Podcasts about 1Password

What happens when your autonomous coding agents need to navigate your core infrastructure? Do you hand them the keys and hope for the best? (gulp!) This week on Dev Interrupted, 1Password CTO Nancy Wang teaches the golden path for agentic security: just-in-time secrets that grants AI "access without custody." She also shares her CTO playbook for measuring true agentic ROI beyond raw PR volume, explains why 1Password has officially replaced traditional coding interviews with agent builder tests, and confesses she's shipping PRs again with her own fleet of agents between meetings. Like many CTOs we've had on the show, Nancy reminds us that code is cheap now, and review is what's expensive now. We get into tactics for addressing that bottleneck.Get the guide: The AI engineering productivity gap - how elite teams pull ahead in 2026Register: Dev Interrupted Presents: The Software Factory RoundtableFollow the show:Subscribe to our Substack Follow us on LinkedInSubscribe to our YouTube ChannelFollow the hosts:Follow AndrewFollow BenFollow DanFollow today's guest:1Password: Explore the enterprise password and identity platform at 1password.com1Password for Developers: Dive into the new developer tooling, credential brokering, and secure AI workflows at 1password.devOracle Red Bull Racing: Read more about the F1 team's systems engineering at redbullracing.comConnect with Nancy: LinkedIn OFFERSStart Free Trial: Get started with LinearB's AI productivity platform for free.Book a Demo: Learn how you can ship faster, improve DevEx, and lead with confidence in the AI era.LEARN ABOUT LINEARBAI Code Reviews: Automate reviews to catch bugs, security risks, and performance issues before they hit production.AI & Productivity Insights: Go beyond DORA with AI-powered recommendations and dashboards to measure and improve performance.AI-Powered Workflow Automations: Use AI-generated PR descriptions, smart routing, and other automations to reduce developer toil.MCP Server: Interact with your engineering data using natural language to build custom reports and get answers on the fly.

We're back for a brand-new season!

Intel Chat with Matt Bromiley and Chris Luft.• AI-generated patches fix vulnerabilities about half the time. 1Password's Off-By-1 team tested ChatGPT-5.5 and Opus 4.8 against six vulnerabilities: across 6,080 generated patches only 46% fixed the underlying flaw, and some that did were narrow enough to be bypassed. Separate Veracode research found a 56% security pass rate across 100+ models, with 44% of AI-generated code carrying detectable OWASP Top 10 issues. Matt's pushback: what is the HUMAN success rate for comparison, and why is nobody publishing that number?• LiteLLM supply chain attack. CloudSEK reports 2,500+ organizations and 434,000 CI/CD pipelines potentially exposed. LiteLLM was not the initial target: the compromise came in through Aqua Security's Trivy scanner and spread when LiteLLM's CI automatically installed it, ending with malicious versions 1.82.7 and 1.82.8 on PyPI. They were live for roughly 40 minutes, which automated dependency resolution and cached layers were more than enough to propagate.• Anthropic's models reached real systems during evaluations. Reviewing 141,006 evaluation runs, Anthropic found three incidents where Claude models gained unauthorized access to real organizations during capture-the-flag exercises, after a misunderstanding with an evaluation partner left the environments internet-connected. One model published a malicious package to the real PyPI, where it ran on 15 real systems. Matt argues this is a lab test rather than a threat report, and asks what defenders are supposed to do with it.• North Korea behind the npm compromises. Amazon Threat Intelligence links the typo-crypto, debug, chalk and axios incidents to the same DPRK actor tracked as SAPPHIRE SLEET, STARDUST CHOLLIMA and BlueNoroff. Wiz found roughly one in ten cloud environments touched by the debug and chalk incident within two hours. The technique has shifted: malicious functionality is now split across several innocuous-looking packages that only do anything once combined, plus slopsquatting and prompt injection aimed at AI code scanners.Stories covered:• https://www.darkreading.com/application-security/ai-generated-patches-fail-half-time• https://www.securityweek.com/over-2500-organizations-impacted-by-litellm-supply-chain-attack/• https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals• https://aws.amazon.com/blogs/security/amazon-identifies-north-korean-hacker-group-behind-open-source-supply-chain-attacks/Chapters:0:00 Back from Black Hat3:31 AI-generated patches fix vulnerabilities about half the time6:23 What is the human success rate?10:53 LiteLLM supply chain attack13:03 Pin your dependencies15:59 Anthropic models reached real systems during evals22:12 This is a lab test, not a threat report27:06 North Korea behind the debug, chalk and axios compromises30:59 Malware assembled from harmless-looking parts33:27 Clever people on the other side of the fenceThe Cybersecurity Defenders Podcast — a podcast about cybersecurity and the people that keep the internet safe. New episodes drop weekly.Subscribe wherever you listen:• Spotify: https://open.spotify.com/show/6ep00zeY3S8ffZ4o0UeSps• Apple Podcasts: https://podcasts.apple.com/us/podcast/the-cybersecurity-defenders-podcast/id1649981740• YouTube: https://www.youtube.com/@limacharlieioLearn more about LimaCharlie: https://limacharlie.io#cybersecurity #infosec #AIsecurity #supplychainsecurity #threatintel

Nik sits down with Jacob Posel, co-founder of HQ (https://hqforwork.com), to talk about the biggest problem nobody's solving in AI adoption: every person on your team is having a completely different experience with Claude or ChatGPT, and none of that context ever gets shared. Jacob breaks down why most companies end up with wild fragmentation instead of the compounding benefit they expect, how HQ works as a shared memory layer across your whole org (think Dropbox for agents, 1Password for agents), and what it actually takes to turn one person's AI workflow into a skill the whole team can use. They also get into Jacob's path from an AI/ML master's program straight into e-comm logistics, then Common Thread Collective, to co-founding HQ with Corey Epstein. Plus: why Marketing teams are seeing the biggest per-person leverage from AI right now, how HQ's "gardening agent" keeps stale context from poisoning your workflows, and Jacob's predictions for what's going to look ridiculous a year from now (spoiler: picking a model manually might be one of them). If you've ever built something great in AI and had zero way to hand it off to your team, this one's for you. --- Tatari helps brands run TV like a modern performance channel. Unlike most platforms that focus only on programmatic CTV, Tatari gives marketers access to all of TV - linear, streaming, programmatic CTV, and direct publisher inventory - in one platform. By combining premium inventory with transparent reporting and outcome-based measurement, Tatari lets growth teams evaluate TV the same way they evaluate paid search or paid social. The result: more control, better reach, and TV spend that can actually be tied back to business results. Learn more at ⁠https://lp.tatari.tv/limited-supply⁠ --- Want more DTC advice? Check out the⁠⁠⁠⁠⁠⁠⁠⁠⁠ Limited Supply YouTube page⁠⁠⁠⁠⁠⁠⁠⁠⁠ for more insider tips. And if you're looking for an instant stream of on-demand DTC gold, check out the⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ Limited Supply Slack Channel⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ for Nik's most unfiltered, uncensored thoughts. Check out the Nik's ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠DTC newsletter⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ --- To learn more about HQ, check them out at: https://hqforwork.com/ Follow Jacob on X: https://x.com/jacob_posel Follow Nik on X:⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ https://x.com/mrsharma

AI Patch Development Fails, WordPress Login XSS Hits All Versions, and DEF CON's Biggest Security Lessons David Shipley covers new research from 1Password's Off By One Labs showing AI-generated vulnerability patches often fail: across 6,080 scored patches for six CVEs, only 26% fixed issues without changing behavior, 20% fixed while changing behavior, and 53.9% failed or introduced new flaws, with many "successful" patches deemed fragile. A critical WordPress login-page XSS (CVE-2026-64638, CVSS 8.9) affects every version ever shipped; fixes landed in 7.0.3 and were backported to 4.7, leaving older versions vulnerable, as CISA tracks active exploitation alongside the recent "WP to Shell" RCE. T he episode also details warnings about destructive OT attacks, a cyber incident forcing North Carolina ports into manual operations, and DEF CON talks on hacking 36M GPS trackers, misdirected "noreply" domains, and AI-driven HTTP desync research. 00:00 NordLayer Sponsor Message 00:37 Headlines And Intro 01:08 AI Patches Fail Often 03:19 WordPress Login XSS 05:40 Wipers Target Infrastructure 08:02 North Carolina Ports Hit 09:49 DEF CON Favorite Talks 10:15 GPS Trackers Takeover 11:28 Noreply Domain Email Leak 12:37 AI Finds HTTP Desyncs 13:47 Cliff Stoll Keynote 15:09 Wrap Up And Thanks 15:31 NordLayer Sponsor Close

Always-on access might sound convenient, but it can quietly become a serious security risk.

