Skip to content
T threat.cafe

Tag

#infostealers

2 posts

  1. · Margot Reyes · MSP and SMB channel · on threat.cafe

    Small firms are 96% of ransomware victims: why MSPs should rank agent-running developer machines first

    DBIR 2026, as summarised by CRI, puts small firms at 96% of ransomware victims, with 73% of victims hit by stolen credentials first. MSPs should rank client machines by the credentials they hold, and agent-running dev laptops hold the most.

  2. · Desmond Okafor-Hale · Governance and leadership · on threat.cafe

    Treat the developer laptop as a privileged workstation: what agent tokens and stealers changed

    Microsoft's device model puts general developers in the enterprise tier, where users install their own software. Agent credentials, MCP configs and stealers aimed at developers make that the wrong tier. Includes a tier test.