Recent reports highlight that Google Chrome and Anthropic’s desktop applications have introduced covert, non-optional downloads onto user devices without explicit notification or opt-out mechanisms. According to referenced analysis, Chrome has been silently installing its Gemini Nano AI model, and Anthropic’s Claude desktop app is deploying browser integrations across all Chromium-based browsers. These installations are performed without seeking user consent and, in some cases, persist even after attempted removal, raising direct concerns for device security and user privacy.

The increased risk is substantiated by internal testing from Anthropic, which found that these browser integrations increased successful cyberattack rates by 23.6% and offered minimal mitigation (11.2% reduction) even when defensive measures were taken. This unnotified software deployment expands the attack surface for user devices and can compromise operational control for IT providers managing client environments. The practice also indicates a shift in vendor behavior regarding user transparency and system sovereignty, as noted by Speaker C.

Adjacent to these developments, the episode discussed “vibe coding,” where non-technical users leverage AI tools to generate code for business tasks. This trend introduces new support and security burdens for MSPs as clients independently create potentially insecure or unsupported automation. Some MSPs are revising their Master Services Agreements (MSAs) to clarify that remediation of issues stemming from client-generated or AI-assisted code will be billed separately and are not covered under standard support contracts. The discussion also featured account of ransomware attacks on education platforms such as Canvas during critical exam periods, underscoring the importance of contingency planning and backup strategies.

The implications for MSPs and IT leaders include heightened due diligence requirements regarding vendor software behaviors, increased need for endpoint and application visibility, and updated governance around end-user-initiated automation. To reduce operational and reputational harm, MSPs are encouraged to establish explicit client policies covering AI tool usage, conduct AI readiness and risk assessments, and formally delineate the scope of managed responsibilities in client agreements. Effective communication and continuous advisory engagement are positioned as vital to maintain alignment with client priorities and mitigate emerging technology risks.

Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

Employee recognition structures and their risk-reduction implications received primary focus in this discussion. Both Amy Babinchak and James Kernan outlined verification-based strategies, such as leveraging Microsoft Teams' Praise app and Bonusly, a peer-to-peer micro-bonus platform, as cost-neutral or low-cost starting points. They emphasized that implementing structured recognition—either verbally, digitally, or via peer-nomination systems—directly supports workforce engagement and mitigates retention risk. James Kernan described anonymized in-house recognition systems, where peer acknowledgements are aggregated and rewarded via a monthly raffle, which included prizes typically sourced from vendor swag.

Specifics included integration of recognition apps within established workflows and processes—such as Microsoft Teams for informal praise, and Bonusly for monetary or non-monetary peer-based rewards. Amy Babinchak noted that client compliments of staff are internally broadcast for transparency and morale. Both speakers advocated for public, peer-inclusive recognition in the workplace, with an explicit focus on acknowledging day-to-day contributions rather than relying solely on annual reviews or monetary raises.

Further, operational and vendor management challenges were covered: Amy Babinchak articulated concerns that help desk KPIs often measure unproductive metrics and stressed the importance of incentivizing conversational and advisory staff interactions over ticket speed. Discussions also addressed the evolving Microsoft Partner Program, noting its complexity, shifting incentive structure, and the administration required. Alternative licensing approaches—such as MSPs enabling clients to purchase directly from Microsoft or using different distributors—were analyzed for cost and administrative impact. Additionally, strategies for navigating hardware supply chain volatility, including the use of white box solutions and refurbishments, were discussed in the context of margin preservation and client-specific risk management.

The episode underscores for MSPs and IT leaders that systematic and visible employee recognition is a quantifiable retention and engagement strategy with minimal operational risk when thoughtfully implemented. Tactical decisions around help desk KPI selection, distributor choice, and hardware sourcing require ongoing evaluation to balance cost control, performance, and administrative overhead. Transparent data-driven management, especially concerning staff performance and licensing economics, can both reduce operational risk and foster a more resilient service provider organization.

1. How do you motivate your employees –ways to reward employees

https://bonusly.com/pricing

https://learn.microsoft.com/en-us/microsoftteams/manage-praise-app

2. Helpdesk KPIs

https://www.dropbox.com/scl/fi/84v9ri236n5ck1x8mgf2w/KERNAN-Financial-Goals-and-KPI-s.doc?rlkey=e1qugzgn8x6lzqgesfqjeawew&st=1ma7g8hq&dl=0

3. Is the Microsoft partner program worth it? And how should I buy Microsoft licenses?

4. Supply Chain challenges and price increases – whitebox or refurbs?

5. What does an AI MSP look like? https://www.thirdtier.net/2026/05/01/deep-thoughts-on-msps-in-the-ai-age/

UPCOMING CHANNEL EVENTS:

In-Person MSP and Channel Partner Events

1. Reinvent Telecom – May 12-14th, 2026
2. Zero Trust Workshop - May 28th- 3 weeks 3 part series https://www.thirdtier.net/product/zero-trust-workshop/
3. Mastermind Event – July 30-31st, 2026 FREE PASS LINK: http://bit.ly/kernanmastermind

Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.