The panel debates whether giving Claude controlled access to 1Password credentials is a practical automation feature or an unnecessary security risk, weighing trust, passkeys, vault isolation, and AI limitations. The conversation then shifts to the humor of waterproof phone holders and shower tech before wrapping with a discussion of how autonomous vehicles could reshape liability, trial law, and advertising, followed by the panel's sign-offs. The panel includes Chuck Joiner, David Ginsburg, Marty Jencius, Eric Bolden, Brian Flanigan-Arthurs, Jim Rea, Web Bixby, and Jeff Gamet. This edition of MacVoices is brought to you by our Patreon supporters. Get access to the MacVoices Slack and MacVoices After Dark by joining in at Patreon.com/macvoices. Show Notes: Chapters: 00:00 AI trust and autonomous vehicle liability00:32 Claude gains access to 1Password credentials01:02 Trusting AI agents with sensitive accounts01:15 Limiting access to individual vault items01:38 Secure credential handling for automation02:41 Can Claude see the actual password?02:58 Passkeys, certificates, and temporary authentication03:55 Using a secondary vault for AI access04:38 Waterproof shower phone holders05:30 Waterproof notepads and working in the shower06:03 Listening to podcasts while showering07:21 Trial lawyers and autonomous vehicles08:23 How self-driving cars could change liability08:51 Could autonomous vehicles eliminate accidents?09:23 The future of legal billboards and television ads10:46 Closing the discussion Links: An AI just broke an 87-year-old maths problem, in a tweet sent during the World Cup finalhttps://thenextweb.com/news/jacobian-conjecture-disproved-ai-fable-5   EU Orders Google to Give Rival AI Apps the Same Android Access as Geminihttps://www.macrumors.com/2026/07/16/eu-google-ai-apps-android-access/   You can now grant Claude access to your 1Password credentialshttps://www.engadget.com/2216405/1password-anthropic-claude-integration/   Waterproof Shower Phone Holder: $8.53https://amzn.to/4vITEqy   Trial Lawyers Lobby Against Autonomous Vehicleshttps://marginalrevolution.com/marginalrevolution/2026/07/trial-lawyers-lobby-against-autonomous-vehicles.html   Guests: Get detailed bios and contact information about for the panel on the MacVoices Live! Panel page on our web site:https://macvoices.com/macvoiceslive/macvoices-live-panel/ Support:      Become a MacVoices Patron on Patreon     http://patreon.com/macvoices      Enjoy this episode? Make a one-time donation with PayPal Connect:      Web:     http://macvoices.com      Twitter:     http://www.twitter.com/chuckjoiner     http://www.twitter.com/macvoices      Mastodon:     https://mastodon.cloud/@chuckjoiner      Facebook:     http://www.facebook.com/chuck.joiner      MacVoices Page on Facebook:     http://www.facebook.com/macvoices/      MacVoices Group on Facebook:     http://www.facebook.com/groups/macvoice      LinkedIn:     https://www.linkedin.com/in/chuckjoiner/      Instagram:     https://www.instagram.com/chuckjoiner/ Subscribe:      Audio in iTunes     Video in iTunes      Subscribe manually via iTunes or any podcatcher:      Audio: http://www.macvoices.com/rss/macvoicesrss      Video: http://www.macvoices.com/rss/macvoicesvideorss

The panel debates whether giving Claude controlled access to 1Password credentials is a practical automation feature or an unnecessary security risk, weighing trust, passkeys, vault isolation, and AI limitations. The conversation then shifts to the humor of waterproof phone holders and shower tech before wrapping with a discussion of how autonomous vehicles could reshape liability, trial law, and advertising, followed by the panel's sign-offs. The panel includes Chuck Joiner, David Ginsburg, Marty Jencius, Eric Bolden, Brian Flanigan-Arthurs, Jim Rea, Web Bixby, and Jeff Gamet. This edition of MacVoices is brought to you by our Patreon supporters. Get access to the MacVoices Slack and MacVoices After Dark by joining in at Patreon.com/macvoices. Show Notes: Chapters: 00:00 AI trust and autonomous vehicle liability 00:32 Claude gains access to 1Password credentials 01:02 Trusting AI agents with sensitive accounts 01:15 Limiting access to individual vault items 01:38 Secure credential handling for automation 02:41 Can Claude see the actual password? 02:58 Passkeys, certificates, and temporary authentication 03:55 Using a secondary vault for AI access 04:38 Waterproof shower phone holders 05:30 Waterproof notepads and working in the shower 06:03 Listening to podcasts while showering 07:21 Trial lawyers and autonomous vehicles 08:23 How self-driving cars could change liability 08:51 Could autonomous vehicles eliminate accidents? 09:23 The future of legal billboards and television ads 10:46 Closing the discussion Links: An AI just broke an 87-year-old maths problem, in a tweet sent during the World Cup final https://thenextweb.com/news/jacobian-conjecture-disproved-ai-fable-5   EU Orders Google to Give Rival AI Apps the Same Android Access as Geminihttps://www.macrumors.com/2026/07/16/eu-google-ai-apps-android-access/   You can now grant Claude access to your 1Password credentialshttps://www.engadget.com/2216405/1password-anthropic-claude-integration/   Waterproof Shower Phone Holder: $8.53https://amzn.to/4vITEqy   Trial Lawyers Lobby Against Autonomous Vehicles https://marginalrevolution.com/marginalrevolution/2026/07/trial-lawyers-lobby-against-autonomous-vehicles.html   Guests: Get detailed bios and contact information about for the panel on the MacVoices Live! Panel page on our web site: https://macvoices.com/macvoiceslive/macvoices-live-panel/ Support:      Become a MacVoices Patron on Patreon      http://patreon.com/macvoices      Enjoy this episode? Make a one-time donation with PayPal Connect:      Web:      http://macvoices.com      Twitter:      http://www.twitter.com/chuckjoiner      http://www.twitter.com/macvoices      Mastodon:      https://mastodon.cloud/@chuckjoiner      Facebook:      http://www.facebook.com/chuck.joiner      MacVoices Page on Facebook:      http://www.facebook.com/macvoices/      MacVoices Group on Facebook:      http://www.facebook.com/groups/macvoice      LinkedIn:      https://www.linkedin.com/in/chuckjoiner/      Instagram:      https://www.instagram.com/chuckjoiner/ Subscribe:      Audio in iTunes      Video in iTunes      Subscribe manually via iTunes or any podcatcher:      Audio: http://www.macvoices.com/rss/macvoicesrss      Video: http://www.macvoices.com/rss/macvoicesvideorss

In this episode of Command Control Power, the hosts discuss early experiences with the macOS 27 "Golden Gate" beta, noting it feels snappy and stable but breaks QuickBooks, leading one host to keep QuickBooks on a headless Mac mini running macOS 26. They cover upcoming Apple Intelligence features, including AI-assisted file renaming, Safari profiles and AI-suggested tab grouping, page-change notifications, and Apple Passwords' potential to automate password changes (which appears incomplete in testing). The conversation compares Apple Passwords with 1Password, explains passkeys with client-friendly metaphors and technical points, and notes issues caused by multiple password tools. They also review AirPods Pro 3 fit and changes, discuss hearing-aid functionality on AirPods Pro 2/3, and share troubleshooting tips for Splashtop permissions and an Apple Mail send bug tied to "check spelling before sending."   00:00 Show Kickoff 00:08 macOS Golden Gate Beta 01:47 Safari Tab Groups 06:18 Apple Intelligence Highlights 08:39 Passwords Auto Change 17:48 Passkeys Explained 24:01 Passkey Pitfalls 26:33 AirPods Pro 3 First Impressions 26:47 Better Fit Out of Box 27:07 Why Upgrade AirPods 28:08 Lost AirPod Find My 30:10 Sound Signature Debate 31:25 AirPods at Loud Venues 33:03 Hearing Aid Potential 37:00 Remote Setup iPhone Mirroring 42:08 Splashtop Permissions Trick 44:42 Fuzzy Mic Trend Rant 46:50 Apple Mail Send Bug Fix 49:17 Next Episode Teasers Wrap

As the tech world catches its breath from AI whiplash and retro gaming returns to the PC, Microsoft quietly kills underused tools and tries to double down on what actually works. This episode blends the excitement of tech and entertainment (like Xbox classics landing on Windows 11) with a poignant look back at the life and legacy of legendary columnist John C. Dvorak. Windows Five new Insider builds released on Monday; the new Start menu comes to the Beta channel Experimental (26H1) a day later with no interesting new features The Whiteboard app is apparently being retired AI Microsoft expands partnership with Mistral to improve EU AI infrastructure Copilot for consumers is losing Podcasts and Deep research features soon U.S. judge approves Anthropic $1.5 billion settlement with authors it stole from 1Password partners with Anthropic to make AI access to password-protected websites secure Google renames NotebookLM to Gemini Notebook Google's next big AI models are delayed, but we got Gemini 3.6 Flash, Flash-Lite, and 3.5 Flash Cyber to tide us over XBOX and gaming Microsoft brings XBOX Backward Compatibility to PC!! Here comes Halo: Campaign Evolved, along with more Game Pass titles for the end of July Bethesda announces Fallout 3 and New Vegas remasters, and Fallout 5 is entering pre-production Call of Duty Modern Warfare 4 in Early Access on August 21, Open Beta on August 27 XBOX July update adds support for longer gamertags, new library customization options, and more XBOX teams with Meta to bring Game Pass Starter Edition to Meta Horizon+ subscribers Valve says the component crisis dogging Steam Machine pricing will only get worse Tips and picks Tip of the week: Windows Package Manager for bulk app installs App (game) of the week: Doom: The Dark Ages RunAs Radio this week: Security Begins at Procurement with Jessie Schofer Brown liquor pick of the week: Loup River Nebraska Straight Bourbon Whiskey Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: arcticwolf.com/trends zscaler.com/security cirasync.com/Windows

