惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

爱范儿
爱范儿
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
罗磊的独立博客
大猫的无限游戏
大猫的无限游戏
人人都是产品经理
人人都是产品经理
博客园 - 司徒正美
Apple Machine Learning Research
Apple Machine Learning Research
Microsoft Security Blog
Microsoft Security Blog
IT之家
IT之家
M
MIT News - Artificial intelligence
S
SegmentFault 最新的问题
H
Hackread – Cybersecurity News, Data Breaches, AI and More
AI
AI
I
InfoQ
博客园_首页
T
Threatpost
Know Your Adversary
Know Your Adversary
T
Tenable Blog
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
NISL@THU
NISL@THU
V
Vulnerabilities – Threatpost
The Hacker News
The Hacker News
N
News and Events Feed by Topic
O
OpenAI News
Exploit-DB.com RSS Feed
Exploit-DB.com RSS Feed
TaoSecurity Blog
TaoSecurity Blog
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Spread Privacy
Spread Privacy
W
WeLiveSecurity
Hacker News - Newest:
Hacker News - Newest: "LLM"
K
Kaspersky official blog
www.infosecurity-magazine.com
www.infosecurity-magazine.com
T
Troy Hunt's Blog
Help Net Security
Help Net Security
Hacker News: Ask HN
Hacker News: Ask HN
C
CERT Recently Published Vulnerability Notes
H
Heimdal Security Blog
A
About on SuperTechFans
The Last Watchdog
The Last Watchdog
腾讯CDC
Jina AI
Jina AI
Schneier on Security
Schneier on Security
T
Threat Research - Cisco Blogs
Security Latest
Security Latest
Recorded Future
Recorded Future
量子位
有赞技术团队
有赞技术团队
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org

The Hacker News

SystemBC C2 Server Reveals 1,570+ Victims in The Gentlemen Ransomware Operation 22 BRIDGE:BREAK Flaws Expose Thousands of Lantronix and Silex Serial-to-IP Converters Ransomware Negotiator Pleads Guilty to Aiding BlackCat Attacks in 2023 5 Places where Mature SOCs Keep MTTR Fast and Others Waste Time NGate Campaign Targets Brazil, Trojanizes HandyPay to Steal NFC Data and PINs No Exploit Needed: How Attackers Walk Through the Front Door via Identity-Based Attacks Google Patches Antigravity IDE Flaw Enabling Prompt Injection Code Execution CISA Adds 8 Exploited Flaws to KEV, Sets April-May 2026 Federal Deadlines SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files ⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More Why Most AI Deployments Stall After the Demo Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain Researchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT Systems $13.74M Hack Shuts Down Sanctioned Grinex Exchange After Intelligence Claims Mirai Variant Nexcorium Exploits CVE-2024-3721 to Hijack TBK DVRs for DDoS Botnet Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched Google Blocks 8.3B Policy-Violating Ads in 2025, Launches Android 17 Privacy Overhaul NIST Limits CVE Enrichment After 263% Surge in Vulnerability Submissions Operation PowerOFF Seizes 53 DDoS Domains, Exposes 3 Million Criminal Accounts Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation Newly Discovered PowMix Botnet Hits Czech Workers Using Randomized C2 Traffic ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-Year-Old Excel RCE and 15 More Stories [Webinar] Eliminate Ghost Identities Before They Expose Your Enterprise Data The Hacker News The Hacker News Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign n8n Webhooks Abused Since October 2025 to Deliver Malware via Phishing Emails Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More Deterministic + Agentic AI: The Architecture Exposure Validation Requires Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released Google Adds Rust-Based DNS Parser into Pixel 10 Modem to Enhance Security AI-Driven Pushpaganda Scam Exploits Google Discover to Spread Scareware and Ad Fraud Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads Analysis of 216M Security Findings Shows a 4x Increase In Critical Risk (2026 Report) 108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 Users ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software JanelaRAT Malware Targets Latin American Banks with 14,739 Attacks in Brazil in 2025 FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts ⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and More Your MTTD Looks Great. Your Post-Alert Gap Doesn't North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident CPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloads Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621 Citizen Lab: Law Enforcement Used Webloc to Track 500 Million Devices via Ad Data GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs Browser Extensions Are the New AI Consumption Channel That No One Is Talking About Google Rolls Out DBSC in Chrome 146 to Block Session Theft on Windows Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure Backdoored Smart Slider 3 Pro Update Distributed via Compromised Nextend Servers EngageLab SDK Flaw Exposed 50M Android Users, Including 30M Crypto Wallet Installs UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories The Hidden Security Risks of Shadow AI in Enterprises Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025 Bitter-Linked Hack-for-Hire Campaign Targets Journalists Across MENA Region New Chaos Variant Targets Misconfigured Cloud Deployments, Adds SOCKS Proxy Masjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT Devices APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP) Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems N. Korean Hackers Spread 1,700 Malicious Packages Across npm, PyPI, Go, Rust Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs Russian State-Linked APT28 Exploits SOHO Routers in Global DNS Hijacking Campaign [Webinar] How to Close Identity Gaps in 2026 Before AI Exploits Enterprise Risk Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign The Hidden Cost of Recurring Credential Incidents New GPUBreach Attack Enables Full CPU Privilege Escalation via GDDR6 Bit-Flips China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances Exposed Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations DPRK-Linked Hackers Use GitHub as C2 in Multi-Stage Attacks Targeting South Korea Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps ⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More How LiteLLM Turned Developer Machines Into Credential Vaults for Attackers Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools BKA Identifies REvil Leaders Behind 130 German Ransomware Attacks $285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation 36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS China-Linked TA416 Targets European Governments with PlugX and OAuth-Based Phishing Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack Why Third-Party Risk Is the Biggest Gap in Your Clients' Security Posture New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials Cisco Patches 9.8 CVSS IMC and SSM Flaws Allowing Remote System Compromise ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More Stories Researchers Uncover Mining Operation Using ISO Lures to Spread RATs and Crypto Miners The State of Trusted Open Source Report WhatsApp Alerts 200 Users After Fake iOS App Installed Spyware; Italian Firm Faces Action Apple Expands iOS 18.7.7 Update to More Devices to Block DarkSword Exploit CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails
Top Five Sales Challenges Costing MSPs Cybersecurity Revenue
info@thehack · 2026-05-01 · via The Hacker News

