Vendor news

What's new across the MSP stack.

Latest news, blog posts, and announcements from MSP software vendors. 141 updates from the last 30 days in Compliance & Risk Management.

News What's new

All Blog News Press Release

Catch up

Compliance & Risk Management: the last 30 days in a few paragraphs

141 items from vendors in this category. The summary is written from their titles and summaries, nothing else.

Thoropass4 days ago

Blog

The Pentest you Bought May Not be a Pentest at All

This post helps distinguish true expert-led penetration tests from automated scans, providing MSPs with critical questions to ask providers when sourcing or delivering pentesting services for their clients.

Kaseya

This post details how Kaseya's solutions assist IT teams, including MSPs, in streamlining Microsoft management, enhancing security, and efficiently recovering critical data to reduce operational complexity.

Black Kite8 days ago

Blog

Focus Friday: TPRM Insights on Critical Vulnerabilities in Kiteworks, Citrix Netscaler, Mikrotik Routeros, Openssl, and WordPress Core

This Focus Friday blog post delivers TPRM insights on critical vulnerabilities found in commonly deployed technologies such as Citrix NetScaler, MikroTik RouterOS, and WordPress, offering valuable intelligence for MSPs to assess and manage risks within their client environments.

Triad InfoSec8 days ago

Blog

Vendor Questionnaires Have Stopped Working

This article discusses the limitations of traditional security questionnaires and proposes more effective alternatives. MSPs can use these insights to improve their own vendor assessment processes and better advise clients on evaluating third-party risks.

Wazuh8 days ago

News

Wazuh and Cyber Guard Pro Partner to Enhance Security Visibility

Wazuh partnered with Cyber Guard Pro, a cybersecurity and compliance solutions provider, enhancing security visibility for enterprises and demonstrating Wazuh's growing ecosystem of partners.

NINJIO Cybersecurity Awareness Training9 days ago

Blog

What to Ask Before Renewing Security Awareness Training

This article provides key questions and considerations for MSPs to evaluate when renewing or selecting security awareness training programs for their clients, helping ensure optimal value, effectiveness, and compliance.

NINJIO Cybersecurity Awareness Training9 days ago

Announcement

Introducing the NINJIO Sensei AI Training Content Generator: Turn Any Document into Training

NINJIO has launched Sensei AI, a new feature allowing users to convert any document into custom security awareness training content. This offers MSPs a powerful tool to efficiently tailor educational materials and expand their service offerings to clients.

Kaseya9 days ago

Blog

What 1,100+ IT pros told us about growing security team pressure

This article explores findings from a survey of over 1,100 IT and security professionals, highlighting key challenges like human error, budget constraints, workload, and skills gaps, providing valuable insights for MSPs managing client security operations.

A-Lign9 days ago

Blog

What California’s AI Assurance Laws Signal for Organizations Building AI

This article explains new AI assurance laws in California and their implications for organizations building AI. MSPs can leverage this information to provide informed guidance to clients on navigating emerging AI governance and compliance requirements.

Wazuh9 days ago

Blog

Wazuh Community Rulesets

A comprehensive compilation of over 16,500 rules and 5,300 decoders from 110+ community sources offers MSPs a centralized resource to enhance client security detection and operational efficiency.

Proofpoint9 days ago

Blog

Hallucinating Credibility: China-Aligned TA419 Impersonates its Way into US AI Policy Circles

Proofpoint's threat research team details how China-aligned TA419 actors are using advanced impersonation techniques, including AI, which provides valuable threat intelligence for MSPs to inform clients about evolving AI-driven risks and strengthen their defenses.

Netwrix10 days ago

News

Netwrix Research: 79% of Healthcare Organizations Face Security Risks Due to Gaps in Governing AI Agents and Other Non-Human Identities

Netwrix research indicates that a majority of healthcare organizations are exposed to security risks from inadequately governed AI agents and other non-human identities, providing critical insights for MSPs serving the healthcare sector to help clients mitigate these vulnerabilities.

Wazuh10 days ago

Blog

Wazuh NCA ECC Compliance Pack

This community compliance pack helps MSPs meet Saudi Essential Cybersecurity Controls (ECC-2:2024) using native Wazuh capabilities, streamlining compliance for clients without extra agents.

Kaseya10 days ago

Blog

The week in breach news

The FBI declares a major incident after the FBIJobs.gov breach as Pentagon database attack exposes data of nearly three million individuals. This provides MSPs with crucial insights into current high-profile cyber threats to inform their security strategies.

Secureframe11 days ago

Blog

How to Meet Every CMMC Level 1 Requirement: A Prescriptive Guide for Small Defense Contractors

This guide offers prescriptive steps for MSPs to help small defense contractors meet CMMC Level 1 requirements, navigating critical compliance for the defense supply chain. It provides practical insights for MSPs supporting government contractors.

Wazuh11 days ago

Blog

Inventory: Computer Park Management with Wazuh

An open-source asset management layer, INVENTORY, built on Wazuh's SysCollector data, provides MSPs with enhanced computer park management capabilities for their clients.