As the tech world catches its breath from AI whiplash and retro gaming returns to the PC, Microsoft quietly kills underused tools and tries to double down on what actually works. This episode blends the excitement of tech and entertainment (like Xbox classics landing on Windows 11) with a poignant look back at the life and legacy of legendary columnist John C. Dvorak. Windows Five new Insider builds released on Monday; the new Start menu comes to the Beta channel Experimental (26H1) a day later with no interesting new features The Whiteboard app is apparently being retired AI Microsoft expands partnership with Mistral to improve EU AI infrastructure Copilot for consumers is losing Podcasts and Deep research features soon U.S. judge approves Anthropic $1.5 billion settlement with authors it stole from 1Password partners with Anthropic to make AI access to password-protected websites secure Google renames NotebookLM to Gemini Notebook Google's next big AI models are delayed, but we got Gemini 3.6 Flash, Flash-Lite, and 3.5 Flash Cyber to tide us over XBOX and gaming Microsoft brings XBOX Backward Compatibility to PC!! Here comes Halo: Campaign Evolved, along with more Game Pass titles for the end of July Bethesda announces Fallout 3 and New Vegas remasters, and Fallout 5 is entering pre-production Call of Duty Modern Warfare 4 in Early Access on August 21, Open Beta on August 27 XBOX July update adds support for longer gamertags, new library customization options, and more XBOX teams with Meta to bring Game Pass Starter Edition to Meta Horizon+ subscribers Valve says the component crisis dogging Steam Machine pricing will only get worse Tips and picks Tip of the week: Windows Package Manager for bulk app installs App (game) of the week: Doom: The Dark Ages RunAs Radio this week: Security Begins at Procurement with Jessie Schofer Brown liquor pick of the week: Loup River Nebraska Straight Bourbon Whiskey Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: arcticwolf.com/trends zscaler.com/security cirasync.com/Windows

As the tech world catches its breath from AI whiplash and retro gaming returns to the PC, Microsoft quietly kills underused tools and tries to double down on what actually works. This episode blends the excitement of tech and entertainment (like Xbox classics landing on Windows 11) with a poignant look back at the life and legacy of legendary columnist John C. Dvorak. Windows Five new Insider builds released on Monday; the new Start menu comes to the Beta channel Experimental (26H1) a day later with no interesting new features The Whiteboard app is apparently being retired AI Microsoft expands partnership with Mistral to improve EU AI infrastructure Copilot for consumers is losing Podcasts and Deep research features soon U.S. judge approves Anthropic $1.5 billion settlement with authors it stole from 1Password partners with Anthropic to make AI access to password-protected websites secure Google renames NotebookLM to Gemini Notebook Google's next big AI models are delayed, but we got Gemini 3.6 Flash, Flash-Lite, and 3.5 Flash Cyber to tide us over XBOX and gaming Microsoft brings XBOX Backward Compatibility to PC!! Here comes Halo: Campaign Evolved, along with more Game Pass titles for the end of July Bethesda announces Fallout 3 and New Vegas remasters, and Fallout 5 is entering pre-production Call of Duty Modern Warfare 4 in Early Access on August 21, Open Beta on August 27 XBOX July update adds support for longer gamertags, new library customization options, and more XBOX teams with Meta to bring Game Pass Starter Edition to Meta Horizon+ subscribers Valve says the component crisis dogging Steam Machine pricing will only get worse Tips and picks Tip of the week: Windows Package Manager for bulk app installs App (game) of the week: Doom: The Dark Ages RunAs Radio this week: Security Begins at Procurement with Jessie Schofer Brown liquor pick of the week: Loup River Nebraska Straight Bourbon Whiskey Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: arcticwolf.com/trends zscaler.com/security cirasync.com/Windows

As the tech world catches its breath from AI whiplash and retro gaming returns to the PC, Microsoft quietly kills underused tools and tries to double down on what actually works. This episode blends the excitement of tech and entertainment (like Xbox classics landing on Windows 11) with a poignant look back at the life and legacy of legendary columnist John C. Dvorak. Windows Five new Insider builds released on Monday; the new Start menu comes to the Beta channel Experimental (26H1) a day later with no interesting new features The Whiteboard app is apparently being retired AI Microsoft expands partnership with Mistral to improve EU AI infrastructure Copilot for consumers is losing Podcasts and Deep research features soon U.S. judge approves Anthropic $1.5 billion settlement with authors it stole from 1Password partners with Anthropic to make AI access to password-protected websites secure Google renames NotebookLM to Gemini Notebook Google's next big AI models are delayed, but we got Gemini 3.6 Flash, Flash-Lite, and 3.5 Flash Cyber to tide us over XBOX and gaming Microsoft brings XBOX Backward Compatibility to PC!! Here comes Halo: Campaign Evolved, along with more Game Pass titles for the end of July Bethesda announces Fallout 3 and New Vegas remasters, and Fallout 5 is entering pre-production Call of Duty Modern Warfare 4 in Early Access on August 21, Open Beta on August 27 XBOX July update adds support for longer gamertags, new library customization options, and more XBOX teams with Meta to bring Game Pass Starter Edition to Meta Horizon+ subscribers Valve says the component crisis dogging Steam Machine pricing will only get worse Tips and picks Tip of the week: Windows Package Manager for bulk app installs App (game) of the week: Doom: The Dark Ages RunAs Radio this week: Security Begins at Procurement with Jessie Schofer Brown liquor pick of the week: Loup River Nebraska Straight Bourbon Whiskey Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: arcticwolf.com/trends zscaler.com/security cirasync.com/Windows

As the tech world catches its breath from AI whiplash and retro gaming returns to the PC, Microsoft quietly kills underused tools and tries to double down on what actually works. This episode blends the excitement of tech and entertainment (like Xbox classics landing on Windows 11) with a poignant look back at the life and legacy of legendary columnist John C. Dvorak. Windows Five new Insider builds released on Monday; the new Start menu comes to the Beta channel Experimental (26H1) a day later with no interesting new features The Whiteboard app is apparently being retired AI Microsoft expands partnership with Mistral to improve EU AI infrastructure Copilot for consumers is losing Podcasts and Deep research features soon U.S. judge approves Anthropic $1.5 billion settlement with authors it stole from 1Password partners with Anthropic to make AI access to password-protected websites secure Google renames NotebookLM to Gemini Notebook Google's next big AI models are delayed, but we got Gemini 3.6 Flash, Flash-Lite, and 3.5 Flash Cyber to tide us over XBOX and gaming Microsoft brings XBOX Backward Compatibility to PC!! Here comes Halo: Campaign Evolved, along with more Game Pass titles for the end of July Bethesda announces Fallout 3 and New Vegas remasters, and Fallout 5 is entering pre-production Call of Duty Modern Warfare 4 in Early Access on August 21, Open Beta on August 27 XBOX July update adds support for longer gamertags, new library customization options, and more XBOX teams with Meta to bring Game Pass Starter Edition to Meta Horizon+ subscribers Valve says the component crisis dogging Steam Machine pricing will only get worse Tips and picks Tip of the week: Windows Package Manager for bulk app installs App (game) of the week: Doom: The Dark Ages RunAs Radio this week: Security Begins at Procurement with Jessie Schofer Brown liquor pick of the week: Loup River Nebraska Straight Bourbon Whiskey Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: arcticwolf.com/trends zscaler.com/security cirasync.com/Windows

This week, Jason Howell and Jeff Jarvis unpack a wild security disclosure from OpenAI and Hugging Face, where GPT-5.6 Sol found a zero-day vulnerability, broke out of its sandbox, and hacked Hugging Face's servers to steal the answer key to its own evaluation. They also dig into Moonshot's Kimi K3, the free Chinese model that got so popular it maxed out its own GPU capacity and sent Washington into a policy spiral over whether to panic or compete.Also in this episode: Google's new Gemini Flash models and the still-missing Gemini 3.5 Pro, publishers like USA Today and People Inc. weighing whether to block Google search entirely, Netflix revealing 300 titles used generative AI this year, AI companies buying and destroying millions of old books for training data, Samsung's AI glasses, the Suno hack, 1Password letting Claude log in for you, Thinking Machines' Inkling model, and NotebookLM becoming Gemini Notebook. New episodes every Wednesday at aiinside.show. Note: Time codes subject to change depending on dynamic ad insertion by the distributor. CHAPTERS: 0:00 - Start 0:03:36 - OpenAI says Hugging Face breach caused by one of its models 0:13:42 - Kimi K3: Open Frontier Intelligence 0:16:34 - Moonshot's Kimi AI Model Sets Off Anxiety in the US - Bloomberg 0:20:41 - Top Pentagon official blasts OpenAI's Dean Ball 0:29:36 - US, China to hold AI talks in September, sources say 0:35:15 - Google Ships New Gemini Flash Models, But Pro Is Still Missing 0:35:31 - Google Gemini Launch Delayed as Tech Falls Short of Internal Goals 0:54:03 - Netflix says around 300 titles used generative AI 0:54:27 - Netflix Co-CEO Explains How Gen-AI Was Used in 300 Different Titles: ‘We Believe It Is Going to Enhance Their Abilities' 0:56:45 - AI Companies Are Buying Tons of Old Books Because They're Free of AI Slop 1:01:44 - A closer look at the upcoming Samsung AI glasses 1:03:53 - Hack Reveals Suno AI Music Generator Scraped YouTube, Deezer, and Genius 1:06:06 - 1Password now lets Claude sign in to websites without seeing your passwords 1:07:25 - Thinking Machines: Inkling: Our open-weights model 1:08:48 - Google is renaming NotebookLM to Gemini Notebook Hosts: Jason Howell and Jeff Jarvis Download and subscribe to AI Inside in audio and video: https://aiinside.show/  Support the podcast on Patreon for special perks: https://www.patreon.com/aiinsideshow. You'll get ad-free episodes, members-only Discord, T-shirts and stickers you love, and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Learn more about your ad choices. Visit megaphone.fm/adchoices