MSPs Cybersecurity

The managed security services market is projected to grow from $38.31 billion in 2025 to $69.16 billion by 2030[1], with cybersecurity being the fastest-growing sector[2]. Despite this opportunity, many MSPs leave revenue on the table because their go-to-market strategy fails to connect technical expertise with business needs.

This execution gap is where most deals stall. MSPs often focus on frameworks and vulnerabilities, but their clients make decisions based on business outcomes: risk reduction, successful compliance audits, and business continuity. When sales messaging fails to bridge this divide, prospects tend to view cybersecurity as a cost center instead of a strategic investment. To win, MSPs must align security value with business priorities and translate complex offerings into compelling reasons for clients and prospects to act.

Cynomi developed the GTM Academy Sales Kit to address this challenge and provide a structured, outcome-driven approach to help MSP sales teams convert rising demand into consistent, profitable revenue.

Through our work empowering partner growth, we have identified five core go-to-market challenges holding MSPs back and the strategies required to overcome them.

1. Overcoming a Lack of Client Urgency

Data shows that 77% of MSPs cite a lack of client urgency as a major sales challenge[3]. Technical teams understand a prospect's security weaknesses, but they struggle to translate that risk into the business terms that drive investment. When that translation fails, cybersecurity becomes a line item to defer rather than a strategic priority. Sellers must learn to frame security program management in terms of operational continuity, regulatory consequences, and reputational liability to create immediate urgency.

2. Navigating Expanded Buying Committees

Buying decisions don't happen in a vacuum. Buying committees for cybersecurity have expanded to an average of over eight stakeholders, with projections exceeding nine stakeholders by 2026[4]. You are dealing with executives, finance, IT, and operations. These individuals have different concerns, motivations, and definitions of value. The discovery questions that move a CEO are not the same ones that move a CTO. MSPs must develop tailored discovery frameworks for different business stakeholders to keep complex deals moving forward.

3. Defeating the Cost Objection

Cost sensitivity remains a stubborn barrier, with 66% of SMBs identifying cost as their top obstacle to adopting stronger security[5]. Prospects often view security as a sunk cost rather than a business enabler. Overcoming this requires an objective scoring framework and clear objection handling that addresses the underlying beliefs driving the hesitation, rather than simply restating the technical pitch.

4. Leveraging Compliance as a Catalyst

Over 56% of new managed security agreements are initiated to meet compliance requirements[6]. Deadlines surrounding cyber insurance renewals, industry mandates, and state-level privacy laws create a hard timeline that organic sales conversations rarely generate. Providers must position compliance readiness as a potential entry point, but only one outcome of a broader security program management.

