European Union regulation on the processing of personal data
POPULARITY
Categories
Looks like it's a GDPR issue. Sponsored by Riverside. Riverside now offers Podcast Hosting. Record, edit, and publish to Spotify, Apple, YouTube, and more, all from the same platform. Host where you record. https://podnews.net/cc/3356 Visit https://podnews.net/update/podbean-switches-off-dai for the story links in full, and to get our daily newsletter.
(ADV) Melinda: https://servedby.flashtalking.com/click/1/305361;10602353;50126;211;0/?ft_width=1&ft_height=1&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_78}&us_privacy=${US_PRIVACY}&url=44359789 (ADV) NordVPN: https://nordvpn.com/crimeandcomedy C&C Live! Roma: https://teatroservi.vivaticket.it/it/event/ee-08-crime-comedy/272273 Tutte le date Live!: https://www.crimeandcomedy.it/eventi-live/ icholas Barclay ha solo 13 anni quando scompare nel nulla da San Antonio, Texas, nel 1994. Ma tre anni dopo Beverly, sua madre, riceve una telefonata incredibile: Nicholas è vivo, ed è in Spagna. Una storia a lieto fine... O forse no? E chi è Frédéric Bourdin? --------- Patreon: https://www.patreon.com/crimeandcomedy Instagram: https://www.instagram.com/crimeandcomedy.podcast/ Telegram: https://t.me/crimeandcomedy Sito: https://www.crimeandcomedy.it Instagram: Clara Campi: https://www.instagram.com/claracampicomedy/ Marco Champier: https://www.instagram.com/mrchreddy/ Editing - Ilaria Giangrande: https://www.instagram.com/ilaria.giangrande/ Caricature - Giorgio Brambilla: https://www.instagram.com/giorgio_brambilla_bookscomedy/ Capitoli: (00:00:00) | Intro (00:00:21) | Sigla (00:00:35) | Ringraziamenti Patreon (00:03:49) | Mr Beast e Matrimoni (00:06:47) | Nicholas Barclay e la storia della sua famiglia (00:26:57) | La scomparsa di Nicolas Barclay (01:04:19) | NordVPN (01:05:50) | Nicholas Barclay torna a casa, ma qualcosa non quadra (01:33:39) | Frédéric Bourdin: il Camaleonte (01:58:53) | L'arresto di Frédéric Bourdin (02:19:52) | I nostri Patreon Learn more about your ad choices. Visit megaphone.fm/adchoices
AI regulatory enforcement is accelerating – often under laws that were conceived well before the unstoppable emergence of AI. This episode of The Data Chronicles examines how regulators and courts across Europe and beyond are applying existing frameworks, from the GDPR to consumer and competition law, to AI development and deployment. We explore emerging enforcement patterns, including scrutiny of AI training data, transparency obligations, data subject rights, and the growing use of urgent regulatory measures. The discussion also looks ahead to how enforcement may evolve as AI-specific regulation advances, and what these developments signal for organizations operating globally.
Guest post Martin Petrov, Chief Technology Officer, Payments Compliance at Integrity360 It is tempting to view payments compliance as the finish line, a signal that a business is secure. But in practice, compliance is just the starting point. It provides a baseline security level, not a digital fortress. Standards are designed to raise the floor and eliminate obvious vulnerabilities, but they cannot cover every emerging threat or nuance – such as a supplier getting breached or a shortcut taken by an engineer at 2 a.m. That is where organisations risk becoming complacent or overly literal in their interpretations. True security demands a harder question than: "Are we compliant"? It demands: "Would this stop an attacker today?" That demands understanding not just what control requirements state, but why they exist. Multi-factor authentication (MFA), for example, is not just a checkbox; it is a concept rooted in stopping unauthorised access. Compliance must be interpreted in context: against the weakest vendor, the most exposed system, the riskiest business process, and the evolving threat landscape. Too many breaches have exploited gaps that audits never covered because compliance became the ceiling, not the floor. Regional and cultural factors also play a part. In Northern Europe, payments compliance frameworks like PCI DSS are often seen as a baseline to exceed, with layered defences added beyond the minimum. In other regions, standards such as PCI DSS or ISO/IEC 27001 are treated more as a destination. Certification becomes the end goal – a badge to display, not a baseline to exceed. These differences matter because they determine whether compliance protects you or just protects your reputation. The supplier slip-up that could cost you everything One of the most urgent blind spots is the supply chain. You can harden and patch all of your own systems, mandate MFA, and lock down every endpoint. But a vendor's default service account, an abandoned test tenant, or an over-permissioned API can undermine everything. As integrations and dependencies grow, so does the potential blast radius. And while many organisations know who their suppliers are, far fewer know what access they have, how often they are reviewed, or whether they follow the same standards. Supplier risk must now be managed as rigorously as internal operations; tiered, tested, and tightly controlled. The three-body problem: when PCI DSS, GDPR, and the EU AI Act collide Then there is the pace of innovation, particularly in areas like artificial intelligence (AI). For European compliance officers, this creates a three-body problem: the EU AI Act, PCI DSS, and GDPR orbiting each other with overlapping – but misaligned – requirements. And unlike physics, there is no elegant equation to solve it. Meanwhile, global response remains inconsistent, and the tension between innovation and oversight is only going to grow. The organisations that succeed in this environment will not just meet standards; they will go further and question whether they are compliant on paper but vulnerable in practice. By treating compliance as a foundation, not a finish line, organisations will unlock new ways to stay secure and trusted. The question is, what does that really look like? What good is a lock if no one checks the door? One of the easiest traps for modern security teams is assuming that tools alone provide protection. But no matter how advanced the platform or how rigid the policy, it is people and processes that hold it all together – or let it fall apart. This is especially true in payments compliance, where new platforms and integrations emerge faster than policies can adapt. Organisations that treat compliance as a checklist often over-rely on technology, by trusting automated scans, secure settings, or third-party certifications to keep them safe. But without context and human judgement, these defences can create a false sense of security and leave the business exposed. In the b...
On Call with Insignia Ventures with Yinglan Tan and Paulo Joquino
In the crowded landscape of AI workflow automation, Diaflow has carved out a distinctive position by prioritizing what enterprise customers care about most: security, compliance, and trust. After years of building custom enterprise software and witnessing firsthand how traditional automation failed to deliver on its promises, founder Jonathan Viet Pham and his co-founders launched Diaflow in September 2023 with a different approach—an AI-native platform that's both powerful and accessible without coding expertise. The results surprised even the founding team: within weeks, the platform ranked number one on Product Hunt and attracted over 10,000 users, with unexpected traction in the competitive US market. In this conversation, Viet discusses how Diaflow differentiates through enterprise-grade compliance standards, the evolution toward a hybrid pricing model, the company's community-first strategy including free university access, and how Insignia Ventures Partners' seed investment is accelerating both technological innovation and global expansion into Southeast Asia and beyond.About Our GuestJonathan Viet Pham is the Founder and CEO of Diaflow, an AI-native workflow automation platform that enables businesses to deploy powerful AI agents without extensive coding knowledge. Based in the San Francisco Bay Area, Jonathan brings a unique blend of finance and technology expertise to his role. His family developed Vietnam's first dictionary, which was sold to Apple in 2014, instilling in him an early appreciation for product development. After studying finance at Lucerne University of Applied Sciences and Arts in Switzerland, Viet founded his first global startup in 2017, expanding it to five countries before the COVID-19 pandemic forced a pivot.From 2020 to 2023, Jonathan served as Managing Partner at Devtify Technologies, where he led digital transformation consultancy and implementation for over 50 global clients across the Financial Services Industry and Digital Retail sectors in the US and Vietnam. His client portfolio included major brands such as TheFaceShop Vietnam, BeautyBox, Reebok Vietnam, and Techcombank, achieving seven-figure annual revenue. He also founded Artcific, a digital platform connecting artists and galleries that attracted 20,000 daily visitors, and co-founded Calioo Technologies, an online marketplace for bakeries and eateries in Hong Kong.In September 2023, Jonathan co-founded Diaflow with his long-time collaborators Lai Pham (Co-founder and CTO) and Anh Doan (Co-founder and CISO), a team that has worked together for over seven years. Under his leadership, Diaflow has achieved significant milestones including ranking number one on Product Hunt, attracting over 10,000 users globally, and securing full compliance with HIPAA Type II, SOC 2 Type I, and GDPR standards. The company raised a seed round led by Insignia Ventures Partners in 2025, positioning it for continued global expansion and technological innovation in the AI workflow automation space.Directed by Paulo JoquiñoProduced by Paulo JoquiñoFollow us on LinkedIn for more updatesThe content of this podcast is for informational purposes only, should not be taken as legal, tax, or business advice or be used to evaluate any investment or security, and is not directed at any investors or potential investors in any Insignia Ventures fund. Any and all opinions shared in this episode are solely personal thoughts and reflections of the guest and the host.
Pinar Ormeci, CEO of Lexful For MSPs, documentation is essential. But it's also one of the hardest parts of running a service business. Inaccurate, outdated, or inaccessible documentation slows teams down, increases onboarding time for new technicians, and can even put service quality at risk. That's the problem Lexful is aiming to solve with a new approach. In this episode, we sit down with Pinar Ormeci, CEO of Lexful, to discuss the company's new AI-native platform built specifically for managed service providers. Pinar explains how Lexful uses artificial intelligence to capture and organize MSP best practices in real time, making documentation not just a compliance task, but a practical tool that drives efficiency and reduces errors. We also dive into some of the challenges MSPs face when adopting AI tools — like ensuring sensitive client data stays secure and meets regulatory or geographic requirements — and how Lexful addresses these concerns with flexible data residency options. Plus, Pinar shares her thoughts on global expansion, including the Canadian MSP market, and what makes Lexful different from traditional IT documentation tools. Whether you're looking for ways to improve operational efficiency, reduce technician burnout, or future-proof your MSP business with AI, this conversation offers practical insights and a glimpse at where documentation technology is heading. Tune in to hear Pinar Ormeci explain how AI can transform the way MSPs capture, store, and use the knowledge that keeps their businesses running. Read Full Transcript Hello and welcome to the ChannelBuzz.ca podcast, bringing news and information to the Canadian IT channel for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca, and as always your host for the show. If you’re an MSP, you know that documentation is both critical and, let’s be honest, often a pain. From onboarding new technologies to keeping client procedures up to date, maintaining clean, accurate and accessible documentation can feel like a full-time job and even then it’s rarely perfect. That’s where Lexful comes in. Founded by Pinar Ormeci, Lexful is a new AI-native platform designed specifically for managed service providers. The goal is to make documentation smarter, faster and more useful, not just for the teams doing the work today, but for future technicians, clients and partners. Think of it as giving your organization a digital brain that learns your processes, organizes your best practices and helps your team actually use the documentation you spent so long building. In today’s conversation, Pinar walks us through what makes Lexful different from traditional IT documentation tools, how the platform’s AI assistant Ask Lex works, and how MSPs can balance the need for actionable insights with security and control over sensitive client data. We also talk about global expansion, including Canada, of course, and what it takes to bring AI-powered documentation to MSPs operating in regulated markets or multiple geographies. Whether you’re curious about AI in the MSP workflow, looking for ways to improve operational efficiency, or just interested in the next wave of tools that may be shaping the channel, this episode’s full of insights from someone who’s building a platform designed for exactly that. Grab your headphones and let’s jump into a conversation with Pinar Ormeci, CEO of Lexful. Robert Dutt: Thanks for taking the time. I appreciate you’re joining us to talk a little bit about what’s going on over at Lexful. Pinar Ormeci: Thank you so much for having me, Robert. Robert Dutt: You’re entering a market that MSPs already know well in terms of documentation tools. What was it that was broken enough about the status quo, the situation, that you felt like, “Oh, it’s time to start from scratch with something brand new.” Pinar Ormeci: Yeah, as you can imagine, everything changed with AI, with the advent of AI and the pace of doing things and how MSPs must react and are reacting to an AI-first world even today, and it’s even accelerating as we continue. So as such, we fundamentally believe that the things that worked yesterday will not work today and definitely not tomorrow, right, for the workforce that contains humans and AI agents. So we are the response to a long-standing pain point that the MSPs have when it comes to documenting what they have, finding answers and context when they need, and also having the ability to update that documentation as needed, right? So MSPs, when they’re operating, they’re going 100 miles an hour across clients, across tabs, across tools, and the last thing they need is wasting time trying to find the right answer, right network diagram, trying to see if that’s actually the latest and greatest. And usually that doesn’t happen. There’s a lot of tribal knowledge that lives in the MSPs because they honestly, at some point, stop trusting the data that they have and things start living in their minds. And that’s the reason why we exist. So yes, we are an IT documentation solution, but we are an AI-native platform that is starting with documentation and our goal is to really help MSPs move into knowledge operations, an AI operating layer, where the knowledge becomes autonomous, the outcomes become autonomous, and really the knowledge becomes a living thing. Robert Dutt: Well, let’s start with where you’re at in that regard. From your perspective and from what you were hearing as you were building up Lexful and planning it out, what’s the real cost of bad, outdated, unfindable documentation inside an MSP’s operation? Both in terms of operational stuff for the organization, but also in terms of ability to grow, margins of the business, the experience that technicians have, those kinds of things that are not peripheral, but not right at the center of operations. Pinar Ormeci: Excellent question. And what we say is that MSP documentation as it stands today is really broken. And ultimately, this is an economic problem. This is not a technical problem in the sense that it costs MSPs real margin. And how does that happen? So today, documents become stale as soon as they are written. Technicians waste hours collectively trying to find the right information, and manual updates really don’t scale. So what this ends up resulting in is missed signals, right? So you don’t act when you should be acting. You don’t find answers as fast as you could. Your technicians get burned out because literally after five, ten minutes of searching and not being able to find what they need, technicians go to other technicians. So everybody’s pinging each other, disrupting. So there’s also a lot of context switching. And this results in errors where you’re trying to solve different clients’ problems. And ultimately and fundamentally, this really results in eroding client trust and churn, right? So we see this documentation problem not as a technical