MSP technology news headlines for the week of June 15, 2026
The launch of FortiSOC leads this week’s roundup as Fortinet, Kaseya and SentinelOne are all betting that the future of security operations belongs to agentic AI, while a growing wave of vendors is rolling out new tools to govern, monitor and control AI agents before they become the next major security headache. Meanwhile, fresh research from Teramind, Splashtop and Arctic Wolf highlights persistent challenges around AI governance, patching, asset visibility and operational complexity, giving MSPs plenty to think about as automation continues to reshape the security landscape.
If you’re ready for a rundown of this week’s MSP news and partner program updates, scroll on down!
Fortinet launches FortiSOC, a unified SoC platform powered by agentic AI
New cloud-delivered FortiSOC platform brings together six core security operations functions into a single AI SOC experience designed to simplify and scale modern security operations.
Key quote from the FortiSOC press release:
“Security teams today are being challenged by faster attacks, growing investigation volume and fragmented operations that simply don’t scale. FortiSOC gives organizations a simpler way to operationalize the SOC capabilities they need through a unified, cloud-delivered platform designed to support security teams of all sizes, from teams building foundational capabilities to enterprises scaling advanced SOC environments.
With embedded AI, integrated workflows and built-in best practices informed by Fortinet’s own global security operations center, FortiSOC delivers the power of an AI SOC to help customers eliminate complexity, automate threat detection and response and stay a step ahead of attackers.” — Michael Xie, founder, president and chief technology officer, Fortinet
Barracuda unveils integrated email protection, an evolution in email security
Delivering Cyber Resilience Made Easy for the Agentic AI Era.
Key quote from the press release:
“Email is no longer a human-centric communication platform; it’s an operational fabric where humans and AI interact, making it a much bigger target and amplifying the speed, scale and impact of attacks when threats go undetected. In the agentic AI era, effective security requires a platform approach that delivers continuous visibility and response across the full attack lifecycle. Barracuda Integrated Email Protection is fundamentally different because it correlates cross-domain signals in real time and turns them into automated, explainable action partners and customers can trust and control. The result is measurable, high-efficacy protection that stops threats as they evolve and makes cyber resilience dramatically easier.” — Rohit Ghai, CEO, Barracuda
Keeper Security introduces universal secrets sync to eliminate credential drift across cloud environments
New KeeperPAM capability automatically distributes rotated secrets to AWS, Azure and Google Cloud in a single rotation event with no manual steps or drift.
Key quote from the press release:
“Secrets drift is one of the most underappreciated risks in enterprise security programs. Organizations unknowingly leave stale credentials active in downstream cloud environments when distribution is manual. Universal Secrets Sync makes distribution automatic and auditable. Every secret rotation updates to all connected targets simultaneously, with Dry Run mode giving teams full visibility into what will change before anything is written.” — Craig Lurey, CTO and co-founder, Keeper Security
More headlines from Keeper:
➡️ Keeper Security Launches Integration With Wiz to Remediate Critical Cloud Vulnerabilities
Kaseya previews next evolution of Kaseya intelligence at Connect Europe 2026
Introducing an open platform to help MSPs scale faster and improve service delivery by bringing advanced insights and automation into the tools IT teams use every day.
Key quote from the press release:
“The IT industry has spent years asking technicians to adapt to software. We decided to change that. With Kaseya Intelligence, we are building the first truly open, agentic IT platform—one that meets technicians inside the tools they already use, including Claude and Microsoft Copilot and gives them the ability to move from real-time insights to fully automated remediation without ever switching context. That is not a feature; it is a fundamental shift in how IT gets done.” — Pratik Wadher, chief technology officer, Kaseya
Symphion announces managed endpoint cybersecurity operations program for printers & connected IoT™
Symphion formally combines the company’s proven technology-enabled managed cybersecurity operations into one complete program for printers and connected IoT.
