Vendor news

What's new across the MSP stack.

Latest news, blog posts, and announcements from MSP software vendors. 240 updates from the last 30 days in Cybersecurity.

News What's new

All Blog News Press Release

Catch up

Cybersecurity: the last 30 days in a few paragraphs

240 items from vendors in this category, blog only. The summary is written from their titles and summaries, nothing else.

Egress2 days ago

Blog

Two Systems, One Truth: Unifying Training Records Across SAT and LMS

This article discusses the challenge and solution for unifying security awareness training (SAT) records across different systems, offering valuable insights for MSPs managing client compliance and training programs.

This announcement introduces a new Bitdefender product designed to secure autonomous AI agents, offering MSPs a potential new solution to address emerging AI-related security risks and expand their service offerings for clients.

Bitdefender3 days ago

Blog

IT engineer gets 32 months in prison after sabotaging employer and demanding $750,000

This industry news highlights a critical insider threat scenario where an IT engineer sabotaged an employer's network, underscoring the importance for MSPs to implement robust access controls, monitoring, and incident response plans for their clients.

ThreatLocker4 days ago

Blog

Senate passes healthcare cybersecurity bill: What IT leaders should prepare

This announcement details the recently passed healthcare cybersecurity bill, providing crucial insights for MSPs needing to prepare their healthcare clients for new compliance and security requirements.

Egress4 days ago

Blog

CyberheistNews Vol 16 #40 Why Microsoft’s Latest Defense-in-Depth Email Benchmark Is So Surprising

This post provides industry insights on Microsoft's email security benchmarks and defense-in-depth strategies, which is crucial information for MSPs managing and securing client email systems.

Flare4 days ago

Blog

CrocoRat Adds a New Twist to ClickFix with DNS Payload Delivery

Describes a new twist in the CrocoRat malware, using DNS for payload delivery. MSPs can use this threat intelligence to enhance client protection strategies and review DNS security measures.

Kaseya5 days ago

Blog

How Kaseya simplifies Microsoft management, security and recovery

This post details how Kaseya's solutions assist IT teams, including MSPs, in streamlining Microsoft management, enhancing security, and efficiently recovering critical data to reduce operational complexity.

Black Kite8 days ago

Blog

Focus Friday: TPRM Insights on Critical Vulnerabilities in Kiteworks, Citrix Netscaler, Mikrotik Routeros, Openssl, and WordPress Core

This Focus Friday blog post delivers TPRM insights on critical vulnerabilities found in commonly deployed technologies such as Citrix NetScaler, MikroTik RouterOS, and WordPress, offering valuable intelligence for MSPs to assess and manage risks within their client environments.

Egress8 days ago

Blog

Your KnowBe4 Fresh Content Updates from September 2026

This announcement details the latest content additions to the KnowBe4 platform, including new training modules and templates, which is highly relevant for MSPs managing or reselling KnowBe4 security awareness training to their clients.

Triad InfoSec8 days ago

Blog

Vendor Questionnaires Have Stopped Working

This article discusses the limitations of traditional security questionnaires and proposes more effective alternatives. MSPs can use these insights to improve their own vendor assessment processes and better advise clients on evaluating third-party risks.

Roboshadow8 days ago

Blog

RoboShadow's Biggest Release Yet: September 2026

This post announces Roboshadow's significant product updates and new features released in September 2026, offering enhancements relevant to MSPs utilizing their platform.

NINJIO Cybersecurity Awareness Training9 days ago

Blog

What to Ask Before Renewing Security Awareness Training

This article provides key questions and considerations for MSPs to evaluate when renewing or selecting security awareness training programs for their clients, helping ensure optimal value, effectiveness, and compliance.

Dope Security9 days ago

Blog

Digital Guardian DLP in 2026: Deep Kernel Visibility, Pattern-Bound AI Controls

An analysis of Digital Guardian DLP in 2026, comparing its kernel agent and AI controls with dope.security's on-device AI prompt inspection, offering MSPs insights into competitive DLP solutions.

Kaseya9 days ago

Blog

What 1,100+ IT pros told us about growing security team pressure

This article explores findings from a survey of over 1,100 IT and security professionals, highlighting key challenges like human error, budget constraints, workload, and skills gaps, providing valuable insights for MSPs managing client security operations.

Bitdefender9 days ago

Blog

Bitdefender Threat Debrief | October 2026

This debrief provides valuable insights into the latest ransomware and cyber threats, which MSPs can leverage to enhance client protection strategies and stay informed about the evolving threat landscape.

ELOVADE Deutschland9 days ago

Blog

Wie MSPs Security-Komplexität reduzieren: Patch-Management und Zugriffsrechte zentral steuern

This article details how MSPs can reduce security complexity by centrally managing patch management and access rights for their clients, leveraging the Heimdal Security platform.

HORIZON3.ai9 days ago

Blog

What Security Metrics Actually Matter?

This blog explores key security metrics for CTEM, focusing on attack paths and verification, offering valuable insights for MSPs to demonstrate risk reduction and improve client reporting on security effectiveness.

