Microsoft has announced new security measures aimed at preventing incidents similar to last summer’s CrowdStrike meltdown, which caused billions of dollars in damages by disrupting critical systems worldwide. The company will implement a significant change by moving third-party security drivers out of the Windows kernel to enhance reliability and reduce the risk of catastrophic crashes. These changes will be rolled out in July, starting with a private preview for select partners. Additionally, the update will introduce features like quick machine recovery, which automates fixes for devices stuck in restart loops, and improvements to the crash report process, significantly reducing downtime. The new architecture aims to enhance overall system stability while addressing previous vulnerabilities that led to widespread disruptions. However, the transition to this new framework will require time and rigorous testing, and not all partners have committed to moving their drivers out of the kernel space.
Microsoft is offering Windows 10 users a way to continue receiving support even after the end-of-support date in October 2025. For the first time, users can purchase a year of Extended Security Updates for $30 or redeem 1,000 Microsoft Rewards points. This Extended Security Update program will provide bug fixes, security updates, and technical support until October 2026. While users can continue using Windows 10 without paying for the updates, they will not receive major updates after the deadline. Microsoft has also committed to delivering security updates for Microsoft 365 applications and Windows Defender antivirus until October 2028. The enrollment process for these updates is set to begin in July, with broader availability expected by mid-August.
Action1 has launched a new patch management platform specifically designed for managed service providers, offering a scalable free tier for up to 200 endpoints. This platform, named Action1 for MSPs, aims to improve patch reliability and address common challenges faced by MSPs, such as fragmented visibility and outdated scan data. The new platform utilizes peer-to-peer patch distribution to reduce bandwidth usage, allowing devices on the same network to share updates.
Guardz has introduced a new Identity Threat Detection and Response capability to enhance its unified Managed Detection and Response platform. This feature gives improved visibility into user behavior and identity-driven attacks across platforms such as Microsoft 365 and Google Workspace. Guardz aims to fill visibility gaps by detecting tactics such as token theft and mailbox takeovers. The new service offers customizable response workflows, allowing managed service providers to maintain control during incident responses, and is designed to support their unique engagement styles.
Barracuda Networks has launched a new service called Managed Vulnerability Security, designed to help organizations identify and prioritize cybersecurity vulnerabilities. This fully managed service leverages Barracuda’s global Security Operations Center to provide comprehensive vulnerability scanning and reporting across networks and cloud infrastructures. Reports include an audit summary and a prioritized remediation plan.
Spectra has launched its Certification of Resilience for Managed Service Providers, a certification tied to performance outcomes and insurance qualification. The certification is company-based, meaning it is not reliant on individual personnel, thus ensuring continuity in expertise. Certified Managed Service Providers will have access to preferred insurance partners, which could enhance their market position and streamline insurance underwriting.
Why do we care?
The real trend here is structural resilience becoming a differentiator:
- Microsoft is (finally) hardening the foundations of Windows security.
- Vendors are delivering platform features that reduce operational friction for MSPs.
- Business model innovations like Spectra’s certification are positioning resilience as a competitive and insurable asset.
MSPs who position themselves as “resilience architects” will have the edge. But this requires more than offering patching or identity monitoring—it means aligning services, architecture, and risk planning into a cohesive strategic offer.
Beware of shiny objects. Focus on bulletproofing client operations—and being able to prove it.