Key quote from the press release:
“Everybody owns part of printer and connected IoT operations, but nobody owns their security. Organizations don’t need more tools or staffing burdens. They need an affordable operational model that restores trusted state, reduces risk and enables Zero Trust without disrupting business.” — Jim LaRoe, CEO, Symphion
Gigamon partners with Zscaler to deliver deep observability to zero trust private access
New integration combines Zscaler Private Access with Gigamon Application Metadata Intelligence to detect lateral movement, validate policy and accelerate investigations.
Key quote from the press release:
“Zero Trust access determines who can connect to an application. Deep observability helps organizations understand what happens after access is granted. By combining Zscaler Private Access with Gigamon AMI, customers can detect lateral movement faster, validate policy and give security teams the application-level context needed to accelerate investigations.” — Srinivas Chakravarty, vice president, cloud ecosystem, Gigamon
Startling statistics find nearly 7 out of 10 executives put speed ahead of AI security
Teramind’s Shadow AI Behavior Report finds 67% of enterprise AI usage runs through unmanaged personal accounts on corporate-licensed platforms.
Key findings from the report include:
- 69% of C-suite leaders prioritize speed over security when using AI tools, compared with 37% of frontline employees.
- 67% of enterprise AI usage occurs through unmanaged personal accounts on corporate devices, including on platforms organizations have licensed and paid for.
- 86% of organizations have no visibility into how data moves to and from AI tools.
- 45% of employees find workarounds when AI tools are restricted, and 48% said they would continue using AI even if it were explicitly banned.
Checkmarx introduces new hybrid SAST scanning engine for Checkmarx one
New hybrid engine combines rules-based analysis, AI-assisted coverage and a Finding Analysis Engine to help teams identify high-confidence application security risks across legacy, modern and AI-generated code.
Key quote from the press release:
“No single approach – rules-based or AI – tells the whole story on its own. Deterministic scanning has earned its place as the precision standard, and AI extends that reach to code the rules were never written for. But neither alone separates the findings that matter from the ones that don’t. At today’s volumes, that noise is what slows teams down and drives up cost. Checkmarx One’s hybrid engines bring together the best of both in a fundamentally different architecture.” — Sandeep Johri, CEO, Checkmarx
Blackpoint Cyber appoints former CIA operations officer to lead adversary Pursuit Group
Erin Whitmore will lead Blackpoint Cyber’s threat research and intelligence initiatives, bringing more than 16 years of experience across national security, intelligence and cybersecurity.
Key quote from the press release:
“The adversaries targeting organizations today are sophisticated, well-resourced, and constantly adapting, and the intelligence used to stop them has to be just as dynamic. What drew me to Blackpoint is that the APG and B-ROC are built around real-world, human-led operations, not theoretical frameworks. That’s a rare foundation, and I’m excited to help push it further.” — Erin Whitmore, head of the Adversary Pursuit Group, Blackpoint Cyber
Arkose agent trust manager helps companies accelerate revenue by classifying and controlling agentic traffic as a customer, an authorized agent or an adversary
New Arkose Titan Addition Lets Teams Decide How Each Agent Class is Trusted, Challenged or Stopped While Keeping Transactions and Income Flowing.
Key quote from the press release:
“Among our customer base, we are already seeing agentic traffic double quarter-over-quarter. The companies that successfully combat them won’t be the ones that simply define an agent control policy. It will take real time, automatic enforcement of those policies without a human ever having to get involved. This enforcement gap is exactly what Arkose Agent Trust Manager closes.” — Kevin Gosschalk, founder and CEO, Arkose Labs
Owl Labs launches owl 360 services, bringing enterprise grade intelligence to hybrid meetings
The company’s first tiered subscription service delivers differentiated analytics, providing deeper visibility and control across growing device fleets for IT teams globally.