Palo Alto Networks9 days ago

Blog

Observability’s AI Moment

Palo Alto Networks introduces Cortex XCOR, an AI-driven observability platform designed for autonomous response. This new product feature is highly relevant for MSPs looking to enhance their managed security services with advanced AI capabilities and automate incident response for their clients.

Wazuh9 days ago

Blog

Wazuh Community Rulesets

A comprehensive compilation of over 16,500 rules and 5,300 decoders from 110+ community sources offers MSPs a centralized resource to enhance client security detection and operational efficiency.

Vijilan Security9 days ago

Blog

CVE-2026-76504: Cisco SD-WAN Manager Auth Bypass Is a Containment Problem, Not Just a Patch Ticket

A critical authentication bypass in Cisco Catalyst SD-WAN Manager, actively exploited before disclosure and with no workaround, means MSPs must prioritize not only patching but also comprehensive post-breach containment to secure client networks.

Vijilan Security9 days ago

Blog

FortiMail CVE-2026-104286: No Patch, No Authentication Required, No Excuse to Wait

CISA has added an unauthenticated, actively exploited FortiMail zero-day to its KEV catalog with no patch yet, requiring MSPs to focus on immediate detection and containment strategies for client environments rather than waiting for a fix.

Proofpoint9 days ago

Blog

Hallucinating Credibility: China-Aligned TA419 Impersonates its Way into US AI Policy Circles

Proofpoint's threat research team details how China-aligned TA419 actors are using advanced impersonation techniques, including AI, which provides valuable threat intelligence for MSPs to inform clients about evolving AI-driven risks and strengthen their defenses.

Dope Security10 days ago

Blog

Palo Alto DLP in 2026: What Enterprise DLP Covers, and Why It Fails Open by Default

This post explains Palo Alto's Enterprise DLP for 2026, covering its licensing and fail-open defaults, and compares it with dope.security's Dopamine DLP, providing MSPs crucial information for security solution evaluation.

Securden10 days ago

Blog

CyberArk vs. Modern PAM Rollouts

This article compares CyberArk (now Idira) with modern PAM solutions, detailing implementation timelines and setup speed. It's relevant for MSPs evaluating efficient and less complex PAM deployment options for their clients.

Tailscale10 days ago

Blog

Your agent, your network: How Meta’s Muse agent works with Tailscale

Learn how Tailscale can secure and control access for Meta's Muse agent, providing MSPs with a clear example of how to manage and protect access for emerging AI tools and other applications within client environments.

Sxipher10 days ago

Blog

Best Network Detection and Response Platform for Enterprises in 2026: Why Unified NDR Wins

This article highlights Seceon OTM as a leading unified NDR platform for enterprises, combining NDR natively with SIEM, XDR, SOAR, and UEBA. MSPs supporting enterprise clients will find this relevant for understanding integrated security solutions and potential offerings.

CDW10 days ago

Blog

Data Strategy: Building a Foundation for AI

This white paper offers insights into building a strong data strategy with quality and governance, providing MSPs with knowledge to guide clients in foundational steps for scalable and trusted AI solutions.

Greenbone10 days ago

Blog

CVE-2026-5430: Vollständige Account-Übernahme in WSO2-API-Management-Produkten wird jetzt aktiv ausgenutzt

Greenbone reports on CVE-2026-5430, a critical authentication bypass in WSO2-JWT, actively exploited, enabling full account takeover in WSO2-API Management products, requiring immediate attention from MSPs managing such systems.

Wazuh10 days ago

Blog

Wazuh NCA ECC Compliance Pack

This community compliance pack helps MSPs meet Saudi Essential Cybersecurity Controls (ECC-2:2024) using native Wazuh capabilities, streamlining compliance for clients without extra agents.

Versa Networks10 days ago

Blog

Security Without Compromise: What the 2026 NSS Labs Cloud Network Firewall Tests Tell Us

Versa NGFW earned a "Recommended" rating from NSS Labs for cloud network firewalls, demonstrating high security effectiveness, fastest throughput, and low cost, which is crucial for MSPs selecting and positioning robust security solutions.

Bunny.net10 days ago

Blog

Introducing Bunny CDN Load Balancer: make your origins work together

Bunny.net has launched a new CDN Load Balancer, enabling multiple origin servers to work together for enhanced website and application reliability and performance, a key feature for MSPs managing client infrastructure.

Kaseya10 days ago

Blog

The week in breach news

The FBI declares a major incident after the FBIJobs.gov breach as Pentagon database attack exposes data of nearly three million individuals. This provides MSPs with crucial insights into current high-profile cyber threats to inform their security strategies.

Cynet Security10 days ago

Blog

Cynet v5.0 Brings Data Residency to Canada

Cynet v5.0 expands its data residency options to include Canada, a significant development for MSPs serving Canadian clients. This enables Managed Service Providers to ensure data compliance and address privacy concerns for their Canadian operations.

Cynet Security10 days ago

Blog

Cynet v5.0 Brings Data Residency to Australia and New Zealand

With the release of Cynet v5.0, data residency capabilities are now available for Australia and New Zealand. This is a crucial update for MSPs managing client data in these regions, helping them meet local compliance and regulatory requirements.

