
Kaseya ties ransomware recovery communication to MSP client retention
Kaseya cites 12% of MSPs losing clients after incidents and pitches one platform for RMM, PSA and recovery.
40 stories, newest first · one card per story

Kaseya cites 12% of MSPs losing clients after incidents and pitches one platform for RMM, PSA and recovery.

Prospective MSP customers show less confidence in threat detection than existing users

Attackers abused stolen Microsoft Entra ID app credentials and Azure DevOps federated identities to reach 27 MSPs and their customers since November 1, 2026.

MSPs can push the extension to Chrome and Edge and tie phishing blocks to email, identity and endpoint alerts.

CrowdStrike OverWatch leads for Falcon estates while Google Mandiant and Red Canary provide targeted and open methodologies.

Arctic Wolf ranks first for concierge-scale operations while Expel and eSentire complete the podium.

Huntress saw vendor-credential sign-ins from 144.172.64.128, then Global Administrator grants and new secrets on two tenants.
.jpg%3Fwidth%3D720%26quality%3D80%26disable%3Dupscale&w=828&q=75)
Researchers say ConnectWise credentials signed into customer Microsoft 365 tenants; downstream impact is unconfirmed.

Huntress saw the stolen app credential sign into at least 162 Microsoft 365 tenants on October 15; earlier tokens may still work.

Huntress says a Cloud Backup client assertion reached 162 Microsoft 365 tenants on October 15–16.

Unauthorized access to Cloud Backup application identities was found after October 15; restoration timing and any data theft remain unconfirmed.
Huntress says a stolen Cloud Backup Microsoft 365 API secret was used in customer tenants.

Stolen ConnectWise Cloud Backup credentials accessed 162 Microsoft 365 tenants, forcing ConnectWise to halt backups.

Attackers used a compromised ConnectWise Cloud Backup credential to sign in to 173 Microsoft 365 tenants.
Huntress says abused ConnectWise Cloud Backup credentials accessed at least 162 Microsoft 365 tenants.

Horizon3 and Pax8 expanded their NodeZero partnership so European MSPs can sell autonomous security testing.
Nine Minds shipped an AlgaPSA integration that turns Huntress incident reports into tickets using the public API.

An Acronis-backed checklist tells MSPs to test eight RMM controls, citing N-able and SharePoint flaws.
Huntress maps its managed security stack to SMB1001:2026, a five-tier certification built for small businesses.
Sophos launched CISO Advantage, an agentic AI tool that turns assessments into prioritized, budget-aligned roadmaps.

Wiz opened a public-preview managed service provider program for scaled cloud and AI security delivery.

RYTHMz opened a free 30-day beta of SCOUTz, an MSP prospect-intelligence platform priced at $279 monthly.
Huntress now offers managed or review-first rollouts for Microsoft 365 identity hardening.

CISA confirms active exploitation of critical ConnectWise ScreenConnect flaw CVE-2026-84869, ordering federal agencies to mitigate within three days.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views