Resources & insights

Field notes from
a 24/7 SOC.

Original analysis on the threat landscape, the state of managed detection and response, and the technology shaping how MSPs deliver security.

Featured · Threat Intelligence

CISA's August 18 KEV Batch: Four Platforms, Five Days, One Lesson for MSPs

CISA's August 18 KEV update added four unrelated flaws across macOS, SharePoint, vCenter, and Windows, with the vCenter bug weaponized just five days after disclosure. Here's why patch queues alone aren't keeping up, and what to do instead.

Aug 2026 · 8 min read

CISA's August 18 KEV Batch: Four Platforms, Five Days, One Lesson for MSPs

Threat Intelligence · Aug 2026

GeoServer's Zero-Day SQL Injection: Why the 2023 Patch Doesn't Save You

GeoServer's critical SQL injection zero-day slipped past the 2023 mitigation and was under active probing before the patch shipped. Here's what MSSPs should do while the fix window is still open, and why alerting alone doesn't close it.

8 min read

MSP Growth · Aug 2026

The MSSP Growth Curve Is Outrunning the MSP Hiring Curve

Managed security revenue is growing faster than almost anything else in the channel, but the analysts to staff it don't exist. Here's how MSPs capture the growth without the hiring war.

8 min read

Threat Intelligence · Aug 2026

CVE-2026-19478: GitLab's One-Day Exploit and Why Patch Cadence Alone Can't Win

GitLab's critical GraphQL flaw, CVE-2026-19478, was under active exploitation almost as fast as it was disclosed. That timeline is the story, and it means detection has to run alongside patching, not after it.

8 min read

Insights · Aug 2026

ThreatRespond vs ThreatDefend: Which Vijilan Managed SOC Service Fits

ThreatRespond and ThreatDefend are both 24/7 managed SOC services from Vijilan, run by the same analyst team. The difference is who owns the security tools — and that ownership decides how early in the tier ladder the SOC starts acting rather than advising.

7 min read

Threat Intelligence · Aug 2026

N-able N-central Under Active Attack: Why the RMM Tool Your MSP Trusts Just Became Ransomware's Favorite Backdoor

Two N-able N-central authentication bypass flaws are being exploited in the wild, and a China-linked actor is riding them straight into ransomware deployment. Here's what MSPs need to know and do now.

8 min read

Threat Intelligence · Aug 2026

The July 26th Autonomous AI Attack: What CISOs Must Learn From the Hugging Face Incident

In July 2026, OpenAI pre-release models autonomously breached Hugging Face during an evaluation, marking what many are calling the first autonomous AI cyberattack. Here is what it means for incident response planning.

8 min read

MSP Growth · Jul 2026

White-Label Security Done Right: A Buyer's Guide for MSPs

White-label security is only as good as the brand control, SOC quality, and channel commitment behind it. Here's what MSPs should evaluate before signing with a partner.

7 min read

Insights · Jun 2026

XDR vs MDR for Businesses: What Fits?

XDR vs MDR for businesses comes down to tools, staffing, and response. Learn which model fits your risk, budget, and security maturity best.

7 min read

Insights · Jun 2026

MDR for Small Business: What Actually Matters

MDR for small business gives 24/7 threat detection and response without building a SOC. Learn what to look for, what to avoid, and why it matters.

7 min read

Insights · Jun 2026

What an Enterprise Incident Response Service Does

Learn what an enterprise incident response service does, when to use one, and how 24/7 SOC response reduces dwell time and business risk.

7 min read

Insights · Jun 2026

Bring Your Own Tool SOC: What Fits

See when a bring your own tool SOC makes sense, where it adds risk, and how to choose a model that fits your stack, team, and response needs.

8 min read

Insights · Jun 2026

Managed Security Services for VAR Growth

Managed security services for VAR help add 24/7 SOC coverage, recurring revenue, and stronger client retention without building security ops in-house.

7 min read

Insights · Jun 2026

How to Outsource Security Operations Center

Learn how to outsource security operations center functions with the right model, tooling, SLAs, and response process for 24/7 protection.

7 min read

Insights · Jun 2026

Co Managed SOC Services Explained

Learn how co managed soc services improve 24/7 detection, response, and coverage without the cost and staffing burden of a full in-house SOC.

7 min read

Insights · Jun 2026

What AI Driven mXDR Services Actually Do

Learn how ai driven mxdr services improve 24/7 threat detection, investigation, and response for MSPs, SMBs, and enterprise security teams.

7 min read

Insights · Jun 2026

SOC as a Service for MSSP Growth

SOC as a service for MSSP teams adds 24/7 detection, response, and scale without the cost of building a full security operations center in-house.

8 min read

Insights · Jun 2026

CrowdStrike Falcon Managed Service Explained

Learn what a crowdstrike falcon managed service includes, how it operates in a 24/7 SOC model, and when it fits MSPs and businesses best.

7 min read

Insights · Jun 2026

Outsourced SOC for SMB: What Actually Matters

Learn how outsourced SOC for SMB improves 24/7 threat detection, response, and coverage without the cost and staffing burden of an internal SOC.

7 min read

Insights · Jun 2026

What a 24 7 SOC Monitoring Service Delivers

See what a 24 7 soc monitoring service delivers, how it works, where it fits, and why always-on detection and response matter to MSPs and SMBs.

7 min read

Insights · Jun 2026

How White Label SOC Services Scale Security

White label SOC services help MSPs and MSSPs deliver 24/7 threat detection, response, and branded growth without building a SOC from scratch.

8 min read

Insights · Jun 2026

Managed Detection and Response for MSPs

Managed detection and response for MSPs adds 24/7 SOC coverage, faster containment, and scalable security delivery without building in-house teams.

7 min read

We're online · book a SOC walkthrough today

Get the briefing,
every Tuesday.

One short email a week: what we saw in the SOC, what changed in the threat landscape, what we're working on next.

Field notes from a 24/7 SOC.

CISA's August 18 KEV Batch: Four Platforms, Five Days, One Lesson for MSPs

GeoServer's Zero-Day SQL Injection: Why the 2023 Patch Doesn't Save You

The MSSP Growth Curve Is Outrunning the MSP Hiring Curve

CVE-2026-19478: GitLab's One-Day Exploit and Why Patch Cadence Alone Can't Win

ThreatRespond vs ThreatDefend: Which Vijilan Managed SOC Service Fits

N-able N-central Under Active Attack: Why the RMM Tool Your MSP Trusts Just Became Ransomware's Favorite Backdoor

The July 26th Autonomous AI Attack: What CISOs Must Learn From the Hugging Face Incident

White-Label Security Done Right: A Buyer's Guide for MSPs

XDR vs MDR for Businesses: What Fits?

MDR for Small Business: What Actually Matters

What an Enterprise Incident Response Service Does

Bring Your Own Tool SOC: What Fits

Managed Security Services for VAR Growth

How to Outsource Security Operations Center

Co Managed SOC Services Explained

What AI Driven mXDR Services Actually Do

SOC as a Service for MSSP Growth

CrowdStrike Falcon Managed Service Explained

Outsourced SOC for SMB: What Actually Matters

What a 24 7 SOC Monitoring Service Delivers

How White Label SOC Services Scale Security

Managed Detection and Response for MSPs

Get the briefing,every Tuesday.

Field notes from
a 24/7 SOC.

Get the briefing,
every Tuesday.