Tag
#msp
4 posts
-
Small firms are 96% of ransomware victims: why MSPs should rank agent-running developer machines first
DBIR 2026, as summarised by CRI, puts small firms at 96% of ransomware victims, with 73% of victims hit by stolen credentials first. MSPs should rank client machines by the credentials they hold, and agent-running dev laptops hold the most.
-
Your clients' staff are installing AI agents: an MSP's first 90 days of agent governance
MSP AI guidance covers chat tools and data leakage. Clients now run coding agents that install packages and load MCP servers. A 90-day plan - discover, set a default policy, enforce on managed endpoints, report.
-
Your MSP's AI agents have admin on your tenant: seven questions clients will ask, and good answers
When an MSP's own AI agents act inside client tenants, clients will ask about scope, oversight, data flow and exit. Good answers point to evidence (an inventory, scoped credentials, logs, a tested kill switch), not to a policy PDF.
-
Unpatched edge devices sit behind 29% of opportunistic attacks: a KEV-only alert rule an MSP can staff
Alert clients only when a CISA KEV entry hits an internet-facing device or remote-access tool they actually run. In 2026 that has meant about 1.5 catalog entries a week to match, not the 1,200-plus CVEs a week a 66,000-CVE year implies.