problem, but fundamentally an economic problem that has real impact on the bottom line of the MSPs. And also their top line, because knowledge is also critical, Robert, for AI agents, for workflows. Your AI workflow or your agentic workforce is only as strong as the data that they rely on. So if you have a bunch of unstructured data lying around across different tools and you have no clue how stale or up to date they are, your agents won’t be as useful as they could be. So we are approaching the problem on both sides, both reducing your costs and increasing your margins, but also really preparing you for the agentic workflow and also AI-driven new revenue streams. Robert Dutt: You’ve positioned Lexful as an AI-native platform rather than a traditional documentation tool with AI built in, strapped on, however you want to phrase that. What does that mean in practice for an MSP that’s using Lexful on a day-to-day basis as opposed to using traditional documentation tools or methodologies? Pinar Ormeci: Sure. Legacy documentation tools were built in a different era, right? Before AI existed, they really depended on manual entry, keyword search, and they’re optimized for storage really, not to be an operational workhorse. Not for knowledge operations, where you’re able to put data to work for you 24/7. So our goal with Lexful is to move from this world of scattered docs and tribal knowledge to a unified AI-native platform that delivers the right solution to the right technician, anchored to the right context, to the right client, instantly. So this is how this looks in real life. Let’s say that you’re using a legacy documentation tool and you say, “Hey, I’m going to give Lexful a go. I want to try it.” By the way, you can have a completely free trial where you get to use the full functionality of Lexful in parallel to your existing tool. So there’s no risk. We call it migration without mayhem. So if you don’t like it, no feelings hurt. You can always continue with your existing platform. But this is how it looks. The first thing that we do is we migrate all your existing documentation. That means including your SOPs, onboarding guidelines, runbooks, what have you, your MSP-specific documentation, plus all your client assets and passwords and their documents into the Lexful schema. And while we are doing that, we transform that data into context, relationships, assets. So everything becomes structured so that AI can operate seamlessly and securely, very fast, within the guardrails that we put. So that’s fundamentally different than bolting AI into the scattered docs that are unstructured and expecting much from that AI agent. Before we even migrate the documents, Robert, what we’ve done is we completely context-engineered an LLM model to live in the MSP space. So you have this, let’s say, AI technician now that has access to all your data. And the things that you can do with this are really amazing. So we have AI as UI, as entry point to Lexful. And what that means is you can ask natural query questions in plain English. For example, a technician can easily ask, “Hey, what’s the admin password for this client?” Or they can ask, “Hey, what devices need patching for the clients that are in the Ohio area?” Or “What should I do about it?” Or you can say, “Hey, give me a project plan for me to patch these devices and make sure you’re prioritizing them based on urgency.” Or an L1 tech who you just hired and you’re trying to onboard, instead of pinging the senior technicians all the time, they can literally go to Ask Lex, which is our AI-powered knowledge assistant, and say, “Hey, how does my MSP do onboarding? What’s the best way for me to increase my learning curve immediately? What would you propose?” Because this is an LLM now that has access to all your knowledge and is context-engineered, as I mentioned, in the MSP and all things IT. Robert Dutt: And you mentioned data throughout that. And clearly, for Ask Lex, for the AI infrastructure to have the value that it potentially has, it has to have access to both an MSP’s most valuable data, the best practices, the procedures, the stuff that folks have developed over the however many years the business has been in place, and customer data, network diagrams and passwords, et cetera. How are you balancing getting the most out of that and getting the most value out of Lexful with trust, security, control, all those kinds of things that MSPs and rightly customers are going to be asking about? Pinar Ormeci: Yeah, 100%. And that’s why vibe coding is not going to work for any production-grade solution, but also definitely for MSPs, where you have multi-tenancy, security is of utmost importance. You have all these compliances and regulations and all of that, right? So you have to have a real MSP-grade solution. So in our case, obviously, we are handling really sensitive data, the client’s data, and also passwords, right? As a documentation tool, we have password management as part of that, a rich document creator and asset management. So it’s as sensitive as it gets. What we do is zero-trust security from day one. So Robert, I was the CEO of another MSP-first vendor before I joined Lexful, and what we did was Secure Access Service Edge, which is a SASE solution, right? So I’m so security-first because I’ve seen firsthand all the horrible consequences when security is optional. Security is a must-have. It has to belong in an MSP stack, and MSPs actually shouldn’t even deal with clients if the client says, “Oh, security is optional for me.” So I am very, very security-first. So from day one, what we’ve done at Lexful is we said that we’re going to be SOC 2 Type 2 compliant. So the whole thing that we’re building is built in that framework. We are already in SOC 2 audit, by the way, so hopefully we’ll get the SOC 2 Type 2 compliance. That’s the earliest you can get, by the way, as a young company, by the end of this half. Yeah, so we have a never trust, always verify framework, and we do take it very seriously. Robert Dutt: And similar issue, but from a different point of view, many MSPs, especially those outside the US, care about where data lives or even is in transit, or are required by regulation to care about where data lives or is in transit, whether that’s in-country, region-specific, or even locked down to the level of on-prem. I guess, how are you guys thinking about data residency and deployment flexibility as you scale and as your customer base scales? Pinar Ormeci: Oh, yeah, 100%. So as part of the SOC 2 Type 2, we are GDPR compliant. We are California CCPA compliant. So from a data residency perspective, similarly, we use AWS because we’re a global cloud-native platform. So we have data centers in the US, but also in Europe, in Canada, in Australia. So based on need, we have no problems having data centers locally in the region the MSP resides. Robert Dutt: You touched on this a little bit earlier, but I think for a lot of MSPs who are changing something like a documentation system that’s core to the business, it feels like there’s a risk there. Even if you see potential benefits, there’s also the challenge of leaving familiar systems, even if they aren’t your favorite things in the world. Can you elaborate a little bit on how you guys approach migration and early adoption so that partners can evaluate Lexful and still keep the business running at the same time? You touched on kind of having that parallel migration path. How exactly does that look for an MSP? Pinar Ormeci: Oh, yeah. As an operational tool, you cannot disrupt the MSP operations. That’s fundamental. So that’s why we say migration without mayhem, and it’s actually one of our core features. The other thing is we are very API-first, meaning even the product that we built is built on APIs. Our front end and back end are decoupled. Everything we do is via APIs. We have a RESTful API already out there for the MSPs to utilize. And for the migration as well, we have an API that automates the migration from an existing tool into the Lexful schema. But while we do that, we also have the MSP continue to use their existing tool while we bring that knowledge into Lexful. And then in that two-week trial, the MSP can use both platforms at the same time, really make sure all that data is there. They can validate that everything is to their liking and all of that. And at the end of that trial, if they continue to move with Lexful, then they can let go of their existing tool. So yeah, migration is very important. And like I say, we automate the migration to the extent possible using the API. Of course, migration is not trivial in any tool, let alone a documentation tool, especially if the MSP has so much documentation. So we always suggest, do this after Friday. Your workday is over, or during the weekend. So just don’t do it Monday 9 AM, just in case, because it might take one hour, two hours or whatever. But having said that, hopefully the migration is the easiest part of switching to Lexful. Robert Dutt: You’re working with AWS. I think you’re thinking on sort of a global scale, and why wouldn’t you, since it’s all online, it’s all technology. But as you think about global expansion, and I’m going to be biased here and say Canada in particular since that’s where this audience lives, how are you thinking about global focus? And also, I’m curious, as you’re talking to MSPs, what differences do you see in how MSPs think about and approach documentation, compliance, AI across the various regions that you’re talking to partners in? Pinar Ormeci: I think Canadian MSPs are pretty amazing and very innovation-forward. They’re definitely thinking about AI, their clients. They’re not that different from the North American ones, obviously. So we have very mature MSPs in Canada. And I don’t see massive differences when it comes to Canadian MSPs versus American MSPs, honestly, because the level of maturity in both countries is similar. So from a distribution perspective, we want to go wherever the pain points exist today when it comes to knowledge and documentation. And that is literally everywhere, right, Robert? So we are a global player and we also want to make it easy for the MSPs to get access to Lexful. We are working with Sherweb, we are working with Pax8. So the hope is that we will be part of those marketplaces definitely within this year. So by the way, a lot of our developers are in Vancouver. So we have great ties to Canada. I’m actually flying on Sunday to Vancouver for some internal meetings next week. So from our perspective, everything we do, everything we envision, our vision, we are a global player. We want to be the de facto central intelligence layer the MSPs trust for years to come. Robert Dutt: And along those lines, kind of looking forward, for an MSP who comes on board early days, as you guys are launching, how do you hope their business looks different a year from now after they’ve fully realized what you guys are doing and what you guys will do with Lexful over the course of that year? Pinar Ormeci: Yeah, excellent question. So we are a paradigm shift. I really see us, remember those days, for people who are old enough, like we used to have no internet, man. Like we used to have encyclopedias and the books, and like, my background is in engineering, I’m an electrical engineer. If I didn’t know something, I had to go open a book and like, it was these weird times without the internet. And then suddenly there was the internet, where this collective information and you can search for anything and, you know, then Google and so on. So that’s the paradigm shift that we are trying to bring the MSPs into. Instead of manual keyword-based search, manual updates and so on, now you live in that knowledge. Knowledge is always up to date. You do in-context troubleshooting. The technicians, they can be in co-pilot, they can be in their PSA, they can be in their Teams and they can just ask Lex to get the right answer contextually. The next steps, and then whatever is new discovered in that discussion is automatically detected if there is a gap and then trickled down to the right SOP, right KB. So this is the paradigm shift that we are talking about, so that MSPs can focus on not the mundane, like, “Hey, we need to update this document,” try to incentivize technicians on actually what makes the money, what delights their customers. They can be so much more strategic with their clients because just imagine now all the insights you can bubble up utilizing an AI and LLM that knows all your clients, that knows all the trends, that knows all the compliance needs. It is just a different game. So we’re really trying to bring the MSPs into an AI-first world because otherwise people will get left behind, right? The old ways don’t scale. Robert Dutt: And finally, probably the most important question we’re going to ask today, and that’s good journalistic practice, right, to wait till the very end to ask the most important question. I do have to ask though, is it true that your AI is also your channel chief? And if so, how sure are you that Lex isn’t coming for your job? Pinar Ormeci: Yeah, so I was like, you know, if you’re an AI-native company, we need to have some teammates that are not just human, but humanoid, let’s say. So we have as our channel chief a humanoid robot that has an LLM, has an NVIDIA chip. We have trained him on all the right things. Although at Right of Boom, people told me, “Oh, we thought he was a female,” but so yeah, Lex is amazing. And he is very clumsy though, so I don’t know that he’s coming after our jobs that fast. But yeah, we’re living in some amazing times. It’s just really fascinating as a technical person myself who’s been in the tech industry for 20-plus years. It’s fascinating to be living in these times where everything is moving exponentially. And yeah, so we do have a channel chief that is not a human. And he is with us at all the events that we go to. You can come to our booth and say hello, and then you can converse with him as well, right? Ask him like, “Hey dude, what do you think the MSP’s pain points are? Is Lex doing a good job? Is Pinar a good boss?” So he’ll have an opinion for you. Robert Dutt: All right, so flesh-and-bone channel chiefs have been put on notice. They are in fact on the list of roles that can be replaced. But jokes aside, no matter how good Lex and his AI pals get, what’s kind of the one role in all of this that you think humans will always play no matter where the technology goes? Pinar Ormeci: I think the judgment layer, at least for the, let’s say, near term, right? I honestly don’t know, 20 years… the thing is moving so fast. I keep reading Anthropic’s CEO and it’s just, things are changing a lot. But in the near term, the human judgment is still paramount. Human in the loop is paramount. And with AI, you have to always trust, but verify. So at Lexful, we make it such that we give all the reasoning the AI is doing to reach that conclusion, all the links where it’s going. So we make sure that the hallucinations, if there are any, are minimized and the humans can verify everything. So the human in the loop is ultimately critical and they are the judgment factor. And especially in the MSP channel, relationships are key. One of the things I love about the MSPs and this ecosystem is the community aspect, people helping each other. Then there’s MSPs being like, “Hey, we’re all on the same team” attitude. So I don’t think you can replace that for small, medium businesses. Ultimately, the best we can be is human. We are not AI, we are not robots. Humans, we’ve evolved to be social animals and community is such an important part of the MSP ecosystem. I don’t think that’s going anywhere soon. So we are here, as we say at Lexful, not to replace expertise. We’re just here to expose it to more people so that the technicians can do more important jobs other than just wasting hours documenting or finding the right information. Robert Dutt: I appreciate your taking the time. Good luck on rolling out and evolving Lexful. It will be exciting to see where things go from here. Thank you very much. Pinar Ormeci: Thank you so much. Thanks for having me. There you have it, a look at how AI may change your documentation system and maybe even provide a new business platform for your managed services business in the long run, courtesy of Lexful’s Pinar Ormeci. I’d like to thank Pinar for joining us and thank you for listening. That wraps up this week on the podcast. We’ll be back on Monday with In Case You Missed It, our weekly roundup of channel news and trends that you need to know about. And next week and into the near future, we’ll be taking a look at why modern IT environments are increasingly hard to monitor and have a chat with our frequent guest, Tony Anscombe, about the security forces you need to know about. Between now and then, please do subscribe to or follow the podcast in your podcast app of choice. And if it allows you to do so, please consider leaving a review or rating for the show. Have a great weekend. I’m Robert Dutt for ChannelBuzz.ca and I’ll see you around the channel.
