When MFA Isn't Enough: How Attackers Steal a Live Session
Adversary-in-the-middle attacks don't crack your password or beat MFA — they steal the session created after both succeed. How it works, and what stops it.
Read article 
Phishing That Wears a Trusted Logo
Phishing that impersonates services you trust — Microsoft, your bank, your host — is the hardest to spot. The red flags, and what to do.
Read article
DNS Filtering Explained: The $2/User Security Control Most MSPs Skip
DNS filtering blocks malicious sites, phishing pages and malware before they reach your devices. Why it's one of the highest-value MSP security controls.
Read article
5 Social Engineering Tactics Hitting Northern Ontario Businesses Right Now
Social engineering attacks are getting smarter. Here are five tactics actively targeting Canadian businesses in 2026 — and what your team can do about each one.
Read article
Construction Companies Are Being Targeted by a Sophisticated Phishing Scam
A phishing campaign is targeting Canadian construction firms with fake Microsoft login pages. Here's how it works, why MFA alone won't stop it, and what to do.
Read article
Device Code Phishing: The M365 Attack That Bypasses MFA
A device code phishing campaign using AI-built lures is hitting M365 tenants across Canada. Here's how it works and what we did about it.
Read article