Blacksmith Blog

Home / Blog

Your Compliance Knowledge Hub

MFA Bypass Kits, AI Phishing, and the End of ‘Good Enough’ Authentication

MFA used to be the control that let MSPs and security pros sleep at night. In 2026, industrial‑grade phishing kits and AI email engines have…

Inside the Conduent Mega-Breach: What a “Largest in U.S. History” Incident Teaches About Third‑Party Risk

When a contractor you barely name in board meetings leaks Social Security and health data for at least 25 million people, it stops being “their”…

CMMC by Stealth: How GSA Is Sneaking NIST 800‑171 Into Civilian Contracts

GSA is turning NIST 800‑171 into a de facto requirement for civilian contractors, even without a formal CMMC program — especially anywhere Controlled Unclassified Information…

Compliance Debt Is the New Tech Debt: Surviving 2026’s Layered Cyber Regulations

Compliance debt is the pile‑up of half-implemented controls, untested policies, and missing evidence that builds as new regulations land faster than teams can operationalize them.…

AI Meets Compliance: Using the DOJ’s ECCP as a Security Guardrail

The mandate is everywhere now: “We need to use AI.” Boards want efficiency. Executives want innovation. Vendors are quietly flipping on AI “copilots” in tools…

Security Reporting Rules Are Coming for Everyone: How MSPs and vCISOs Prepare Clients for CISA‑Grade Incident Disclosures

The era of “optional” cyber incident reporting is ending, and the operational burden is going to land squarely on managed security providers and vCISOs. CISA…

From Alerts to Action: Teaching Execs to Read Cyber Risk Like a Weather Report

Executives are drowning in cyber alerts and starving for decisions. If you want their support, your job isn’t to forward every CVE — it’s to…

When Ransomware Becomes a Civic Emergency: What Cities Must Learn from St. Paul

When ransomware hits a city, it stops being an IT story and becomes a public safety problem. In 2025, St. Paul, Minnesota gave us a…

Turning a Free Risk Assessment Into Your Client Security Language (Not Just a Compliance Check)

Most MSPs don’t have a language problem with security; they have a translation problem. The Blacksmith Free Risk Assessment gives you a single, reusable grammar you can use to…

NIST’s AI Risk Management Framework: What It Is, Why It Exists, and What MSPs Should Know

Artificial intelligence is exploding into every corner of business, but most organizations are still treating AI risk like a side quest instead of part of…

Zero-Click Visibility: Securing a Brand When No One Ever Hits Your Site

We’re fast approaching a time when most of your prospects will never land on a site you manage — and that’s a security problem you…

Blacksmith Wins Channel Program Q4 Category Leader Badge

Blacksmith was again awarded the Channel Program’s Category Leader badge, a distinction reserved for the top-rated vendors in the IT channel across more than 80…

Operational Ransomware: When Uptime Becomes the Real Crown Jewel

Ransomware is increasingly about stopping a business from functioning, not just stealing or encrypting files. The sectors feeling this most acutely are healthcare, manufacturing, managed…

Check Out Our Compliance Podcast on Spotify!