Acronis CISO Warns of Risks to Managed Service Providers
Acronis security leadership highlights why managed service providers are now prime targets for cyber criminals.
Updated on Oct. 30, 2026 in Cybersecurity
Live Poll
Do you trust third-party IT providers to manage your sensitive data securely?
Acronis CISO Gerald Caron has identified managed service providers as primary targets for attackers due to their privileged access to customer data. Attackers often exploit these providers to gain entry into multiple connected client systems.
Why it matters
Because managed service providers manage backdoors and networks for numerous businesses, a single successful breach allows attackers to infiltrate a wider ecosystem of targets.
Caron is implementing a 3-pronged strategy for the coming year to fortify security and assist partners in consolidating management tools. This initiative follows various security incidents involving remote monitoring and management software.
The players
Gerald Caron
He is the Chief Information Security Officer for Acronis who took on his role in October 2026.
Australian Signals Directorate
This is the Australian government agency responsible for foreign signals intelligence and information security.
The Gentlemen
This is a criminal group known for executing ransomware attacks and leaking stolen data.
Mackay Sugar
This is a sugar manufacturing company that was the target of a ransomware attack in June 2026.
The details
Attackers frequently utilize spear phishing, unpatched internet-facing devices, and credentials acquired from access brokers to compromise systems. Criminal groups like The Gentlemen have demonstrated an operational model that combines data encryption with threats to publish sensitive stolen information.
Timeline
In March 2026, the Australian Signals Directorate issued an advisory regarding INC Ransom.
A ransomware attack impacted Mackay Sugar operations in June 2026.
An Auto IT security incident involving a third-party tool occurred in September 2026.
Gerald Caron began his tenure as Acronis CISO in October 2026.
The Tech Race
The focus on service provider vulnerabilities follows the Australian Signals Directorate's March 2026 INC Ransom advisory, which highlighted evolving attacker tactics. This shift marks a departure from targeting isolated firms toward exploiting the centralized access held by service providers.
Business owners and IT managers may see a stronger push for security tool consolidation as service providers aim to reduce management overhead. These changes are intended to simplify security postures and close backdoors that attackers currently use for system infiltration.
The takeaway
Security professionals emphasize that protecting the supply chain is now as critical as protecting individual corporate perimeters. Users should verify that their service providers are actively consolidating and updating security tools to mitigate these elevated risks.
Further reading
Learn more about the latest industry security trends in the Cybersecurity section.
Source note: This article includes information reported by Crn.
Live Poll
Do you trust third-party IT providers to manage your sensitive data securely?
