If the FBI Can Get Breached, So Can You: What the ShinyHunters Attack Teaches Us About Third-Party Risk

Late last week, one of the most security-conscious organizations on the planet confirmed what a lot of security teams quietly fear: even the FBI isn't immune to a modern breach. On September 28, the Bureau acknowledged a "cyber security incident" after the hacking group ShinyHunters claimed to have stolen a massive trove of employee and job-applicant data, taken the FBIJobs.gov hiring portal offline, and threatened to publish two to three terabytes of internal records (TechCr

Saurav Dutta

Oct 13 min read

If the FBI Can Get Breached, So Can You: What the ShinyHunters Attack Teaches Us About Third-Party Risk

Saurav Dutta

Oct 13 min read

When Phishing Gets an AI Analyst: What the EvilTokens Takedown Means for Your Business

Phishing used to take patience. A criminal had to research a target, guess at the right pretext, and hope a generic "invoice attached" email landed on the right desk. This week, Microsoft pulled back the curtain on an operation that had automated all of that work — and sold it as a subscription service. On September 22, Microsoft announced it had dismantled EvilTokens, a phishing-as-a-service platform that compromised more than 12,000 email inboxes across over 10,000 organiza

Saurav Dutta

Sep 273 min read

When Your Vendor's Vendor Gets Hacked: The IDScan.net Breach Is a Wake-Up Call for Third-Party Risk

Most people have never heard of IDScan.net. That's exactly the problem. This week, the identity-verification vendor confirmed what security researcher Brian Krebs first reported on September 1: attackers had been quietly siphoning data from its systems for roughly a year, and a dark-web marketplace called “Nexus” was openly selling searchable scans of more than 150 million driver's licenses, passports, and government IDs belonging to North Americans. IDScan formally acknowled

Sage Team

Sep 163 min read

The Biggest Patch Tuesday on Record Just Landed — and It's a Warning Sign, Not Just a Workload

If your IT and security teams felt like this month's patch cycle was different, they weren't imagining it. On September 8, 2026, Microsoft shipped the largest security update in its history: 966 vulnerabilities fixed in a single Patch Tuesday, on top of 204 already patched earlier in the month. That's a staggering jump from July's 570 flaws and August's 400 — and it's forcing a hard conversation about how prepared most organizations actually are for a threat landscape that's

Sage Team

Sep 93 min read

AI Just Crossed a Cybersecurity Line. Here's What That Means for Your Business.

This week brought two stories that, read together, mark a genuine turning point in cybersecurity — not a distant, theoretical one, but a right-now, this-is-already-happening one. On September 1, OpenAI announced that its upcoming model, Astra, has crossed what the company itself calls the "Critical" threshold for cybersecurity capability. In plain terms: Astra can find previously unknown security flaws (zero-days) and build working exploits for them across well-defended syste

Sage Team

Sep 23 min read

A Perfect 10: What the Microsoft Entra ID Flaw Should Teach Every Business About Identity Risk

On August 21, 2026, Microsoft quietly shipped a patch for one of the most severe vulnerabilities disclosed all year: a remote code execution flaw in Entra ID, the identity service that sits behind Microsoft 365, Azure, and countless third-party business applications. The bug, tracked as CVE-2026-69836, earned a CVSS score of 10.0 — the maximum possible severity rating a vulnerability can receive. (Source: The Hacker News, https://thehackernews.com/2026/08/microsoft-entra-id-f

Sage Team

Aug 273 min read

Sage Inc. Earns ISO 27001 Certification, Bringing Enterprise-Level Security Standards to SMB Technology Services

Achievement underscores Sage's belief that security and governance isn't reserved for Fortune 500 companies Small and mid-sized businesses face the same cybersecurity threats as the world's largest companies. They just rarely have the same resources to defend against them. Sage Governance and Technology (Sage Inc.) is working to change that math for its clients, and it just reached a major milestone. Sage has achieved ISO 27001 certification, the internationally recognized st

Sage Team

Aug 263 min read

Frequently Asked Questions: Managed IT, Cybersecurity & AI for Small Businesses

Answers to the questions we hear most from small and midsized businesses about managed IT, cybersecurity, and AI. What does Sage Inc. actually do? Sage Inc. is a managed IT provider for small and midsized businesses. We handle day-to-day tech support, cybersecurity, and AI/automation under one roof, so you're not juggling separate vendors for each — the goal is fewer tech headaches and a better return on whatever you're already spending on technology. What's the difference be

Sage Team

Aug 203 min read

What to Do With Your IT Before Summer Vacations Slow Your Team Down

Summer is coming, and so is the out-of-office message avalanche. For small businesses, the stretch between Memorial Day and Labor Day brings a familiar challenge: fewer people in the office, more coverage gaps, and a technology setup that was never really built for either. A little IT preparation now saves a lot of scrambling later. What Actually Goes Wrong in the Summer It usually isn't one big thing. It's a series of small ones. Someone goes on vacation, and they're the onl

Sage Team

May 202 min read

Why Small Businesses Should Go Microsoft Direct Instead of GoDaddy for Their Licensing

You signed up for Microsoft 365 through GoDaddy because it seemed easy. One login, one bill, done. But that convenience comes with tradeoffs most small business owners don't discover until something goes wrong. What You're Actually Getting With GoDaddy GoDaddy resells Microsoft licenses, which means they sit between you and Microsoft. When you need support, you go to GoDaddy first. When there's a billing issue, you go to GoDaddy. When something breaks inside your Microsoft en

Sage Team

May 52 min read

IT, Cybersecurity, and AI Insights for Small and Midsized Businesses