“Audit your SharePoint tenants for CVE-2026-56164 exploitation attempts in the next 4 hours, then prioritize patching before end of business.”
Actively Exploited SharePoint Zero-Day CVE-2026-56164 Patched — Don't Be Fooled by Low CVSS Score
CVE-2026-56164 is an unauthenticated, network-based privilege escalation zero-day in SharePoint Server discovered by Mandiant/Google FLARE during real-world incident response — it requires no user interaction and is being actively exploited now, despite its misleadingly low CVSS score of 5.3. CISA has added it to the KEV catalog. Microsoft recommends enabling the Antimalware Scan Interface (AMSI) on SharePoint with Full Request Body Scan mode as a mitigation, and advises auditing service accounts for AES keys before patching to avoid post-patch authentication failures.
Read more →ChannelPro: AI Automation for MSPs — Internal Business Case Builds as Talent Gap Overtakes Tooling as #1 Constraint
A 27 July 2026 ChannelPro Network article highlights that the MSP talent gap has overtaken tooling cost as the industry's primary operational constraint, with difficulty hiring skilled technicians jumping from 9% to 16% year-over-year per Kaseya's data. 59% of MSPs now expect AI to eliminate tedious tasks, 44% expect it to free time for strategic work, and automation has already improved first-response times for 35% of providers and technician efficiency for 32%. The practical framing for MSP owners: AI is the mechanism for scaling output without scaling headcount proportionally.
Read more →This is what you get — every weekday, free.
Subscribers get the full “From the Floor” take with every issue — not just the news summary you just read.
Written from 12 years on the helpdesk floor. Always free.