As the tech world catches its breath from AI whiplash and retro gaming returns to the PC, Microsoft quietly kills underused tools and tries to double down on what actually works. This episode blends the excitement of tech and entertainment (like Xbox classics landing on Windows 11) with a poignant look back at the life and legacy of legendary columnist John C. Dvorak. Windows Five new Insider builds released on Monday; the new Start menu comes to the Beta channel Experimental (26H1) a day later with no interesting new features The Whiteboard app is apparently being retired AI Microsoft expands partnership with Mistral to improve EU AI infrastructure Copilot for consumers is losing Podcasts and Deep research features soon U.S. judge approves Anthropic $1.5 billion settlement with authors it stole from 1Password partners with Anthropic to make AI access to password-protected websites secure Google renames NotebookLM to Gemini Notebook Google's next big AI models are delayed, but we got Gemini 3.6 Flash, Flash-Lite, and 3.5 Flash Cyber to tide us over XBOX and gaming Microsoft brings XBOX Backward Compatibility to PC!! Here comes Halo: Campaign Evolved, along with more Game Pass titles for the end of July Bethesda announces Fallout 3 and New Vegas remasters, and Fallout 5 is entering pre-production Call of Duty Modern Warfare 4 in Early Access on August 21, Open Beta on August 27 XBOX July update adds support for longer gamertags, new library customization options, and more XBOX teams with Meta to bring Game Pass Starter Edition to Meta Horizon+ subscribers Valve says the component crisis dogging Steam Machine pricing will only get worse Tips and picks Tip of the week: Windows Package Manager for bulk app installs App (game) of the week: Doom: The Dark Ages RunAs Radio this week: Security Begins at Procurement with Jessie Schofer Brown liquor pick of the week: Loup River Nebraska Straight Bourbon Whiskey Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: arcticwolf.com/trends zscaler.com/security cirasync.com/Windows

Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends

Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends

Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends

Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends

Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends

Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends

Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends

Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion and negotiations on the dark side. The "bone crushing" didn't happen this month. Revisiting and inspecting July's Patch Tuesday. A widespread and worrisome flaw in OpenSSL. Claude can now access your 1Password credentials. Bitwarden is aware that we need whole new security. The day ends in "y" so a new prompt injection attack. A true (and rare) core Wordpress emergency update. Lots of interesting listener feedback. And new ways AI is being used by bad guys Show Notes - https://www.grc.com/sn/SN-1088-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT zscaler.com/security adaptivesecurity.com joindeleteme.com/twit-biz arcticwolf.com/trends

AI Troopers — mi nueva comunidad donde cada semana implementamos inteligencia artificial juntos, en vivo, para que vendas más, automatices procesos y bajes tus costos. Únete aquí

In this episode of Business Brain, we get into when to stop using chat and move to Cowork. Chat is a great place to start — it’s just not where we should live. Dave’s signals: more than five back-and-forths, or constantly pasting in screenshots, log files, and PDFs. That’s the tell. Point Cowork at the folder instead and stop copying and pasting. His trick is to ask the chat directly whether it’s time to move, and to have it write the handoff prompt for the Cowork session, since Cowork doesn’t inherit the full context. Flip the default: assume you’re going to Cowork, then convince yourself why you should stay in chat. We also untangle chats vs. projects vs. Cowork vs. Claude Code — and the one real reason to stay put, which is cloud sync across devices. Then Dave walks us through a wild experiment: handing $10K of found money to Claude to run as a 90-day trading portfolio. He planned it in chat with Fable, executed in Cowork with Opus, and let it pick platforms with API and MCP access — Kraken for crypto, Alpaca for securities. It insisted on a seven-day paper trading run first, keys live in a 1Password vault instead of the session, and there’s a kill switch on his phone. No options, so the floor is zero. Whatever happens, it’s tuition. Real story: Claude didn’t earn the money — it just got him far enough through the process to actually collect it. Get out of the chat, and keep living that Charmed Life. 00:00:00 Business Brain – The Entrepreneurs' Podcast #771 for Casual FridAI, July 17, 2026 00:00:15 July 17th: National Tattoo Day 00:01:26 Defaulting to Claude Cowork instead of Claude Chat 00:10:26 SPONSOR: FanVue. Are you ready to start your own creator journey and make it big? Visit https://www.fanvue.com/ today and launch your career! 00:11:43 SPONSOR: Shopify: Own your customer relationships. Own your revenue. Start with a free trial at Shopify.com/BusinessBrain. 00:12:58 Letting Claude invest the money it earned 00:20:06 Business Brain 771 Outtro This Episode's Big Takeway: Get out of the chat! Check out Business Brain Blueprints Tell Your Friends! Business Blueprints Review Business Brain Subscribe to the show feedback@businessbrain.show Call/Text: (567) 274-6977 X/Twitter: @ShannonJean & @DaveHamilton, & @BizBrainShow LinkedIn: Shannon Jean, Dave Hamilton, & Business Brain Facebook: Dave Hamilton, Shannon Jean, & Business Brain The post FridAI – Cowork vs Chat and $10k to Claude – Business Brain 771 appeared first on Business Brain - The Entrepreneurs' Podcast.

ClickLock stealer uses kill loops to force password entry TELEPUZ malware uses ClickFix to steal data and run commands 1Password's new Agentic Mode lets Claude log into accounts Notes: https://cisoseries.com/cybersecurity-news-clicklocks-kill-loops-telepuz-clickfix-tricks-1passwords-agentic-login/ Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind every major technology decision. ThreatLocker helps organizations take a Zero Trust approach to that challenge—giving them greater control over what can execute, what can access their environment, and what users and applications are allowed to do. That's why ThreatLocker is proud to support Cyber Security Headlines. Because security works best when innovation and control move together.

Germany's media regulator says Google is a publisher It's a real twist to longstanding convention. If it's generating AI summaries, then it's creating content, and that makes it a publisher, and with that comes all the liability of being a publisher too. In the USA, search engines and platforms get immunity if they are hosting other people's content. Facebook isn't in control of what people post. Google is just showing search results. Well, that is until now. And if they're showing that AI generated output front and centre on search, then they need to be responsible for its accuracy. Google plans to appeal. They said in a statement that AI summaries enhance the search experience – “They help users discover new content and ⁠ask follow-up questions." Your AI agent can now use your passwords... securely 1Password has a new plugin for Claude which allows the AI agent to login as you more easily. It's purpose built so that the data is never saved to Claude's memory or exposed to the model. After autofill, 1Password even does a double check that nothing was copied. It's just one of the new products they're building to make handing over your access to an agent more seamless but also secure. For example, when an agent takes control of your browser, the 1Password autofill extension is disabled. And which is the most valuable company in the world...? That changed today (but will it stay that way by close?) – Apple overtaking Nvidia, topping out at $4.9 trillion dollars. LISTEN ABOVE See omnystudio.com/listener for privacy information.

Vital Signals introduced a $399 smart ring that is meant to replace Blood Pressure Cuffs without a subscription fee attached, and 1Password says it is letting Claude tap into its password vault and 2-factor codes safely.Starring Jason Howell and Huyen Tue DaoShow notes found here. Hosted on Acast. See acast.com/privacy for more information.

En este episodio del iSenaCode Live, analizamos las noticias más importantes de la semana en el mundo Apple y la inteligencia artificial. Apple prepara una auténtica revolución con la llegada de la IA local al iPhone, las primeras pruebas con Qwen en el futuro iPhone 17 Pro, los nuevos rumores del iPad mini con pantalla OLED y las filtraciones del esperado iPhone Ultra, el primer plegable de la compañía.También debatimos sobre el sorprendente lanzamiento de Codex Micro, el primer hardware de OpenAI, el misterioso altavoz inteligente con ChatGPT previsto para 2027, la demanda de Apple contra OpenAI por el supuesto robo de secretos comerciales y la alianza entre Apple e Intel para fabricar chips en Arizona.Además repasamos cómo Claude ya puede utilizar tus credenciales de 1Password, la ofensiva de la Unión Europea contra el scroll infinito de Instagram y Facebook, el récord histórico de Apple TV+ con 87 nominaciones a los Premios Emmy 2026 y todas las implicaciones que estas noticias tendrán para el futuro del ecosistema Apple.Si te apasionan los iPhone, Apple Intelligence, la inteligencia artificial, los Mac, los iPad y la actualidad tecnológica, este episodio viene cargado de análisis, opinión y debate.

-Apple said to have been in talks with semiconductor makers and bankers about possible acquisitions in order to bolster its servers. -1Password just announced 1Password for Claude, a new feature on its browser extension that lets Claude use your credentials, but blocks your private info from reaching the model, its memory or Anthropic's systems. -The Oversight Board published a lengthy report about how leading AI models could be restricting their users' free expression. Learn more about your ad choices. Visit podcastchoices.com/adchoices

The hosts discuss several network and security topics, starting with UniFi's new "Device Supervisor" feature under Power and Resiliency to monitor device heartbeat and automatically recover silent devices, plus UniFi's move from UniFi Server to UniFi OS Server that may require a migration and re-adoption, pushing remaining sites off a Mac mini to cloud management. They revisit ethernet surge protection and grounding for outdoor cameras and consider alternatives like rack grounding, DIN rails, grounding rods, or using a sacrificial outdoor switch with fiber uplink. They mention Speedify for bonding multiple cellular/Wi‑Fi connections. The conversation shifts to email security: Microsoft's "impossible travel" detection and API reporting versus Google's weaker reporting, alongside odd Google reauthentication/password-change loops and MFA fatigue leading to a Google account breach. They cover deploying Claude Enterprise in healthcare with BAA needs and using Microsoft Purview/Defender to block pasting PHI into Claude, then discuss risks of fake password prompts, password managers (1Password vs LastPass), and end-user security training.

