Heimdal Security Blog

COPENHAGEN, Denmark, 7 October 2026 – Heimdal today officially launches the “Cyber in 60” weekly video series in which Adam Pilton, a former cybercrime detective and now Cybersecurity Advisor at Heimdal, breaks down one cybersecurity term or concept in under 60 seconds. This series solves an old tech to human translation problem. The people who need to understand cybersecurity usually get an explanation that assumes they already speak tech. “Cyber in 60” was built to close that gap.

Benedict Jones spent years working for McAfee and Sophos. While doing threat research at Sophos, he spotted a problem in mobile threat defence that nobody had actually fixed. He’s now CEO and founder of Trustd Mobile, and the story of how he got there says more about MSP buying decisions than most vendor pitches ever will. While at Sophos, Benedict saw mobile move from a footnote to a weapon of choice. Phishing and malware apps were multiplying, but it was something else that got him to dig deeper.

London, UK, 1 October 2026 – Heimdal, a global cybersecurity provider, today announced a partnership with Elovade, a European IT security distributor with 250 experts across five countries, to bring its unified security platform to managed service providers (MSPs) across the DACH region: Germany, Austria, and Switzerland. The move extends a relationship that began a decade ago in the UK through Brigantia (now Elovade UK&I) and expanded into the Nordic region through Elovade Group in March 2026.

Two things happened last week, one day apart, and almost nobody connected them. On 11 September, the EU Cyber Resilience Act’s vulnerability reporting obligations came into force. Companies covered by the regulation now have to report actively exploited vulnerabilities within 24 hours and provide a fuller notification within 72. On 12 September, Anthropic CEO Dario Amodei published an essay arguing that the AI industry should deliberately slow the rate at which frontier models become more capable.

I’ve spent enough time around AI adoption now to notice a pattern. Ask a business how AI is going for them and the honest answer is, lately, “we’ve got Copilot, and it’s not great.” That gap between the hype and the reality is exactly where Samantha North operates. Sam runs an AI transformation agency, helping companies bring AI into their actual workflows rather than bolting on the latest feature because it made headlines.

“You’ve been gifted a voucher!”. “Your account will be closed unless you act now”. “Late payment demand. Invoice # 207”. Phishing scams come in many shapes and sizes. And, in 2026, they remain, by far, the most common attack vector targeting both individuals and organizations. To help you understand the scale of the threat, I’ve compiled this list of the most recent phishing statistics from around the world.

Heimdal’s SOC flagged a surge in detections tied to a program called Shift Browser on 2 September 2026. Our team confirmed activity on more than 50 client environments in a single day. The installers we captured trace to a malvertising lure. Shift Browser also runs a documented paid creator and affiliate marketing operation, though we haven’t been able to draw a confirmed line between that channel and this specific wave of detections.

There are a few reasons that MSPs start looking for ThreatLocker alternatives. You might have had enough of the friction with end users. The high levels of admin required to set policies for your different customers. Or that, while powerful, it can only handle certain kinds of security risks. If so, we wrote this guide for you. I’ve handpicked six other companies whose products do similar things to ThreatLocker, but who give you different features, tools, or ways of doing things.

In 2026, insider threats are probably a bigger risk than you think. In fact, they could cost your organization $19.5 million a year. But it’s not really a problem with hackers, spies, or malicious employees. Instead, it’s about negligence, training, and IT privileges. Often, the most expensive mistake is a stolen credential doing exactly what you allowed it to do. These are just some of the insights from our survey of over fifty insider threat statistics in 2026. Read on to get the full story.

It’s tempting for MSPs to write off event sponsorship in education as a waste of money. You sponsor an event, hand out flyers, follow up with an email, and hear nothing back. Rick Cowell says you’re judging it on the wrong timescale. Rick spent 20 years as a school network manager, and he founded the Association of Network Managers in Education (ANME) in 2014.