Cynet Security10 days ago

Blog

Cynet v5.0 for MSPs: Manage Every Client Environment Like It's the Only One

This Cynet v5.0 update is specifically tailored for Managed Service Providers, introducing features designed to streamline the management of multiple client environments efficiently and effectively. It promises to simplify complex security operations for MSPs.

ThreatLocker11 days ago

Blog

How to stop remote encryption

ThreatLocker offers guidance on leveraging its product to prevent remote encryption, a critical ransomware protection strategy for MSPs managing client endpoint security.

1Password11 days ago

Blog

Stop digging, just ask: get renewal-ready AI and SaaS reports in seconds

This announcement highlights new AI-powered reporting features in SaaS Manager for quick access to renewal-ready AI and SaaS reports. MSPs can leverage this to efficiently manage client software costs and optimize renewals.

Palo Alto Networks11 days ago

Blog

Introducing CLARA Agent: Instant Cloud & AI Risk Insights Available on Google Cloud Gemini Enterprise

Palo Alto Networks announces the CLARA Agent, offering instant cloud and AI risk insights, now available on Google Cloud Gemini Enterprise. This release, categorized under "Partners," provides MSPs with new tools to manage cloud security and AI risks for clients within the Google Cloud ecosystem.

Palo Alto Networks11 days ago

Blog

“SASE Gateway” provided by KDDI : How SP Interconnect Simplifies Closed Network Zero Trust

This customer spotlight details how KDDI, a service provider, utilizes Palo Alto Networks' "SP Interconnect" to deliver SASE Gateway services, simplifying zero trust for closed networks. This demonstrates a potential model and capability for other MSPs to leverage Palo Alto Networks' SASE solutions and partner interconnectivity.

Greenbone11 days ago

Blog

Neue Vertriebspartnerschaft: CoreWin bringt OPENVAS in die Ukraine und die Region

Greenbone announces a new distribution partnership with CoreWin, making OPENVAS available in Ukraine and surrounding regions, which could be relevant for MSPs operating or serving clients in these areas, expanding access to vulnerability management tools.

Wazuh11 days ago

Blog

Inventory: Computer Park Management with Wazuh

An open-source asset management layer, INVENTORY, built on Wazuh's SysCollector data, provides MSPs with enhanced computer park management capabilities for their clients.

Level Blue11 days ago

Blog

Beyond Alerts: What the 2026 Gartner® Market Guide Says About the Future of MDR

This article analyzes the 2026 Gartner Market Guide for MDR, providing crucial insights into the evolving landscape of managed detection and response services, which is highly relevant for MSPs developing their security offerings or evaluating vendor partnerships.

KnowBe411 days ago

Blog

Report: Social Engineering Attacks Are Increasingly Using Audio and Video Deepfakes

A new report highlights the increasing use of audio and video deepfakes in social engineering attacks, an important threat intelligence update for MSPs to understand and communicate to their clients.

KnowBe411 days ago

Blog

Govern Claude AI with KnowBe4’s Agent Risk Manager

KnowBe4’s Agent Risk Manager now integrates with the Claude Compliance API, enabling MSPs to monitor client Claude AI activity for risks and enhance AI agent security for their customers.

Breach Secure Now11 days ago

Blog

Lock It Down: Cybersecurity Awareness Month 2026

Breach Secure Now's 'Lock It Down' campaign for Cybersecurity Awareness Month 2026 provides a comprehensive resource for MSPs to leverage in delivering essential security awareness training and reinforcing good habits for their clients.

Malwarebytes11 days ago

Blog

Update your iPhone, iPad, or Mac: Flaw could run attackers’ code

This article warns about a critical vulnerability in Apple's iPhone, iPad, and Mac operating systems that could allow malicious code execution, urging immediate updates—a key task for MSPs managing client endpoints.

Qualys11 days ago

Blog

Lessons from Microsoft Patch KB5002907: Two Layers of Patch Control in Qualys TruRisk Eliminate

This article details Qualys TruRisk's two layers of patch control, offering valuable insights for MSPs managing Microsoft updates for clients, particularly in handling problematic patches to ensure system stability and security.

ThreatLocker12 days ago

Blog

EU AI Act cybersecurity requirements: What security teams need to know

This article outlines the cybersecurity requirements of the EU AI Act, providing essential information for MSPs to advise and support clients affected by these new European AI regulations.

1Password12 days ago

Blog

Secure agent access in development workflows with 1Password + NVIDIA OpenShell

This announcement details a new integration with NVIDIA OpenShell to secure agent access in development workflows. MSPs can offer this enhanced security solution to clients with developer teams, improving supply chain security.

Dope Security12 days ago

Blog

Microsoft Defender for Cloud Apps in 2026: What It Finds, What It Can't Stop

This article details Microsoft Defender for Cloud Apps' capabilities and highlights its limitations in AI governance, positioning dope.security as a solution to fill critical gaps for MSPs managing Microsoft environments.