Backup platforms need their own security controls
Huntress documented abuse of ConnectWise application identities in Microsoft 365. Separately, AhsayCBS vulnerabilities were actively exploited. Both cases highlight privileged vendor applications and backup management.
For sales practice: Our sales takeaway: ask MSPs about application permissions, access controls, tested recovery and ownership.
Status and context: Investigations and vendor guidance continue to change. Sign-in counts do not establish a count of confirmed data thefts.
Prioritise patches by business risk
CrowdStrike and Tenable each counted more than 1,400 CVEs addressed in October. Their counting methods differ; both highlight an actively exploited Windows Shell zero-day.
For sales practice: Ask about exposed systems, critical business processes, patch deadlines and unresolved exceptions to identify a specific exposure-management need.
Status and context: A high CVE count alone does not describe an organisation’s actual exposure.
Proofpoint and Varonis: connect data, identities and AI
On 15 October, Proofpoint and Varonis announced an acquisition agreement valued at approximately US$6.3 billion, aiming to connect human, data and AI security.
For sales practice: Our interpretation: identify gaps between email protection, data access and AI use within partner and customer accounts.
Status and context: Proposed transaction, expected to close in the first half of 2027 subject to conditions. Both companies operate independently until closing.