Most people have never heard of IDScan.net. That's exactly the problem. This week, the identity-verification vendor confirmed what security researcher Brian Krebs first reported on September 1: attackers had been quietly siphoning data from its systems for roughly a year, and a dark-web marketplace called “Nexus” was openly selling searchable scans of more than 150 million driver's licenses, passports, and government IDs belonging to North Americans. IDScan formally acknowled

If your IT and security teams felt like this month's patch cycle was different, they weren't imagining it. On September 8, 2026, Microsoft shipped the largest security update in its history: 966 vulnerabilities fixed in a single Patch Tuesday, on top of 204 already patched earlier in the month. That's a staggering jump from July's 570 flaws and August's 400 — and it's forcing a hard conversation about how prepared most organizations actually are for a threat landscape that's

This week brought two stories that, read together, mark a genuine turning point in cybersecurity — not a distant, theoretical one, but a right-now, this-is-already-happening one. On September 1, OpenAI announced that its upcoming model, Astra, has crossed what the company itself calls the "Critical" threshold for cybersecurity capability. In plain terms: Astra can find previously unknown security flaws (zero-days) and build working exploits for them across well-defended syste

On August 21, 2026, Microsoft quietly shipped a patch for one of the most severe vulnerabilities disclosed all year: a remote code execution flaw in Entra ID, the identity service that sits behind Microsoft 365, Azure, and countless third-party business applications. The bug, tracked as CVE-2026-69836, earned a CVSS score of 10.0 — the maximum possible severity rating a vulnerability can receive. (Source: The Hacker News, https://thehackernews.com/2026/08/microsoft-entra-id-f

Achievement underscores Sage's belief that security and governance isn't reserved for Fortune 500 companies Small and mid-sized businesses face the same cybersecurity threats as the world's largest companies. They just rarely have the same resources to defend against them. Sage Governance and Technology (Sage Inc.) is working to change that math for its clients, and it just reached a major milestone. Sage has achieved ISO 27001 certification, the internationally recognized st

Answers to the questions we hear most from small and midsized businesses about managed IT, cybersecurity, and AI. What does Sage Inc. actually do? Sage Inc. is a managed IT provider for small and midsized businesses. We handle day-to-day tech support, cybersecurity, and AI/automation under one roof, so you're not juggling separate vendors for each — the goal is fewer tech headaches and a better return on whatever you're already spending on technology. What's the difference be

Terms of Service Agreement Welcome to sage.inc, sagegovernance.com and sage.ninja, operated by Sage Governance and Technology, LLC. By using the websites named above, the related mobile websites, and any related mobile applications (collectively, the “Websites”), you agree to be bound by these Terms of Service (this “Terms of Service” or “Agreement”), whether or not you register as a member of sage.inc, sagegovernance.com and sage.ninja ("Member"). If you wish to become a M

Sage Governance and Technology, LLC understands the importance of your personal privacy. Therefore, we have created this Privacy Policy so that you know how we use and disclose your information when you make it available to us. The Privacy Policy below discloses our practices regarding information collection and usage websites located at sage.inc, sagegovernance.com and sage.ninja, the related mobile websites, and any associated mobile applications (collectively, the “Website