Who’s Really on Your Incident Response Call?
Picture the worst night of a client’s year. Files are encrypted or stolen, an extortion note is waiting, and the insurance hotline is handing you names. Within hours, a stranger will know the client’s backup status, how much cyber coverage it carries, and how badly it needs to be back online by Monday. Most organizations […]
The App You Approved Three Years Ago Still Has the Keys
Nobody got phished. Nobody’s password was guessed. No MFA prompt was approved by a tired employee at midnight. On October 15, an attacker signed in to customer Microsoft 365 tenants as a backup application. According to Huntress, a credential belonging to ConnectWise Cloud Backup (formerly SkyKick) was used to request Microsoft Graph access tokens across […]
4 Multi-Framework CaaS Platforms for MSPs to Compare (2026)
Your clients are stacking frameworks. NIST CSF for the board. HIPAA for healthcare. SOC 2 for procurement. CMMC for defense contracts. Each one needs evidence, policies, and an audit trail. When you manage them separately across a growing client base, you collect the same proof over and over. A Compliance-as-a-Service platform built for multi-framework delivery […]
The Fridge Was on the Internet: What the French Supermarket Attacks Mean for MSPs
Overnight on October 11 and 12, refrigerators and freezers in hundreds of French supermarkets began to warm up. By morning, display cases had reached around 50 °C, stores were throwing out their fresh and frozen stock, and the Paris prosecutor’s office was investigating what it called a “large-scale cyber-attack,” according to BleepingComputer. Reported victims include […]
Your Cyber Policy Is Really a Controls Contract: What MSPs Should Know About Cyber Insurance in 2026
A cyber insurance policy looks like a financial product. More and more, it works like a contract whose terms are your client’s security controls. That’s the core of a September 2026 client alert from Mark Lehman of Shumaker, published in the National Law Review. It describes a market that has become “an evidence-driven discipline.” Carriers […]
When the Attacker Uses Your Tools: Remote-Access Inventory, Allowlisting, and Proof for MSPs
The most common way into a client endpoint right now doesn’t involve malware. It’s the same kind of software your technicians use every day. Help Net Security, reporting on Huntress research, says attackers used legitimate remote monitoring and management (RMM) software in 45% of the endpoint incidents Huntress recorded in Q1 2026. Huntress calls the […]
How MSPs Can Automate Policy Management and Risk Registers
If every client review starts with finding the current policy, chasing approvals, and reconstructing last quarter’s risk decisions, the problem is bigger than document storage. Your compliance service needs a repeatable operating process. Policy and risk automation should make that process easier to run: fewer duplicate entries, clearer ownership, and better visibility into unfinished work. […]
A Quiet Dashboard Isn’t a Security Strategy
Your client’s monthly security report shows fewer alerts. That sounds like good news, and it might be. But before you put a green arrow next to the number, there’s a question worth asking: What actually changed? Did the environment become harder to compromise? Did your team eliminate repetitive noise? Or did a logging integration stop […]
5 GRC Platforms for MSPs: A ConnectWise and Halo Buyer’s Guide
Choosing a GRC platform for MSPs starts with a practical question: how will your team turn a compliance finding into completed work? If your technicians manage service delivery in ConnectWise or Halo, ask vendors to demonstrate that entire workflow, not just point to a PSA logo on an integrations page. Blacksmith InfoSec offers a ConnectWise […]
The Complete Guide to MSP CaaS Platforms in 2026
Regulatory requirements are multiplying for your clients, and point-in-time audits are losing relevance. Insurers want ongoing evidence of controls. Enterprise procurement teams want live compliance posture, not last year’s certification. For MSPs, this shift creates a recurring revenue opportunity that did not exist five years ago: Compliance as a Service. CaaS platforms give you the […]