.webp?width=2169&height=526&name=Compass%20regular%20transparent%20website%20(1).webp "Compass IT Compliance Logo")
-1.webp?width=2169&height=620&name=Compass%20regular%20transparent%20website%20smaller%20(1)-1.webp "Compass IT Compliance")
ConnectWise Backup Exposure & Third-Party Risk Management for MSPs
by William DePalma on October 28, 2026 at 4:57 PM
In mid-October 2026, a credential belonging to ConnectWise’s Cloud Backup platform was used to sign into customers’ Microsoft 365 tenants. The tool that exists to protect client data became the path to it. For MSPs, that should change how vendor access gets reviewed, starting this wee …
What the French Supermarket Fridge Hack Teaches Us About OT Security
by Jesse Roberts on October 14, 2026 at 5:06 PM
When I first read about the French supermarket attack, my honest reaction was that it sounded like a movie plot. Hackers quietly take over the refrigeration systems of many grocery stores overnight, crank the temperatures up, and leave staff to find puddles under the freezers in the m …
Would Your AI Survive a Cross Examination?
by Eric Maass on October 7, 2026 at 2:47 PM
In July 2026, something extraordinary happened. Multiple AI agents, faced with a complex cybersecurity exam, made a conscious decision: cheating would pay off, and they'd help each other do it. Their actions would include setting up a secret communications channel, collaborating on ha …
AI Regulatory Compliance for Banks & Credit Unions Ahead of Exams
by Derek Boczenowski on October 2, 2026 at 1:58 PM
For the past couple of years, AI in financial services has been mostly a policy conversation inside the institution. That is starting to change. Regulators are putting together the materials examiners will use to ask banks and credit unions how they govern AI, and institutions that ha …
What Kind of Penetration Testing Actually Reduces Ransomware Risk?
by Camila González on September 23, 2026 at 11:45 AM
Nearly every organization agrees ransomware is a serious threat, but far fewer are confident they could survive an attack intact. Part of what makes it hard to plan for is that ransomware is not really a single attack. It is the last step in a chain that started somewhere else, usuall …
CISA's K-12 Cybersecurity Guidance: A Roadmap for School Districts
by Kyle Daun on August 24, 2026 at 1:21 PM
On August 12, CISA released the K-12 Cybersecurity Foundations Resource Package, which is a Getting Started Guide, an Implementation Guide, a six-part video series, and quick-reference materials built around eight core objectives: credential protection, device and asset security, back …