Scopri di più su Melinda per la ricerca oncologica qui: https://servedby.flashtalking.com/click/1/305361;10602350;50126;211;0/?ft_width=1&ft_height=1&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_78}&us_privacy=${US_PRIVACY}&url=44359787 adv Learn more about your ad choices. Visit megaphone.fm/adchoices
f you're replying to emails late at night, chasing invoices between sessions, or taking your laptop on holiday “just in case”, it might feel like admin is taking over your life.For private practice therapists, enquiries, invoicing, cancellations, GDPR, practice management systems, and Making Tax Digital can eat into the time that you'd much rather be using for seeing clients.In this episode, I'm joined by Anna Bunch of Psych VA to explore how virtual assistants for therapists can help lighten that admin load.We talk about:What a virtual assistant actually does in a therapy practiceManaging client enquiries and follow upsSupport with invoicing and insurance companiesGetting set up with practice management systems such as WriteUppMaking Tax Digital and accounting software like XeroConfidentiality and GDPR when outsourcing adminHow to know when it might be time to get helpIf admin is creeping into your evenings and weekends, this conversation will help you decide what support could look like for you.About Anna: Anna Bunch is the founder of Psych VA, a UK based virtual assistant agency supporting therapists and psychologists in private practice. Her team helps with admin, inbox and diary management, invoicing, insurance work, and practice management systems, helping clinics run smoothly and sustainably. You can find Anna HERE at her website, where you can book an appointment or contact her for her time tracker tool.Setting up in private practice? Download my free checklist HERENeed ideas for how to get clients? Download my free handout 21 Ways for Counsellors to Attract New Clients HEREYou can also find me here:The Good Enough Counsellors Facebook GroupJosephine Hughes on FacebookJosephine Hughes on YouTubeMy website: josephinehughes.comKeywords: private practice support, virtual assistant for therapists, therapist work-life balance, outsourcing therapy tasks, efficient client management, therapy growth strategies, practice management systems, therapist burnout prevention, administrative support for therapistsThe information contained in Good Enough Counsellors is provided for information purposes only. The contents of this podcast are not intended to amount to advice and you should not rely on any of the contents of this podcast. Professional advice should be obtained before taking or refraining from taking any action as a result of the contents of this podcast.Josephine Hughes disclaims all liability and responsibility arising from any reliance placed on any of the contents of this podcast.
Gafas Meta bajo lupaInvestigación revela que gafas Meta envían videos íntimos a revisores humanos para entrenar inteligencia artificialPor Félix Riaño @LocutorCoUn reportaje de medios suecos destapa cómo videos capturados con gafas inteligentes Meta Ray-Ban pueden terminar en manos de anotadores de datos en Kenia. El material incluye escenas privadas y datos financieros que usuarios no sabían que se estaban compartiendo.Las ves en anuncios. Las ves en redes sociales. Un deportista famoso se las pone y les pregunta quién es el mejor jugador de hockey de Suecia.Parecen gafas normales. Pero no lo son.Son las gafas inteligentes de Meta, creadas junto a Ray-Ban. Prometen ayudarte a traducir idiomas, identificar objetos y responder preguntas con solo decir: “Hey Meta”.La promesa es clara: tú tienes el control.Pero una investigación de los diarios suecos Svenska Dagbladet y Göteborgs-Posten cuenta otra historia. Según su trabajo, parte del video que capturan estas gafas termina siendo visto por personas reales que trabajan entrenando inteligencia artificial.Y algunas de esas imágenes muestran momentos muy privados.La pregunta es sencilla y directa: cuando hablas con la IA de tus gafas… ¿quién más podría estar viendo?Pero la inteligencia artificial necesita ojos humanos.En septiembre de 2025, en Menlo Park, California, el director de Meta presenta las nuevas gafas como el futuro de la empresa. En pantallas gigantes se ve el mundo desde sus ojos mientras camina hacia el escenario.Las gafas prometen traducción en tiempo real, reconocimiento de objetos y hasta ayuda para el trabajo diario.En 2025 se vendieron cerca de siete millones de unidades, después de que en 2023 y 2024 se vendieran juntas unos dos millones. El crecimiento fue rápido.Para que la inteligencia artificial entienda lo que ve la cámara, necesita entrenamiento. Ahí entran los llamados “anotadores de datos”.En Nairobi, Kenia, empleados de la empresa Sama revisan imágenes y videos. Dibujan cuadros sobre objetos, etiquetan personas, clasifican escenas. Es un trabajo repetitivo. Pero es la base de muchos sistemas de visión artificial.El problema es que, según la investigación sueca, no todo lo que llega a sus pantallas son flores y señales de tránsito.Varios trabajadores contaron que han visto escenas íntimas capturadas por las gafas. Personas en el baño. Personas cambiándose de ropa. Tarjetas bancarias visibles al pagar en una tienda.Algunos empleados dijeron que muchas veces creen que quienes aparecen en los videos no saben que están grabando.Uno de ellos afirmó: “Vemos todo. Desde salas de estar hasta cuerpos desnudos”.Meta explica en sus términos de uso que algunas interacciones con sus sistemas de IA pueden revisarse de forma automática o manual. Es decir, por personas.Cuando periodistas probaron las gafas en Suecia e intentaron usarlas sin conexión a internet, la función de inteligencia artificial no funcionó. Al analizar el tráfico de red, detectaron comunicación frecuente con servidores de Meta en Suecia y Dinamarca.Eso contradice lo que algunos vendedores dijeron en tiendas, donde afirmaban que todo se quedaba en el teléfono.En Europa rige el Reglamento General de Protección de Datos, conocido como GDPR. Esta norma exige transparencia sobre cómo se procesan los datos personales y dónde se almacenan.Expertos consultados por los periodistas señalaron que muchos usuarios no son plenamente conscientes de que el video puede enviarse a servidores externos y revisarse por humanos.Además, antiguos empleados de Meta indicaron que los sistemas que difuminan rostros pueden fallar, sobre todo con poca luz.Eso abre un riesgo evidente: imágenes que deberían estar protegidas podrían no estarlo.Meta respondió que el contenido se maneja según sus políticas de privacidad y términos de uso. También afirmó que filtra datos para proteger la privacidad antes de cualquier revisión.Pero no ofreció detalles específicos sobre cuánto tiempo se guardan los videos ni exactamente quién puede acceder a ellos.Las autoridades europeas han sido informadas del caso. Legisladores han pedido aclaraciones sobre la transferencia de datos fuera de la Unión Europea, especialmente hacia países que aún no cuentan con reconocimiento formal de protección equivalente.Mientras tanto, el debate no es solo legal. Es social.En universidades de Estados Unidos ya hay preocupación por el uso de estas gafas en campus. Algunos estudiantes dicen sentirse incómodos al no saber si alguien los está grabando. En una escuela de Texas se prohibió el uso de tecnología vestible en 2025 por temor a trampas académicas y grabaciones no autorizadas.La tecnología avanza rápido. Las normas sociales van más despacio.Y la confianza se construye con transparencia.Este caso también muestra algo que a veces olvidamos: la inteligencia artificial no se entrena sola.Detrás de cada sistema hay miles de personas etiquetando datos. En muchos casos, en países con salarios bajos.Sama ya había estado en el centro de polémicas anteriores relacionadas con moderación de contenido para grandes plataformas tecnológicas. Ahora su labor se centra en visión artificial.El trabajo es estricto. Según los testimonios, los empleados no pueden entrar con teléfonos ni grabar nada en la oficina. Firmaron acuerdos de confidencialidad.Al mismo tiempo, la propia política de Meta indica que no se deben compartir datos sensibles con la IA. La responsabilidad recae en el usuario.Eso plantea una situación compleja.Si alguien activa la IA sin saber que la cámara sigue captando imágenes durante algunos segundos más, ese material puede entrar en el sistema de entrenamiento.Y una vez que los datos se usan para entrenar modelos, recuperarlos o eliminarlos no es sencillo.La discusión ya no es solo técnica. Es ética.¿Qué significa consentimiento cuando hablamos de cámaras que parecen gafas normales?¿Cómo se informa de forma sencilla a millones de usuarios sobre procesos técnicos complejos?Y una más: ¿estamos leyendo realmente lo que aceptamos cuando pulsamos “aceptar”?Las gafas inteligentes ofrecen funciones útiles y sorprendentes. Pero esta investigación recuerda que cada avance trae responsabilidades.La privacidad no es un detalle pequeño. Es parte de tu vida diaria.Antes de activar cualquier asistente con cámara, conviene preguntarse qué datos salen de tu dispositivo y a dónde viajan.Te leo en comentarios y te invito a seguir el pódcast Flash Diario para entender juntos cómo la tecnología afecta nuestra vida.Investigación revela que gafas Meta envían videos privados a trabajadores en Kenia para entrenar inteligencia artificial.BibliografíaSvenska DagbladetGöteborgs-PostenGizmodoEngadget9to5MacNewsweekForbesThe DecoderDigWatchConviértete en un supporter de este podcast: https://www.spreaker.com/podcast/flash-diario-de-el-siglo-21-es-hoy--5835407/support.Apoya el Flash Diario y escúchalo sin publicidad en el Club de Supporters.
Fantasy football is unpredictable, but your internet price doesn't have to be. Lock in fast, reliable WiFi with Xfinity's 5-Year Price Guarantee.https://ad.doubleclick.net/ddm/trackclk/N8667.5415713FLNEWSLETTERLLC/B34798571.4365895[…]gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ltd=;dc_tdv=1We're back with another episode of Fantasy Life with Ian Hartitz and in today's episode Ian is joined by fantasy football expert Dwain "The Rock" McFarland to break down everything you need to know about the wide receiver position heading into NFL free agency.This offseason's wide receiver free agent class is maybe not as deep as some may like — buit where these players end up will completely reshape fantasy football drafts for 2026.We break down every WR that matters this offseason, from the headliners to the names flying under the radar. For each player, we cover what they did in 2025, the landing spots that make sense, and what it all means for your fantasy team next season.In today's episode: Is Alec Pierce really the best free agent WR? Are the Bills honing in on Rashid Shaheed? Can Mike Evans produce somewhere other than Tampa? We're breaking down all this and so much more! Learn more about your ad choices. Visit megaphone.fm/adchoices
Rob McDonald, SVP of Platform at Virtru joins the podcast to double-click into the privacy and data discussion. We explore subsidizing the pain of giving personal data in exchange for 'free' services, informed consent, regulation alone isn't a silver bullet, and what outcomes we could we drive when we combine user decisions with regulation. And he shares insights on behaviors that come with innovation, data as common denominator, regulations such as GDPR and CCPA as progress markers (and not the final destination), the criticality of the CIO/CISO as storyteller and recognizing our front line defenders are people (not robots!). Rob McDonald, SVP Plaftorm at Virtru Rob is the SVP of Platform and an advocate of safeguarding data across new applications and data-sharing workflows. Prior to Virtru, Rob was the CIO for several Acute Care facilities and Denovo Healthcare development teams. His significant expertise in the healthcare industry earned him a spot in Becker's Review as a 2013 and 2014 Top 100 Healthcare CIOs. Rob has also consulted with corporations to help them assess their current information security position and develop a plan to not only mitigate the discovered technical shortcomings but more critically to raise security awareness amongst their employees. Rob holds a Bachelor of Science degree in Computer Science from the University of Texas at Dallas and is a perpetual student of technology, information security, and privacy practices. For links and resources discussed in this episode, please visit our show notes at https://www.forcepoint.com/govpodcast/e374
Washington has given 24 EU member an ultimatum: Open your biometric databases to American border officials or lose visa-free travel. In this video, IMI reveals what data is on the table, why not a single EU government objected, and what the US government's algorithms mean for every European traveler.Read the full article with details here.
