“Inventory which systems are still running unpatched RDP and WinSock before end of business today — this is your immediate attack surface.”
August 2026 Patch Tuesday: 421 CVEs Including Critical Azure Logic Apps Info-Disclosure (CVE-2026-56161)
Microsoft's August 2026 release addressed 421 CVEs across Windows, Office, Azure, Exchange, SharePoint, Teams, Power BI, .NET, and Visual Studio. Azure Logic Apps is affected by CVE-2026-56161, a critical information disclosure flaw rated 9.6, and Azure Attestation carries a critical RCE (CVE-2026-71331). MSPs managing customer Azure workloads should verify that cloud-side patches have been automatically applied via the Azure portal and audit Logic Apps connectors for credential exposure.
Read more →August 2026 Patch Tuesday: CVE-2026-68820 WinSock Zero-Day Actively Exploited by Lazarus Group
Microsoft's August 2026 Patch Tuesday fixed 421 CVEs, with CVE-2026-68820 — a use-after-free flaw in the Windows Ancillary Function Driver for WinSock (AFD.sys) — confirmed as actively exploited in the wild by North Korean Lazarus Group actors to deploy a kernel-mode rootkit via Operation Dream Job. CISA has added it to the KEV catalog with a mandatory patch deadline of 25 August 2026. Apply the August cumulative Windows update immediately; no workaround exists — patching is the only remediation.
Read more →Remote Desktop Client Critical RCE (CVE-2026-62824, CVSS 8.8) Patched in August Patch Tuesday
Microsoft patched a critical remote code execution vulnerability in Remote Desktop Client (CVE-2026-62824, CVSS 8.8) as part of the August 2026 Patch Tuesday release. The flaw could allow an attacker to execute code on a client system when a user connects to a malicious RDP server — a common social engineering vector. MSPs should ensure RDP Client is updated on all technician workstations and consider restricting outbound RDP to trusted endpoints only as a workaround.
Read more →NinjaOne Hits $12.3B Valuation After $400M Series C Extension, Doubles Down on AI Patching
NinjaOne closed a Series C extension of more than $400 million in June 2026, reaching a $12.3 billion valuation with total funding now past $1 billion, backed by Sequoia Capital, ICONIQ, and CapitalG. The company confirmed funding will go toward extending AI deeper into its patching, endpoint management, and monitoring layers, building on its Patch Intelligence AI rollout. For Australian MSPs already on NinjaOne, expect accelerated AI feature releases in the RMM layer through the second half of 2026.
Read more →Atera 'Robin' Autonomous AI Agent Claims L1 Ticket Resolution — But Real-World Reviews Mixed
Atera's 'Robin' AI Autopilot is positioned as an autonomous Level 1 ticket resolver, with the AI Copilot add-on priced at $95/tech/month for MSPs. Independent operator reviews through mid-2026 note that competing platforms like SuperOps are still rolling out agentic workflows and are not yet handling L1 tickets autonomously at the same level. MSPs evaluating AI helpdesk automation should run structured pilots before committing, as marketing claims are outpacing real-world deployment maturity across most vendors.
Read more →This is what you get — every weekday, free.
Subscribers get the full “From the Floor” take with every issue — not just the news summary you just read.
Written from 12 years on the helpdesk floor. Always free.