Galactic Advisors

vCSO Friday 019: Why Skipping CaaS Could Be a Disaster

Security training is supposed to make users safer. But what if it’s actually doing the opposite? The data is in, and it’s damning: anti-phishing exercises are failing to build real-world readiness. Worse, they’re making users overconfident—and that false sense of security is exactly what threat actors exploit. When users think they’re trained, they let their guard down. They trust their instincts, which haven’t actually been tested against the real tools and risks in your environment. In this SecOps, we will show you how you can #LevelUp your security training with our framework and documentation.

Every attacker today plays the same game: get in, escalate, move laterally, steal data, encrypt everything. And they’re winning—because most networks are built for convenience, not containment. The Ingram Micro breach exposed the truth: without network segmentation, it’s game over. In this Tech Defense, we’ll show you how to lock down your network with segmentation and stop the lateral spread dead in its tracks.

Microsoft Threat Modeling Tool Guide: https://portal.galacticscan.com/doc/362/MicrosoftThreatModelingTool_Guide.pdf

Do and Don'ts of VPNs Guide: https://portal.galacticscan.com/doc/292/DosAndDon%27tsVPNs_guide.pdf

The biggest threat inside your business isn’t a hacker—it’s silence. When employees ignore the warning signs, small issues turn into full-blown disasters. This Self-Defense shows you how to speak up, trigger fast action, and stop a breach before it takes down your entire operation. One report can make the difference between business as usual—and your worst day on record.

You might already have an IR plan sitting in a binder or a shared drive somewhere. But does it include communication protocols for a demand letter? Legal response workflows? What about mapped data owners and critical asset prioritization?

If not, your plan won’t survive a real-world attack. Because a true incident response program isn’t just about reacting to threats—it’s about being ready to respond with speed, clarity, and legal defensibility. In this video, we’ll break down what’s missing, why it matters, and how you can build a battle-tested program without starting from scratch.

Every MSP is being asked about Copilot. Clients want it. Teams are excited. But here’s what they don’t know: the tool they think will boost productivity could quietly leak their most sensitive data. EchoLeak isn’t a theory. It’s a real-world example of how AI can become the threat vector—without any warning. Sensitive files, emails, PII—exposed without a single click. If you’re not addressing this now, you’re not securing your clients. You’re exposing them.

Imagine trying to explain to your client why their entire operation just went dark. Email—gone. SharePoint—hijacked. OneDrive—scrambled. Data—exfiltrated. And it all leads back to one overlooked detail: the same local admin password was used on every machine. One slip, one endpoint, and the attacker had everything. This isn’t hypothetical. It’s the scenario MSPs face when privilege control is ignored.

Spam filters aren’t your safety net anymore. Today’s email threats bypass them entirely, exploiting weak or missing DNS records like SPF, DKIM, and DMARC. And when business email compromise leads to financial loss, your customers won’t care about your intentions—they’ll care about your enforcement. In this Tech Defense video, we are going over the settings you need to make sure that you are enforcing to lock down your inbox.

Be sure to add our Hardening Exchange Guide under Procedures to your Company Profile: https://portal.galacticscan.com/procedures/90

It only takes one click. One free tool. One seemingly harmless browser extension—marketed as a time-saver, an ad blocker, or a privacy enhancer. But behind the scenes, it could be harvesting passwords, session tokens, clipboard data, and everything your users type into websites. This isn’t hypothetical. It’s happening. And if you’re not controlling browser extensions, they could turn into one of your biggest risks that is already inside your network.

Not every cyberattack comes from outside your defenses. Sometimes, the biggest threat is already inside—the well-meaning employee who clicks the wrong link or reuses the wrong password. In this month’s Self-Defense, you’ll learn how everyday decisions open the door to attackers—and how to stop them. Discover the top insider threat behaviors, how to spot them, and how to stay on the right side of cyber hygiene. Because if you're not part of the solution, you're part of the problem.