The Buzz: CyberFOX buys Optimize365, Microsoft secures Windows AI agents, AWS cuts Marketplace fees

Welcome to The Buzz from ChannelBuzz.ca, I’m Robert Dutt, today is Friday, October 9, 2026, and here’s what’s happening in the channel today.

CyberFOX is continuing to assemble a broader security platform for MSPs, this time with the acquisition of Optimize365.

The deal adds Microsoft 365 security monitoring and hardening to a CyberFOX portfolio that already includes privileged access management, password management, DNS filtering and secure access.

Optimize365 focuses on a familiar problem for MSPs: keeping Microsoft 365 environments securely configured as settings, permissions and user requirements change.

For a service provider managing dozens or hundreds of customer tenants, those changes can create a substantial ongoing security and administrative burden.

And the acquisition is interesting in the context of what CyberFOX has been doing this year.

In June, it acquired Timus Networks to add SASE and zero-trust network access.

Then, at the end of September, it signed a North American distribution agreement with TD SYNNEX covering its existing security portfolio.

We covered that distribution agreement here on The Buzz last week.

Now CyberFOX is extending its reach from devices, credentials and network connections into Microsoft 365 itself.

There’s a clear strategy developing: bring together more of the tools that smaller IT teams and MSPs need to manage security across their customers.

Optimize365 will continue operating under its existing brand for now, with integration into CyberFOX’s partner program and product roadmap planned over the coming quarters.

Of course, buying the pieces of a security platform and integrating them into a genuinely simpler operating environment are two different things.

That’s the question worth watching as CyberFOX brings these acquisitions together.

Financial terms weren’t disclosed, and there’s no announcement yet about whether the newly acquired technology will be available through the company’s Canadian distribution relationship.

Microsoft, meanwhile, is laying the groundwork for a Windows environment in which AI agents can do considerably more work on behalf of users.

And that means Windows needs a new set of security controls.

At its Windows event Wednesday, Microsoft outlined what it calls hybrid intelligence, combining AI processing on local devices with cloud-based models depending on the task.

The company also introduced new AI-focused hardware, including the Surface Laptop Ultra, powered by Nvidia technology.

But for solution providers, the more consequential development may be Microsoft Execution Containers, or MXC.

MXC is now generally available.

It allows developers and administrators to establish policy-enforced boundaries around what an AI agent can access and do.

For example, an agent might be allowed to read and modify files in a particular project directory, but not access personal documents or change system settings outside its assigned task.

Those restrictions are enforced outside the agent itself.

That’s important because an AI agent can make a decision that seems reasonable in the context of its task but still goes beyond what a user or administrator intended.

Microsoft is also working to distinguish agent activity from human activity through Entra, and to extend Agent 365 management capabilities to agents running locally on devices.

Those additional identity and management capabilities are still coming.

For partners, the implication is that managing AI agents could become part of everyday endpoint management.

Customers will need help deciding which agents are allowed, what resources they can access, how their activity is monitored and who remains accountable when something goes wrong.

That’s a much bigger opportunity, and responsibility, than simply deploying another AI application.

And AWS is making it considerably cheaper for partners to sell professional services through AWS Marketplace.

The cloud provider has reduced its standard Marketplace listing fee for professional services private offers from two and a half percent to half a percent.

And for qualifying multi-product solutions that combine professional services with other paid products, the base listing fee on the services component can fall all the way to zero.

There are some qualifications.

Channel Partner Private Offers can still carry an additional half-percent fee, and regional fees may also apply.

The lower standard fee applies to new private offers, rather than retroactively changing existing agreements.

The standard reduction was introduced earlier this year, and AWS highlighted the broader opportunity for consulting and services partners in September.

But it’s getting renewed attention in the channel, and the economics are worth examining.

For MSPs, consultants and systems integrators, a two-percentage-point reduction in transaction fees can make a meaningful difference, particularly on larger services engagements.

And the zero-percent base fee for qualifying bundled offerings gives partners another reason to package implementation, migration, integration and managed services alongside the software they’re selling.

The bigger story is the continuing evolution of cloud marketplaces.

They started primarily as places to buy software and cloud services.

But increasingly, AWS wants them to be places where customers can procure complete solutions, including the professional services needed to make the technology work.

That could open new routes to customers for Canadian solution providers, while potentially simplifying procurement and billing.

Of course, partners still need to understand the eligibility rules and total transaction costs before assuming every services deal qualifies for the lowest fee.

But this is a meaningful change in the economics of the cloud marketplace channel.

In Brief – Check Point Research says one in every thirty-nine enterprise generative AI prompts in its September data posed a high risk of exposing sensitive information.

Securonix has introduced behavioral analytics designed to detect suspicious activity by AI agents as well as human users, while keeping consequential security responses subject to human approval.

Accenture and Dell Technologies have formed a dedicated business group focused on private, hybrid and sovereign AI deployments, with Accenture planning to train more than three thousand practitioners on Dell technology.

And Upscale has introduced Token Fabric, a networking architecture designed to connect different types of AI accelerators within the same data centre.

Full details and links in the show notes or the blog post.

If you haven’t heard it yet, Thursday’s In The Channel features Flare’s John Williamson and Eunice Leung discussing the Montreal cybersecurity company’s new partner program, and how MSPs can bring threat intelligence to midmarket customers and build services around it.

And coming up Tuesday on In The Channel, we’ll be taking you to Calgary for a look at Fortinet’s new cybersecurity innovation hub, and what the company’s investment in Canada means for partners and the broader security ecosystem.

With Thanksgiving on Monday, The Buzz will be off Monday and Tuesday, but we’ll see you right back here first thing Wednesday morning. Have a great Thanksgiving!

That’s how we’re seeing the headlines today. I’m Robert Dutt for ChannelBuzz.ca, thanks for listening. Have a great day.