DEF CON 34, BSides Las Vegas and what the future of AI in security really looks like

Every year I leave Hacker Summer Camp in Las Vegas with a head full of ideas, questionable stickers and at least a dozen new things I want to try when I get back home. Between DEF CON 34 and BSides Las Vegas, this year was no different. The tone around AI has changed The conversations […]

Identity is now the front door to almost every client environment you manage. Attackers know it, which is why stolen credentials and over-permissioned accounts turn up in so many breaches. Identity security posture management (ISPM) gives MSPs a way to see that risk clearly and act on it before it becomes an incident. Here’s what ISPM is, the risks […]

In the world of cybersecurity risk reduction, there’s a concept that we call “the boom”. It’s the moment a ransomware note appears on a screen, or your company name shows up on a breach list after your entire CRM database gets dumped.   It’s the explosion. And by the time it happens, your options are limited. Everything before that moment is “left of boom”.  When reviewing how strong our security programs are, we tend to focus […]

MSPs are no longer just “the computer janitors”. They are the primary custodians of their clients’ digital survival. In 2026, the shift from putting out security fires to getting to increasing resilience is table stakes.   But here’s the problem: most MSPs still approach cybersecurity reactively, addressing threats as they emerge rather than building a repeatable system to manage risk over time. That’s where security frameworks come in.  Following […]

You might have firewalls and discovery scans in place, but a new kind of risk is slipping right past them. Your clients’ employees just want to get their work done faster, but that drive for efficiency is creating a massive blind spot. We call it shadow AI, and it happens when employees grab AI tools like ChatGPT, Claude or even sneaky AI features baked […]

“Am I the only one who has no idea if this is a big deal?”  That’s the question you can’t ask out loud. Not to your clients, who expect you to be the expert. Not to your team, who looks to you for answers. And definitely not on LinkedIn, where everyone’s a thought leader with all the answers.  But it’s the question that runs through […]

It’s officially 2026 and it’s the season of reinvention, new goals and #NewYearNewMe posts on social media. For MSPs though, it’s a time to refocus our efforts on security and risk management for our clients. The threat landscape has evolved rapidly, and the tools and tactics that worked last year may not be enough to protect against today’s attacks.  With that in mind, here are the […]

Identity-first security is a modern approach that treats identity as the new perimeter for cybersecurity. With users, devices and applications accessing resources from anywhere, the traditional network perimeter no longer suffices.   Instead, every access decision is based on verifying the identity, device health, user behavior and contextual risk factors, and continuously enforcing policies throughout the session. This approach is critical for […]

From clinics to contractors, small businesses hold the keys to payrolls, portals and supplier data and attackers know it! In this Perspectives piece, Cybersecurity Technical Fellow Roddy Bergeron explains why overlooking SMB security puts everyone at risk, and how the channel can reset the standard around outcomes that prove resilience. Stop pretending the castle stands […]

AI is reshaping the cybersecurity landscape for MSPs, from how SOCs investigate threats to how attackers exploit new tools. Cybersecurity Technical Fellow Roddy Bergeron shares his key takeaways from Black Hat 2025 and DEF CON 33 to help MSPs prepare for what’s next. Attending Black Hat 2025 and DEF CON 33 in Las Vegas was […]

Guest writer Roddy Bergeron, Cybersecurity Technical Fellow, explores why most MSPs are losing security where it matters most: in the browser. Learn how strengthening browser security for MSPs can stop phishing attacks, protect client credentials, and prepare your cyber defenses for the next wave of threats. Where breaches really begin Cybersecurity doesn’t fail because a […]

Most stacks can detect threats. Very few know what to do next. In this follow-up, Cybersecurity Technical Fellow Roddy Bergeron explores the operational cybersecurity for MSPs that turns alerts into action. Missed Part 1? Start here › There’s no shortage of MSPs with good security tools. What’s rare is a team that knows exactly what […]

Most MSPs treat their security stack like a product catalog, but that approach breaks the moment a real threat hits. In this piece, Cybersecurity Technical Fellow Roddy Bergeron breaks down what a security stack for MSPs should actually look like. Read Part 2: how to make your stack move › Ask any MSP about their […]

Guest writer Roddy Bergeron, Cybersecurity Technical Fellow, explores how Managed Service Providers (MSPs) can strengthen their vendor risk management strategies and build true cyber resilience. Learn how to protect your clients and your trust before the next threat tests your supply chain. Every MSP knows ransomware isn’t going anywhere. It’s evolved from a rare catastrophe […]

This blog, authored by Sherweb’s Cybersecurity Technical Fellow Roddy Bergeron, breaks down why most managed service providers (MSPs) fall short on security execution and what it really takes to turn strategy into resilience. Everyone has a plan until they get punched in the face. That famous boxing adage rings especially true in cybersecurity. It’s easy […]

This blog, authored by Sherweb’s Cybersecurity Technical Fellow Roddy Bergeron, explores how a structured cybersecurity program can elevate MSP security maturity, enhance client trust and drive long-term business resilience.  Cybersecurity is an arms race, and right now, most MSPs are losing.  Not because they aren’t trying, not because they don’t care, but because too many […]

This blog, authored by Sherweb’s Cybersecurity Technical Fellow Roddy Bergeron, dissects zero-day threats and their real-world impact on businesses, providing IT providers with practical strategies for detection, mitigation and incident response when facing these invisible adversaries. The most dangerous predators don’t announce their presence. They strike without warning, leaving chaos in their wake. In cybersecurity, […]

This blog, authored by Sherweb’s Cybersecurity Technical Fellow Roddy Bergeron, explores how SASE enhances edge device security strategies to help IT providers mitigate risks and future-proof their networks. Edge device attacks are no longer a hypothetical threat; they’re an active battleground for cybercriminals. VPN gateways, firewalls, and routers—once trusted access points—are now prime targets. If […]

This blog, authored by Sherweb’s Cybersecurity Technical Fellow Roddy Bergeron, explores the top security challenges and practical steps businesses should prepare for in 2025. 2025 isn’t just another chapter in cybersecurity; it’s the beginning of a paradigm shift. Threats are no longer predictable, and the stakes are far too high for businesses to rely on […]

In the second installment of our two-part blog series (click here for part 1), guest writer Roddy Bergeron, Cybersecurity Technical Fellow, breaks down the complexities of cyber insurance for Managed Service Providers (MSPs). Learn more about how a tailored cyber insurance approach can significantly strengthen your cybersecurity posture and help your business thrive. Cyber insurance […]

In our first installment of our two-part blog series (click here for part 2), Sherweb’s Cybersecurity Technical Fellow Roddy Bergeron breaks down the complexities of cyber insurance for MSPs. Discover how cyber insurance can significantly strengthen your cybersecurity posture and help your business thrive. Let’s talk about something serious: cyber insurance. I know, I know. […]