KnowBe411 days ago

Blog

Report: Social Engineering Attacks Are Increasingly Using Audio and Video Deepfakes

A new report highlights the increasing use of audio and video deepfakes in social engineering attacks, an important threat intelligence update for MSPs to understand and communicate to their clients.

KnowBe411 days ago

Blog

Govern Claude AI with KnowBe4’s Agent Risk Manager

KnowBe4’s Agent Risk Manager now integrates with the Claude Compliance API, enabling MSPs to monitor client Claude AI activity for risks and enhance AI agent security for their customers.

Breach Secure Now11 days ago

Blog

Lock It Down: Cybersecurity Awareness Month 2026

Breach Secure Now's 'Lock It Down' campaign for Cybersecurity Awareness Month 2026 provides a comprehensive resource for MSPs to leverage in delivering essential security awareness training and reinforcing good habits for their clients.

Qualys11 days ago

Blog

Lessons from Microsoft Patch KB5002907: Two Layers of Patch Control in Qualys TruRisk Eliminate

This article details Qualys TruRisk's two layers of patch control, offering valuable insights for MSPs managing Microsoft updates for clients, particularly in handling problematic patches to ensure system stability and security.

Coalition, Inc.12 days ago

News

Citrix patches actively exploited NetScaler zero-days after a weekend of unofficial warnings

Coalition highlights critical Citrix NetScaler zero-day vulnerabilities and patches, urging MSPs to be aware of actively exploited threats that may impact client environments.

Coalition, Inc.12 days ago

Blog

Two Citrix RCE Zero Days Exploited in the Wild

Coalition proactively alerted policyholders about two critical Citrix zero-day vulnerabilities being exploited in the wild, providing early warnings essential for MSPs managing client security and Citrix environments.

Wazuh12 days ago

News

Wazuh and AI Cyber Consulting Announce Partnership to Strengthen SOC Services

Wazuh partnered with AI Cyber Consulting, an MSSP specializing in education and small businesses, strengthening SOC services by leveraging Wazuh for their managed security solutions.

Proofpoint12 days ago

Blog

Proofpoint Invests in FedRAMP High Authorization for Data Security & Insider Threat Management

Proofpoint is pursuing FedRAMP High Authorization, which is crucial for MSPs serving government or highly regulated clients, allowing them to offer solutions that meet stringent federal security and compliance standards for data security and insider threat management.

Compliancy Group12 days ago

Blog

Healthcare Compliance Audit: How to Move From Audit Anxiety to Continuous Readiness

This article offers guidance on preparing for healthcare compliance audits, an essential understanding for MSPs supporting healthcare clients with their IT and security needs.

Xcitium12 days ago

Blog

What Is a Mouse Jiggler? Risks, Uses & Corporate Implications

This article explores the risks, uses, and corporate implications of mouse jigglers, a topic relevant to MSPs for advising clients on security policies, monitoring employee behavior, and maintaining compliance in remote and hybrid work environments.

Collaboris Ltd.14 days ago

Blog

Standard Operating Procedures Guide – Format & Writing Style

Recently updated, this guide offers practical advice on formatting and writing effective Standard Operating Procedures (SOPs), a critical resource for MSPs to ensure consistent service delivery and operational efficiency.

Collaboris Ltd.14 days ago

Blog

How to Manage Policy Exceptions in Microsoft 365 Without Losing Audit Control

This article explores strategies for MSPs to manage policy exceptions within client Microsoft 365 environments while maintaining robust audit trails, ensuring compliance and operational flexibility for their managed services.

Black Kite15 days ago

Blog

Focus Friday: TPRM Insights on Critical Vulnerabilities in Screenconnect, Exim, Citrix Netscaler, Apache Tomcat, and Langflow

This TPRM analysis highlights critical vulnerabilities, particularly in ScreenConnect, a key remote access tool for many MSPs, along with common client infrastructure components like Citrix NetScaler and Apache Tomcat, providing actionable intelligence for vendor remediation and client security.

Triad InfoSec15 days ago

Blog

Most of Your MFA Is Phishable

This post highlights that most MFA implementations are susceptible to real-time proxy phishing attacks, emphasizing the need to assess whether MFA can be relayed, not just if it's present. MSPs should take note to strengthen client security against advanced phishing techniques.

KnowBe415 days ago

Blog

Warning: New Phishing Kit Targets Sales Teams

A new 'GhostCode' phishing kit is actively targeting sales teams with phony business inquiries, offering MSPs crucial and actionable threat intelligence to protect their clients' sales departments from sophisticated attacks.

Xcitium15 days ago

Blog

What Are CRMs? A Strategic Guide for IT & Cybersecurity Leaders

This article provides a strategic guide to Customer Relationship Management systems, focusing on their relevance for IT and cybersecurity leaders, which is highly applicable for MSPs managing client relationships and their data security.

Apptega15 days ago

Blog

How Security Providers Can Turn GRC Into a Growth Engine

This article explains how MSPs and MSSPs can leverage GRC (Governance, Risk, and Compliance) as a growth engine by focusing on segmentation, packaging, and delivery models.

