Treat the SonicWall SMA 1000 Like an IdP: An MSP Playbook for the September Zero-Days
On September 1, 2026, SonicWall’s PSIRT disclosed two vulnerabilities in the SMA 1000 Series secure-remote-access appliances and confirmed they were already being exploited in the wild. The advisory says the quiet part out loud: “These vulnerabilities have been confirmed as being actively exploited in the wild.” CISA added both CVEs to the Known Exploited Vulnerabilities […]
What MSPs Need to Know About Compliance Roadmaps
Regulatory pressure keeps growing, and your clients increasingly expect you to help them meet compliance requirements across HIPAA, NIST, SOC 2, and CMMC. Turning compliance roadmaps and risk registers into MSP compliance management services is one of the most effective ways to build recurring revenue while making clients more secure. Blacksmith InfoSec gives MSPs the […]
Your Underwriter Wants Exports, Not Answers
A cyber insurance application looks like a survey. It behaves like a representation. That distinction is easy to miss when a client forwards you a forty-question renewal form three days before it is due and asks you to “fill in the technical parts.” You know the environment. You know the answers. You type yes where […]
What MSPs Should Know Before Choosing a GRC Platform
Choosing a GRC platform for MSPs is one of the highest-stakes decisions your practice will make this year. The wrong pick means duplicated effort across client environments, reporting gaps during audits, and a compliance offering that does not scale. Blacksmith InfoSec helps MSPs turn that decision into a repeatable, profitable compliance-as-a-service practice by removing the […]
Compliance as a Service for MSPs in 2026
Every framework your clients need to meet has one thing in common: it requires evidence, documentation, and ongoing attention that most MSPs simply cannot deliver with scattered tools and ad hoc processes. Compliance as a service (CaaS) changes that equation by turning regulatory obligations into a structured, recurring service line. Blacksmith InfoSec gives MSPs an […]
CMMC Scores Hit Five-Year High as Contractor Confidence Drops 24 Points
Something strange showed up in the defense industrial base this month. Contractors are reporting the best cybersecurity scores in the history of the program — and simultaneously trusting those scores less than they ever have. CyberSheath’s 2026 State of the DIB report, published August 20, found the average self-reported Supplier Performance Risk System score climbed […]
Why MSPs Fall Behind on Compliance Management
MSP compliance management sits at the intersection of expanding regulations and limited operational capacity. Every new framework your clients fall under adds documentation, controls, and audit cycles to your plate. This article breaks down the root causes behind these operational bottlenecks and shows how a Compliance-as-a-Service model can reduce your team’s workload. Blacksmith InfoSec helps […]
8 MSP Compliance Bottlenecks to Fix Before You Scale
Countless MSPs have hit the same wall. Their first few compliance clients felt like careful, custom work. Their next ten felt like they were drowning. By client thirty, the MSP was pulling technicians off billable work every audit cycle, drafting the same policy from scratch for the fourth time, watching their margin evaporate into the […]
“City-Forum” Campaign Quietly Harvests Salesforce and ServiceNow Data Through Guest-User Misconfigs — And MSPs Are on the Hook
A long-running threat campaign dubbed “City-Forum” has been systematically extracting data from Salesforce and ServiceNow tenants worldwide since at least March 2025 — without exploiting a single vulnerability. Every record was pulled through legitimate, unauthenticated endpoints that customers left overly permissive. If you manage a client’s Salesforce Experience Cloud site, Lightning Web Runtime portal, or […]
Blacksmith’s “Get NIST-y” Podcast Wins 2026 MSP Media Impact Award!
From MSP Influencer: Meet the creators helping inform, educate, and connect the MSP industry. The 2026 ForzaDash MSPInfluencer Media Impact Award winners are recognized for producing relevant content, sharing valuable insights, amplifying industry voices, and creating meaningful conversations across the MSP community. This recognition honors the creators and platforms influencing the MSP industry through valuable […]