Business of Tech: Daily 10-Minute IT Services Insights

MSP Cybersecurity: Governments Target Russian Cybercrime and New Offensive Strategies

Nov 25, 2025

Ask episode

Chapters

Transcript

Episode notes

The United States, United Kingdom, and Australia have imposed sanctions on the Russian hosting provider MediaLand due to its facilitation of ransomware operations. MediaLand has been linked to various cybercrime activities, including support for groups like LockBit and BlackSuit, and has been identified as a provider for cybercrime marketplaces. The sanctions freeze assets within the U.S., U.K., and Australia and expose individuals engaging in transactions with MediaLand to potential enforcement actions. This shift towards a more offensive cybersecurity strategy, as articulated by National Cyber Director Sean Caroncross, aims to impose costs on adversaries targeting U.S. critical infrastructure, reflecting a recognition that current defensive measures are insufficient.

In a related initiative, a coalition of chief security officers and former officials from the Cybersecurity and Infrastructure Security Agency (CISA) has launched a campaign to combat misleading cybersecurity advice, often referred to as "hack lore." This effort emphasizes practical measures such as patching, using strong passwords, and enabling multi-factor authentication, while debunking outdated myths that distract from real threats. The coalition's focus on evidence-based guidance aims to realign cybersecurity practices with effective strategies, which is particularly relevant during high-traffic shopping seasons.

Additionally, Vectra AI has introduced the Vectra AI Shield for Microsoft, designed to enhance security across Microsoft environments. This solution addresses visibility gaps in existing Microsoft security tools, particularly concerning identity-based attacks. As identity becomes a focal point for cyber threats, the demand for platforms that simplify security management within the Microsoft ecosystem is increasing. This trend underscores the need for IT providers to adapt their security strategies to include comprehensive identity detection and management.

For Managed Service Providers (MSPs) and IT leaders, these developments signal a critical shift in the cybersecurity landscape. The emphasis on government intervention and offensive strategies indicates that MSPs must prepare for increased reporting requirements and a focus on governance rather than solely on tools. By aligning with evidence-based practices and enhancing their understanding of identity security, MSPs can position themselves as trusted advisors, helping clients navigate the evolving cybersecurity landscape effectively.

Four things to know today

00:00 Sanctions Hit a Russian Hoster While the U.S. Says It’s Time for a More Aggressive Cyber Approach

04:58 Security Leaders Call Out “Hacklore” — and Say It’s Time to Drop Myths That Don’t Stop Attacks

07:31 A New Identity Security Tool Hits Microsoft’s Ecosystem, and It Shows Where MSSPs Are Struggling Most

09:44 NinjaOne Rolls Out MSP NXT — but MSPs Are Asking for Fewer Big Shows, Not More

This is the Business of Tech.

Supported by: https://try.auvik.com/dave-switch

https://getflexpoint.com/msp-radio/