Automation Theory

10/23/2026

🚨 Security Doesn’t Wait for You to Catch Up

Outdated software can leave your clients exposed. Are your ConnectWise Automate MySQL environments up to date?

MySQL 8.4.13 is here, with security-related fixes and other improvements. For MSPs using ConnectWise Automate, keeping databases up to date is an important step toward reducing risk, maintaining stability, and avoiding preventable headaches.

Don't wait for a problem to remind you it's time to update.

📋 Review the official MySQL 8.4.13 release notes:
https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-13.html

Stay current. Stay secure. Stay protected.

10/19/2026

1,555* ConnectWise Manage servers are exposed on the Internet. We're one zero-day away from disaster.

It's , which means it's time for , our annual series looking at MSP tool enumeration and external security posture problems, and what can be done about them.

ConnectWise Manage has a slightly different defense profile compared to other MSP tools. However, since many tools integrate, Manage has API keys to the RMM for a large number of MSPs. There are also a number of ways it could be abused (such as sending emails to IT contacts with malicious instructions—a phishing attack from a legitimate IT management platform would be very easy to fall for).

In a zero-day event, an attacker would click the "Download Results" button you see in the image, feed the results to an attack bot, and then launch secondary attacks.

Deploying a WAF in front of your can remove it from Shodan, protect it against exploits, and harden it in various ways. Learn more about protecting your here: https://automationtheory.com/reverse-proxy-and-waf-for-msp-tools/

* The count is off by one, since our test DVWA server (branded as CW Manage) is in the result set. We're using it to build WAF rules to defend against AI bots, and we'll have those features released soon!

10/16/2026

🚨 Don't Let Outdated Software Put Your Business at Risk! 🔐

October is Cybersecurity Awareness Month, and there's no better time to give your cybersecurity strategy a closer look! 👀

Did you know that outdated third-party applications can create security vulnerabilities that cybercriminals may exploit? ⚠️

Keeping your software up to date is essential, but managing patches across multiple applications and devices doesn't have to be complicated!

💻 That's where we come in!

At ThirdPartyPatching.com, we help MSPs and IT professionals simplify third-party application patching so they can focus less on chasing updates and more on keeping their clients secure.

🛡️ Stay ahead of vulnerabilities.
⚙️ Simplify your patching process.
🔒 Strengthen your cybersecurity defenses.

This Cybersecurity Awareness Month, take a proactive approach to protecting your systems!

🚀 Want to make third-party patching easier?

👉 Visit https://thirdpartypatching.com/ to discover how we can help you simplify patch management and strengthen your security!

10/12/2026

6,591 Hudu servers are exposed on the Internet. We're one vulnerability away from changing A LOT of passwords.

It's , which means it's time for , our annual series looking at MSP tool enumeration and external security posture problems, and what can be done about them.

Here we see Hudu instances for both cloud and on-prem instances. This is one example of where moving to the cloud doesn't do much for security (but Hudu does have the option to move on-prem, where we can apply more protections). Shodan can fingerprint certain architectural details and is kind enough to tell us that some instances are EoL (and will provide specific CVEs). This is definitely undesirable from a defense perspective.

In a zero-day event, an attacker would click that "Download Results" button you see in the image, feed it to an attack bot, and then start moving laterally into client or internal environments.

Deploying a WAF in front of your can remove it from Shodan, protect it against exploits, and harden it in various ways. Learn more about protecting your here: https://automationtheory.com/reverse-proxy-and-waf-for-msp-tools/

10/09/2026

If your RMM is "discoverable," the trail gets rough fast.

Block enumeration, contain zero‑days, and gate access with granular controls, without rebuilding your stack.

Learn how the Reverse Proxy + WAF keeps your MSP wagon rolling: https://buff.ly/KwqgE1f

10/05/2026

7,038 ScreenConnect servers are exposed on the Internet. We're one zero-day away from disaster.

It's , which means it's time for , our annual series looking at MSP tool enumeration and external security posture problems, and what can be done about them.

ScreenConnect doesn't need its web UI on the Internet, but there are a number of business cases for doing so. The web UI is the primary target for attackers, so if we're looking to reduce attack surface, we need to focus on protecting it.

In a zero-day event, an attacker would click that "Download Results" button you see in the image, feed it to an attack bot, and then start deploying ransomware.

Deploying a WAF in front of your can remove it from Shodan, protect it against exploits, and harden it in various ways. Learn more about protecting your here: https://automationtheory.com/reverse-proxy-and-waf-for-msp-tools/

10/02/2026

Smarter patching starts with what you already have.

One of the biggest misconceptions in software deployment is that you need new tools to improve your workflow. You don’t. If your RMM already fits the way your team works, keep it and extend it.

With ThirdPatch, you can:

* Keep the workflows your technicians know
* Keep the platform your customers rely on
* Expand what you’re able to deploy across clients
* Automate third‑party app updates and reduce manual effort
* Improve consistency and reporting without switching ecosystems

Modern deployment shouldn’t force you into another stack. It should give you more freedom inside the one you’ve already built.

Learn more: https://buff.ly/dduSYAi

09/25/2026

We’ve got some great news to share: ThirdPatch was featured on Business Insider!

They spotlighted our product innovation and our mission to help MSPs close the third‑party patching gap with a smoother, more dependable approach.

Take a look and see why this matters for defense‑in‑depth and day‑to‑day operations across client environments.

You can read the feature here: https://buff.ly/jmiwaP6

ThirdPatch received Startup Of The Year honors at the 2026 Global Recognition Awards for building a patch management infrastructure that closes ...

09/18/2026

One package. Unlimited deployments. 📦

How many times has your MSP built essentially the same software deployment for different customers?

With ThirdPatch, you can build packages once and reuse them wherever they're needed.

Need different software for different clients? Packages can be nested, allowing you to combine your MSP-wide baseline with client-specific applications and configurations.

☑️Less rebuilding.
☑️ More consistency.
☑️ Easier scaling.

Because adding another customer shouldn't mean doing the same work all over again.

👉 See how ThirdPatch works:

https://thirdpartypatching.com/

09/11/2026

We're honored to see ThirdPatch featured by Forbes Scotland.

The article explores the traditional patching gap in the MSP industry and why we built ThirdPatch to help address it.

This is an exciting milestone for our new brand—and only the beginning.

Read the full article: https://forbesscotland.com/how-thirdpatch-closed-the-patching-gap-the-msp-industry-overlooked/

Jeremy Oaks spent years watching operating systems get patched on schedule while everything else on the same endpoint quietly rotted. Browsers, communication