Figures are in US dollars unless marked.
MSP Outpost's Vendor Watch logged nine MSP vendor changes in October 2026: one price change, four security notices, three outages and one acquisition. Every numbered line below is taken from its Vendor Watch entry, as the log read on November 5, 2026, and links to that entry, which names where it came from.
October's log is short and a little lopsided, and the heavy side is security. The groups run from what touches your invoice to what touches your clients, by date inside each group.
One Price Change to Check Against Your Bill
Huntress changed the prices on its own pricing page. If you buy Huntress, set the page beside your last invoice before the renewal conversation, not after it.
- Huntress, October 23: Huntress changed the prices listed on its pricing page. Source: Huntress pricing page.
Four Security Notices, Three of Them From CISA
I don't buy the vendor emails that turn every catalog entry into a panic. A CISA listing says a flaw is being exploited somewhere; it doesn't say you're exposed. Read each entry, then check your own inventory.
- Microsoft, October 13: CISA added Microsoft Windows CVE-2026-96951 to its exploited vulnerabilities catalog. Source: CISA alerts.
- BeyondTrust, October 16: CISA flagged a critical auth bypass flaw in BeyondTrust Remote Support. Source: CISA alerts.
- ConnectWise, October 16: ConnectWise shut off Cloud Backup access after unauthorized access was identified. Source: ConnectWise status page.
- Fortinet, October 16: CISA added CVE-2025-61624, a path traversal vulnerability in multiple Fortinet products, to its Known Exploited Vulnerabilities catalog based on evidence of active exploitation. Source: CISA alerts.
Three Outages, All Marked Resolved
A vendor's status page is like a smoke alarm in somebody else's house: it only helps if you're close enough to hear it. Each of these was posted on the vendor's status page, so subscribe to the pages for the tools your desk depends on.
- Kaseya, October 2: Kaseya resolved a critical DattoRMM MacOS agent connectivity incident. Source: Kaseya status page.
- Kaseya, October 23: Kaseya resolved a critical Datto RMM device filter issue after 78 hours 22 minutes. Source: Kaseya status page.
- ConnectWise, October 30: ConnectWise resolved an outage affecting some Replibit Vaults on x360Recover. Source: ConnectWise status page.
One Acquisition to Watch
An acquisition changes nothing on the day it's announced. My view: if you buy either product, read any license or support notice that follows, and keep this entry as the record of when it started.
- Proofpoint, October 15: Proofpoint agreed to buy Varonis for $6.3 billion. Source: CRN security news.
What to Do With This List
For each line, ask what breaks in your shop if it touches you, and who finds out first: your technicians, your clients or an auditor.
Whether any of this needs work this week depends on two things: whether the product is in your stack, and which version you run. If the answer is no to the first, the line is background. If it's yes, the entry's source is where the detail lives.
mspoutpost.com/articles/msp-vendor-changes-in-october-2026-nine-from-vendor-watch
Written by Dana Kowalski
MSP Outpost publishes information, not legal, financial, insurance, tax or compliance advice, and reading it creates no professional relationship. For decisions about your business, talk to a qualified professional.
