Who got hit, and who covers it Weekly · MSP
The week's incident patterns next to the offerings that address them. Updated 2026-07-25.
The incident patterns that showed up in the news over the last 90 days, ranked by how often they appeared, next to the service offerings that address each one. This is the seller and buyer view of the same week: what is happening, and what actually covers it.
| Incident pattern | Stories | Offerings that address it |
|---|---|---|
| Ransomware Extortion Claim | 135 | Microsoft 365 backup, Entra ID backup, Google Workspace backup, Managed XDR, +1 more |
| App Vuln Management | 35 | Vulnerability Management |
| Exploit Campaign | 6 | Vulnerability Management, WAF, Managed XDR |
| Law Enforcement Threat Intel | 5 | Managed XDR, AI security |
| Credential Theft | 4 | MFA, SSO, Managed XDR |
| Identity End User Elevation | 3 | End-user elevation |
| Phishing Campaign | 3 | Secure Email Gateway, Integrated Email Protection, Phishing simulation, Security awareness training |
| Breach Disclosure Filing | 2 | Managed XDR, Compliance Assessments |
| Network Sase Sse | 2 | SASE / SSE |
| Grc Risk Management | 1 | Risk Management |
| Grc Third Party Risk | 1 | Third-Party Risk Management |
| Managed Xdr | 1 | Managed XDR |
Source: our news rollup and the offering-to-scenario map, refreshed daily. Offerings are vendor-agnostic capability names, mapped to each incident pattern through attacker techniques, not through product marketing.
For an MSP or MSSP, the value is not the news; it is the
second column. Lead a client conversation with the pattern they just
read about, then the capability that would have blunted it.