Agentic AI accelerates attacks through MSP supply chains
On 21 October, Microsoft reported that Storm-0940 used the openly available ARTEX framework after unauthorised access to ConnectWise Cloud Backup, automating sign-in attempts against more than 2,250 Microsoft 365 tenants at machine speed. Based on the available evidence, ConnectWise attributes the activity to a China state-aligned group and was preparing phased restoration as of 25 October.
For sales practice: Our sales interpretation: MSPs and their security providers should assess privileged vendor applications, service principals, customer-tenant persistence and cross-tenant recovery as one process. A tightly scoped control-plane and tenant review is a practical starting point.
Status and context: Attribution comes from Microsoft and ConnectWise. Most attempts were unsuccessful; the number of tenants reached is not a count of confirmed compromises. Restoration status continues to change.
Pax8 turns managed AI into a new MSP operating model
On 19 and 20 October, Pax8 introduced 8os and 8bot. 8os is intended to govern AI agents, models, access, usage and billing across multiple customer environments, while 8bot is positioned as a managed AI co-worker. General availability is planned for early 2027, according to ChannelPartner.
For sales practice: Our interpretation: managed AI can become a recurring service line alongside cloud and security operations. Near-term qualification can focus on existing AI use, shadow AI, initial agents, ownership, governance and the intended operational outcome.
Status and context: 8os and 8bot are at an early market stage. Most capability, adoption and commercial claims come from Pax8; broad customer evidence is not yet available.
Google outage makes DORA resilience measurable in practice
A power and control-system failure in Google Cloud's London region disrupted numerous services for six hours and ten minutes on 20 October. Despite zonal and regional architecture, failover and capacity issues occurred. The European Banking Authority requested further information and is assessing potential effects on EU financial institutions.
For sales practice: Our sales interpretation: cloud and infrastructure partners can qualify resilience around specific dependencies: a second region, independent recovery, failover capacity, workload portability and tested exit scenarios. In regulated organisations, the buying group should include IT, business continuity, procurement, risk and compliance.
Status and context: The incident occurred in London and is not currently attributed to a cyberattack. Its relevance to DACH stems from shared hyperscaler dependencies and DORA requirements; individual impact requires separate assessment.