Your cybersecurity tools were built for people: a login, a single sign-on, an email address. But the AI agents now showing up inside your company don't work that way, and most of them slip right past your controls. So how do you find the "Shadow AI" already running in your business, and get a handle on it? Let's find out with our guest Nancy Wang, Chief Technology Officer at 1Password, who works at the front edge of how machines get access to systems. Your hosts are Kip Boyle, CISO with Cyber Risk Opportunities, and Jake Bernstein, Partner with K&L Gates.   LinkedIn profile profile: https://www.linkedin.com/in/wangnancy/   1Password: https://1password.com/

Fact or fiction?

PHP Podcast – July 2, 2026 Hosts: Eric Van Johnson & John Congdon Eric’s new laptop won’t share its screen. John lost a fight with a leaf blower. PHP 8.6 alpha dropped. 100+ people showed up to make PHP seem cool again. Normal show. Eric’s Fresh Install and the Screen That Wouldn’t Share Eric has been wrestling with connectivity drops for weeks, and this week he took drastic action: a fresh install on an older MacBook Pro with almost nothing on it. He installed exactly three apps — 1Password, Ghosty, and Tailscale — and is running Discord and Slack through Safari to minimize variables. The irony is immediate: the new setup can’t share its screen during the show, something that was a central part of what they planned to cover. He hits every macOS security dialog in real time, can never quite get there, and eventually gives up and goes verbal. The fresh-install theory is that one of his previously installed apps was causing his streaming dropouts. Whether it worked is TBD, but at least he stayed connected. PHP Architect July Issue — Published Live John published this month’s magazine live on the show — walked through the admin steps in real time, which Eric found appropriately chaotic. The monster feature article this month is “Building Secure REST APIs for Healthcare Applications with PHP and Laravel,” running 21–22 pages, making it likely the longest single feature they’ve ever run without splitting it across issues. The page count is mostly because of the volume of code samples. It will not be the free article of the month, which Eric admitted immediately creates extra work for John. Eric also noticed for the first time that Edward Bernard has an ad running in the magazine (Wizard’s Lens, his book) — which has apparently been there for a while. John’s Week: Leaf Blower, Racquetball, and AI Pull Requests John started the week by getting hit in the eyebrow with a leaf blower. The full story: his wife wanted the leaves blown off the top of the pergola, he figured out he could push the leaf blower up there and let gravity return it to his hand like a boomerang, it worked three times, and on the fourth attempt it went straight to the eyebrow. He’s on enough medications that he bruises instantly. He then played racquetball, found himself in an extended session with an 80-year-old and a much better 35-year-old, took a hard ball to the back of the leg, and is expecting to regret it tomorrow. On the development side: he’s still reviewing pull requests where roughly 80% of the code is written by Claude and submitted by non-developers. He talked to one of the authors about it, and the author’s response was that he does learn from John’s feedback — he reads it, tells Claude about it, and asks Claude not to do it again. John is… accepting of this. Laravel Verbs, Eloquent Hooks, and a Client Project That May Be Back A previous client project — originally built in Laravel 7, heavily involving event sourcing — may be reviving. Eric spent the last few weeks using Claude to walk the application from Laravel 7 to Laravel 13, then tackle the event sourcing library migration. The original library is no longer maintained, so Eric and Claude moved everything to Laravel Verbs. Eric has a nuanced view of Verbs: it’s great for developers new to event sourcing because it’s approachable, but gets a little murky when you start talking about projections in Laravel terms versus event sourcing terms. To police CRUD operations and ensure nothing bypasses Verbs, Claude suggested hooking into Eloquent’s lifecycle callbacks — so whenever any CRUD action is called on a model, it first fires through Verbs. Eric loved this; John had reservations, arguing it inverts the paradigm (the change causes the event rather than the event causing the change). Eric’s counterpoint: the Eloquent hook fires before the model touches the database, so Verbs still logs first, and it solves the very real problem of a developer seeing a venues table and just using the model directly. Holly, watching in the Discord chat, noted that Verbs calls the aggregate root a “state” rather than using the standard event sourcing term “root” — which is exactly the kind of terminology drift Eric finds frustrating about Verbs, even as he thinks it’s the right tool for this project. The client meeting itself went well; their CFO grasped event sourcing immediately because it maps perfectly to accounting ledgers, where every entry is permanent and any correction requires its own entry and explanation. Laracon and NativePHP Mobile Laracon is July 28–29, and Eric is going. NativePHP Mobile is holding a one-day mini-conference immediately after on July 30 — “Vibes with Native PHP” — for an additional $129. Eric is likely not staying for it due to flight constraints, but he used it as an excuse to hype NativePHP mobile again. He’s been talking about this project for a while and still hasn’t shipped a real app with it himself, which frustrates him. His pitch: if you’re a PHP developer who has ever wanted to do mobile development and found the barrier too steep, this is the moment. NativePHP is pushing more native functionality on both iOS and Android, the license fees are gone, and the project is in its second wave. There is also an ongoing campaign — which Eric is actively encouraging in this episode — to pressure Holly Schilling into building the PHP Tek conference app using NativePHP Mobile. Surfaces RFC & Friends RFC Holly’s Surfaces RFC came up briefly — Eric wanted to discuss it more but they ran out of time, mostly because Holly was busy in the Discord getting called out for doing a conference app for Longhorn PHP. The short version: the Friends RFC (in discussion) allows a class to explicitly grant another class access to its private properties without requiring inheritance — the canonical use case is a builder that needs to set private fields on an object without requiring setters, which would make those fields effectively public. Holly’s Surfaces RFC extends the idea to roles rather than just specific classes. Eric and John agree they need to have Holly on as a guest to actually discuss it properly — a plan they’ve now made twice. Chris Miller Submits a PR to PHP Core Their team member Chris Miller found a bug in the PHP JIT compiler: code that goes through the JIT was returning a different result than the same code without the JIT, specifically with the bitwise NOT operator. He opened an issue, looked at the C code, figured out the cause, and submitted a pull request to fix it. The same fix already existed for the bitwise OR and XOR operators — this PR adds the bitwise NOT. Eric loves this kind of story: a developer using PHP, noticing something odd, going all the way to the C source to understand why, and contributing a fix rather than just filing a bug. There’s a known separate JIT issue in PHP 8.5 tracing mode affecting background workers (not the main application); Eric upgraded his client’s app to 8.5 and ran into it, and believes it’s addressed in 8.5.7. PHP 8.6.0 Alpha 1 — Released Today Joe Ferguson — their friend, PHP community member, and occasional target of friendly on-air ribbing — released PHP 8.6.0 Alpha 1 today. Joe is one of the release managers for PHP 8.6, with Daniel Scherzer serving as the senior release manager (the PHP Foundation recently updated the title from “mentor”). Eric and John congratulated Joe warmly, mostly by pointing out that Chris Miller is smarter than Joe. Joe was apparently on the PHP Foundation Ambassador call as well. PHP Tek 2027: Hotel + Conference Bundle PHP Tek 2027 is doing something new this year: an optional bundle where you can buy your conference ticket and hotel stay together. Two options — three nights (Mon–Wed) or four nights (Mon–Thu). The pitch: one all-in number is easier to take to a manager or a CFO than itemizing conference pass, lunches, breakfasts, and lodging separately. Eric and John are explicit that they make less money doing it this way; the benefit is that your room is booked immediately when you pay, so you won’t forget and find rooms sold out later. Breakfast in the room is free for the first person, half price for a second person in the same room. Dinners and travel are still on you. CFPs: Find-a-Conference and Longhorn PHP Someone in the community pointed Eric to a website aggregating call-for-papers listings across conferences — not PHP-specific, and not geographically locked to the US. Useful if you’re a speaker (or want to be one) and want to see where to submit. Eric mentioned it as a resource for PHP community members to speak at non-PHP conferences, which the community generally doesn’t do enough. Specifically: Longhorn PHP’s CFP is open until July 10 at cfp.longhornphp.com. That’s one week from now as of this recording. PHP Foundation Ambassador Program Eric joined the PHP Foundation’s new Ambassador Program and attended its first meeting. He expected a modest turnout — the meeting had 114 people in the call. Three of them were from PHP Architect. Elizabeth Barron organized it and was apparently worried nobody would show up; Eric was not worried. The program’s focus is getting the word out about PHP to new developers and making the language feel more approachable — something the community has been trying to do for years without a coordinating structure. There was one slide. They talked about the slide for the whole meeting. There are multiple programs under the Foundation you can sign up for (including security-focused groups); you sign up via a Google Form, you don’t have to speak in the meetings, and it’s open to anyone regardless of PHP skill level. Eric’s one note to Elizabeth: please don’t make the coordination mechanism a mailing list. AI Note Takers — The Open Meeting Debate Eric’s AI note taker was running in the Foundation meeting, and some attendees objected. Eric is a defender of AI note takers: he gets summaries, can reference meetings later, and gets a Monday morning digest of the previous week. His position is that banning agents from an open, public meeting doesn’t prevent recording — it just means the notes disappear into the ether. For genuinely sensitive work — he describes a government-adjacent client where developers need background checks and fingerprints — he’s fully supportive of restrictions and will pull his agent without complaint. For an open PHP Foundation meeting, he finds the concern disproportionate, and says if agents are banned outright, he’d stop participating because he doesn’t have the bandwidth to rely on someone else’s notes. He also acknowledged that the irony was not lost on him: the same AI capability that makes voice recording feel threatening also makes it trivially easy to deepfake a voice regardless of whether an agent was in the room. Ethical Ads Tessa mentioned a developer-focused advertising platform called Ethical Ads on a recent Live and Kicking episode. Eric found it interesting enough to flag on the show — it’s an ad network specifically for developer-focused content that emphasizes privacy and non-tracking approaches. Eric and John are always trying to figure out better ways to promote PHP Architect, the magazine, and PHP Tek; this may be worth exploring as an alternative to standard ad networks that don’t align well with developer sensibilities. Links from the show: OurCVEs.com — Track your security posture across GitHub repos and servers (created by Artisan Build) Laravel Magazine — Under PHP Architect PHP Tek 2027 — Conference + hotel bundle available (phptek.io) Longhorn PHP CFP — Open until July 10 Ethical Ads — Developer-focused advertising PHP Tech TV — PHP Tek 2026 talks PHP Architect Discord Surfaces RFC · GitHub JIT: Inline ZEND_BW_NOT by millerphp · Pull Request #22560 · php/php-src · GitHub All active call for papers – CfP Watch The PHP Ambassador Program is Open — The PHP Foundation — Supporting, Advancing, and Developing the PHP Language The PHP Foundation Special Interest Groups General Interest Form Host: Eric Van Johnson X: @shocm Mastodon: @eric@phparch.social Bluesky: @ericvanjohnson.bsky.social PHPArch.me: @eric John Congdon X: @johncongdon Mastodon: @john@phparch.social Bluesky: @johncongdon.bsky.social PHPArch.me: @john Streams: Youtube Channel Twitch Connect & Hire PHP Architect Website Twitter/X Mastodon Hire PHP Developers Looking to hire PHP developers? Email support@phparch.com – Joe and the team are available for consulting, infrastructure work, Ansible playbooks, and code review. Partner This podcast is made a little better thanks to our partners Displace Infrastructure Management, Simplified Automate Kubernetes deployments across any cloud provider or bare metal with a single command. Deploy, manage, and scale your infrastructure with ease. https://displace.tech/ OurCVEs Your security posture, on autopilot with OurCVEs CodeRabbit Cut code review time & bugs in half instantly with CodeRabbit. Music Provided by Epidemic Sound https://www.epidemicsound.com/ Join Us Live Next Week Youtube Channel Got feedback? Join us on Discord at discord.phparch.com The post The PHP Podcast 2026.07.02 appeared first on PHP Architect.

