Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

IT Horror Stories: Ransomware, Print Nightmare & More

NinjaOne
05/12/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


TL;DR

  • Print Nightmare dominated MSP service time in 2021, with one provider reporting 30-40% of tickets over two months related to printer issues from the vulnerability and subsequent patches
  • The Kaseya ransomware attack represented the largest ransomware incident in history, specifically targeting MSP clients and highlighting supply chain vulnerabilities in the channel
  • Construction and infrastructure projects require extensive documentation and upfront payment terms to protect against scope creep, with one 200-drop installation requiring multiple re-wiring efforts as walls were repeatedly moved
  • Core IT survival rules include never trusting user reports, eliminating local admin rights, avoiding Friday changes, documenting everything with photos and written records, and actively monitoring security alerts
  • Tabletop exercises prove more valuable than theoretical disaster planning, and MSPs should avoid assuming risk for infrastructure they don't control or accepting unreasonable client demands even at premium pricing

2021's Biggest IT Nightmares

The panel opens with a discussion of the year's most challenging IT incidents, with Print Nightmare emerging as the dominant pain point for MSPs. Jason Slagle notes that his team spent 30-40% of service time over two months dealing with printer-related issues stemming from the vulnerability and subsequent patches. The initial response of disabling printing entirely backfired when Microsoft failed to deliver promised patches for weeks. Tom Lawrence describes the anxiety now associated with any printer ticket, as technicians must determine whether issues stem from vendor drivers or Microsoft's remediation efforts. While Kelvin Tegelaar's cloud-focused client base largely avoided print server issues, he identifies the Kaseya ransomware attack as the year's most significant industry event, calling it the largest ransomware attack in history targeting MSP clients.

Construction Project Horror Story

Tom Lawrence shares an extensive infrastructure project nightmare involving a 200-drop Cat6 installation at a family entertainment center. The project exemplified scope creep and poor project management, with the general contractor, electricians, and previous vendors all being replacements after earlier teams abandoned the work. Walls were repeatedly moved after wiring was complete, requiring crews to re-pull cable through 30-foot ceilings multiple times. The CIO arbitrarily spray-painted a new wall location in the server room that would have left servers without air conditioning. Drop ceilings were lowered after fire suppression systems were installed, requiring complete rework of sprinkler pipes and cable infrastructure. Lawrence's team mitigated risk through extensive documentation, requiring upfront payment for additional contractors, and photographing every stage of work. Despite the chaos, the project was completed and the client eventually paid 90% immediately with the remaining 10% trickling in over six months.

Rules for Surviving IT Horror

The panel establishes survival rules for IT professionals, drawing parallels to horror movie tropes. Core principles include never trusting users ("everybody lies" from House M.D.), eliminating local admin rights, never exposing RDP, and avoiding changes on Fridays. Documentation emerges as critical for both technical and business protection, with Lawrence's construction story demonstrating how written records and photographs protected against payment disputes. The group emphasizes the importance of tabletop exercises rather than just disaster planning, actively monitoring security alerts especially before weekends, and never assuming risk for infrastructure you don't control. Jason Slagle advocates for saying no to unreasonable requests rather than pricing them prohibitively high, noting that clients sometimes accept outrageous quotes and force you to deliver on bad ideas.

Help Desk Hellfire Challenge

The session concludes with participants attempting the Toe of Satan challenge, consuming a 9-million-Scoville-unit lollipop (three times hotter than pepper spray and 900 times hotter than a jalapeño). Tom Lawrence, having attempted this previously, serves as the experienced veteran while others struggle with increasing heat, hiccups, and tears. The challenge demonstrates the camaraderie and willingness of IT professionals to subject themselves to absurd situations for community entertainment, with Jason Slagle facing an immediate client meeting afterward. The event reinforces NinjaOne's community-focused approach to MSP engagement, combining technical discussion with entertainment and prizes including IT survival packs with Timbuk2 backpacks, Death Wish coffee, and multi-tools.

