The CyberCall Podcast

Latest Episodes:

Collaboration Platforms are the New Phishing Frontier Aug 24, 2026

Show notes

For years, security awareness training has focused almost entirely on email phishing: spot the bad link, question the urgent request, verify the sender. But Unit 42 just published research showing attackers have found a different door, and most teams aren't watching it. Collaboration platforms like Slack and Teams have become part of the identity attack surface. Unit 42 tracked a fourfold increase in malicious activity tied to these platforms over the past year, and 99% of it started as chat-based phishing.

Here's what makes this especially relevant for MSPs: most organizations use Teams to collaborate with outside companies, including their IT provider. Attackers know that. They pose as the MSP itself, or as IT support, because that relationship already carries a zone of trust. When "your IT provider" messages you on Teams asking you to approve an MFA prompt, most people don't question it, they just comply.

That's why we wanted Wil Klusovsky on the show. Wil's known for translating technical risk into something executives can actually understand and act on, and this topic needs exactly that.

Palo Alto's Unit42 Research:

https://unit42.paloaltonetworks.com/communication-channel-identity-risks/

https://unit42.paloaltonetworks.com/microsoft-teams-phishing/

When AI Generated Patches Become the New Vulnerability Aug 17, 2026

Show notes

This week's conversation is one we believe every MSP needs to hear.

AI-generated vulnerability patches have become the obvious next move for software developers drowning in a tsunami of CVEs. It sounds like a great answer, until you look at the actual data.

That's exactly why we wanted Keith Hoodlet on the show. Keith just published the inaugural research from 1Password's new security research team, Off-by-1 Labs, and the findings are fascinating: when frontier AI models were tasked with patching six real, recently-disclosed vulnerabilities, they got it fully right without breaking anything else, just 26% of the time. More than half the time, the patch either didn't fix the vulnerability, introduced a new one, or both.

Keith's research can be found here.

Future of AI Advisory for MSPs Aug 10, 2026

Show notes

AI is reshaping our industry faster than anything we have witnessed, and yes, threat actors are using it too. But we don't want to spend today talking about AI simply as a threat. We want to talk about it as the biggest opportunity our industry has had in a long time and how we consider adopting AI for ourselves and our clients.

That's exactly why we wanted Lior Bela on the show. Lior recently stepped into a new role leading AI Strategy for Security at Microsoft, and he posted something that we believe resonates with every MSP. Organizations are eager to adopt AI, they just need to do it securely and helping customers navigate that is what excites him most.

So that's where we're headed today. No product pitches. Just a real conversation about where the opportunity is, how governance and go-to-market are shifting, and what the next six to twelve months look like at the speed AI is moving.

MCP for MSPs: Cutting Through the Noise Aug 03, 2026

Show notes

Most MSPs are asking the same question in a different way: "Do I need to care about MCP, or is this just another acronym I can ignore for six months?"

MCP Servers are becoming the connective tissue between AI agents and the tools you already run; your PSA, your RMM, your security stack. MSPs are using them to kick off assessments, run queries to determine continuous EDR deployment and many other critical tasks within the business.

So today we're getting digging into this topic to help you make good decisions. Where are MSPs are actually finding value with MCP right now, and where the hype is running ahead of what it can really do. What a smart first move looks like if you're starting from zero. And the part nobody wants to skip past governance and security. What access an AI agent should never have. How you audit what it actually did. Who inside your business should own that call in the first place.

To help us work through it, we’ve got Aharon Chernin, CEO of Rewst, who has a firshand view of “what good looks like” when it comes to MSP and MCP.

When AI is the Hammer, is Everything a Nail? Jul 27, 2026

Show notes

Right now, every MSP is hearing the same sentence from clients: "We need AI." But when you start to ask questions like “what are you trying to accomplish,” there is no plan, no process, just a mandate.

Our guest has heard it three times before. Ian Barkin built his career watching this exact cycle repeat, first in Business Process Outsourcing, then in Robotic Process Automation, and now in agentic AI. Same hammer, different decade. Companies are convinced the tool is the answer before they've asked what problem they're actually solving, or done the unglamorous work of documenting the process underneath it.

Ian is the author of All Hands on Tech and founder of magentIQ, and he's going to walk us through the frameworks and methodolgies he's built, for leading clients through the proper steps that produce tangible outcomes.

If you've ever sat across from a client who wants AI yesterday and a roadmap never, this one's for you.

How MSPs Can Win Clients on LinkedIn: Turning Cyber Expertise into Pipeline Jul 20, 2026

Show notes

Today we're doing something different. No tradecraft, compliance or threat intel. Today is about the other thing that keeps MSP owners up at night: where the next client comes from.

Here's the uncomfortable truth. Your buyers are on LinkedIn every single day and most MSPs are invisible there. Or worse than invisible: a profile that reads like a resume from 2014, three posts a year about patch Tuesday, and a network full of other MSPs and vendors. Everyone selling, nobody buying.

