Cybersecurity threats continue to evolve, but some of the biggest risks facing MSPs come from overlooked fundamentals, misunderstood responsibilities, and security tools that aren’t being fully utilized.
In this week’s MSP Influencer Primecast, Joey Pinz speaks with Andy Syrewicze of Hornetsecurity, a longtime IT professional and Microsoft MVP, about AI-driven threats, Microsoft 365 security, and opportunities for MSPs to strengthen customer protection.
1. Don’t Let New Threats Distract From Security Fundamentals
Syrewicze has seen organizations become so focused on emerging vulnerabilities that they overlook basic protections such as multifactor authentication (MFA). He also points out that some businesses implement security best practices but fail to revisit them as threats evolve.
For MSPs, effective cybersecurity requires regularly reviewing existing protections rather than assuming that previously implemented controls remain sufficient.
2. AI Is Making Email Attacks More Sophisticated
Email remains a major attack vector, and Syrewicze explains how AI is changing the speed and sophistication of spear-phishing attacks.
During a Black Hat demonstration, he used locally running AI models to generate personalized phishing messages based on LinkedIn profile information, including synthetic profiles. In approximately 90 seconds, the system produced multiple targeted emails, including one written in French for a profile identified as a native French speaker.
His demonstration illustrates why MSPs cannot rely on obvious spelling mistakes or poorly written messages as indicators of phishing. Strong email protection and ongoing security awareness remain important as these attacks become more convincing.
3. Microsoft 365 Security Remains a Shared Responsibility
Syrewicze emphasizes that Microsoft’s shared responsibility model is often misunderstood. While Microsoft manages the underlying cloud infrastructure, customers retain important responsibilities for protecting their data, identities, and access.
He highlights SharePoint Online and OneDrive permissions as particular concerns when introducing Microsoft 365 Copilot. Because Copilot can surface information users already have permission to access, excessive permissions can expose sensitive information more broadly than intended.
For MSPs, reviewing permissions and understanding their customers’ security responsibilities are essential considerations when managing Microsoft 365 environments.
4. MSPs Should Expect More From Their Security Vendors
Syrewicze frequently encounters organizations that purchase security products to solve one problem without exploring their additional capabilities. As a result, valuable features may remain unused.
Drawing on his experience working for MSPs, he encourages providers to ask vendors an important question: “What am I not thinking of?”
That question can uncover overlooked security concerns, additional capabilities, and opportunities to deliver greater customer value. He also recommends researching potential vendors before industry events to make security evaluations more focused and productive.
What This Means for MSPs
Andy Syrewicze’s perspective reinforces that stronger cybersecurity isn’t always about adding more technology. It’s about maintaining security fundamentals, understanding emerging threats, managing Microsoft 365 responsibilities, and getting greater value from existing solutions.
For MSPs, these priorities can help improve customer protection while making security decisions more effective.