Ihmistyön loppu | Juhani Mykkänen | Neuvottelija 374. Tekoäly mullistaa talouden, työn ja politiikan. Mitä se tarkoittaa Suomelle ja suomalaisille päättäjille, yrityksille ja sijoittajille? Juhani Mykkänen avaa tiensä Jufo Peltomaan singulariteettikeskusteluista GPT-hetkeen vuonna 2022, Woltin grindauksesta totaaliseen hurahdukseen tekoälyyn. Toteutuuko Citrini Researchin doomer-tuho, jossa tekoäly leikkaa yritysten kuluja, kasvattaa voittoja ja romahduttaa palkkatuloihin perustuvan ostovoiman? Vai toteutuuko vaihtoehto, jossa verotus, tulonsiirrot ja uudelleenkoulutus suunnitellaan etukenossa. Toinen osa kattaa agenttijärjestelmät, Agionin governance-kerroksen ja datakeskeisen yritysarkkitehtuurin: miten tuhansia epädeterministisiä agentteja voi käyttää turvallisesti ja suvereenisti ilman, että data karkaa hyperskalereille. Lopuksi ihmisen osa koneistossa: AI-burnout, “vielä yksi parempi prompti” -kulttuuri ja se, miksi CrossFit on Mykkäselle välttämätön vastavoima tekoälygrindille.00:00 Juhani Mykkänen, fokus tekoälyssä, Agionissa eikä Wolt-tarinassa02:07 Zen Robotics, singulariteetti ja “Äly hoi” -jutusta Eric Schmidtin mielenmuutokseen04:17 GPT-hetki 2022, taikalampun metafora ja tuhannet sivut keskusteluja kielimallien kanssa05:50 Citrini Researchin doomer-skenaario: tekoäly leikkaa kuluja, vie palkkatulot ja aiheuttaa kysyntäshokin08:39 Hamilton Lane -tilaisuus ja Juhanin kysymys: tehostuvat yritykset vs. heikkenevä ostovoima11:40 Työ, pääoma ja tekoäly kolmantena pelaajana; foundation-mallien kehityskulut uponneina kustannuksina12:53 Kiinalaiset bottifarmaajat, mallien ominaisuuksien kopiointi ja open source Euroopan pelastajana13:14 Indeksirahastot vs. stock picking tekoälyaikana, Nvidia, Meta ja hyperskalereihin kytkeytyvät yhtiöt15:03 Suomi startup-valtiona. Mykkäsen 60 tapaamista ja havainto: ymmärrys on, mutta resurssit puuttuvat17:31 Inferenssin halpuus, 300 €/kk AI-työkalupakki ja GDPR reunaehtona, ei estona19:08 Mykkäsen AI-käyttö: terapeuttina, oppimiskaverina, lähtötasotestit ja iteratiivinen oppiminen19:54 Mallileirit: Anthropic/Claude, Gemini 3.1, OpenAI-ympäristöt ja kiinalaisten mallien tietoturvariski21:11 Ehdotus: tekoäly Suomen kansalliseksi strategiseksi prioriteetiksi, miljardiluokan panostukset21:39 “Toimari lomalla” -metafora: juustohöyläys vs. isot, motivoivat suuntapäätökset23:30 Agion ja agenttinen governance: urheiluauto-metafora, missiopohjaiset agenttiprosessit ja trust scoring27:21 Datakeskeinen yritys: SaaS-viidakosta yhteen datapohjaan, jossa agentit operoivat suoraan tiedon päällä30:02 Suvereniteetti ja pilvivalinnat: UpCloud-esimerkki, malli- ja pilviagnostinen arkkitehtuuri32:04 Gastown vs. “Ralph Wiggum loop”: monimutkainen orkesteri vs. yksinkertainen sekventiaalinen malli33:10 Johtopäätös: ihmisen ja agenttisen järjestelmän yhteispeli strategia-tasolla on voittava malli37:13 Max Tegmarkin urnateoria, valkoiset ja mustat marmorikuulat, tekoälyn rooli riskien kiihdyttäjänä41:06 Elon Musk, Grok, simulaatiohypoteesi ja “player one” -ajattelu49:19 GTA-vertaus: kun luulee olevansa pääpelaaja, sivuhahmojen kohtelun moraali murenee50:34 Harvard Business Review ja AI-käyttäjien ensimmäinen burnout-aalto53:06 CrossFit, apinalajimetafora ja se, miksi AI-grind vaatii hyvän fyysisen kunnonNeuvottelija Sisäpiirissä keskustellaan CrossFitistä ja Juhanin omasta salista SalmisaaressaKatso Sisäpirijaksot ja tue Samiahttps://www.youtube.com/channel/UCRI34L9OtDJuZpaWicbNXzg/joinNeuvottelija Sami Miettinen
ADV - Incogni: https://incogni.com/crimeandcomedy ADV - Melinda: https://servedby.flashtalking.com/click/1/305361;10602353;50126;211;0/?ft_width=1&ft_height=1&gdpr=${GDPR}&gdpr_consent=${GDPR_CONSENT_78}&us_privacy=${US_PRIVACY}&url=44359789 C&C Live! Roma: https://teatroservi.vivaticket.it/it/event/ee-08-crime-comedy/272273 Tutte le date Live!: https://www.crimeandcomedy.it/eventi-live/ Jane Toppan è stata soprannominata Jolly Jane dai suoi colleghi, perché è un'allegra infermiera, amichevole con tutti, simpatica, sempre sorridente e incline allo scherzo. Anche se la sua vita prima di diventare infermiera è stata un mezzo inferno. Però ora si sta riscattando, e sembra andare tutto bene, almeno finché qualcuno si accorge che intorno a Jolly Jane muoiono un po' troppe persone. --------- Patreon: https://www.patreon.com/crimeandcomedy Instagram: https://www.instagram.com/crimeandcomedy.podcast/ Telegram: https://t.me/crimeandcomedy Sito: https://www.crimeandcomedy.it Instagram: Clara Campi: https://www.instagram.com/claracampicomedy/ Marco Champier: https://www.instagram.com/mrchreddy/ Editing - Ilaria Giangrande: https://www.instagram.com/ilaria.giangrande/ Caricature - Giorgio Brambilla: https://www.instagram.com/giorgio_brambilla_bookscomedy/ Capitoli: (00:00:00) | Intro (00:00:23) | Sigla (00:00:37) | Ringraziamenti Patreon (00:05:14) | Jolly Jane Toppan, un'infanzia disastrosa (00:08:57) | Incogni (00:10:31) | L'adozione di Jolly Jane Toppan (00:31:47) | Jolly Jane Toppan un'infermiera perfetta (00:46:43) | Troppe morti poratano all'arresto di Jolly Jane Toppan (01:25:05) | I nostri Patreon Learn more about your ad choices. Visit megaphone.fm/adchoices
Fantasy football is unpredictable, but your internet price doesn't have to be. Lock in fast, reliable WiFi with Xfinity's 5-Year Price Guarantee.https://ad.doubleclick.net/ddm/trackclk/N8667.5415713FLNEWSLETTERLLC/B34798571.4365895[…]gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ltd=;dc_tdv=1Dwain McFarland joins fantasy football expert Ian Hartitz on the show to unveil his Rookie WR Super Model for the 2026 NFL Draft class. We break down what the model looks for, its historical hit rates, and then go prospect-by-prospect through the top names: Carnell Tate, Jordyn Tyson, Makai Lemon, KC Concepcion, Denzel Boston, Elijah Sarratt, and Omar Cooper — the good, the not-so-good, and the comps. (edited) Learn more about your ad choices. Visit megaphone.fm/adchoices
AI is transforming the world—but is it transforming privacy for better or for risk? We trust our GP with our deepest secrets, but can we extend that same trust to AI-powered systems and cloud-based suppliers? And if AI can re-identify people even in anonymized research data, is “anonymous” still real anymore? In this episode, Punit Bhatia and Tania Palmariellodiviney reveals how AI tools reshape confidentiality, integrity, availability, cloud sprawl, supplier risk, clinical transcription accuracy, re-identification, and even personal fears like voice-based deepfakes. The voice of experience rings clear: digital trust isn't a checkbox…it's engineered early with transparency, responsible data use, privacy by design, and safety by design.
How real-time security transforms ERP systems in a cloud-driven world, spotting threats instantly, leveraging AI for proactive defense, and closing common blind spots before breaches escalate. Curious about staying ahead of cyber risks?=====Mohammed Moidheen, SAP security architect at Infosys, unpacks why real-time monitoring is vital amid 2,200 daily cyber attacks costing trillions annually. He highlights blind spots like unmonitored access vulnerabilities, ignored audit logs, unsecured APIs, privileged accounts, insider threats, and poor event correlation in S/4HANA Cloud setups. AI evolves detection with predictive intelligence, automated responses, natural language queries, and cross-system pattern spotting, shifting from reactive to proactive security. Real-world cases show systems halting unusual data downloads and insider data exfiltration in minutes. Advice includes aligning with governance, prioritizing crown jewels, setting baselines, training teams, and correlating data. Infosys aids via assessments and foundational builds.Listen now and rethink what ERP can do for your organization!Download Episode TranscriptUseful Links: SAP Cloud ERPInfosys.comFollow Us on Social Media!SAP S/4HANA Cloud ERP: LinkedIn=====Guest: Mohammed Khan Moidheen, SAP Security Architect at Infosys ConsultingMohammed Khan Moidheen is a Senior SAP Security architect with over 12 years of experience securing and operating large scale SAP landscapes across global enterprises. His expertise spans SAP S/4HANA security, ERP platform services, DevSecOps enablement, and designing audit ready security architectures aligned with frameworks such as ISO 27001, NIST, and GDPR.Mohammed is CISSP and CISA certified and I excel at translating complex security requirements into actionable strategies that are practical , strategically aligned and strengthen organisational resilience.Host 1: Richard Howells, SAPRichard Howells has been working in the Supply Chain Management and Manufacturing space for over 30 years. He is responsible for driving the thought leadership and awareness of SAP's ERP, Finance, and Supply Chain solutions and is an active writer, podcaster, and thought leader on the topics of supply chain, Industry 4.0, digitization, and sustainability.Follow Richard Howell on LinkedIn and XHost 2: Oyku Ilgar, SAPOyku Ilgar is a marketer and thought leader specializing in SAP's digital supply chain and ERP solutions since 2017. As a marketer, blogger, and podcaster, she creates engaging content that highlights innovative SAP technologies and explores key topics including business trends, AI, Industry 4.0, and sustainability.She holds dual bachelor's degrees in Finance & Accounting and English Translation, along with a master's degree in Business Administration and Foreign Trade, specializing in marketing. With her background in digital transformation, Oyku communicates technology trends and industry insights to help professionals navigate the evolving business landscape.Oyku's LinkedIn and SAP Community=====Key Topics: real-time security, ERP monitoring, cloud threats, SAP S/4HANA, access management, audit logs, AI threat detection, insider threats, privileged accounts, predictive intelligence
The modern automotive industry faces many new challenges, as vehicles evolve with more complex data requirements and supply chains become increasingly interconnected, major Original Equipment Manufacturers (OEMs) require certain Standards as a mark of trust from potential suppliers. Currently, this trust is codified in TISAX (Trusted Information Security Assessment Exchange). For businesses that have not previously dealt with Standards, TISAX can be seen as a daunting regulatory hurdle. However, a TISAX label is more than a compliance check, it's a recognised mark that your organisation has robust information security measures in place specific to the automotive industry, including considerations for protecting key intellectual property and prototype innovations. In this episode, Ian Battersby is joined by Emma Coxhill, isologist at Blackmores, to explore what TISAX is, who it applies to, what it requires and how OEM's and automotive suppliers can take their first steps towards earning a TISAX label. You'll learn · What is TISAX? · Who is TISAX applicable to? · Why is TISAX important? · What are the 3 assessment levels within TISAX? · What are the 3 different subject areas within TISAX? · How is TISAX implemented? · Why does TISAX use labels instead of certificates – and how can people verify these? · What is the ENX portal and how does this help with supplier onboarding? · Where should companies start if they want to earn a TISAX label? Resources · Register for our TISAX webinar here · ENX · Isologyhub In this episode, we talk about: [02:05] Episode Summary – Emma Coxhill joins Ian to dive into the topic of TISAX, including who it's applicable to, why it's important and how businesses can make a start on earning a TISAX label. [03:40] What is TISAX? TISAX was developed for the automotive industry by the German Association of the Automotive Industry, VDA, and it's managed by the ENX Association. It's based on the ISO 27001 Annex A controls, and was created for the automotive industry because they were looking to standardise the framework for assessing and sharing information security results between manufacturers and their suppliers. [04:40] Who is TISAX applicable to? While applicable to the automotive industry, it encompasses quite a lot of businesses within this. This is because is applies to any organisation that handles sensitive data relating to vehicle development, manufacture and marketing. So, this can include any company providing car parts, vehicle software, cloud services, testing labs, engineering etc. Basically, any service providers to OEMs (original equipment manufacturers) will be applicable. TISAX can also be applicable for those dealing with automotive related events, marketing and photography, as new models are protected IP and will require related business to prove that they have the correct security requirements to ensure any potential prototypes are protected. [06:50] Why is TISAX important? Mainly, it gives the automotive industry a trusted, standardised way to ensure information security across the entire supply chain. Without it, the OEMs and suppliers can conduct their own audits, but it'll be their own interpretations or what is considered an adequate level of security. The industry saw this as an open door to chaos, so TISAX was created to protect highly confidential automotive information and support compliance with relevant data protection laws. However, now it's not so much a 'nice to have' Standard as it is a requirement to trade, especially within Europe. It's fast becoming a tender requirement, and many OEMs won't make it past the procurement process without a valid TISAX label. The ENX portal, where labels are registered, can also help speed up the on-boarding process. So, the whole TISAX system has been built for ease of access to help manufacturers choose suppliers that prioritise information security. [09:00] What's the consequence of not having a TISAX label? A loss of opportunities. Those within the automotive industry that don't have a valid label will be seen as a security risk, leaving them at a competitive disadvantage. [10:30] What are the 3 levels within TISAX? Unlike ISO 27001, TISAX has levels that depend on the level of data sensitivity that you're dealing with. Level 1: Self-assessment – Considered as 'normal risk' with general processing of data. Level 2: Remote Audit – Applicable to those dealing with confidential information such as design documents or internal projects. This requires both a self-assessment and an audit. Level 3: On-site Assessment – Highly confidential information, so this applies to those dealing with sensitive research, development information or prototype data etc. This requires a physical on-site assessment, as the qualified TISAX auditor will need to ensure that you have the appropriate physical security measures in place. Most businesses will require level 2, but if you're looking to work with high-spec OEMs, then level 3 is more desirable. [12:00] What are the 3 subject areas within TISAX? The 3 main areas are as follows: Information Security: This covers general information security controls such as relevant policies, access controls, risk management, incident handling and secure operations. Prototype Protection: This focuses on safeguarding physical and digital prototypes, design data, test vehicles and confidential development information. Data Protection: This ensures proper handling of personal data in line with legal requirements such as GDPR. If you're just doing a self-assessment, you can pick the areas which are most relevant to you. If you've been requested to earn a TISAX label, they will usually provide you with their preference on subject areas. Many will opt to take information security, but data protection is also quite common. The prototype section is more specialist and not applicable to all businesses. [14:00] How is TISAX implemented? There are a few stages to gaining a TISAX label: Awareness – Learn the requirements for TISAX and planning for the project ahead. This may include asking your clients about what they expect of your from an information security perspective and working out costs for assessments and any additional support. The ENX website has a lot of really useful info, including a handbook and a copy of the self-assessment. Preparation – This is where you need to complete your TISAX scope and register yourself on the ENX portal. Your scope needs to specify your selected level (1,2 or 3) and the subject areas you'll be focusing on. You also need to include the locations within scope, which have to be listed one by one (not simply 'all offices in the UK' for example). Self-Assessment – The template for this can be downloaded from the ENX website. This is essentially a Gap Analysis that grades your current level of compliance with the TISAX requirements. It includes a scoring mechanism, where you'll be aiming to get a 2.71, as that's the pass rate. This self-assessment will highlight what gaps you need to fill before going ahead with an external assessment. Implementation – This is where you will