Key quote from the press release:
“Owl 360 Services marks a major step forward in how enterprises support and scale hybrid work with Owl Labs. As organizations expand their use of Owl Labs technology across more meeting spaces, they need deeper intelligence and more centralized control to keep every room running smoothly. Owl 360 Services brings those capabilities together, helping IT teams support larger fleets, deploy devices at scale and deliver a consistent, high-quality meeting experience across every space.” — Frank Weishaupt, CEO, Owl Labs
Inside Onyxc2: The new stealer targeting 210 apps
BlackFog researchers detail how the new malware-as-a-service stealer targets browser credentials, password managers, two-factor authentication, crypto wallets and other applications while using evasion techniques to avoid detection.
Key findings from the blog post include:
- OnyxC2 is sold as a complete malware-as-a-service product, including a web panel, payload builder, tiered pricing and refunds if a build is detected.
- For $250 per month, operators get a kit designed to harvest browser credentials, password managers, two-factor authentication data and crypto wallets across roughly 210 applications and extensions.
- The stealer targets 37 Chromium-based browsers, 8 Gecko-based browsers, 95 Chromium extensions, 14 Gecko extensions, 6 two-factor authentication extensions, 5 password managers, 17 cryptocurrency wallets, 11 FTP clients and 5 email clients.
- BlackFog found that two delivery archives were initially clean on VirusTotal, while the malicious component inside them remained unflagged as of May 30, 2026.
- OnyxC2 uses DLL sideloading through a signed host executable, an oversized malicious DLL, encrypted payload overlays and rotating builds to evade detection.
Splashtop research finds endpoint maintenance consumes half of IT capacity
Organizations report rising maintenance burden, after-hours work and patching challenges as endpoint environments grow more complex.
Key findings from the report include:
- 72% of IT teams said fragmented tools, partial automation and limited visibility are preventing them from realizing expected operational gains.
- Endpoint maintenance consumes an average of 53% of IT team time, rising to 61% in environments with more than 1,000 endpoints.
- Reactive endpoint operations cost teams an average of $133,000 annually in maintenance labor alone.
- 57% of respondents reported a security incident tied to patching delays.
- More than half of respondents reported cyber insurance impacts related to delayed patching.
- Teams using three or more tools per endpoint issue are more than 60% likely to experience frequent rework.
MSSP Radcyber launches advanced cybersecurity and AI automation to empower MSPs with enterprise-grade defense
Woman-owned MSSP introduces unified cybersecurity and AI-driven automation services designed to help MSPs deliver scalable, enterprise-grade protection without the operational overhead of building an internal 24/7 SOC.
Key quote from the press release, see the announcement on Linked In:
“Our platform automatically investigates and remediates threats in seconds. For our MSP partners, this means faster detection, minimized human error and comprehensive visibility, all backed by 24/7 expert monitoring.” — Matthew Cittell, CEO, RADCyber
Brilliance without boundaries: Epson unveils new 30,000-lumen 4K projector built for world class immersive environments
New EB-XQ2030B delivers exceptional image quality, expanded connectivity and enhanced throw-ratio coverage with all-new lens lineup.
Key quote from the press release:
“Projection technology continues to evolve at a remarkable pace, and our commitment to leading that evolution has never been stronger. Our continued investment in projection technology has enabled this incredible engineering achievement. The EB-XQ2030B pushes the boundaries of what’s possible in large-venue projection, delivering unprecedented brightness and impeccable image quality in a smaller, lighter footprint. This combination empowers artists and creators to bring their work to life in places that were previously unfeasible.” — Chris Teguh, product manager, Epson America
Corelight extends industry-leading ground truth data to every asset and AI service on the network, building the foundation for AI-resilient defense
Unified Detection and Asset Intelligence Helps Security Teams Outpace Automated Exploitation Enabled by Mythos-Class AI Models.