You asked, we answered!

Cyber leaders defend Anthropic's banned models FBI disrupts massive phishing service 1Password acquires Apono Get the show notes here: https://cisoseries.com/cybersecurity-news-anthropic-models-defended-massive-phishing-service-shuttered-1password-acquires-apono/ Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind every major technology decision. ThreatLocker helps organizations take a Zero Trust approach to that challenge—giving them greater control over what can execute, what can access their environment, and what users and applications are allowed to do. That's why ThreatLocker is proud to support Cyber Security Headlines. Because security works best when innovation and control move together.  

1Password could be one step closer to going public after snapping up access-management startup Apono, fuelling fresh IPO chatter. Then, we dig into why credit card companies are racing to own your Friday night dinner plans, as Amex adds TheFork to its growing reservations empire. Plus Ottawa's talks with Chinese EV makers, Fox buying Roku, opioid deaths dropping, and more.The Peak Daily is produced in partnership with reframevid.com

Anyone can build software with AI now, and millions of people are giving it a try. But when AI can spin up an app in minutes, are security risks slipping through the cracks?

Passwords were built for a different era of the internet. It's time to move past shared secrets to close your organization's largest threat vector for good.Traditional passwords and legacy Multi-Factor Authentication (MFA) are no longer enough to protect your business. Automated, scaling phishing toolkits easily intercept shared secrets, leaving small and medium businesses highly vulnerable to credential breaches.In this episode, Jen sits down with Nishant Kaushik, Chief Technology Officer at the FIDO Alliance, to translate complex cryptographic standards into an actionable, resource-light deployment plan. Learn how to transition away from legacy authentication and close the hidden operational loopholes that hackers actively exploit.What You Will Learn:The Flaw in Basic MFA: Why SMS codes and standard one-time passwords (OTPs) are failing, and what true "phishing-resistant" security means.The Account Recovery Trap: Why a weak "Forgot Password" workflow accidentally gives hackers their primary attack vector back—and how to fix it.The Bottom-Line Benefit: How moving to passkeys drastically reduces internal IT helpdesk tickets, manual password resets, and overhead costs.Right-Sizing Your Passkey Deployment: How to easily segment your workforce strategy:Standard Users: Synced passkeys via platform credential managers (Apple, Google, 1Password, Bitwarden).Privileged Users: Dedicated hardware keys (YubiKeys) for root admins and high-sensitivity infrastructure.The 1-Week Action Plan: How to leverage the identity infrastructure you already own (like Google Workspace or Microsoft Entra ID) to deploy passkeys today.Resources Mentioned:Learn more about modern identity standards: FIDO Alliance WebsiteReview baseline federal security recommendations: CISA Guidance on Phishing-Resistant MFADiscover SecurityMetrics compliance resources: SecurityMetrics Official SiteThreat Intelligence Data: Read the data behind credential exploitation in the latest Verizon Data Breach Investigations Report (DBIR). Federal Passkey Standards: Review the updated identity and passkey frameworks via the NIST SP 800-63 Digital Identity Guidelines. Enterprise Identity Platforms: Learn how modern stacks integrate passwordless via Okta Verify and Microsoft Entra ID. About the Guest: Nishant Kaushik is the Chief Technology Officer at the FIDO Alliance, bringing over 25 years of leadership in digital identity and access management (IAM). He holds nine patents, frequently serves on the advisory committees for the RSA Conference and Identiverse, and is a founding member of IDPro.A note from Jen: We built Practical Cybersecurity because we were tired of the fear-mongering in this industry. Security shouldn't be a secret club.If you're trying to figure out PCI compliance or need a pen test, my team at SecurityMetrics can help you out: https://www.securitymetrics.com/contact/lets-get-you-to-the-right-place But if you just want to learn how to protect yourself for free, start here:  https://academy.securitymetrics.com/ 

Your iPhone might be running hot and draining fast — and it’s not just you. Dave and Pilot Pete break down the battery chaos introduced by iOS 26.5, which brought overheating, accelerated drain, and even blocked wired charging on iPhone 17 and Air models. The fix that’s working for most people: disable iCloud Keychain first, run Reset All Settings, then carefully re-enable iCloud sync — otherwise you’ll nuke your Wi-Fi passwords across every device. iOS 26.5.1 is out and should help, but until you’ve updated, your electrons deserve better. You’ll also learn why Apple ID passkeys are locked to Apple’s own keychain with no known path to third-party managers like 1Password or Keeper, and why editing a contact on a modern Mac can somehow peg every CPU core — in 2026, no less. From there, Dave and Pete tackle the full listener mailbag: how to rescue missing contact names from Messages, the right way to boot a MacBook with a broken display into clamshell mode so it actually uses the external monitor, and a deep dive on 5K vs. 4K displays where Dave argues your eyes may not care as much as the pixel-per-inch math suggests. You’ll get smart ideas for repurposing a 2015 iPad Pro that can’t run modern apps — including Dave’s Claude Code-built weather dashboard running off a headless iMac as a web interface. A crashing 2021 MacBook Pro turns out to have been felled by a single bad SD card, and the lesson is golden: feed your crash reports to an LLM and let it do the digging. And Don’t Get Caught with outdated OpenAI macOS apps — update ChatGPT, Codex, Atlas, and Codex CLI before June 12th to stay ahead of a code-signing rotation triggered by a compromised open-source library. 00:00:00 Mac Geek Gab 1145 for Monday, June 8th, 2026 June 8th: National Best Friends Day MGG Monthly Giveaway – Win a license to SaneBox Quick Tips 00:00:01 Dan-QT-Multi-select on iPhone with a quick drag 00:04:31 Tim-QT-Have iOS 26.5 Battery Drain? Reset All Settings, but be careful! 00:13:32 Kent-QT-1144-Collapse stacks by clicking the down-facing carat in the menu 00:14:15 Mark-QT-Match Frame Rate on your Apple TV for smoother experiences 00:17:58 What are the differences between refresh rates and frame rates and…why? 00:21:09 KiwiGraham-QT-Apple Account Passkeys vs. Third Party Password Apps Sponsors 00:23:09 SPONSOR: Keeper. Right now, Keeper is offering our listeners 60% off personal and family plans at https://Keepersecurity.com/MGG. This offer is only for podcast listeners! 00:24:50 SPONSOR: Helix Sleep makes premium mattresses and bedding that are customized to fit your personal needs, and conveniently shipped to your door. Go to https://helixsleep.com/MGG for 20% Off Sitewide. 00:26:23 SPONSOR: NordLayer Browser. The business browser built for how modern work actually happens — giving IT the visibility and control to secure SaaS, stop phishing, and prevent data leaks right at the source. Your Questions Answered and Tips Shared! 00:28:09 VaShaun-How can I restore lost Contacts on my Mac? 00:37:36 Si-What to do with an 11-year-old iPad? Claude Code 00:46:40 Michael-Why do we have to pull-to-refresh for updates? 00:50:04 Blake-1144-Damaged displays, external monitors, and MonitorControl 00:55:48 Joe & Michael-CSF-1144–RetinaDesk.com for reviews of 5K and 6K monitors BenQ MA270UP 27” 4K Display Reviews 01:02:50 Hog fan and Cowboy fan-MGG Review–Favorite Tech podcast Don't Get Caught 01:04:14 Father John-DGC-Investigate those crash reports before you replace your Mac 01:09:26 Update your ChatGPT Apps ChatGPT Desktop Codex App Codex CLI Atlas 01:11:06 Andy-DGC-When Troubleshooting, Don’t Get Caught asking the wrong questions or assuming the wrong facts 01:19:36 MGG 1145 Outtro MGG Monthly Giveaway Bandwidth Provided by CacheFly Pilot Pete's Aviation Podcast: So There I Was (for Aviation Enthusiasts) The Debut Film Podcast – Adam's new podcast! Dave's Business Brain (for Entrepreneurs) and Gig Gab (for Working Musicians) Podcasts MGG Merch is Available! Mac Geek Gab iOS app Mac Geek Gab YouTube Page Mac Geek Gab Live Calendar This Week's MGG Premium Contributors MGG Apple Podcasts Reviews feedback@macgeekgab.com 224-888-GEEK Active MGG Sponsors and Coupon Codes List BackBeat Media Podcast Network