bridge those gaps highlighted in the Self-assessment. This will involve creating the required documentation requested by TISAX and updating existing systems to align with requirements. Before going ahead with external assessments, we highly recommend you conduct some internal audits to ensure you're ready. External Assessment – Whether this is remote or on-site, you need an official TISAX auditor to perform the assessment. A list of approved TISAX auditors is available on the ENX portal, we recommend getting a few quotes to get the best price. We also recommend requesting a kick-off meeting so you can have a chat with your auditor about the requirements and how they'd like to review the required evidence of compliance. The Assessments are similar to that of an ISO certification, it's broken down into 2 segments. One is a document/evidence review and the other is done with both parties present to go through their findings, review further evidence and to question any gaps found. Again, similar to ISO, you may receive either minor non-conformities, non-conformities, opportunities for improvement or observations in their final report. If you get any non-conformities, you'll need to provide an action plan within 2 weeks following from your assessment to address them. You will then be allowed a few months to implement the corrections, which will be reviewed and approved by the auditor before receiving your label. If you only received opportunities for improvement then you'll get a label straight away. [20:40] Why does TISAX use labels instead of certificates – and how can people verify these? Taking ISO 27001 as a comparison, that certification has a blanket framework that can apply to every business. While you can exclude small bits, the vast majority applies to everyone. TISAX is more scaled based on the level of security you're dealing with. Businesses can pick both different levels and different subject areas for their Label. Another key difference is that Labels can only be verified through the ENX portal, this is where other TISAX clients can see who has what Label, including the details of level and selected subject areas. Business can still chose to state TISAX compliance on their website, but the details regarding the level of compliance only need to be seen be relevant individuals. [22:05] What is the ENX portal and how does this help with supplier onboarding? The ENX portal is accessible through the ENX website. It does require a fee to make an account, but this is where everything related to TISAX is managed. This is where you will upload your scope and findings and it's where Labels are assigned and documented for suppliers to search for. There are options for how much information you want to disclose within those public searches, allowing you to select the need for contacting for further information. The ENX portal can help massively in reducing the amount of supplier questionnaires you need to fill in, as those looking for automotive suppliers will simply look up your TISAX Label to verify if you have the required level of security to continue with the procurement process. [24:50] Where should companies start if they want to earn a TISAX label? If you're just diving in, we recommend you do some research first to fully understand what you're expected to do to earn a Label and how much the process will cost. Next you'll need to define your scope, so look at what sites need to be included and identify relevant client requirements in relation to TISAX. This is to ensure you're going for the right Level and subject areas. Next evaluate your internal resource for the project and related budget. As mentioned, you will need to pay to register on the ENX portal and you need to consider Assessment costs and any additional support costs should you need consultancy services. You'll also need to assign individuals to manage the project, which will include completing the self-assessment, updating your policies, procedures and documentation to align with the requirements and possibly conduct training if required. This isn't a 2 week project, realistic timescales will vary, but generally if you're starting from scratch you're looking at 9-12 months. If you have ISO 27001 in place already this could be reduced to 6-8 months. As with anything Standard related, leadership commitment is a big factor as you'll need their help and support to ensure the projects success. If you need additional help, reach out to consultants such as Blackmores to help guide you through the process. [28:05] Upcoming TISAX Webinar – Join us on the 18th March 2026 at 2pm for a webinar where we'll dive into TISAX further and provide practical guidance on how to complete the VDA Self-Assessment. Attendees will also get access to some freebies. So don't delay, register your place here today. We'd love to hear your views and comments about the ISO Show, here's how: ● Share the ISO Show on Twitter or Linkedin ● Leave an honest review on iTunes or Soundcloud. Your ratings and reviews really help and we read each one. Subscribe to keep up-to-date with our latest episodes: Stitcher | Spotify | YouTube |iTunes | Soundcloud | Mailing List
"Crystal Ball Marketing," a strategy centered on the "Precursor Effect." This concept involves identifying specific indicators or life events that predict exactly when a marketplace is most likely to need and buy a specific service. By targeting customers at these pivotal moments, businesses can significantly increase conversion rates with less sales effort. Key Takeaways The Precursor Effect Defined: Identifying a life event, calendar event, or business shift that occurs immediately before a customer requires your services. The Marathon Analogy: If you sell cold water at the finish line of a marathon, you don't need a clever sales pitch because the "precursor" (running a marathon) has already created an intense, immediate need. Transference: A precursor strategy that works in one industry (like targeting new movers) can often be successfully applied to another unrelated industry. Case Study: The "Moving" Strategy Frank shares a success story from an inner circle member in the professional services industry who helps people in physical pain: The Precursor: Moving into a new home is a physically demanding experience that often leads to physical pain. The Strategy: The client obtained a list of 540 people who had recently moved and sent them a 1.5-page letter offering a free initial service. The Investment: Approximately $1,000 for the list and mailing. The Results: 8 new customers acquired immediately. $2,500 in immediate cash collected. Over $14,000 in projected lifetime customer value (LTV) within the first year. Industry Examples of Precursors Legal Industry: The implementation of GDPR served as a massive precursor for lawyers to sell updated privacy policies. Home Services: Moving into or out of a home is a primary indicator that a homeowner will need maintenance or repair services. Dentistry: Halloween acts as a precursor for cavity checks due to high sugar consumption. Weight Loss: Holidays like Thanksgiving and Christmas are precursors for weight loss services as people tend to gain weight and seek a "reset" afterward. Action Steps Brainstorm: Spend a few minutes writing down every possible situation or event in a person's life that would make them want your service. Identify: Determine how you can find or "broker" a list of people who have just experienced those specific precursors. Execute: Create a targeted offer for those individuals while the need is at its peak.
Fantasy football is unpredictable, but your internet price doesn't have to be. Lock in fast, reliable WiFi with Xfinity's 5-Year Price Guarantee.https://ad.doubleclick.net/ddm/trackclk/N8667.5415713FLNEWSLETTERLLC/B34798571.4365895[…]gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ltd=;dc_tdv=1We're back with another episode of Fantasy Life with Ian Hartitz and in today's episode Ian is joined by fantasy football expert Dwain "The Rock" McFarland to break down everything you need to know about the running back position heading into NFL free agency.This offseason's running back free agent class is historically deep — and where these players end up will completely reshape fantasy football drafts for 2026.We break down every RB that matters this offseason, from the headliners to the names flying under the radar. For each player, we cover what they did in 2025, the landing spots that make sense, and what it all means for your fantasy team next season.In today's episode: Are the Chiefs the best landing spot for any free agent RB? Will Kenneth Walker find a new home? Is Breece Hall the BEST free agent RB? And will he move on from the Jets? We're breaking down all this and so much more! Learn more about your ad choices. Visit megaphone.fm/adchoices
Vládny audit bol politickým zadaním no preukázal veľmi dobré výsledky občianského sektora. Reputačné škody ale budú obrovské, pre Aktuality to povedal Juraj Rizman z organizácie Post Bellum. Štát a jeho inštitúcie by boli veľmi radi, keby miera pochybenia pri ich vlastných projektoch bola iba pol percenta, dodáva. Ustojí Tretí sektor vládnu šikanu a prečo Juraj Rizman zažaloval Luboša Blahu?Ústavný súd iba nedávno vystavil zásadnú stopku vládnemu zákonu o mimovládkach,. Po snahe onálepkovať Trestí sektor ako agentov cudzej moci, tak legislatívne zlyhal aj koaličný pokus spraviť z mimovládneho sektora výlučných lobistov. Napriek verdiktu ústavných sudcov však politická a administratívna vojna vládnej koalície voči tretiemu sektoru ani zďaleka nekončí. Napokon, svedčia o tom aj slová i činy premiéra Fica, ktorý sa svojim nepriateľským postojom k občianskej spoločnosti už dlhodobo nijako netají a svoju vládu už pri nástupe označil aj za koniec éry vlády mimovládok.Za pravdu mu mal dať aj vládny audit vybraných subjektov. Ten odhalil účtovné a finančné pochybenia vo viacerých renomovaných organizáciách, či už ide o Post Bellum alebo projekty spojené s disidentkou Martou Šimečkovou. Aké reálne výsledky teda tento audit v skutočnosti priniesol? Potvrdil vládnu propagandu cieliacu na občiansku spoločnosť a demaskoval zásadné finančné pochybenia Tretieho sektora alebo je to práve naopak?Preverovalo sa niečo cez 40 miliónov, nedostatky a pochybenia sa našli vo výške cez 230 tisíc, takže miera pochybenia je - i podľa samotného ministerstva financií, približne vo výške 0,5 percenta celkovej sumy. To je veľmi dobrý výsledok pre celý občiansky sektor a štátne inštitúcie by boli veľmi radi, keď by miera pochybenia pri ich vlastných projektoch bola iba pol percenta, tvrdí Juraj Rizman.Aktuálne - napriek auditu - však vláda nariadila ďalšie širokospektrálne kontroly mimovládnych organizácií a to aj v oblastiach ako je BOZP či GDPR. Dá sa teda už hovoriť o šikane občianskej spoločnosti a ustojí tretí sektor pokračujúcu šikanu vlády Roberta Fica? Vydržali sme Mečiara, vydržíme aj Fica. Zatiaľ všetci, ktorí sa snažili zakázať či obmedziť občiansku spoločnosť - či už to boli fašisti, komunisti alebo to bol V. Mečiar, tak vždy prehrali. Žiaľ, takto neustále plytváme potenciálom tých najaktívnejších ľudí tejto krajiny, hovorí Juraj Rizman. Vládna šikana podľa neho bude pokračovať a tretí sektor sa pokúsia rozdeliť metódou “cukru a biča”. Časť sektora si budú chcieť kúpiť a ostatných zastrašiť alebo aspoň odradiť, dodáva.Ráno Nahlas. Tentoraz s Jurajom Rizmanom z občianskeho združenia Post Bellum. Pekný deň a pokoj v duši praje Braňo Dobšinský
"It's not just about where your data lives - it's about who should, or shouldn't, have access to it."In this episode of Softcat's Explain IT podcast, host Helen Gidney, Head of Architecture at Softcat, is joined by Sabina Anja, Chief Technologist, VMware Cloud Foundation at Broadcom, and Gary Hawkins, Chief Technologist, Hybrid Platforms at Softcat, to demystify the complexities of Data Sovereignty.As organisations face increasing regulatory pressure and the rapid adoption of AI, understanding where your data lives - and who controls it - is critical. The discussion explores how governance, the Cloud Act, and GDPR are reshaping cloud strategies across Europe, driving a renewed interest in private cloud and sovereign cloud solutions.In this episode, Helen, Sabina and Gary discuss:• Defining Data Sovereignty: Why it is not just about location, but about jurisdiction, technical control, and operational access.• The Reality of Repatriation: Analysing the shift back to on-premise or Neo cloud environments to control data, without abandoning public cloud entirely.• Modern Infrastructure: How containers, Kubernetes, and AI demands are influencing infrastructure and data design.• The Power of Platforms: Meaningful insights on using VMware Cloud Foundation 9 (VCF9) to provide a unified control plane for policy-based data sovereignty.Thanks for listening to the Explain IT podcast from Softcat.This podcast is produced by The Podcast Coach. Hosted on Acast. See acast.com/privacy for more information.
Irish SMEs may be unknowingly breaching GDPR and failing to meet Workplace Relations Commission (WRC) record-keeping requirements due to widespread gaps in how HR documents are stored, accessed, and governed. That is, according to new findings published from the Irish SME HR Report, by Ireland's leading people management platform, HRLocker. The report, based on responses from professionals working on HR in organisations employing 20–249 people, reveals that document disorder has become one of the most significant, yet preventable, compliance risks facing Irish businesses. Two-thirds breach GDPR due to insecure HR data storage Under Articles 5 and 32 of the EU's General Data Protection Regulation (GDPR), employers must ensure the integrity, confidentiality, and security of employees' personal data. Yet 66 per cent of SMEs continue to store HR documents in insecure systems, including general cloud folders (32 per cent), local hard drives (11 per cent), paper files (11 per cent) and email threads (9 per cent). The Data Protection Commission has already investigated SMEs for similar failures. In a recently published case, an employer mishandled sensitive employment information during a data breach, prompting an official complaint and regulatory intervention. The DPC found that the organisation had not implemented adequate safeguards to protect employee data, providing a clear example of the real?world consequences of poor HR document governance. Under GDPR, failures of this kind can result in administrative fines of up to €10 million or 2 per cent of global turnover, as well as compensation claims from affected employees. More than half failing to comply with data protection regulations The report highlights that 59 per cent of SMEs lack accurate, formal version control, risking breaches of GDPR Article 5(1)(d), which requires organisations to maintain accurate and up?to?date employee records. Further, 56 per cent do not have a current retention policy for HR data, despite the GDPR storage limitation principle and obligations under the Data Protection Act 2018. Mid-sized SMEs (50–99 employees) are the least compliant, with over one-third (39 per cent) lacking any retention policy at all. Without version control or retention schedules, SMEs cannot demonstrate compliance during WRC inspections or GDPR investigations, leaving them exposed to enforcement action, compensation claims, and costly remediation work. More than one in three risks undermining accountability requirements There is a clear lack of auditability in the sector, with 26 per cent of SMEs reporting that they do not maintain an audit trail for HR document access and changes. A further 27 per cent are unsure whether one exists, meaning more than one in three lack robust processes. This lack and uncertainty place organisations at risk of breaching GDPR Articles 24 and 30, which require employers to demonstrate accountability and maintain clear records of processing activities. In the event of a data-access request, breach investigation, or WRC inspection, the absence of an audit trail can lead to immediate compliance failure. Non-compliance carries real financial and operational consequences Governance gaps fuelled by document disorder also undermine compliance with core Workplace Relations Commission (WRC) record-keeping obligations, including requirements to maintain accurate, accessible, and up-to-date records on: Working hours Annual leave and public holidays Contracts and terms of employment Payroll and remuneration Disciplinary and grievance procedures Under the Workplace Relations Act 2023, missing audit trails, outdated files, or scattered storage systems can result in fixed-payment notices of up to €2,000 per offence, in addition to compensation awards to employees and orders to rectify records at the employer's expense. These costs come on top of business disruption during follow-up inspections and reputational damage that undermines employee trust. A preven...
