...