Abi Noda is joined live at DX Annual by three engineering leaders shaping AI adoption at scale: Tim Bozarth, Corporate Vice President in Microsoft's CoreAI division; Nancy Wang, CTO of 1Password; and Taroon Mandhana, CTO of AI and Teamwork at Atlassian. Together, they discuss how AI is changing engineering organizations, from team structures and planning cycles to hiring, governance, and measurement.The panel explores how the profile of a great engineer is evolving, why smaller cross-functional teams are becoming more effective, and what happens when product managers, designers, and customer support teams start contributing code. They also share why they are encouraging AI adoption through enablement, training, and local champions rather than mandates, and how AI is shifting more of the software development lifecycle toward planning and validation.Finally, they discuss where human judgment remains essential, how to measure adoption and manage token usage, and how to connect AI investments to business outcomes while preserving room for experimentation and learning.Where to find Nancy Wang: • LinkedIn: https://www.linkedin.com/in/wangnancyWhere to find Taroon Mandhana:• LinkedIn: https://www.linkedin.com/in/taroonmWhere to find Tim Bozarth: • LinkedIn: https://www.linkedin.com/in/tbozarthWhere to find Abi Noda:• LinkedIn: https://www.linkedin.com/in/abinoda In this episode, we cover:(00:00) Intro(01:08) Introducing the panelists(02:16) AI's impact on engineering team structures and planning cycles(05:00) How the role of the engineer is changing and what makes a great engineer(10:11) The opportunities and challenges of non-engineers writing code(15:26) Encouraging AI adoption without mandating it(21:25) What an AI-native SDLC looks like and why human judgment still matters(30:56) Measuring AI adoption, token usage, and ROI(37:06) How to tie AI investments to business outcomesReferenced:• DX Core 4 Productivity Framework• Microsoft • 1Password• Atlassian• Jira• Confluence• Loom• Rovo • Amazon Operating Cadence - Working Backwards

Traveling soon? ✈️

Send us Fan MailWatch the video!https://youtu.be/eP2iFZlU5y0In the News blog post for May 22, 2026https://www.iphonejd.com/iphone_jd/2026/05/in-the-news829.html 00:00 WWDC 2026 Keynote - June 808:23 Global Accessibility Awareness Day16:57 A Deluge of Tips22:09 The Face of the App Store24:19 Don't Pass on Cryptography33:33 Micro Brew36:32 Where Y'at? Segment39:07 Fútbol is [Immersive] Life!45:27 Selling Apples51:08 Brett's iTip: Turn On (or Off) Audio Zoom55:21 Jeff's iTip: Using AI to Interrogate DocumentsIntroducing the 2026 Apple Design Award finalistsApple unveils new accessibility features, and updates powered by Apple IntelligenceJuli Clover | MacRumors: 10 Useful iPhone Tips and Tricks You Might Not Know AboutTim Hardwick | MacRumors: Apple Watch: 15 Tips Every Owner Needs to KnowEric Griffith | PC Mag: Think You Know Your iPhone? Check Out These 109 Hidden TricksDavid Sparks | MacSparky: What Apple Still Gets Wrong About Watch Faces1Password: The architectural reason 1Password can't read your vault dataD. Griffin Jones | Cult of Mac: How to browse the web on your Apple Watch with μBrowserOliver Haslam | Apple Insider: iPhone Crash Detection saved the day after driver's 330ft mountain dropJason Snell | Six Colors: Apple takes soccer immersive with Real MadridLuke Dormehl | Cult of Mac: Today in Apple history: Apple reinvents the computer storeAll About Steve Jobs: Unveiling Apple's First Retail StoreBrett's iTip: Turn on (or off) Audio Zoomhttps://www.gearpatrol.com/tech/iphone-camera-audio-zoom/ https://www.igeeksblog.com/iphone-zoom-ruins-video-audio-turn-this-setting-off Jeff's AI: Using AI to Interrogate Documentshttps://www.theverge.com/tech/932454/google-io-2026-news-announcements Support the showBrett Burney from http://www.appsinlaw.comJeff Richardson from http://www.iphonejd.com

In our World Password Day Special, we're digging into credentials, identity, and authentication  — and where security is  heading next.

Is your organization prepared for an autonomous AI bot? Roger Grimes joins Jen Stone to discuss the shifting landscape of cybersecurity. This episode moves past the hype to look at the hard data: AI scams are yielding 4.5x more value for attackers, and traditional MFA is no longer enough to stop them.In this episode, we translate complex "vulnerability fatigue" into a clear, two-step priority list. We strip away the jargon to show you exactly how autonomous bots are bypassing firewalls by targeting the human element. Key Takeaways:Focus on the "Big Two": Social engineering and unpatched software account for nearly 90% of business risk.Phishing Resistance: Why you should move toward YubiKeys or passkeys to avoid "man-in-the-middle" code interception.Patch Management: Why you should ignore "shiny" new vulnerabilities and follow the CISA Known Exploited Vulnerabilities catalog.The Negotiator's Trap: What happens when a CEO claims they have backups, but the hackers have already deleted them.Featured Resources:CISA Known Exploited Vulnerabilities (KEV) Catalog: Use this to prioritize patching based on real-world attacker behavior. Phishing-Resistant MFA:YubiKey: A hardware security key requiring physical touch to prevent remote account takeovers. FIDO Passkeys: A cryptographically secure alternative to SMS codes. Password Management: Tools like 1Password or LastPass are essential for creating long, random, and unique credentials that AI can't easily crack. The 3-2-1 Backup Rule: Maintain three copies of data, on two different media types, with one copy kept strictly offline. Connect with Roger GrimesKnowBe4: Access security awareness training and social engineering defense resources at knowbe4.com. Free Book Offer: Roger is offering a free PDF copy of his latest book, How AI and Quantum Impact Cyber Threats and Defenses, to all listeners. Email him directly at rogerg@knowbe4.com. A note from Jen: We built Practical Cybersecurity because we were tired of the fear-mongering in this industry. Security shouldn't be a secret club.If you're trying to figure out PCI compliance or need a pen test, my team at SecurityMetrics can help you out: https://www.securitymetrics.com/contact/lets-get-you-to-the-right-place But if you just want to learn how to protect yourself for free, start here:  https://academy.securitymetrics.com/ 