Chapters

0:00 - Welcome to IT Horror Fest
1:53 - Panel Introductions
6:00 - Worst IT Nightmares of 2021
9:12 - Print Nightmare Impact on MSPs
11:00 - Kaseya Ransomware Attack
33:40 - Construction Project Horror Story
51:34 - IT Survival Rules
52:35 - Six-Word Horror Story Winner
53:26 - Help Desk Hellfire Challenge

Key Quotes

9:33 "We've completely broken printing for clients at least five or six times throughout the year. And in the most recent time, we don't even have to do anything, just patches installed. And now none of their print drivers work."
10:05 "When it first came out that first weekend, we're like, oh, they'll have a patch Monday. So we're like, we're just going to turn printing off over the weekend. Needless to say, they didn't have a patch Monday or the following Monday or I think like several Mondays following that."
11:21 "For the entire industry, I'd say the Casio ransomware industry was a bit like, holy crap, this just happened. The largest ransomware attack in history was performed. Well, thanks to MSPs or at least to MSP clients."
35:00 "I'll just say a price that no one should pay to get this done because it's a bad idea. And then they paid it. And you're like, well, I guess I have to do the thing they said."
36:26 "He grabbed a can of spray paint and he cut the server room in half. He just drew a line with spray paint. So this is the new wall we're putting up the server room. The problem is we've already installed all the ladder rack at a certain height."
38:56 "Having everything in writing meant every time they wanted to argue with us, we're like, here's a photo, here's what you said. Here's what happened. Here's the updated blueprints."

Categories:
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Security Operations
  • Best Practices
  • Webinar
  • Threat Intelligence
  • Getting Started
  • Print Nightmare vulnerability
  • Kaseya ransomware attack
  • MSP security practices
  • Infrastructure project management
  • Scope creep mitigation
  • IT documentation best practices
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: IT Horror Stories: Ransomware, Print Nightmare & More

              Upcoming Webinar Calendar

              • 06/17/2026
                12:00 PM
                06/17/2026
                Action1: The Remediation Gap: Vulnerability Management in the Age of AI
                https://www.truthinit.com/index.php/channel/2010/action1-the-remediation-gap-vulnerability-management-in-the-age-of-ai/
              • 06/23/2026
                01:00 PM
                06/23/2026
                The AI-Powered VMware Alternative
                https://www.truthinit.com/index.php/channel/2009/the-ai-powered-vmware-alternative/
              • 06/24/2026
                11:00 AM
                06/24/2026
                LATAM: Accelerating Insights on AI Through an Engaging Webinar Series
                https://www.truthinit.com/index.php/channel/2012/accelerating-insights-on-ai-through-an-engaging-webinar-series/
              • 06/25/2026
                01:00 PM
                06/25/2026
                Generative AI Security: Preventing AI from Becoming a Data Breach Multiplier
                https://www.truthinit.com/index.php/channel/1998/generative-ai-security-preventing-ai-from-becoming-a-data-breach-multiplier/
              • 07/01/2026
                04:00 AM
                07/01/2026
                Schutz von KI in Anwendungen, Agenten und APIs.
                https://www.truthinit.com/index.php/channel/2008/schutz-von-ki-in-anwendungen-agenten-und-apis/
              • 07/02/2026
                10:00 AM
                07/02/2026
                Resilience Insights from Hybrid Threats When the Cloud Faces Challenges
                https://www.truthinit.com/index.php/channel/2011/resilience-insights-from-hybrid-threats-when-the-cloud-faces-challenges/

              Upcoming Events

              • Jun
                17

                Action1: The Remediation Gap: Vulnerability Management in the Age of AI

                06/17/202612:00 PM ET
                • Jun
                  23

                  The AI-Powered VMware Alternative

                  06/23/202601:00 PM ET
                  • Jun
                    24

                    LATAM: Accelerating Insights on AI Through an Engaging Webinar Series

                    06/24/202611:00 AM ET
                    • Jun
                      25

                      Generative AI Security: Preventing AI from Becoming a Data Breach Multiplier

                      06/25/202601:00 PM ET
                      • Jul
                        01

                        Schutz von KI in Anwendungen, Agenten und APIs.

                        07/01/202604:00 AM ET
                        More events
                        Truth in IT
                        • Sponsor
                        • About Us
                        • Terms of Service
                        • Privacy Policy
                        • Contact Us
                        • Preference Management
                        Desktop version
                        Standard version