Vládny audit bol politickým zadaním no preukázal veľmi dobré výsledky občianského sektora. Reputačné škody ale budú obrovské, pre Aktuality to povedal Juraj Rizman z organizácie Post Bellum. Štát a jeho inštitúcie by boli veľmi radi, keby miera pochybenia pri ich vlastných projektoch bola iba pol percenta, dodáva. Ustojí Tretí sektor vládnu šikanu a prečo Juraj Rizman zažaloval Luboša Blahu?Ústavný súd iba nedávno vystavil zásadnú stopku vládnemu zákonu o mimovládkach,. Po snahe onálepkovať Trestí sektor ako agentov cudzej moci, tak legislatívne zlyhal aj koaličný pokus spraviť z mimovládneho sektora výlučných lobistov. Napriek verdiktu ústavných sudcov však politická a administratívna vojna vládnej koalície voči tretiemu sektoru ani zďaleka nekončí. Napokon, svedčia o tom aj slová i činy premiéra Fica, ktorý sa svojim nepriateľským postojom k občianskej spoločnosti už dlhodobo nijako netají a svoju vládu už pri nástupe označil aj za koniec éry vlády mimovládok.Za pravdu mu mal dať aj vládny audit vybraných subjektov. Ten odhalil účtovné a finančné pochybenia vo viacerých renomovaných organizáciách, či už ide o Post Bellum alebo projekty spojené s disidentkou Martou Šimečkovou. Aké reálne výsledky teda tento audit v skutočnosti priniesol? Potvrdil vládnu propagandu cieliacu na občiansku spoločnosť a demaskoval zásadné finančné pochybenia Tretieho sektora alebo je to práve naopak?Preverovalo sa niečo cez 40 miliónov, nedostatky a pochybenia sa našli vo výške cez 230 tisíc, takže miera pochybenia je - i podľa samotného ministerstva financií, približne vo výške 0,5 percenta celkovej sumy. To je veľmi dobrý výsledok pre celý občiansky sektor a štátne inštitúcie by boli veľmi radi, keď by miera pochybenia pri ich vlastných projektoch bola iba pol percenta, tvrdí Juraj Rizman.Aktuálne - napriek auditu - však vláda nariadila ďalšie širokospektrálne kontroly mimovládnych organizácií a to aj v oblastiach ako je BOZP či GDPR. Dá sa teda už hovoriť o šikane občianskej spoločnosti a ustojí tretí sektor pokračujúcu šikanu vlády Roberta Fica? Vydržali sme Mečiara, vydržíme aj Fica. Zatiaľ všetci, ktorí sa snažili zakázať či obmedziť občiansku spoločnosť - či už to boli fašisti, komunisti alebo to bol V. Mečiar, tak vždy prehrali. Žiaľ, takto neustále plytváme potenciálom tých najaktívnejších ľudí tejto krajiny, hovorí Juraj Rizman. Vládna šikana podľa neho bude pokračovať a tretí sektor sa pokúsia rozdeliť metódou “cukru a biča”. Časť sektora si budú chcieť kúpiť a ostatných zastrašiť alebo aspoň odradiť, dodáva.Ráno Nahlas. Tentoraz s Jurajom Rizmanom z občianskeho združenia Post Bellum. Pekný deň a pokoj v duši praje Braňo Dobšinský
Fantasy football is unpredictable, but your internet price doesn't have to be. Lock in fast, reliable WiFi with Xfinity's 5-Year Price Guarantee.https://ad.doubleclick.net/ddm/trackclk/N8667.5415713FLNEWSLETTERLLC/B34798571.4365895[…]gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ltd=;dc_tdv=1UNTITLED with Kendall and Cooterdoodle is BACK for another season! These two fantasy football experts are here to give you all of the information you need to know this NFL offseason for fantasy football, all while having a bit of fun along the way!In today's epsiode: Did you hear that the Seahawks aren't going to franchise tag Kenneth Walker? Kendall is giving up ADP for lent?! Breaking down recently dropped NFL win totals Who is going to get franchise tagged? Kendall and Cooterdoodle are here to break it all down! Learn more about your ad choices. Visit megaphone.fm/adchoices
Today we are talking about Mautic, marketing automation, and its history with Drupal with guest Ruth Cheesley. We'll also cover Mautic ECA as our module of the week. For show notes visit: https://www.talkingDrupal.com/541 Topics What Is Mautic? Self-Hosting and Data Ownership Who Uses Mautic + Personalization Mautic's History with Drupal How Drupal Integrate Mautic Orchestration in Mautic Privacy & Compliance: GDPR Tools, Consent, and Do-Not-Contact Controls Hosting Options Advanced Segmentation Points-Based Lead Scoring Validating Segments Using Points to Boost Common Mautic Adoption Pitfalls Getting Support The Future with AI AI and Open Source Maintenance Mautic Sustainability & Fundraising How to Contribute Resources Mautic Mautic Integration Advanced Mautic Integration Talking Drupal #343 - Marketing Automation with Mautic Managed hosting, 40% goes to the community Mautic/Drupal case study and presentation on that from our conference https://www.youtube.com/watch?v=r0SkfeHTLK8 https://mautic.org/case-study/inagro/ GDPR cleanup jobs to remove old data Anonymization tasks to comply with specific laws (eg CCPA) Anonymize IP setting Proposal to overhaul all things privacy and streamline experience for marketers - currently seeking funding, planning to ship in Mautic 9 Mautic contribution docs Testing PRs: inlcuding local setup guide Low/no-code tasks board Thanks Dev Ecosystems Guests Ruth Cheesley - ruthcheesley.co.uk RCheesley Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi Catherine Tsiboukas - mindcraftgroup.com bletch MOTW Correspondent Martin Anderson-Clutz - mandclu.com mandclu Brief description: Have you ever wanted to integrate Mautic marketing automation into your Drupal website, using ECA? There's a module for that. Module name/project name: Mautic ECA Brief history How old: created in Jun 2025 by Abhisek Mazumdar (abhisekmazumdar) of Dropsolid Versions available: 1.0.6 which works with Drupal 10 and 11 Maintainership Actively maintained Documentation - detailed README Number of open issues: 1 open issues, which is not a bug Usage stats: 3 sites Module features and usage With the module installed, your ECA models can respond to Mautic webhooks, and can also make use of new actions to give you CRUD capabilities (Create, Read, Update, or Delete) for contacts and segments within ECA Mautic ECA declares the Mautic API module as a dependency, and you need to use it to set up an API connection, and to define any webhooks you want to use in your models It's worth noting that the maintainers of Mautic ECA also seem to be involved with a number of other modules in the Mautic API ecosystem, including Mautic Personalization, as well as Mautic Content Provider, which can expose Drupal content for use in Mautic, for example to include in emails
In questa puntata parliamo con Antonio Baldassarra, CEO di Seeweb, per entrare nel cuore operativo di un cloud provider. Dalla progettazione di un datacenter alla gestione dell'hardware, emergono dinamiche economiche, scelte tecniche e responsabilità imprenditoriali che raramente vengono raccontate. L'episodio offre uno sguardo concreto su cosa significa costruire e far evolvere l'infrastruttura cloud oggi.La riflessione si estende poi al ruolo che l'Europa può svolgere nello sviluppo di un'offerta cloud credibile e competitiva. Una discussione pragmatica, utile a chi prende decisioni tecnologiche con impatti strategici.
Fantasy football is unpredictable, but your internet price doesn't have to be. Lock in fast, reliable WiFi with Xfinity's 5-Year Price Guarantee. https://ad.doubleclick.net/ddm/trackclk/N8667.5415713FLNEWSLETTERLLC/B34798571.4365895[…]gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ltd=;dc_tdv=1 We're back with another episode of Fantasy Life with Ian Hartitz and in today's episode Ian is joined by fantasy football and award-winning NFL mock drafter Matthew Freedman to break down the 2026 NFL Draft Class and, more specifically, the quarterbacks in this class. In today's episode: WHY is Fernando Mendoza the consensus QB1 of this class? Who actually is the QB2 after Mendoza? Could a surprise QB from North Dakota State make waves? We're talking all this and so much more! Learn more about your ad choices. Visit megaphone.fm/adchoices
Where can we retain the human touch, impactfully, in the age of AI? Thomas Scherer, cloud architect & computer scientist working for Google joins Lisa. One Saturday night, Thomas sat down with Gemini and asked, "What will make me the happiest person in the world?" Over the course of the next few hours, he got some fascinating results. All of this is part of the story of AI in our lives today, but there is so much more. This conversation is a small reflection of where we are with AI and why we should embrace its benefits, learning as much as we can with careful curiosity. From Horses to Cars “What do I do with my horse-riding skills now that the car has been invented?” With this statement, Thomas reminds us that mega shifts in our human experience is historically normal, and a reflection of the human mind's brilliance. The AI Shift is just another technological step change. AI is replacing ‘commodity tasks' - those which are repetitive, standardised processes, providing us with more time to lean into creativity. We become the navigator whilst the more mundane jobs could be taken over by AI. A new way to Search Traditional search engines try to match words whereas modern AI systems match meaning. When you search for trousers for instance, AI systems can use images and semantic understanding to infer style, intent, and context rather than just scanning for the keyword ‘pants or trousers.' Large language models (LLMs) such as Gemini, ChatGPT, Claude, Perplexity, and so on, predict the most likely next word, turning colossal amounts of data into fluent conversation, explanation, and even advice based solely on statistical probability of word patterns. We don't even need to invent the perfect query as they can also predict this. AI as Your Collaborative Partner Used well, AI is more like a creative collaborator: a brainstorming partner that proposes alternative angles, structures, and prompts. For small businesses, it can become an extra “virtual team,” generating draft podcasts, social posts, or marketing visuals that can then be curated and refined. But all the while, it remains the human who sets the objectives and the required tone. This also lends itself to the possibility of many people becoming autonomous, single-person businesses. Agents: When AIs Start Working Together When you give an AI tools and sub-tasks, it can orchestrate them toward a goal. One agent might create images; another might check whether those images match the brief (e.g. 'sunny landscape, not rain'); together, they negotiate improvements until the output fits what you asked for. Even non-technical people can use early agent-like products. NotebookLM, for instance, lets you upload documents, then: - Ask questions about them in natural language. - Generate personalised podcasts from your own material that you can listen to during a commute. - Work across multiple languages, both in sources and in the audio you generate. A recurring complaint in companies is: “Our data is too messy to do AI.” That is partly true for training bespoke models: bad data in, bad model out, but paradoxically, AI is also very good at cleaning data in the first place. You can literally give such a tool a messy folder of information and ask to make sense of it. Because it understands patterns in addresses, email formats, names, and categories, AI can, for example: - Standardise your contact lists so mailings no longer bounce. - Extract fields from scanned paperwork and fill out forms for you. - Help you perform a “data spring clean” on everything from CRM records to home admin. For an individual drowning in paperwork, this is transformative: scan, upload, and ask the AI to pre-fill or summarise, then you simply review and sign. Everyday Simplifications with AI You do not need to be a computer scientist to get real value from AI. A good starting sequence for a normal day could include: - Identify what you hate doing: repetitive emails, calendar logistics, summarising long documents, or form-filling. - Ask the AI directly: “Show me how to use you to spend less time on this task,” then iterate based on its suggestions. - Start with non-sensitive data and low‑risk tasks, and only move to personal or client material once you understand the provider's terms and privacy guarantees. People in Luxembourg working across languages can also benefit from live translation and dubbing: tools already exist that let you speak in German and be heard in French or English in your own voice, with a slight delay, in meetings or recorded content. Jobs, Risk, and the Human Edge AI is reshaping the job market. In the UK, one study found that companies using AI had eliminated 11% of previous roles and left another 12% unfilled, while creating 19% new roles, which is a net loss of 4% overall, with the UK faring worse than the US on the balance between jobs lost and created. That reality naturally fuels both excitement and anxiety. What AI targets first are commodity tasks: copy-pasting, routine classification, basic template writing, or standardised analysis. The more your work relies on unique human context, judgment, empathy, and rapport, from live concerts to therapy and even parenting, the harder it is to replace. The opportunity, and pressure, is to climb the value chain: stop being the engine that moves the data and become the navigator who decides where to go. Trust, Safety, and Owning Your Self Image and Voice As AI systems get better at imitating voices and faces, distinguishing fake from real becomes a societal survival skill. Voice scams already exploit cloned speech to convince parents their child is in danger, and manipulated images can travel faster than fact‑checks. Two layers of protection are emerging: - Technical safeguards such as watermarking in generated images or audio, which allow downstream tools to flag AI‑created content. - Legal and ethical frameworks like GDPR in Europe, which treat your appearance and voice as personal data requiring your consent for alteration and reuse. - Providers also increasingly commit to indemnifying users when material generated within the rules is later challenged on copyright grounds, shifting some of the risk back to the platforms that trained the models. Prompting: Talking to AI so It Really Helps You do not need to be a prompt engineer, but a few habits make a big difference. First, describe what you do want rather than only what you do not want: “Keep the face unchanged and brighten the background” works better than “Don't change the face.” Second, you can use AI to improve your own prompts: - Tell it your goal (“I want a video that shows X for Y audience”). - Ask: “Write a detailed prompt I can paste into a video/image generator.” - Edit the suggested prompt so it fits your tone, context, and constraints. Over time, this becomes a self-teaching loop: the AI drafts the prompt, you tweak and observe the output, and your intuitive sense of what to ask for gets sharper. AI, Emotions, and the Limits of the Machine Some people now confide in chatbots as if they were friends or therapists. In one late-night experiment, Thomas asked Gemini to interview him and figure out what would make him “the happiest person in the world”; the system eventually pointed out contradictions in his answers and nudged him toward deeper reflection. That shows how AI can mirror back patterns in your own thinking and ask probing questions. But it still lacks the embodied empathy, nuanced perception, and ethical responsibility of a trained human therapist, who reads not just words but tone, pauses, posture, and history. AI can supplement support; it should not replace serious care. Why You Should Start Now Paradoxically, Thomas's biggest fear is not that AI will take over, but that people will be left behind because they are too afraid to try it. Like refusing to learn to drive when everyone else has moved to cars, opting out of AI entirely risks shrinking your options just as the toolset explodes. The most practical stance is curious, critical use: test it, set boundaries, keep the human touch at the centre, and let the machines handle the drudgery.
