RESEARCH
Your OSINT Reality Check: Here’s What an Attacker Is Finding in 30 Minutes or Less
Today’s connected, AI-driven digital ecosystem has made it easier than ever to build a professional brand, network with peers, and share ideas with a wider audience. It’s opened doors for businesses that simply didn't exist before: new customers, new partnerships, ...
Cyber Compliance
Stop Getting Mad When Your Client Won’t Buy Compliance
You know the look. You explain how they need MFA, a risk assessment, documented policies, backups that actually restore… and your client stares back at you like you just recited the GDPR in ancient Greek. You leave the meeting frustrated. ...
“Fined Without a Breach?” Why the Wojeski $60,000 Penalty Matters—even if You Think You’re Small
You’ve seen two kinds of headlines after cyber incidents: (1) lawsuits and (2) regulatory enforcement. The recent $60,000 fine against Wojeski ...
New California Audit Law Just Put Your MSP on the Hook. Here’s How to Turn It Into Recurring Revenue
If your clients process sensitive data, your MSP is now part of the legal conversation. On July 24, 2025, California finalized new rules that require businesses processing high-risk personal information to undergo annual, independent cybersecurity audits. This isn’t just for ...
Cyber Liability
One Misconfigured AI Agent Can Impact Every Client You Manage
When One Action Hits Every Client, Governance Decides the Outcome Imagine a hypothetical that’s taught in law school every semester: A delivery driver abandons his route to join a drum circle for three days. On his way back, he causes ...
They Already Have an IT Department. Good. That’s Why You Should Call.
Last night I was at dinner with the CEO of an MSP. Good operator. Growing. Adding clients. Doing the work. We were walking around his town before dinner talking about the usual founder stuff. Processes. How to get people to ...
Agentic AI at the Edge: Opportunity, Autonomy & the Coming Legal Minefield
You’ve probably heard executives gush about autonomous AI agents, the shiny new productivity booster that can automate workflows faster than you can say “zero-trust.” But what they don’t hype is how agentic AI turns your cybersecurity playbook into an existential ...
Insurance & MSP Liability
The Clients You're Ignoring Are the Ones Who Will Sue You
I said something on stage at XChange last week that made a lot of people in the room uncomfortable. "Your smallest clients are your biggest risk." Not your enterprise accounts. Not the ones with complex environments and demanding SLAs. The ...
You’re Not Insured. You’re Just Hopeful.
So there I am, wrapping up a conference session—over 1,000 MSPs in the building—and one guy comes up clutching a fresh copy of Standardized like it’s a fire extinguisher in a server room. He’s nodding along, clearly rattled in all ...
Your MSP Carries More Risk Than a Magazine Stand—and That’s a Problem
Let’s talk about airport gift shops for a minute. You know the ones—tiny kiosks with $14 neck pillows, expired jerky, and three copies of Men’s Health no one’s ever going to read. Now, tell me—how much sensitive data do you ...
More Articles
Why Plaintiff Attorneys Are Watching Your Breaches—And Why You Can’t Hide
Managed Service Providers (MSPs) sit at the heart of their clients’ IT and cybersecurity. But when it comes to data breaches, MSPs often underestimate who’s paying attention. It’s not just regulators and customers—it’s also plaintiff attorneys eager to file class-action ...
The Tale of Two MSPs: Why Buying Every Shiny Security Tool Is Killing Your Business
This week, I’m at a security event. You know the scene: vendor hall packed with shiny solutions, MSP owners wandering the aisles, scratching their heads, trying to figure out what’s “must-have” and what’s just sales smoke. I talked to two ...
Overwhelmed by Alerts? Here’s How MSPs Can Finally Break Free from the Noise
The flood of alerts is killing your team’s focus—and your clients’ security. Default vendor alerts are too noisy. Engineers are drowning in false positives, ignoring real threats, and burning out in the process. If you’re running an MSP, you’ve seen ...
Your Clients Don’t Have a Cyber Playbook—And That Makes You the Scapegoat
Why MSPs Keep Taking the Fall If you are an MSP owner or operator, here is the hard truth. When your client experiences a cyber incident, you are going to be blamed. It doesn’t matter if the breach happened because ...
Part 2: For the Price of Coffee, You Can Avoid Buying a Hacker a Yacht
Last time we looked at why tabletop exercises matter and how they can reveal the cracks MSPs don’t notice until it’s ...
Dropping the Bricks and Picking Up What Matters
Have you ever felt like you’re carrying around a ton of bricks? Not the sturdy, well-stacked kind either. I’m talking about the ones someone tossed into your backpack one by one until you’re hunched over, wondering why your knees suddenly ...
Part 1: For the Price of Coffee, You Can Avoid Buying a Hacker a Yacht
It always starts like a normal day. You grab coffee, drop your lunch in the fridge, skim through tickets and emails, maybe ...
If You Missed the Security Chaos of the ‘90s, You’re in Luck!
We’re all seeing it. AI is changing how we approach nearly every part of business. It’s taking meeting notes, spitting out action items, and building chatbots to handle the flood of internal questions. The potential benefits for busy teams and ...
Shadow IT Just Went Legal—and It's Coming for Your MRR
Earlier this year, a quiet courtroom in the Central District of California made noise the entire cybersecurity industry should be hearing: for the first time ever: a federal judge used the term “Shadow IT” in a legal ruling. And just ...
New State Cyber Rules Are Coming—Will You Be Ready, or Be the One They Blame?
California. New York. Massachusetts. One by one, states are turning up the heat on cybersecurity regulations—and if you're not preparing your clients for what’s coming, you're not just behind. You're exposed. Last week I blogged about upcoming California rules requiring ...
Vibe Hacking: The AI Nightmare Your Clients Aren’t Ready For
Do you have a plan to save your clients from the next big cybercrime wave? Because it’s already here. And it has a name: vibe hacking. Sounds harmless, right? Like something your marketing intern came up with after too much ...
Your Clients Are Already Breaking the AI Rules You Never Wrote
Let’s get real. Your clients are already using AI. They’re excited about how much more “effective” it makes them. Which means they’re doing the one thing you begged them not to do: Uploading PII? Happening. Copy-pasting sensitive client records into ...
