Darkwebdecoded Acronis Enhances MDR with Dark Web Monitoring for MSPs
Article Content
- •Acronis adds dark web monitoring to its MDR service for MSPs.
- •One-off scans for exposed credentials are available now; ongoing monitoring will follow.
- •Identity-based attacks are a growing concern, prompting Acronis to introduce ITDR services.
Acronis has introduced dark web credential and domain monitoring to its Managed Detection and Response (MDR) service for managed service providers (MSPs). This new feature allows MSPs to conduct one-off scans for exposed credentials linked to customer domains, with ongoing monitoring set to launch later. The addition comes amid a significant rise in data breaches, with 2.5 billion records reported circulating on the dark web in the first half of 2026. Acronis also plans to roll out an early access Identity Threat Detection and Response (ITDR) service, addressing the growing threat of identity-based attacks. This service will monitor for unusual user behavior and potential misuse of credentials. The updates aim to enhance security measures for MSPs and their clients, particularly in light of the high probability of credential exposure.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track IT&T in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What does the dark web monitoring feature do?
How does the ITDR service help?
When will ongoing monitoring be available?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…