5. Expanding Revenue in Existing Accounts

For established MSPs, existing clients represent the fastest path to partner growth and revenue enablement. However, focusing only on new client acquisition leaves substantial revenue untapped within your current base. Expanding accounts needs a deliberate, data-driven strategy.

To expand revenue from existing clients, MSPs should use visual, CISO Intelligence dashboards to proactively review security postures and identify gaps. This analysis drives tailored upsell campaigns and justifies new investments during strategic business reviews. Benchmarking clients against industry peers creates urgency, while consistent education on the business impact of security reinforces its value.

By turning account management into an ongoing advisory relationship and consistently surfacing new value, MSPs can deepen trust, drive margin improvement, and unlock recurring revenue opportunities year over year.

Turning GTM Challenges into Opportunities: Practical Strategies

Overcoming these sales barriers requires a disciplined, systematic approach anchored in actionable processes and strategic alignment.

  • Align sales and technical messaging:Work collaboratively with technical experts to translate security findings into business outcomes. Use client-friendly language to communicate risk, operational impact, and business value rather than technical jargon.
  • Map the stakeholder landscape early: Identify all decision-makers and influencers at the outset, including executive, finance, IT, and operational leads. Develop messaging and presentations targeted to each persona’s priorities, and build consensus through regular, transparent communication.
  • Quantify outcomes and ROI: Present security investments in terms of measurable impact, such as reduction in incident response time, decreased compliance risk, or improved operational uptime. Providing decision-makers with concrete data driven by business impact assessments supports faster, higher-confidence purchasing decisions.
  • Automate for consistency and scale: Leverage sales kits, playbooks, and CRM technology to standardize outreach, discovery, and proposal development. Consistent processes and a central repository for discovery answers ensure smooth handoffs from prospect to client, even with multiple stakeholders involved.
  • Measure, optimize, and adapt: Track sales performance against leading indicators such as conversion rates, deal cycle length, and upsell frequency. Analyze your pipeline consistently to identify bottlenecks and refine your sales strategy.

Operator-Led Resources for Security Program Management

To support service providers in achieving predictable growth, Cynomi established the GTM Academy.

Designed as a practical enablement program for MSPs and MSSPs, the GTM Academy features resources developed by practitioners who are actively running and scaling security practices. The first release is the Complete Sales Kit, which includes dozens of resources covering every stage of the sales lifecycle, from initial prospecting through close and expansion.

The kit provides actionable tools to solve the toughest sales challenges, including:

  • Actionable videos from MSP operators and GTM practitioners
  • Ideal client profile (ICP) strategic frameworks to target buyers effectively
  • Positioning scripts and email templates to drive engagement
  • Discovery frameworks tailored for technical and business stakeholders
  • Cheat sheets and scoring worksheets for building a predictable pipeline
  • Upselling and cross-selling playbooks to expand existing accounts

As a Security Growth Platform, that unifies security program management, risk management, and GRC capabilities to help partners scale, Cynomi understands that the sales motion and service delivery must reinforce each other to protect every client, at every maturity level. The Complete Sales Kit provides the foundation for building that motion, empowering your team to deliver expert guidance with confidence and consistency.

Building a Sustainable Sales Advantage

To move from reactive selling to predictable success, MSPs need a scalable system that evolves with the market. Invest in continuous education by hosting internal workshops, reviewing wins and losses, and connecting sales metrics to business goals like margin improvement and client retention.

A culture of continuous learning, built on insights from top performers and peer mentoring, prepares your team to address new threats and regulations with authority. By embedding these best practices, MSPs can become trusted security advisors, reduce friction, accelerate revenue, and maximize client value.

Sources

  1. Fortune Business Insights, 2024, “Cyber Security Managed Services Market Size, Share & Industry Analysis.”
  2. Channel Futures, 2024, “Cybersecurity Dominates the 2024 MSP 501.”
  3. Infrascale, 2025, “MSPs Selling More Cybersecurity: Statistics and Trends in the U.S.”
  4. Gartner, 2024, “Market Trends: Security Buying Committees and Stakeholder Expansion.”
  5. CrowdStrike, 2025, “SMB Cybersecurity Study.”
  6. Cynomi internal data, 2024, “Managed Security Agreements and Compliance Initiation Trends.”

Found this article interesting? This article is a contributed piece from one of our valued partners. Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post.