The Business Tools That Actually Keep Your VO Career Running One of the biggest misconceptions in voiceover is that success comes from talent plus a good booth. And yes, performance matters. Audio quality matters. But what actually creates consistency in this career is operational support. It's the systems you build that allow you to track opportunities, manage relationships, understand your income, organize your marketing, and reduce decision fatigue. Because decision fatigue is real, and it will stop you in your tracks and you will end up doing nothing. So today I want to walk you through some simple, accessible tools that you can use right now. Even if you don't have a team. Even if you don't have fancy software. Even if you feel completely disorganized. These are the tools that turn creative chaos into professional clarity. Excel or Google Sheets I know. A spreadsheet is not anyone's favorite thing. Nobody got into acting because they love spreadsheets. But spreadsheets give you something emotional actors often lack, which is objective data. If you don't have data, how will you know what's working and what isn't? How will you know how much time to keep spending on something or when to let it go or if you're underpricing yourself in a certain category? You can track auditions, bookings, client names, rates, follow-ups, usage conflicts, marketing outreach. When you track patterns you stop guessing. And we cannot have a successful career if we are constantly guessing. A spreadsheet is not restrictive. It's clarifying. Canva Canva is essentially the modern actor's design department. I know nothing about design and luckily Canva is there for social media graphics, pitch decks, rate sheets, lead magnets, ebooks, presentations. Actors often think marketing has to look DIY. It doesn't. Clean visual communication builds trust before you ever speak. I send cold leads lead magnets all the time. Sometimes it's an ebook like how to hire a voiceover actor or a checklist of what to expect when you've hired one. When you are the authority and expert in the room that's when you have true leadership within the role. Canva helps you look like a business with structure instead of a freelancer who's improvising. I use Canva Pro. You don't have to. There is plenty on the free version that makes it worth having in your arsenal. A Lightweight CRM When I say CRM a lot of actors panic. Customer relationship management systems can feel very corporate. But you can create a lightweight version with Airtable or Notion or even a spreadsheet. I have one I can send you the link to. The things you want to track are simple. Who you contacted, when, what their response was, what your email subject line was. Without those few things you can end up re-pitching the same person too soon or forgetting a warm lead entirely. Consistency beats charisma in client development. I promise you. A Calendar System Your calendar is not just for appointments. It's for marketing blocks, financial review days, audition batching, content creation, relationship maintenance. Actors live in reactive mode. A structured calendar helps you move into intentional career design. Time becomes something you allocate strategically instead of something that constantly feels like it's slipping away. When I transitioned into my block calendar system it changed my life. I know that sounds dramatic but I was constantly chasing minutes and feeling like I never had enough. Now I have control. I can actually plan things out and I'm never just too busy or not busy enough. It really did change my life. File Organization I know this sounds tiny. It is not. Clear folder systems on your desktop. Client name, project, scripts, finals. Demos organized by vertical and year. Invoices separated into paid and unpaid. Contracts sorted by active versus expired. When your files are organized you move faster. Speed is a competitive advantage in this industry, especially if you are working with agents or pay to plays. Disorganization creates friction that drains your creative energy. Spend twenty minutes on this. I promise you will feel so much better and more in control. A Password Manager This one is very adult and very real. My information was recently hacked and someone stole a significant amount of money from me and spent it all on DoorDash. I was very upset. Actors juggle casting sites, payment portals, editing software, social platforms. A password manager like LastPass or 1Password protects your business infrastructure. Security is professionalism. Nothing screams professional like having your shit together. A Capture System for Ideas Your brain is a constant working creative machine. But ideas disappear. How many times have you had a great idea and then completely lost it two minutes later? Use your notes app, voice memos, Notion boards, Trello. Capture content ideas, client leads, script concepts, branding language. Marketing consistency comes from capturing inspiration before it evaporates. I create a note, title it something like TikTok ideas, make a checkbox list, and add ideas as they come. When I've done it I check the box. I don't delete it because I might come back to it someday. I wish I had been doing this years ago. The Bottom Line Tools make you more sustainably creative. They don't make you less creative. They reduce chaos and they reduce the emotional decision-making spiral that actors can get wrapped up in. The actors who last in this business are not always the most naturally gifted. They're just the most together. Your homework this week is simple. Choose one tool and implement it imperfectly. It doesn't have to be beautiful or complete. Just begin. Because actors are not built in grand gestures. They are built in small systems that compound over time. Want to Keep the Conversation Going? Send me an email at mandy@actingbusinessbootcamp.com about the tools you're using or maybe a tool I haven't mentioned that's been a game changer for you. I love to hear from you. Find me on TikTok  or on Substack at The Actor's Index.    

So you've been hacked… Now what?!

In this live episode of The Modern People Leader recorded in Toronto, the crew reflects on the evolving role of HR leaders amid rising AI pressure, shifting expectations, and increasing emotional load. They unpack real-time challenges around strategy clarity, leadership trust, and how people teams must adapt to stay effective in a rapidly changing world. Our guests for this episode:- Kate Railton, Chief People Officer @ Mejuri- Katya Laviolette, Chief People Officer @ 1Password- Jenny Do Forno, Chief People Officer @ TouchBistro----  Sponsor Links:

These episodes of #thePOZcast, live from Transform 2026 in Las Vegas, are proudly brought to you by our friends at Overalls What if your employees had one central hub to handle real life? Meet Overalls. A smarter way to support your team, combining expert human LifeConcierges™ with AI to solve everyday challenges across healthcare, caregiving, benefits, insurance, finances, life admin, and more. From start to finish, Overalls handles the details — using existing benefits where they fit, and filling in the gaps where they don't. So employees save time, reduce stress, and stay focused at work, while employers boost engagement and get more value from their benefits. Overalls is redefining how work supports life, helping employee teams from Reddit, Patreon, BeatBox, and more cross pesky to-dos off their lists every day. Learn more at https://getoveralls.com/?utm_source=podcast&utm_medium=podcast&utm_campaign=pozcast Thanks for listening, and please follow us on Insta @NHPTalent and www.youtube.com/thePOZcast For all episodes, please check out www.thePOZcast.com Katya Laviolette, Chief People Officer at 1Password  Katya Laviolette is the Chief People Officer at 1Password, where she's grown a fully remote team to 1,400+ across five countries and achieved a 93% offer-to-acceptance rate. A strategic, globally-minded HR leader, Katya drives business innovation through talent and organizational development. Previously, Katya held executive roles at SSENSE, TC Transcontinental, CBC/Radio-Canada, Rio Tinto, Bombardier Aerospace, and Canadian National Railway. Katya is a Board Director at Sanimax and Solotech, and a founding member of Transform Montreal. She's also an ORHRI member, certified Integral Coaching Canada coach, and actively involved in Pour 3 Points, Governance au Féminin, and Monday Girl. 00:00 – Introduction Adam Poser welcomes Katya Laviolette live from Transform 2026 and sets the stage for the conversation. 01:15 – Meet 1Password & Katya Katya introduces herself and 1Password — an identity security company, fully remote for 20 years, now protecting both humans and AI agents. 03:30 – Evaluating Total Comp as a Candidate Breaking down what candidates should actually consider beyond base salary: bonus, equity, and especially benefits — including what employers contribute to healthcare. 06:45 – Table Stakes vs. Standout Benefits What every company must offer vs. what sets 1Password apart: pet telemedicine, 25 days PTO, 4 company-wide wellness days, and robust family planning benefits. 10:30 – Wellness Days Explained Katya unpacks what a "wellness day" actually looks like at 1Password — full company shutdowns so employees can recharge without guilt. 12:00 – Benefits ROI & Utilization How 1Password justifies the cost of premium benefits through utilization data, focus groups, and productivity metrics — and why cutting benefits should be the last resort. 15:00 – The Onboarding Edge: Starting on Wednesday 1Password's unconventional onboarding approach: all new hires start on Wednesdays so managers are ready, systems are prepped, and new employees get 3 days of company-led onboarding before meeting their team. 18:30 – Staying Connected in a Remote Company How 1Password keeps culture alive across 6 countries: city-by-city executive meetups, all-hands sessions, employee resource groups, and intentional cross-functional collaboration. 22:00 – Being Honest in the Interview Process Katya's approach to radical transparency — telling candidates "1Password might not be the place for you" — and why managing expectations is a competitive advantage. 25:30 – Remote Work Isn't for Everyone A candid conversation about the real challenges of remote work, what it takes to thrive in it, and how 1Password supports employees who may be struggling. 28:00 – AI, Fraud & the Future of Recruiting How 1Password is navigating AI-generated applications, over-embellished resumes, and fraudulent candidates — including mandatory in-person finalist interviews for senior roles. 31:00 – What's Exciting Katya Right Now Katya shares what energizes her most: the curiosity of 1Password's workforce and the chance to be part of a genuinely game-changing mission in AI and identity security.   Key Takeaways 1. Benefits Are a Recruiting and Retention Weapon Katya emphasizes that benefits extend far beyond table stakes like dental and disability. Standout offerings — family planning, pet telemedicine, wellness days, and generous PTO — are central to 1Password's employer brand and a real differentiator in a competitive talent market. 2. Employer Healthcare Contributions Matter More Than Most Candidates Realize The portion a company pays toward employee healthcare can represent thousands of dollars in annual value. Katya urges candidates to factor this into their true compensation comparison — not just base salary. 3. Benefits Only Work If Employees Know About Them and Use Them 1Password achieves high utilization through proactive education, easy administration, annual focus groups by country, and renewal-time communications that show employees the dollar value of their benefits package. 4. Start New Hires on a Wednesday — Not a Monday By onboarding all new employees on Wednesdays, 1Password ensures managers are focused and ready, systems are set up, and new hires get 3 days of company-led orientation before their team ramps up. It's a simple change with an outsized impact on first impressions. 5. Radical Transparency Reduces Mis-Hires Rather than selling every candidate on the company, Katya actively explains the challenges of remote work and the intensity of 1Password's mission. The company even includes language in offer materials saying "1Password might not be the place for you." This honest framing reduces early attrition. 6. Remote Culture Requires Intentional Design Staying connected across time zones doesn't happen by accident. 1Password invests in city-by- city in-person gatherings, structured all-hands, manager training on relationship-building over Zoom, and employee resource groups to keep culture alive. 7. AI Is Reshaping Recruiting — And Security-First Companies Are Ahead of the Curve 1Password has implemented fraud detection tools at the top of the application funnel, trained interviewers to identify AI-generated content, and instituted multi-stage interview loops with mandatory in-person finalists for senior hires. 8. Don't Cut Benefits When Things Get Tight Benefits are foundational to culture and trust. Katya argues that benefits should be among the last things cut in a cost-reduction scenario — the ROI from retention, productivity, and employer brand far outweighs the savings. 9. Time Is Currency for Employees Whether it's concierge benefits that handle personal logistics, flexible scheduling for a remote lifestyle, or wellness days that give genuine mental recharge time — giving employees their time back is one of the highest-ROI investments a company can make.