MSSP Market News: Bitdefender, N-Able, ThreatLocker, Sophos

Every business day, MSSP Alert delivers a concise summary of news, analysis and conversations from the MSSP, MSP and cybersecurity world.

How to reach our inbox:
Send news, tips and rumors to Editor-in-Chief Jim Masters: (email protected)

Today’s MSSP Alert Market News:

1. Launch of the Anti-Scam Alliance: Bitdefender, a global cybersecurity company, has joined the Global Anti-Scam Alliance (GASA) as a foundation and advisory board member, a consortium dedicated to strategizing consumer protection against fraud. The partnership is designed to help combat the sharp rise in sophisticated online and mobile-based (SMS) scams. Bitdefender’s product lines include basic malware protection as well as digital identity protection and user privacy solutions, the company said.

2. N-able for sale?: N-Able, a US IT software provider with a market value of around $2.5 billion, is reportedly exploring a sale after attracting interest in a takeover. The Burlington, Massachusetts-based company, which counts private equity firms Silver Lake and Thoma Bravo among its major investors, is conducting a sales process involving rivals from the software sector and private equity firms. Barracuda Networks is said to be a potential buyer. (Source: Reuters)

3. Opening of the Canadian Centre for Cybersecurity: ThreatLocker, a provider of zero-trust cybersecurity solutions, has opened its newest data center in Toronto, Canada, less than three months after opening its data center in Sydney, Australia. This initiative will significantly strengthen the cybersecurity capabilities of Canadian companies and organizations across various sectors, including the private sector, Commonwealth, state, territorial and municipal governments, the company said.

4th MSP Perspectives Report published: Sophos, a specialist in security solutions to prevent cyberattacks, has released its first survey report, MSP Perspectives 2024. Sophos found that the biggest daily challenge for MSPs is keeping up with the latest cybersecurity solutions/technologies, as 39% of MSPs surveyed said. In addition, MSPs said that hiring new cybersecurity analysts to keep up with customer growth and keep up with the latest cyber threats were also the biggest challenges.

5. Change of leadership: Token, a provider of secure, wearable authentication solutions, has appointed Robert Osterwise as Chief Technology Officer and Tim Tonges as Chief Revenue Officer. Osterwise and Tonges join Token’s leadership team and report to CEO John Gunn. Osterwise was Vice President of Advanced Technology and Head of IoT, Digital Innovation and Emerging Technologies at Stanley Black & Decker. Prior to Stanley Black & Decker, Osterwise was Director of Engineering at AT&T and held senior technology roles at Giesecke & Devrient. Tonges brings more than 20 years of sales leadership experience in technology and cybersecurity solutions at leading companies such as FusionStorm, Bell Microproducts and Pomeroy.

6. MSP Security Partnership: SureShield, a security, compliance and integrity technology solutions specialist, announced that it is providing key support for the CompTIA Cybersecurity Trustmark program. MSPs that partner with SureShield now have access to Trustmark protections. The Trustmark program is designed to help MSPs create positive change in their overall cybersecurity culture and improve their risk posture, SureShield said.

7. US Treasury Department imposes sanctions on cyber criminals: The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) has designated three individuals – Yunhe Wang, Jingping Liu, and Yanni Zheng – for their activities related to the malicious botnet linked to the 911 S5 residential proxy service. OFAC has also sanctioned three companies – Spicy Code Company Limited, Tulip Biz Pattaya Group Company Limited, and Lily Suites Company Limited – because they are owned or controlled by Yunhe Wang.

8. Russian threat actor charged: Evgeniy Doroshenko, a 31-year-old Russian citizen, has been charged in the United States with wire fraud and computer fraud for allegedly acting as an “initial access broker” from February 2019 to May 2024. Doroshenko, who allegedly goes by the aliases “FlankerWWH” and “Flanker” online, is accused of gaining unauthorized access to corporate networks and then offering that access for sale on Russian-language cybercrime forums. (Source: Bleeping Computer)

9. Seattle Public Library reports ransomware attack: The Seattle Public Library’s online catalog, e-books, Wi-Fi and public computers were taken offline on Tuesday as the library investigated an incident it described as a ransomware attack. A statement from the library said: “In the early morning hours of Saturday, May 25 – just one day before we were ready to take our systems offline to perform scheduled maintenance on a server over Memorial Day weekend – the library became aware of a ransomware attack affecting our technology systems.”

10. New Korean threat actor emerges: Microsoft reports that it has identified a new North Korean threat actor, now tracked as Moonstone Sleet (formerly Storm-1789). Moonstone Sleet uses both a combination of techniques used by other North Korean threat actors and unique attack vectors to target companies for its financial and cyber espionage goals. According to Microsoft, Moonstone Sleet has been observed setting up fake companies and job postings to appeal to potential targets, using trojanized versions of legitimate tools, creating a malicious game, and deploying a new custom ransomware.