Category: Blog

Qilin leads Q1 2026 ransomware activity with 361 recorded victims. The attack model has shifted from encryption to identity theft and data exfiltration at 96%. Here is what that means for European IT teams — and the endpoint posture that addresses it The numbers from Q1 2026 are consistent across every major threat intelligence source. […]

The State of Endpoint Management Report 2026 shows that only 6% of organizations have closed their endpoint patch compliance gap entirely. Here is what separates them from the 94% — and how CapaOne gets you there According to the Action1 State of Endpoint Management Report 2026, only 6% of organizations have achieved full patch automation. […]

Not all cloud endpoint management platforms are built the same. Here is what separates cloud-native from cloud-hosted — and the five dimensions IT teams should evaluate before choosing For most IT teams, endpoint management still means managing infrastructure. On-premises servers, local agents, manual update cycles, and fragmented consoles that require constant attention. It works — […]

NIS2 sets clear operational expectations for endpoint security — patch management, vulnerability visibility, least privilege, and audit evidence. Here is what IT teams need to have in place NIS2 is not a future concern. For approximately 160,000 organizations across the EU, it is a current operational obligation — and endpoints are at its center. The […]

A zero-click NTLM flaw is currently under active exploitation by APT28. The CISA deadline expires today — here is how CapaOne maps your exposure and limits the blast radius The CISA Known Exploited Vulnerabilities deadline for CVE-2026-32202 expires today — May 12, 2026. Federal agencies must patch by the end of the day. But CISA […]

IT teams that consolidate endpoint operations onto a single platform spend less time managing tools and more time managing endpoints. This is how it works Most IT teams do not have a tool problem. They have too many of them. Patch management runs in one console. Driver updates happen in another. Privilege access goes through […]

Real cases from CapaSystems User Group – Skanderborg, Wednesday 29 April 2026 At CapaSystems User Group in Skanderborg on Wednesday, 29 April, Christian Ranum Spohr from Eagle Shark walked a room full of IT professionals through two real ransomware cases. No hypotheticals. No vendor slides. Just the decisions that had to be made under pressure […]

V2 Security is Scandinavia’s leading security conference. We’ll be there on May 6–7 at Bella Center Copenhagen. If you’re attending and endpoint management is on your agenda, here’s what to expect when you stop by — and how to make the most of it.  V2 Security brings together IT and security professionals from across the Nordics for two days of […]

Intune patches Windows — but not the applications attackers target most. Intune is a mature, capable platform. For organizations running Microsoft 365, it is the natural foundation for endpoint management — handling enrollment, compliance policies, configuration profiles, and Windows updates with reliable consistency. But there is a gap that Intune does not close. And it […]

CapaOne Provision Manager is now available. Cloud-native OS deployment, integrated driver orchestration, and device recovery — no on-prem infrastructure required.  Legacy deployment infrastructure was never built for how IT teams operate today. Imaging servers, fragmented driver packs, PXE dependencies — the tools that worked in an on-premise world create operational drag in a distributed one. And with Microsoft […]