BLOKWORX15 days ago

Blog

How to Turn Cybersecurity Awareness Month Into Your Best Q4 Opener

This post provides MSPs with actionable strategies to leverage Cybersecurity Awareness Month to boost Q4 sales and strengthen client engagements. It offers valuable business and marketing insights specifically for managed service providers looking to capitalize on industry events.

BLOKWORX15 days ago

Blog

The Platform You Trusted to Protect Your Clients Was the Weapon

This article addresses the critical risk when a trusted cybersecurity platform used by MSPs to protect clients becomes compromised, urging providers to scrutinize their security tools and supply chain. It's highly relevant for MSPs needing to maintain the integrity of their own and their clients' security stacks.

Proofpoint16 days ago

Blog

Proofpoint's Data Security Portfolio Is Now Available In AWS Marketplace

This announcement means Proofpoint's data security solutions are now accessible via AWS Marketplace, simplifying procurement and deployment for MSPs who leverage AWS for their clients or internal operations.

Optery16 days ago

Blog

Phishing Rises Across Channels, Email Defense Evasion, and Executive Impersonation at Massive Scale

This Optery Dispatch highlights increasing phishing, email defense evasion, and executive impersonation threats. MSPs can use these insights to better educate clients and refine their cybersecurity strategies against evolving attack vectors.

ScalePad16 days ago

Blog

How To Tell If Your MSP QBRs Are Actually Working: 13 Signs To Watch For Before, During, And After

This article provides MSPs with practical indicators and strategies to evaluate the effectiveness of their Quarterly Business Reviews (QBRs) and ensure they contribute to customer success and retention.

Phishing Tackle16 days ago

Blog

The Phishing Service That Never Needed Your Password

This article discusses 'EvilTokens Device Code Phishing,' a sophisticated threat that doesn't require password theft. MSPs should review this to understand advanced phishing tactics and enhance client protection strategies.

KnowBe417 days ago

Blog

Are Your AI Assistants the Next Attack Surface?

This article explores how AI assistants are becoming new attack surfaces, providing MSPs with critical insights into emerging security risks to consider when managing clients' AI implementations and infrastructure.

Kaseya17 days ago

Blog

The week in breach news

This week's digest of major cybersecurity incidents provides MSPs with insights into ongoing threat landscapes relevant to protecting their clients.

Xcitium17 days ago

Blog

What Is RDP? A Complete Guide to Remote Desktop Protocol and Its Uses

A comprehensive guide to Remote Desktop Protocol (RDP) is highly relevant for MSPs, as RDP is a fundamental tool for remote support and management, and understanding its uses and security implications is crucial for their operations.

Optery17 days ago

Press Release

Optery and Carahsoft Partner to Bring Innovative Personal Data Removal to the Public Sector

Optery has partnered with Carahsoft to offer its personal data removal services to the public sector. This partnership signifies new opportunities for MSPs serving government clients to integrate data privacy solutions.

Duffy Compliance Services17 days ago

Blog

Compliance in the World of AI: Are Your Safeguards Keeping Up?

This article discusses the complexities of navigating various compliance frameworks (like CMMC, HIPAA, and NIST) in the evolving landscape of AI. It offers critical insights for MSPs on how AI impacts existing cybersecurity and compliance requirements, crucial for advising clients and adapting service offerings.

Duffy Compliance Services17 days ago

Blog

Compliance in the World of AI: Are Your Safeguards Keeping Up?

This article discusses the challenges of navigating various compliance frameworks (CMMC, HIPAA, NIST, ISO) in the context of AI, providing industry insights crucial for MSPs to advise clients and adapt their cybersecurity services to evolving regulations.

ShadowHQ17 days ago

Blog

When Your Normal Tools Go Down: Why Incident Response Needs a Plan B

This article highlights the critical need for resilient incident response plans when primary security tools are compromised, offering valuable strategic insights for MSPs managing client cybersecurity and operational continuity.

Cyber Smart17 days ago

Blog

Premier League CyberSecurity Rules

This article discusses cybersecurity rules impacting the Premier League, providing valuable industry insights for MSPs on compliance and best practices that can be applied to clients in various sectors, especially those with high public profiles or specific regulatory landscapes.

Huntress17 days ago

Blog

OAuth Token Theft Through Microsoft's Front Door

A sideloaded package turns a Microsoft-signed binary into an OAuth token theft tool, bypassing common phishing defenses. This critical security insight is highly relevant for MSPs managing client Microsoft environments, detailing detection methods.

PC Matic18 days ago

Blog

Turning Zero Trust into Action: Why PC Matic Is the First Sponsor of The DrZeroTrust Show

PC Matic's sponsorship of a Zero Trust focused show indicates their commitment to advanced security frameworks, signaling potential product developments or strategic partnerships that could be valuable for MSPs designing secure client environments.

Thoropass18 days ago

Blog

Our MCP Server Is Thoropass’ Most Popular New Product Launch Ever. Why Is That?

This post announces the Thoropass MCP server, a new product that uses AI to connect audit context and reduce manual evidence work, offering a tool MSPs could leverage for more efficient client or internal compliance audits.