Key quote from the press release:
“AI-powered tools enabled by Mythos-class models can now discover and weaponize zero-day vulnerabilities at machine speed, creating a state of permanent vulnerability where no organization can patch its way to safety. In this environment, you cannot defend what you cannot see. Every unmanaged device, shadow IT endpoints, shadow AI platforms and services and OT asset that cannot be seen by agent-based tools is a potential entry point for an adversary. Corelight closes that gap — turning the network itself into a continuously current inventory of everything that communicates, with no agents, no scan cycles and no blind spots. The same sensor that classifies assets also detects the exploitation that follows if one of them is compromised.” — Vijit Nair, vice president of product, Corelight
SentinelOne opens purple AI agentic investigation to all customers, bringing frontier AI directly into the SOC
Zero-configuration, autonomously initiated investigations run inside customers’ existing Singularity™ Platform workflows, detecting, investigating and responding to threats at machine speed, and giving every analyst a force multiplier, with a full evidence chain behind every verdict.
Key quote from the press release:
“Today’s security teams face more critical alerts than any staffing plan could investigate, and AI-powered threats are only going to make that worse. Investigation capacity has become the binding constraint of the modern SOC: detections climb, alerts queue and verdicts wait on analyst availability. Purple AI’s Agentic Investigation capability is designed to remove that constraint by making investigations automatic, continuous and immediate.” — Chris Corde, chief product officer, SentinelOne
WitnessAI introduces agentic control to secure and govern AI agents and MCP servers
New capabilities deliver a single control plane for discovering, governing and securing AI agents, MCP servers and tools.
Key quote from the press release:
“Enterprises are moving fast to deploy AI agents that can code, access internal data and execute complex workflows. However, security teams cannot protect what they cannot see, let alone control. Most AI security vendors hand the buyer a choice: govern employees, govern apps or govern agents. WitnessAI removes that choice. By extending the platform our customers already trust to govern employee AI usage, we are providing a single control plane to protect all AI activity. A CISO can write a rule once, and it holds across every human user, IDE, chat application and custom agent.” — Rick Caccia, CEO and co-founder, WitnessAI
Accenture to strengthen critical infrastructure defense with end-to-end cybersecurity platform in age of AI-driven cyber threats and geopolitical risk
Agrees to acquire majority stake in Dragos, a leading platform for operational technology cybersecurity.
Key quote from the press release:
“In an age when AI-driven cyber threats and geopolitical risk are evolving at a rapid pace, our cybersecurity practice is growing by double-digits and has a strong track record of leveraging inorganic opportunity to fuel organic growth,” said Julie Sweet, chair and CEO, Accenture. “Our clients across industries and regions are asking us how to be more proactive and integrated in their approach to cybersecurity. The addition of Dragos, complemented by runZero and NetRise, fills this important need. We are confident Dragos’ differentiated OT platform will accelerate our growth in the critical infrastructure and industrial operations markets, driving long-term shareholder value through scaled adoption of advanced cybersecurity capabilities.” — Julie Sweet, chair and CEO, Accenture
Arctic Wolf analysis finds widespread exposure across enterprise IT assets
Report finds unmanaged assets, end-of-life systems, incomplete control coverage and visibility gaps are driving real-world exposure across enterprise environments.
Key findings from the report include:
- Across more than 800,000 IT assets, 18% are not covered by enterprise patch or configuration management, creating environments where known weaknesses cannot be reliably remediated.
- 10% of IT assets are missing endpoint protection, giving attackers a direct path into enterprise networks.
- More than 17% of IT assets are not visible to legacy vulnerability management solutions, meaning they are never scanned for CVEs that threat actors are actively exploiting.
- 19% of IT assets have reached end-of-life, running hardware or software that no longer receives vendor security updates.
As ChannelPro’s online director and tech editor for over a decade, Matt Whitlock has spent years blending sharp tech insight with digital know-how. He brings more than 25 years’ experience working in the technology industry to his reviews, analysis, and general musings about all things gadget and gear.
Images: Barracuda, Teramind, Blackpoint Cyber, Arkose, BlackFog, Splashtop, Epson, Arctic Wolf