Send a textWhat actually needs to be in place before digital pathology can replace the microscope?In this episode of DigiPath Digest, I walk through the 2026 Polish Society of Pathologists guidelines and translate them into practical steps for real pathology labs. This isn't theory. It's about hardware fidelity, data integrity, validation, and AI integration — and what each of these actually requires in daily workflow.We talk about scanner resolution standards (≤0.26 μm per pixel), 4K monitor calibration, visually lossless compression (20:1), scalable storage, pathologist-driven validation, and what “non-inferiority” truly means.Digital pathology is not just a change of medium. It's an operational shift.Episode Highlights[00:02] Community & growth 1,600+ new newsletter subscribers, 10,000+ Facebook members, and free Digital Pathology 101 book access.[07:20] The 4 pillars of adoption Hardware fidelity · Data integrity · Clinical validation · Future integration.[08:30] Hardware requirements 40x equivalent scanning (≤0.26 μm/px), 4K monitors, >300 cd/m² luminance, 10-bit color depth.[12:00] Workflow & throughput 200–300 slides/day per scanner, automated focus control, urgent case prioritization.[17:25] Storage & archiving ~1 GB per slide. Active archive (6–24 months). Long-term retention (10–20 years). GDPR compliance & TLS encryption.[23:09] Validation philosophy Pathologist-centered validation. Two phases: • Familiarization (~20 retrospective cases) • Dual review with discrepancy tracking Goal: digital must be non-inferior to glass.[29:03] AI in digital pathology AI supports quantification (Ki-67, HER2, ER/PR, PD-L1), tumor detection, and future multimodal predictions — but pathologists remain central.[33:26] Intraoperative telepathology
I veckans odpod: Kinas RoboCop, sovjetisk schack, ett reglerat internet, falsk punk och så klämtar klockan för krypto. Om du kan, stöd oss på http://patreon.com/odpod
AI is transforming the world—but is it transforming privacy for better or for risk? We trust our GP with our deepest secrets, but can we extend that same trust to AI-powered systems and cloud-based suppliers? And if AI can re-identify people even in anonymized research data, is “anonymous” still real anymore? In this episode, Punit Bhatia and Tania Palmariellodiviney reveals how AI tools reshape confidentiality, integrity, availability, cloud sprawl, supplier risk, clinical transcription accuracy, re-identification, and even personal fears like voice-based deepfakes. The voice of experience rings clear: digital trust isn't a checkbox…it's engineered early with transparency, responsible data use, privacy by design, and safety by design.
Fantasy football is unpredictable, but your internet price doesn't have to be. Lock in fast, reliable WiFi with Xfinity's 5-Year Price Guarantee.https://ad.doubleclick.net/ddm/trackclk/N8667.5415713FLNEWSLETTERLLC/B34798571.4365895[…]gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ltd=;dc_tdv=1We're back with another episode of Fantasy Life with Ian Hartitz and in today's episode Ian is joined by fantasy football expert Dwain "The Rock" McFarland to break down everything you need to know about the quarterback position this NFL offseason.What are the sure fire moves that teams will make this offseason? Will Minnesota get competition for J.J. McCarthy? Where will guys like Kyler Murray and Tua Tagovailoa end up in the trade market? We're breaking down all this and so much more of the NFL offseason and how the QB position may shape up! Learn more about your ad choices. Visit megaphone.fm/adchoices
Most B2B companies struggle to turn marketing into measurable pipeline. At B2B Better, we build owned media systems that sales teams actually use to close deals, shortening cycles, improving reply rates, and directly influencing revenue. If you're tired of content that looks good on paper but doesn't move the business forward, visit the links in the show notes to learn how we do it differently. If your best clients won't sign case studies because legal says no, this episode shows you exactly how to flip that dynamic. Host Jason Bradwell shares how he cracked this problem working in broadcast media tech, where sports properties refused to give free logo rights to vendors they were already paying. Jason's core point: legal teams don't fear telling the story, they fear losing control over how it's told. Traditional case studies feel like monumental approval chains with multiple drafts and stakeholder reviews. It's easier to just say no. Jason worked for a tech company serving major sports media properties. The opportunity seemed obvious: tell stories about household name clients. But sports rights holders get paid millions for sponsorship rights. Why would they give a tech vendor free permission to use their name for marketing? Most teams try tactics that don't work: anonymous case studies nobody believes, paying for logo rights, using old logos without permission, or giving up entirely and competing on price. Here's what changed. When Jason's team sat down with legal teams, they learned it wasn't fear of the story—it was fear of losing control and bandwidth nightmares. So they launched a podcast with a different value exchange. Instead of "come talk about how great we are," the pitch was "come talk about your work and how you see the industry evolving." Questions submitted in advance. Full approval. Nothing goes live without sign-off. A VP of digital from a major sports league who'd said no to every promotional request for years agreed almost immediately. When Jason asked why, the answer was clear: "For years you've been asking me to do things for you. But this time you asked me to do something for me." The unlock is simple. Traditional case studies ask for public endorsement with high risk and zero personal upside. Editorial podcasts offer a platform to showcase expertise, professionally produced content they can use, and full control. The acceptance rate jumps from 5% for case studies to 70% for editorial podcasts. Sales can share clips without requiring testimonials, and the credibility is more authentic because it doesn't feel like marketing. Chapter Markers 00:00 - The legal blocker problem across every sector 01:00 - Working with sports media properties that wouldn't give logo rights 02:00 - Why GDPR and compliance make traditional case studies nearly impossible 03:00 - Four failed attempts most teams try 04:00 - What legal and compliance teams actually fear 05:00 - How podcasts flip the value exchange 06:00 - The breakthrough moment with the VP of digital 07:00 - Why "look how great they are" beats "look how great we are" 08:00 - Traditional case study vs editorial podcast value exchange 09:00 - The counterintuitive power of implied association 10:00 - The seven-step execution process 11:00 - Using content strategically in sales without testimonials 12:00 - Acceptance rates and ROI timeline 13:00 - Why this works even for clients who'd sign case studies 14:00 - The challenge: Email your top 10 blocked clients Useful Links Connect with Jason Bradwell on LinkedIn Check out The Tim Ferriss Show and The Twenty Minute VC Explore B2B Better website and the Pipe Dream podcast
Fantasy football is unpredictable, but your internet price doesn't have to be. Lock in fast, reliable WiFi with Xfinity's 5-Year Price Guarantee.https://ad.doubleclick.net/ddm/trackclk/N8667.5415713FLNEWSLETTERLLC/B34798571.4365895[…]gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ltd=;dc_tdv=1We're throwing it back to Super Bowl week on Fantasy Life on Sirius XM Fantasy Sports Radio with fantasy football experts Kendall Valenzuela and Adam Ronis as they discuss some way-too-early running back rankings for the 2026 season.But we're not stopping there, Kendall and Adam also are giving their way too early "My Guys" for the 2026 fantasy football season. Who are they high on in early ADPs over at Underdog fantasy and who do they expect to rise and fall by the time the season comes around? Learn more about your ad choices. Visit megaphone.fm/adchoices
At ITEXPO / MSP EXPO, Zack Schwartz, Vice President of Strategic Partnerships at Trustifi, joined Doug Green to discuss a critical but often overlooked reality: while AI dominates headlines, email remains the primary attack vector for cybercrime. Trustifi delivers a full-suite email security platform purpose-built for MSPs, enabling easy deployment, centralized management, and advanced protection against next-generation AI-driven phishing attacks. Schwartz emphasized that over 91% of cyberattacks still originate from inbound email—and the sophistication of those attacks has grown dramatically with AI tools. “Cyber criminals are leveraging AI to create extremely nuanced attacks,” he explained. Trustifi addresses this by combining high-efficacy inbound phishing detection with innovative AI-driven training tools. One standout feature allows MSPs to convert a real phishing attack into customized security awareness training, generating targeted video content based on an incident that actually occurred within a customer's environment. A key differentiator is Trustifi's “journal-only mode,” which allows MSPs to deploy the platform without interrupting live email flow. The system produces a full report showing how Trustifi would have responded to threats, creating what Schwartz described as a powerful “aha moment” for customers. According to Trustifi, this approach converts over 80% of opportunities and requires only minutes to set up—at no cost to the partner or end client. Beyond inbound threats, Trustifi also addresses outbound risk and compliance requirements, including HIPAA, PCI, GDPR, and broader data loss prevention (DLP) concerns. Many organizations underestimate how much sensitive information leaves their network via email. “It's a big issue of not knowing what you don't know,” Schwartz said, highlighting how classification and encryption tools expose hidden vulnerabilities. With no minimum requirements, free NFR licenses for MSPs, and strong momentum away from legacy email gateways, Trustifi is positioning itself as a high-margin opportunity within the channel. The message to MSPs: start internally, see the exposure firsthand, and then extend protection across your customer base. Visit https://trustifi.com/
Fantasy football is unpredictable, but your internet price doesn't have to be. Lock in fast, reliable WiFi with Xfinity's 5-Year Price Guarantee. https://ad.doubleclick.net/ddm/trackclk/N8667.5415713FLNEWSLETTERLLC/B34798571.4365895[…]gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ltd=;dc_tdv=1 Welcome back to THE Fantasy Life Show with Ian Hartitz! In today's episode, Ian is joined by the one and only Matthew Freedman to talk through some of the players who could be potential cap casualties this offseason and become free agents in the NFL in 2026. From the guys who definitely aren't getting cut, to the ones that we (selfishly) may want to see cut for our own fantasy purposes, we're breaking down all of the running backs, wide receivers, tight ends and quarterbacks who could be on the chopping block from some teams in order to make some room on their teams' bottom lines. In today's episode: - Tyreek Hill is FOR SURE going to get cut... right? - Could New Orleans target a new STUD RB1 in the draft? - Could Kirk Cousins fight for a starting job back in Minnesota? We're talking all this and so much more! ______________________ If you want more of Fantasy Life, check us out at FantasyLife.com, where all our analysis is free, smart, fun, and has won a bunch of awards. We have an awesome free seven-day-a-week fantasy newsletter (which would win awards if they existed, we assure you!): https://www.fantasylife.com/fantasy-newsletter-5 And if you want to go deeper, check out our suite of also-award-winning premium tools at FantasyLife.com/pricing But really we hope you just are enjoying what you clicked on here, and come back for more. We are here to help you win!! 00:00 - Intro 02:16 - Potential RB Cap Casualties 15:21 - Potential WR Cap Casualties 29:48 - Potential TE Cap Casualties 42:15 - Potential QB Cap Casualties Learn more about your ad choices. Visit megaphone.fm/adchoices
What does AI really mean in simple terms? What are the biggest security and privacy risks for companies—especially in healthcare? How can organizations manage these risks effectively and stay compliant with fast-changing AI regulations? And why should businesses and professionals consider getting certified in ISO 42001, the new international standard for AI management systems? In this episode, Punit Bhatia talks with Walter Haydock, an expert in AI security and compliance, about how companies can use ISO 42001 to manage AI responsibly. They discuss the real-world risks of AI, practical steps to reduce them, and why certification can help build trust, credibility, and resilience in an AI-powered world.
Listen now on Apple, Spotify, and YouTube.—Berkay is a UX researcher with over eight years of experience, mostly in e-commerce and banking, working across both B2B and B2C. He has a bachelor's and a master's degree in product design and design research. His focus is on turning research into actionable insights, improving research processes and helping teams make user-centered decisions. Basically, reducing uncertainty. He also co-founded UXR Playground, Turkey's leading UX platform, where he runs trainings, workshops and mentorship programs. In a past role, he built and led a ResearchOps team, creating systems to make research more efficient and scalable.In our conversation, we discuss:* The eight-step framework Berkay uses for smooth, ethical participant recruitment, built from actual interviews and field work.* Why many researchers are flying blind with recruitment and how junior researchers often end up as accidental call center reps.* The most common screw-ups in screener surveys and how to write questions that don't sabotage your study before it starts.* How Berkay built a participant panel inside a 30-million-user company without a budget, and with legal breathing down his neck.* Why most panels fall apart after setup, and what to actually prioritize if you want yours to last longer than three studies.Some takeaways:* Ethics aren't optional. If you're collecting personal data, you're responsible for what happens to it. Berkay shares how one company got sued after leaking participant emails. It's not a footnote, it's a risk. Build ethics and legal compliance into your process from day one, or you'll learn the hard way.* Most companies are bad at recruitment and fixing it takes more than tools. Berkay got so fed up with watching junior researchers waste hours cold-calling participants that he turned the whole thing into a research study. The findings? A total lack of structure, zero shared frameworks, and a ton of internal guesswork pretending to be process.* Bad screener surveys kill good research. Asking “Do you use this app?” is a great way to recruit liars. Berkay shares simple but smart ways to avoid bias in screeners like using multi-select questions, hiding the research topic, and adding duplicate questions to sniff out lazy responses.* Building a panel sounds smart until you have to maintain it. Setting up a panel is the easy part. The real challenge is keeping the data clean, staying GDPR-compliant, and making participants feel like they're still part of something. Regular outreach (like quarterly surveys) and strong ties to your data team are non-negotiable.* A good panel is a cross-team operation. Berkay didn't just build a landing page and hope for the best. He brought in product, customer support, PMs, and data science from the start. If you want a panel that works across research needs and methods, it has to be owned across the company too.Where to find Berkay:* LinkedInStop piecing it together. Start leading the work.The Everything UXR Bundle is for researchers who are tired of duct-taping free templates and second-guessing what good looks like.You get my complete set of toolkits, templates, and strategy guides. used by teams across Google, Spotify, , to run credible research, influence decisions, and actually grow in your role.It's built to save you time, raise your game, and make you the person people turn to—not around.→ Save 140+ hours a year with ready-to-use templates and frameworks→ Boost productivity by 40% with tools that cut admin and sharpen your focus→ Increase research adoption by 50% through clearer, faster, more strategic deliveryInterested in sponsoring the podcast?Interested in sponsoring or advertising on this podcast? I'm always looking to partner with brands and businesses that align with my audience. Book a call or email me at nikki@userresearchacademy.com to learn more about sponsorship opportunities!The views and opinions expressed by the guests on this podcast are their own and do not necessarily reflect the views, positions, or policies of the host, the podcast, or any affiliated organizations or sponsors. This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit www.userresearchstrategist.com/subscribe
From EU fines that never get paid to cyber warfare grounding missiles mid-battle, this week's episode uncovers the untold stories and real-world consequences shaping today's digital defenses. How is the EU's GDPR fine collection going. Western democracies are getting serious about offensive cybercrime. The powerful cyber component of the Midnight Hammer operation. Signs of psychological dependence upon OpenAI's GPT-4o chatbot. CISA orders government agencies to unplug end-of-support devices. How to keep Windows from annoying us after an upgrade. What is OpenClaw, how safe is it to use, what does it mean. Another listener uses AI to completely code an app. Coinbase suffers another insider breach. What can be done Show Notes - https://www.grc.com/sn/SN-1064-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: zscaler.com/security hoxhunt.com/securitynow trustedtech.team/securitynowCSS guardsquare.com
From EU fines that never get paid to cyber warfare grounding missiles mid-battle, this week's episode uncovers the untold stories and real-world consequences shaping today's digital defenses. How is the EU's GDPR fine collection going. Western democracies are getting serious about offensive cybercrime. The powerful cyber component of the Midnight Hammer operation. Signs of psychological dependence upon OpenAI's GPT-4o chatbot. CISA orders government agencies to unplug end-of-support devices. How to keep Windows from annoying us after an upgrade. What is OpenClaw, how safe is it to use, what does it mean. Another listener uses AI to completely code an app. Coinbase suffers another insider breach. What can be done Show Notes - https://www.grc.com/sn/SN-1064-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: zscaler.com/security hoxhunt.com/securitynow trustedtech.team/securitynowCSS guardsquare.com
From EU fines that never get paid to cyber warfare grounding missiles mid-battle, this week's episode uncovers the untold stories and real-world consequences shaping today's digital defenses. How is the EU's GDPR fine collection going. Western democracies are getting serious about offensive cybercrime. The powerful cyber component of the Midnight Hammer operation. Signs of psychological dependence upon OpenAI's GPT-4o chatbot. CISA orders government agencies to unplug end-of-support devices. How to keep Windows from annoying us after an upgrade. What is OpenClaw, how safe is it to use, what does it mean. Another listener uses AI to completely code an app. Coinbase suffers another insider breach. What can be done Show Notes - https://www.grc.com/sn/SN-1064-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: zscaler.com/security hoxhunt.com/securitynow trustedtech.team/securitynowCSS guardsquare.com
From EU fines that never get paid to cyber warfare grounding missiles mid-battle, this week's episode uncovers the untold stories and real-world consequences shaping today's digital defenses. How is the EU's GDPR fine collection going. Western democracies are getting serious about offensive cybercrime. The powerful cyber component of the Midnight Hammer operation. Signs of psychological dependence upon OpenAI's GPT-4o chatbot. CISA orders government agencies to unplug end-of-support devices. How to keep Windows from annoying us after an upgrade. What is OpenClaw, how safe is it to use, what does it mean. Another listener uses AI to completely code an app. Coinbase suffers another insider breach. What can be done Show Notes - https://www.grc.com/sn/SN-1064-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: zscaler.com/security hoxhunt.com/securitynow trustedtech.team/securitynowCSS guardsquare.com
From EU fines that never get paid to cyber warfare grounding missiles mid-battle, this week's episode uncovers the untold stories and real-world consequences shaping today's digital defenses. How is the EU's GDPR fine collection going. Western democracies are getting serious about offensive cybercrime. The powerful cyber component of the Midnight Hammer operation. Signs of psychological dependence upon OpenAI's GPT-4o chatbot. CISA orders government agencies to unplug end-of-support devices. How to keep Windows from annoying us after an upgrade. What is OpenClaw, how safe is it to use, what does it mean. Another listener uses AI to completely code an app. Coinbase suffers another insider breach. What can be done Show Notes - https://www.grc.com/sn/SN-1064-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: zscaler.com/security hoxhunt.com/securitynow trustedtech.team/securitynowCSS guardsquare.com
From EU fines that never get paid to cyber warfare grounding missiles mid-battle, this week's episode uncovers the untold stories and real-world consequences shaping today's digital defenses. How is the EU's GDPR fine collection going. Western democracies are getting serious about offensive cybercrime. The powerful cyber component of the Midnight Hammer operation. Signs of psychological dependence upon OpenAI's GPT-4o chatbot. CISA orders government agencies to unplug end-of-support devices. How to keep Windows from annoying us after an upgrade. What is OpenClaw, how safe is it to use, what does it mean. Another listener uses AI to completely code an app. Coinbase suffers another insider breach. What can be done Show Notes - https://www.grc.com/sn/SN-1064-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: zscaler.com/security hoxhunt.com/securitynow trustedtech.team/securitynowCSS guardsquare.com
From EU fines that never get paid to cyber warfare grounding missiles mid-battle, this week's episode uncovers the untold stories and real-world consequences shaping today's digital defenses. How is the EU's GDPR fine collection going. Western democracies are getting serious about offensive cybercrime. The powerful cyber component of the Midnight Hammer operation. Signs of psychological dependence upon OpenAI's GPT-4o chatbot. CISA orders government agencies to unplug end-of-support devices. How to keep Windows from annoying us after an upgrade. What is OpenClaw, how safe is it to use, what does it mean. Another listener uses AI to completely code an app. Coinbase suffers another insider breach. What can be done Show Notes - https://www.grc.com/sn/SN-1064-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: zscaler.com/security hoxhunt.com/securitynow trustedtech.team/securitynowCSS guardsquare.com
None of Your Goddamn BusinessJohn Morgan Salomon said something during our conversation that I haven't stopped thinking about. We were discussing encryption, privacy laws, the usual terrain — and he cut through all of it with five words: "It's none of your goddamn business."Not elegant. Not diplomatic. But exactly right.John has spent 30 years in information security. He's Swiss, lives in Spain, advises governments and startups, and uses his real name on social media despite spending his career thinking about privacy. When someone like that tells you he's worried, you should probably pay attention.The immediate concern is something called "Chat Control" — a proposed EU law that would mandate access to encrypted communications on your phone. It's failed twice. It's now in its third iteration. The Danish Information Commissioner is pushing it. Germany and Poland are resisting. The European Parliament is next.The justification is familiar: child abuse materials, terrorism, drug trafficking. These are the straw man arguments that appear every time someone wants to break encryption. And John walked me through the pattern: tragedy strikes, laws pass in the emotional fervor, and those laws never go away. The Patriot Act. RIPA in the UK. The Clipper Chip the FBI tried to push in the 1990s. Same playbook, different decade.Here's the rhetorical trap: "Do you support terrorism? Do you support child abuse?" There's only one acceptable answer. And once you give it, you've already conceded the frame. You're now arguing about implementation rather than principle.But the principle matters. John calls it the panopticon — the Victorian-era prison design where all cells face inward toward a central guard tower. No walls. Total visibility. The transparent citizen. If you can see what everyone is doing, you can spot evil early. That's the theory.The reality is different. Once you build the infrastructure to monitor everyone, the question becomes: who decides what "evil" looks like? Child pornographers, sure. Terrorists, obviously. But what about LGBTQ individuals in countries where their existence is criminalized? John told me about visiting Chile in 2006, where his gay neighbor could only hold his partner's hand inside a hidden bar. That was a democracy. It was also a place where being yourself was punishable by prison.The targets expand. They always do. Catholics in 1960s America. Migrants today. Anyone who thinks differently from whoever holds power at any given moment. These laws don't just catch criminals — they set precedents. And precedents outlive the people who set them.John made another point that landed hard: the privacy we've already lost probably isn't coming back. Supermarket loyalty cards. Surveillance cameras. Social media profiles. Cookie consent dialogs we click through without reading. That version of privacy is dead. But there's another kind — the kind that prevents all that ambient data from being weaponized against you as an individual. The kind that stops your encrypted messages from becoming evidence of thought crimes. That privacy still exists. For now.Technology won't save us. John was clear about that. Neither will it destroy us. Technology is just an element in a much larger equation that includes human nature, greed, apathy, and the willingness of citizens to actually engage. He sent emails to 40 Spanish members of European Parliament about Chat Control. One responded.That's the real problem. Not the law. Not the technology. The apathy.Republic comes from "res publica" — the thing of the people. Benjamin Franklin supposedly said it best: "A republic, if you can keep it." Keeping it requires attention. Requires understanding what's at stake. Requires saying, when necessary: this is none of your goddamn business.Stay curious. Stay Human. Subscribe to the podcast. And if you have thoughts, drop them in the comments — I actually read them.Marco CiappelliSubscribe to the Redefining Society and Technology podcast. Stay curious. Stay human.> https://www.linkedin.com/newsletters/7079849705156870144/Marco Ciappelli: https://www.marcociappelli.com/John Salomon Experienced, international information security leader. vCISO, board & startup advisor, strategist.https://www.linkedin.com/in/johnsalomon/ Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.
Fantasy football is unpredictable, but your internet price doesn't have to be. Lock in fast, reliable WiFi with Xfinity's 5-Year Price Guarantee. https://ad.doubleclick.net/ddm/trackclk/N8667.5415713FLNEWSLETTERLLC/B34798571.4365895[…]gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ltd=;dc_tdv=1 Welcome back to THE Fantasy Life Show with Ian Hartitz! In today's episode, Ian is joined by the one and only Dwain "The Rock" McFarland to break down Super Bowl LX and where we can see both of these teams going in 2026 (and the ramifications of that for fantasy football)! From Kenneth Walkers (literal) MVP performance to Drake Maye's struggles continuing into the Super Bowl, Ian and Dwain are breaking down all sides of the game so that you can know exactly the takeaways needed for fantasy football in 2026 from both the Seahawks and Patriots! AND THEN! Ian and Dwain break down some of the top landing spots for Quarterbacks and running backs entering 2026 NFL free agency and what that could mean for fantasy football! - Could Minnesota be the preferred landing spot for free agent quarterbacks? - Is Kansas City by-far-and-away the best landing spot for free agent RBs? - What if the Bears moved on from D'Andre Swift?
In this episode of Resilient Cyber, I sit down with VP, Product Marketing and Strategy for Protegrity, James Rice. We will be discussing how traditional approaches to security aren't solving the AI security challenge, the importance of data-centric approaches for secure AI implementation and addressing issues such as AI data leakage.James and I dove into a lot of great topics, including:Why traditional perimeter-based and infrastructure-centric security models are failing in the era of AI, and why organizations need to fundamentally rethink their approach to securing AI workloads.The concept of data-centric security — protecting the data itself rather than the systems surrounding it — and why this shift is critical as data flows across cloud platforms, AI models, and agentic workflows.The growing risk of AI data leakage and how sensitive information (PII, PHI, PCI, intellectual property) can inadvertently be exposed through AI training data, model outputs, prompt injection, and RAG pipelines.Why many organizations find themselves stuck in an "AI circularity" — wanting to leverage AI but unable to do so because of the complexity of securing critical business data throughout the AI lifecycle.The importance of embedding security controls inline within the AI pipeline — from data ingestion and model training to orchestration and output — rather than bolting security on after the fact.How data protection techniques such as tokenization, anonymization, dynamic masking, and format-preserving encryption can enable organizations to use realistic, context-rich data for AI while maintaining compliance and reducing risk.The challenge of securing agentic AI workflows, where autonomous agents continuously interact with enterprise data, making traditional access control models insufficient.How organizations can balance the need for AI innovation and data utility with regulatory compliance requirements across frameworks like GDPR, HIPAA, PCI DSS, and emerging AI-specific regulations.James's perspective on how security, risk, and compliance functions need to evolve to keep pace with the rapid productionization of AI across the enterprise.The role of semantic guardrails in governing AI inputs and outputs, ensuring that protection is applied contextually based on how data is being used — not just where it resides.About the GuestJames Rice is VP of Product Marketing and Strategy at Protegrity, a global leader in data-centric security. He brings over 20 years of experience in security, risk, and compliance, having provided solution engineering, value engineering, and implementation services to Fortune 1000 organizations across industries. Prior to Protegrity, James held leadership roles at Pathlock (formerly Greenlight Technologies), Accenture, and PricewaterhouseCoopers.About ProtegrityProtegrity is a data-centric security platform that protects sensitive data across hybrid, multi-cloud, and AI environments. Their approach embeds security directly into the data itself — enabling enterprises to unlock insights, accelerate innovation, and meet global compliance with confidence. Protegrity's solutions include data discovery and classification, tokenization, anonymization, dynamic masking, and semantic guardrails for AI and analytics workflows.Learn more at protegrity.com
Fantasy football is unpredictable, but your internet price doesn't have to be. Lock in fast, reliable WiFi with Xfinity's 5-Year Price Guarantee.https://ad.doubleclick.net/ddm/trackclk/N8667.5415713FLNEWSLETTERLLC/B34798571.4365895[…]gdpr=${GDPR};gdpr_consent=${GDPR_CONSENT_755};ltd=;dc_tdv=1Welcome to another episode of Fantasy Life with Ian Hartitz. In today's show, Ian is joined by fantasy football expert Dwain McFarland to break down Super Bowl LX. From every matchup that matters to their favorite bets, this is one you don't want to miss before you watch the big game.In today's episode:- How to host a successful Super Bowl experience!- Which matchups will be the deciding factors?- What utilization can you count on?- What are Ian and Dwain's predictions and favorite bets?We're talking all this and so much more!______________________If you want more of Fantasy Life, check us out at FantasyLife.com, where all our analysis is free, smart, fun, and has won a bunch of awards.We have an awesome free seven-day-a-week fantasy newsletter (which would win awards if they existed, we assure you!): https://www.fantasylife.com/fantasy-newsletter-5And if you want to go deeper, check out our suite of also-award-winning premium tools at FantasyLife.com/pricingBut really we hope you just are enjoying what you clicked on here, and come back for more. We are here to help you win!! Learn more about your ad choices. Visit megaphone.fm/adchoices