Our guest today built his entire company on fixing exactly that. Dean Seddon is the founder and CEO of Maverrik, the number one social selling training company. He's trained over 150,000 professionals across 11 countries, speaks at more than a hundred events a year, and his mission is to equip one million businesses to get clients through social selling. They don't call him the Dean of LinkedIn for nothing.

CMMC Phase II Paused: What Every MSP Needs to Know Jul 20, 2026

Show notes

It's Thursday, July 16th, and three days ago the Department of War suspended CMMC Phase II, effective immediately. The third-party certification requirement that was set to hit on November 10th is gone for now, a reform task force has 60 days to review the entire program, and officials would not rule out scrapping it altogether.

Here's the thing: if you were paying attention, you saw this coming. Back in March, CIO Kirsten Davies sat in front of the House Armed Services cyber subcommittee and told lawmakers she was looking at CMMC through the lens of Secretary Hegseth's push to reduce regulatory burden. Congressmen were quoting GAO findings that compliance costs could bankrupt small contractors, and Davies confirmed a dedicated review of the CMMC ecosystem was already underway. Monday was that review going public.

But here's what did NOT change, and it's the reason this call exists. The Department's own release says this action "does not eliminate the requirement for companies to protect federal data." Self-assessments are still in force. DFARS 7012 didn't move. NIST 800-171 is still the standard. What got suspended is the referee, not the rules. And with self-attestation now the primary enforcement mechanism, the False Claims Act exposure for your clients arguably went up on Monday, not down.

Your DIB clients are calling this week asking to pause projects and redirect budgets. Today we're giving you the answers for those calls.

Joining me is the Mount Rushmore of CMMC: Jacob Horne, Scott Singer, Ryan Bonner, Andy Sauer and co-host Scott Edwards.

Important: Legal considerations for MSPs working with the DIB is laid out in this blog by Eric Tilds.

Who’s Breach Is It – The Legal Grey Area of MSP Client Transitions Jul 13, 2026

Show notes

Here's a scenario that's playing out right now, for several MSPs across the country, and based on our research, most do not have it covered in writing.

A client decides to switch providers. The new MSP starts rolling out EDR and standing up monitoring. The old MSP begins winding down. Somewhere in that overlap, credentials are still active, agents are only half deployed, and it isn't clear who's actually watching. Then the breach hits.

Now two MSPs are pointing at each other, the client's data is exposed, and everyone reaches for the contract, only to find the transition period was not CLEARLY defined. Who was responsible? When did one watch end and the other begin? The MSA doesn't say. The SOW doesn't say.

This is one of the biggest gray areas in managed services, and it's the one that ends up in court.

To help us walk through it, we are joined by Melissa Ventrone, attorney at Clark Hill, who has lived this from the incident response side, where she sees what happens after the handoff goes wrong. We're going to dig into the controls and monitoring gap, who owns the risk during a transition, and what every MSP should put in writing before they ever take on, or hand off, a client.

Inside the Credential Spray Hitting Microsoft 365 Jul 06, 2026

Show notes

This week we're digging into a Huntress report that came out on June 30th, updated just a couple days ago on July 2nd a large-scale password spray campaign that hit Microsoft 365 environments through Azure CLI. Between June 12th and June 26th, Huntress tracked more than 81 million login attempts, leading to at least 78 compromised accounts across 64 organizations.

What makes this one worth a full conversation isn't just the volume it's that a lot of the businesses hit already had Conditional Access policies and MFA in place. The attackers got in anyway, by using a deprecated OAuth flow called ROPC that quietly sidesteps MFA if your policy isn't scoped correctly. So this is really a story about the gap between "MFA is turned on" and "MFA is actually enforced everywhere it needs to be."

Andrew “Spike” Brandt, Principal Threat Intelligence, Incident Commander at Huntress, sat down with us to unpack what happened, why it worked, and what to actually go check in your own client environments this week.

The Vulnpocalypse is here and your MSP can survive it Jun 29, 2026

Show notes

Today we have one of the most important voices in cybersecurity joining us.

Chris Hughes started his career defending the nation in the United States Air Force. He's spent over two decades in the trenches from the Department of Defense to the federal government to the commercial world as a CISO, security architect, and engineer.

Today he's VP of Security Strategy at Zenity, where his focus is on what he believes is the defining security challenge of our era: agentic AI.

He's the author of multiple books published by Wiley, including Modern Vulnerability Management, and he runs Resilient Cyber, a newsletter and podcast that reaches over 31,000 security professionals every single week.

But here's what you really need to know walking into today’s session, CVE counts are on pace to exceed 50,000 this year. NIST has conceded it can no longer keep up with enriching vulnerability data. And exploit timelines have collapsed from weeks to hours. Our guest has a word for what's coming and he coined it himself: the Vulnpocalypse. But, there’s hope, as Chris will share

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected