Podcasts about Infoblox

Welcome back to the Alt Goes Mainstream podcast.We sat down with Vista Equity Partners' Senior Managing Director, Co-Head of Flagship Fund, Monti Saroya. We were live from Berlin, which becomes the “capital of private capital” in June as private equity industry leaders make the annual pilgrimage to the city for one of the marquee private equity conferences, SuperReturn Berlin.With Prosek Partners and former Bloomberg TV journalist Deirdre Bolton as my producer, along with her team, we took over a Tiny Space cabin to hold big conversations with some of the industry's leading alternative asset managers.Vista Equity Partners has been a pioneer in enterprise software investing. They have been at the forefront of every major technology platform shift, whether it was on-prem to cloud, the adoption of enterprise software, and now the agentification of the enterprise with AI.The $103B AUM scaled specialist software investor has dedicated its efforts to building “mission critical” enterprise software companies that organizations can't live without.Monti has had a front-row seat in building and developing both infrastructure and software that the technology industry can't live without. He brings to bear the perspective of someone who lived through the early days of the internet from his time at Cisco Systems and Siebel Systems. Through this lens, and drawing on his experience investing in enterprise software companies since joining Vista in 2008, Monti is able to make sense of where, how, and why AI will be adopted within the enterprise, and what it means for both operators and investors.This conversation with Monti was one of the most illuminating conversations I've had on AI recently. He pieced together so much of what is happening in AI today, covering:The different layers of AI adoption.Why “harness” companies can be valuable.Where AI agents are having the most impact on a business.Why open source is the next wave of the AI buildout.The Linux lesson for AI.Why Monti is so excited about the firm's investment in SambaNova.Do “harness” companies have a moat?Why the moats for many AI companies might surprise you.Why sovereign AI is the next big thing.BioMonti Saroya joined Vista Equity Partners in 2008 and is Co-Head of the Vista Flagship Fund and sits on its Investment Committee.Additionally, Monti serves as a member of Vista's Executive Committee, the firm's governing and decision- making body for matters affecting its overall management and strategic direction, and Vista's Private Equity Management Committee, the firm's decision-making body for matters affecting Vista's overall private equity platform.Monti is also the Co-Chief Executive Officer of VistaOne, Vista's evergreen private equity vehicle, and serves on the Investment Committee. Monti helps lead Vista's artificial intelligence initiatives, driving the firm's approach to AI adoption through strategic partnerships and the deployment of AI-enabled infrastructure and capabilities across the platform and portfolio ecosystem.He currently sits on the boards of Acumatica, Allvue Systems, Avalara, Cloud Software Group, Duck Creek, Finastra, Infoblox, Playlist, Smartsheet, Solera, among others. Monti was actively involved in the firm's investments in Apptio, Cvent (NASDAQ: CVT), Datto (formerly NYSE: MSP), Marketo, PowerSchool (formerly NYSE: PWSC), SumTotal, The ACTIVENetwork, and Transfirst, among others.Prior to Vista, Monti worked as a Senior Research Analyst for JMP Securities, where he provided research for buy-side clients on public on-demand (SaaS) companies. Monti previously worked as an Associate on the enterprise software/applications team. Before JMP, Monti worked at Siebel Systems in a sales capacity for the CRM On Demand division. Prior to Siebel, Monti worked for Cisco Systems in various operations roles.Thanks, Monti, for sharing your wisdom, expertise, and passion about AI, enterprise software, and technology transformations.Show Notes00:00 Intro: Live from SuperReturn00:10 Meet Monti Saroya00:20 Why AI Matters Now00:41 Career Origins Cisco00:57 Building Internet 1.0 01:21 Infrastructure Before Apps01:25 From Compute to Giants01:38 AI as New Buildout01:56 Internet 1.0 Lessons02:17 Change Slower Then Bigger02:48 Consumer Adoption First03:08 What We Underestimate03:26 AI Like Electricity03:41 Three Layer AI Stack04:03 Cloud Providers Layer04:15 App Layer Value Capture04:26 What Is the App Layer04:41 Software Needs Humans05:25 Agents System of Action05:53 Where Agents Impact Today06:20 Engineering Productivity Gains07:29 Augment Not Replace07:51 Rearchitecting With AI08:16 Harnesses Around Intelligence09:17 Routing Cuts Compute Cost09:26 Model Choice and Governance10:55 Enterprise Goals Drive AI11:51 Workflow Context Is Key12:47 SambaNova Compute Economics14:27 Token Subsidies Ending15:39 Open Source Next Wave16:02 Linux Lesson for AI17:03 Deploying Is the Hard Part17:40 Vista Agentic Factory18:42 Avoiding Services Trap19:05 Where Value Gets Created19:32 NeoCloud Inference Centers20:21 Harness Companies and Moats21:05 Enterprise Software Reality Check21:51 CFOs Demand ROI Metrics22:44 Word Association Game23:15 Workflow Specific Future23:48 Sovereign AI Is Coming24:24 Wrap Up and Thanks

In 2026, the competitive advantage in AI will no longer come from model speed or scale—it will come from trust. As Southeast Asia and Korea accelerate enterprise AI adoption amid fragmented regulatory landscapes (from Singapore's FEAT to Korea's AI Basic Act), the CIO's mandate has shifted from deployment to defense. “AI integrity”—the convergence of data provenance, bias mitigation, explainability, and ethical resilience—is now a board-level risk. For heads of compliance and data science, the question is no longer “Can we scale AI?” but “Can we certify its integrity?” Without it, you face regulatory fines, model drift, and reputational collapse.  In this PodChats for FutureCIO, we are joined by Lee Anstiss, Regional Director, Southeast Asia and Korea at Infoblox, to hopefully get insights and tips on how to safeguard AI integrity.1.       Do Asia's CIOs and CISOs know exactly which AI models are running across all our business units—or is shadow AI already creating integrity risks we cannot see?2.       Given the fragmented state of each model's regulatory status, what options are there for CIOs as they navigate fragmented rules with fragmented data?3.       In your view, are enterprises in Asia prioritizing raw accuracy over an “integrity scorecard” that includes bias, explainability, and robustness—and if so, are CIOs trusting models that are fast but not fair?4.       Based on current technologies and practices, can CIOs trace every piece of training data, including synthetic data, back to its source? Do organisations have blind spots where hidden bias or poisoned inputs could enter?5.       Can CIOs test their production AI for bias against local languages and cultural norms in each market? Can they produce an audit trail for any regulator who asks?6.       If a regulator demands proof of real-time bias disclosure tomorrow, is there a way for enterprises to have automated logs mapped to specific legal articles?7.       Should organisations maintain a human-in-the-loop for high-stakes decisions, with override logs that feed back into retraining? How risky is using the discipline of oversight as a checkbox?8.       Our topic is “tips on how to safeguard AI integrity” Can you share some of the most common or practical tips for CIOs, heads of AI, for ensuring or safeguarding AI integrity.

Carrie Hopkins, senior director of business development and sales for Exclusive Networks Canada Exclusive Networks describes itself as a specialist distributor — hyper-focused on cybersecurity and advanced networking, deliberately not trying to be everything to everyone. As the company makes a serious push into the Canadian market, In The Channel sat down with Carrie Hopkins, senior director of business development and sales for Canada, to talk about what that actually means in practice for Canadian partners. Hopkins walks through what Exclusive is building in Canada specifically — in-country finance and operations, and a prescriptive approach to partner recruitment that goes beyond adding names to a portal. Rather than waiting for partners to come to them, Exclusive analyzes what existing partners buy, what they conspicuously don’t buy, and builds outreach strategy around those gaps. We also get into Ignition, Exclusive’s newly launched cybersecurity channel incubator, which arrived in North America earlier this year. The program is designed to bring emerging vendors to channel partners with the vetting and enablement baked in — addressing a real problem for MSPs and VARs who are being pitched constantly by early-stage vendors and don’t have the bandwidth to evaluate them all. And then there’s the Westcon thread. Hopkins spent years at Westcon and Comstor before moving through vendor-side channel roles at Ixia, Infoblox, and Sisense. When asked whether Exclusive feels like the evolution of what Westcon was doing before North American distribution consolidated, her answer is worth a listen. – UPLOAD AUDIO Read Full Transcript ROBERT DUTT: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca and your host for the show. If you’ve been paying attention to the distribution landscape in Canada, you may have noticed that Exclusive Networks has been quietly building something. Exclusive is a global cybersecurity specialist distributor, and the emphasis on “specialist” is deliberate. They’re not trying to be everything for everyone. They focus specifically on cybersecurity and advanced networking, and they’re making a real push to make that model mean something in the Canadian market. My guest today is Carrie Hopkins, senior director of business development and sales for Canada at Exclusive Networks. Carrie’s background is worth noting. She spent years at Westcon and Comstor before moving through a series of vendor-side channel roles, and she brings that perspective to bear on what Exclusive is trying to build here. We talk about the state of play in Canada, the distributor’s recently launched Ignition cybersecurity incubator program, and whether what Exclusive is doing today is the evolution of what the specialist distributor used to look like in the market, or something genuinely new. Let’s get right into it. My chat with Carrie Hopkins. ROBERT DUTT: Carrie, thanks for taking the time. I appreciate it. CARRIE HOPKINS: Thank you, Robert. Great to see you. ROBERT DUTT: For listeners who may not be familiar with Exclusive Networks, how do you describe what you do differently from the broadliners? What does specialist distribution look like in practice, especially in a modern context? CARRIE HOPKINS: Yeah. So, Exclusive Networks Canada is hyper-focused on a very curated line card. We’re able to provide the right support structure to scale faster and win faster for our partners. We have programs both for our core vendor lines, as well as our new Ignition vendor lines, that will provide combined deep channel expertise, as well as hands-on enablement through our engineering team. ROBERT DUTT: You joined Exclusive, I guess, coming up a year now. What was the pitch that brought you in, and what were they asking you to build in Canada? What’s kind of the big goal? CARRIE HOPKINS: So, the big goal, obviously, with any business is revenue generation, but it’s also to improve our footprint geographically, nationally. We are also from an in-region support perspective, as well as improving the number of vendors that are selling into our partner community. To do that, we have to bring our partner community to the right vendors that will help them grow their business. So, that’s really what we’re focused on. ROBERT DUTT: You touched on geography and that. What were the gaps, both geographical and otherwise? Like, what did the Canadian market look like for Exclusive when you showed up? What were the gaps, and where has your focus been in this first year? CARRIE HOPKINS: Yeah, I think the biggest gaps were really more vendor alignment. Geographically, we do have people based from Montreal out to Calgary. So, we do have physical presence there to help our partners with feet on the street, but we tended to be a little bit more hyper-focused on a few of our top vendors. I think for the whole team, and what we’re seeing, is that by curating a better cybersecurity and network security vendor list, we’re able to give our partners more. We’re able to reach new partners that we haven’t talked to in the past because maybe they weren’t aligned to our top vendors. So, growing that vendor list has really helped us expand across the country. ROBERT DUTT: You spent quite a bit of time at Westcon and Comstor, which is probably the closest model I can think of to what Exclusive is doing that’s existed in the North American market. When you look at Exclusive now, do you see it sort of as the evolution of that model, or is it something genuinely different given the changing times? CARRIE HOPKINS: It’s actually funny that there’s a number of ex-Westcon-ers here now, and that’s what brought us all together, is that this is — it feels like the Westcon of the mid-2000s aughts. When we all were working there before 2010, it was just such a great vibe. We had great people that were aligned to vendors and to partners, and we all worked together really collaboratively. That’s what I’m seeing now. While Exclusive Networks Canada is our own entity — we have Canadian footprint, we have Canadian finance, we have Canadian operations and sales — we do work really collaboratively with our North American team, which includes people like Heather Allen and Andrew Warren, who are also ex-Westcon. We’re able to really remember the great times of building up that business and then to also bring it into this new era with all these great new vendors who are bringing something new and innovative to the market, as opposed to just the old traditionals. ROBERT DUTT: It’s not every day you get a chance to run it back, as it were. Keep it in that lane. Westcon obviously got absorbed into broadline here in North America, at least. Do you think the market lost something when that happened? And is what Exclusive is doing filling that gap? CARRIE HOPKINS: Agreed. I think so. I think with the broadline, of course, there’s some great people still there today who are really great at holding those relationships. But what happens with the broadline, of course, is you have so many vendors and you have so many partners, and you can’t possibly give the same level of touch and care and commitment that we can here when we’re keeping it under that 20-vendor mark. We’re able to really go after our partners with the right mix of vendors that aren’t over-distributed, I would say. ROBERT DUTT: So to that point, one of the fun things you’re able to do in the specialty distribution mode is embrace vendors who are a little bit earlier in the game, which brings us to Ignition, which just launched in North America. Cybersecurity channel incubator. Can you walk me through what that actually means? What does a vendor get out of being in Ignition, and what does a partner get access to? CARRIE HOPKINS: Yeah. For the vendors, we’re giving them — again, we’re giving our vendors a team of highly skilled distribution people that knows the market. Most of my employees here have been either in distribution or in service provider and resale in Canada for anywhere from six years to 15, actually, or more, for a couple of us. And so they’re getting a strong team. They’re getting a team with the right support structure. They’re getting dedicated SE support. So we have dedicated SEs aligned to each one of these vendors. And then they’re also getting an integrated hyperscaler pathway as well as we build out our hyperscaler go-to-market motion. So the partners that we align with, we will help them nurture, grow, and scale well, and also enabling our channel partners to differentiate because they’re bringing on something really cool and unique to be relevant and bring new value, whether it’s from vendor platform visibility or network detection and response, but done in a more unique way. We’re hoping that we can bring them that value. ROBERT DUTT: Looking at the initial North American cohort with ExtraHop, Zluri, Docker, Sendmarc, PagerDuty, Meter — that’s not all pure-play cybersecurity in the traditional sense. I’m curious, how are you defining the scope of what Ignition is about? CARRIE HOPKINS: Yeah. I think it has to fit with our partner mix as well. In Canada, our partners are possibly not as verticalized as in some other larger regions. In Canada, most of our partners, if they’re selling networking, they also will sell security, or they’re looking for that vendor that’s going to bridge the gap. So even though a vendor, for example, like ExtraHop — you might think of them as network detection and response, but there is a security play in there. There’s a security SOC play that works really well, and it helps our Canadian partners who are talking to the network team introduce a vendor that also connects them with the SOC. That could be said for Sendmarc as well. Again, you think of that as email demarcation points, which could lean into the networking team, but we need to talk to everybody. Our Canadian partners are talking to both sides of the fence, so we need to give them those vendors. ROBERT DUTT: Well, and yeah, it speaks to the moment too, in that security is part of every sale, but particularly every networking sale. CARRIE HOPKINS: Exactly. Yeah. ROBERT DUTT: From the Canadian partner perspective specifically, what does Ignition mean for them? Is it about giving them earlier access to emerging vendors, de-risking those bets with players who may be less familiar, something else? CARRIE HOPKINS: I think you hit the nail on the head. We’re doing all the research for them. I was speaking to a partner just yesterday at the Winnipeg Western Canada Information Security Conference, and he was saying that his inbox for his LinkedIn is filled with vendors reaching out saying, “Please, sell us.” How does an MSP or service provider decide which vendors they should engage in? We’ve done that heavy lifting for them. We’ve researched, we’ve determined that these are the right fit for the Canadian market and the US market, and we’re happy to bring them a more curated list. Again, let us do the heavy lifting. We also are getting our engineers trained, so it’s not just a team of people sitting in a room deciding that monetarily this is a good fit. These are our engineers who can speak to their engineers and show them exactly how this fits with what they’re selling. It also provides our partners with a really unique differentiated approach. They’re not selling that one vendor, they’re selling a combined solution. ROBERT DUTT: Yeah, I was going to say, how prescriptive, how in the weeds do you guys get in terms of, “Dear MSP, think about this vendor along with this vendor,” piggybacking the core vendors with the Ignition folks? CARRIE HOPKINS: That’s exactly the play. We’ve done extensive research on what are our partners currently buying from us, but also what aren’t they buying from us, maybe because we don’t sell it or they’ve chosen to go a different direction. What are their websites saying that they sell? We’ve taken all of that information, we’ve compared it with the new vendors that we’re bringing on, so we have an extensive list of top-priority partners that we feel are a great fit for multiple of these vendors. Then we have the next level down, so we’ve completely curated a target list of partners that we’re going to reach out to say, “We know you’re a business, we understand it. We think that Docker is the right next step for you,” or, “We believe that Zluri really fits when you’re selling A, B, and C.” ROBERT DUTT: This is North American in scope. How are you getting in front of those vendors and assessing where they are at currently in Canada and where you can step in, make introductions, ease path to market, those kinds of things? CARRIE HOPKINS: That’s one of the things that we find with the Canadian market is there’s not always feet on the ground with new vendors. That’s, again, where we step in. We do have feet on the ground. We’re learning about their solutions, so if they don’t have a local CAM, that’s us. That’s our job is to help them build their business and help them build the right business. Recruiting a lot of partners isn’t always the right first step. It’s recruiting the right partners who will embrace the technology, learn the technology, and help it lift. Then we can see what is the right number of partners for the technology in Canada today. We don’t want to flood the market. We want to make sure that all of our vendors have the right partners to properly serve the market. ROBERT DUTT: I’d imagine that dynamic’s also working in the other direction, in so much as you say, MSPs and other solution providers are being flooded with new vendors, especially in the security space. The fact that you guys are, to a degree, backstopping them — that you’ve done the vetting and you’re standing behind them — has to add something. CARRIE HOPKINS: Exactly. Yeah. ROBERT DUTT: Beyond Ignition, what can you tell me about the broader push for Exclusive in Canada right now? In terms of, you said you want to stay pretty strategic on vendor lines. What are you thinking about partner recruitment, headcount? Basically, where are you building right now? CARRIE HOPKINS: Yes. Building with headcount. Where we’re adding right now — in fact, this morning, we’re adding to our quoting and order management team because we never want to lose sight of one of our biggest values, which is our speed and efficiency and accuracy of our quoting. When it comes to distribution, you have to do the basics really brilliantly. We do that here. Sub-[time] turnaround on quote request, sub-[time] order management process. We are quick and efficient, full stop. We’re going to keep doing that. We’re going to add headcount to that. We’re opening up headcount in the second half of the year to help us really embrace all of the new vendors that we have on board. In the last six months, we’ve also onboarded vendors like A10 and Infoblox who are going to make a big impact in the coming year. We’re fully supporting them with extra headcount. ROBERT DUTT: What’s the long-term vision for structure? I know distributors in particular tend to vacillate somewhat over time between a heavily North Americanized model and independent Canadian. Just curious what the long-term thinking is there for you guys. CARRIE HOPKINS: Long-term is that we will always have feet on the ground here in Canada. That gets reinforced to me, and I reinforce it with my leadership every time, every chance I get. I am also a big advocate for having in-country vendor business managers so they can have those channel business conversations. They’re talking to the peers who know the market. They know the FX challenges. They know that we’re provinces instead of states. It’s like that. The great news is with our Ignition team is that the leader of that team, Michael Compizzi, he’s located just in Rochester, New York, which is a short two-hour drive from where I’m based. He will be in Canada quite often as well. We will have North American support, but in-country dedicated resources. ROBERT DUTT: I would add he’d be closer if it weren’t for a rather inconveniently placed lake. CARRIE HOPKINS: [laughs] ROBERT DUTT: Canadian partners have a lot of choices in terms of distribution, maybe not quite as many as 10 years ago, but still there’s a number of choices there. What’s the honest pitch for why a Canadian MSP or VAR who isn’t already working with Exclusive right now should take a look at you guys? CARRIE HOPKINS: Our partners will never be lost in the shuffle. They will have dedicated support. They will have quick and efficient turnaround, and they will have a vendor line card that supports their business. Simple to the point. ROBERT DUTT: That works. The last one for me: what should Canadian partners be paying attention to over the next six to 12 months, either from you guys exclusively or in the market more broadly? CARRIE HOPKINS: I don’t think that a podcast about technology can end without saying the word AI. [laughs] Didn’t get your [nerd/name] achievement unlocked. ROBERT DUTT: There you go. CARRIE HOPKINS: I think that it’s important to note that there’s so many vendors and so many technologies coming out saying that they support AI, saying that they support different security functions around AI. It’s important that you work with a distributor who’s going to take the time to research each of those vendors on your behalf and have a fully engaged engineering staff who can speak to what it’s doing. Do you need it yet? Is it something that’s going to actually sell to the Canadian market? We’re going to make sure that our Canadian resellers have fully vetted solutions, that they’re not chasing rabbit holes. The number one important thing is that they know their business, they know their customer’s business, and where all those assets are. What does your Canadian partner need? We feel like we have the line card to fulfill that. ROBERT DUTT: Well, look forward to seeing how things roll out with the initial Ignition cohort and beyond, as you continue to develop Exclusive here in Canada. Carrie, thanks for taking the time. CARRIE HOPKINS: Thank you so much, Robert. I appreciate you. [Music transition] ROBERT DUTT: There you have it. Carrie Hopkins from Exclusive Networks. I’d like to thank Carrie for her time today. It was a genuinely good conversation, and I appreciated that she was willing to get beyond the talking points and into what the model actually means in practice for Canadian partners. If there’s one thing I take away from the conversation, it’s that the specialist distribution model Exclusive is building — and Ignition is probably the clearest expression of this — is trying to solve a real problem. Canadian MSPs and resellers are being pitched by an enormous number of emerging vendors, and they don’t have the bandwidth to vet each and every one of them. What Exclusive is saying, essentially, is: we’ll do that work. We’ll bring you the vendors we believe in. We’ll backstop the relationship. You focus on your customers. Whether they can deliver on that promise at scale is something we’ll be watching, but the thesis is certainly sound. The Westcon thread that came up in the conversation stuck with me too. There was something that worked about that model before consolidation rolled through North American distribution. It sounds like at least some of the people who built it think there’s a second act here. Thanks for listening. If you’re finding the podcast useful, please follow or subscribe wherever you get your podcasts. We’re on Apple Podcasts, Spotify, YouTube, and most of the major directories. Ratings and reviews are always appreciated and really help other people in the channel find the show. Until next time, I’m Robert Dutt for ChannelBuzz.ca, and I’ll see you in the channel. [Music] A couple of quick flags: “Sub-[time] turnaround” – I couldn’t decipher the exact numbers she threw out there. Worth a quick listen on your end to fill in the blank. “Didn’t get your [nerd/name] achievement unlocked” – MacWhisper clearly mangled this. Sounds like some kind of gaming joke about saying the word AI on a tech podcast. “Nerd achievement unlocked” is the most common internet phrase, but if you remember what she actually said, drop it in. “monetarily” – I left it as-is since it could be correct, though it scans a bit awkwardly. Could also be “more than merely” if you want to give it a listen. Otherwise this should be ready to go. Good batch recording session?

Take a Network Break! We start with a critical vulnerability in Adobe Coldfusion. On the news front, Infoblox acquires Kentik to add network observability to its portfolio, data center electricity consumption jumps worldwide, and Exabeam rolls out AI-agent focused detection in its Agent Behavior Analytics platform. DriveNets and WhiteFiber connect two AI data centers over... Read more »

Take a Network Break! We start with a critical vulnerability in Adobe Coldfusion. On the news front, Infoblox acquires Kentik to add network observability to its portfolio, data center electricity consumption jumps worldwide, and Exabeam rolls out AI-agent focused detection in its Agent Behavior Analytics platform. DriveNets and WhiteFiber connect two AI data centers over... Read more »

Take a Network Break! We start with a critical vulnerability in Adobe Coldfusion. On the news front, Infoblox acquires Kentik to add network observability to its portfolio, data center electricity consumption jumps worldwide, and Exabeam rolls out AI-agent focused detection in its Agent Behavior Analytics platform. DriveNets and WhiteFiber connect two AI data centers over... Read more »

In Episode 108 of the Cybersecurity Readiness Podcast Series, Dr. Dave Chatterjee is joined by Scott Harrell, President and Chief Executive Officer of Infoblox and former leader of Cisco's $20 billion enterprise networking business — to examine one of the most consequential security blind spots in modern enterprise governance: the foundational network infrastructure layer that every other security investment depends on, and that almost no organization actively governs.The episode opens with the October 2025 Amazon Web Services outage, in which a single automated misconfiguration in a core routing service triggered a global cascade that took down AI services, financial platforms, and consumer applications worldwide, producing an estimated $581 million in losses. The cause was not a sophisticated cyber attack. It was a governance decision that had never been made — nobody was actively watching the foundational layer. That event becomes the opening frame for a conversation about DNS, DHCP, and IP address management: the three-part infrastructure, collectively known as DDI, that assigns every device an address, maps every application name to a network location, and routes every piece of digital traffic to its destination. When it works, it is invisible. When it fails — or when an attacker exploits it — everything built on top of it stops.Harrell's central argument is structural: 92% of all malware relies on DNS for its initial call-out to attacker-controlled infrastructure. The first thing any malware does when it lands on a network is resolve a malicious domain — and if that DNS request is blocked, the entire incident cascade never occurs. The payload is never downloaded. Lateral movement never begins. Privilege escalation never follows. The problem is that most enterprise security stacks are built to detect and respond to malware after it has activated — not to intercept the first domain resolution that enables everything that follows. This is the difference between reactive and preemptive security, and it is a governance choice that shows up in budget allocations: currently, only 5% of enterprise security spending goes to preemptive activities, with 95% consumed by detection and response. Gartner projects that organizations will need to reach a 50/50 split by 2030.The conversation addresses how to make the governance case for foundational infrastructure investment, what differentiated DNS security looks like, how agentic AI is about to make network complexity exponentially harder to manage, and what three metrics every senior leader should be demanding from their security teams. Analyzed through Dr. Chatterjee's Commitment–Preparedness–Discipline (CPD) Framework, the episode reframes network infrastructure security from an IT operational matter into a board-level governance imperative. The episode's core message is neither technical nor vendor-specific: the organizations that will withstand the next breach are not those with the most sophisticated detection tools — they are those that have decided to govern the layer on which everything else depends.To access and download the entire podcast summary with discussion highlights - https://www.dchatte.com/episode-108-the-invisible-foundation-why-dns-security-is-the-governance-gap-no-one-is-watching/Connect with Host Dr. Dave ChatterjeeLinkedIn: https://www.linkedin.com/in/dchatte/ Website: https://dchatte.com/Books PublishedThe DeepFake ConspiracyCybersecurity Readiness: A Holistic and High-Performance ApproachArticles & Cases PublishedChatterjee, D. (2026). The Cryptographic Reckoning: Why Quantum Readiness Begins with Agility, Not Algorithms, The INFORMS Analytics Magazine, June 26, 2026Chatterjee, D. (2026). The New Digital Fragility: How AI-Enhanced Cyber Threats Are Reshaping Operational Resilience, The INFORMS Analytics Magazine, March 4, 2026Chatterjee, D. (2026). Root: Automating the Remediation Gap, Ivey Publishing, Jan 7, 2026.Ramasastry, C. and Chatterjee, D. (2025). Trusona: Recruiting For The Hacker Mindset, Ivey Publishing, Oct 3, 2025.Chatterjee, D. and Leslie, A. (2024). “Ignorance is not bliss: A human-centered whole-of-enterprise approach to cybersecurity preparedness,” Business Horizons, Accepted on Oct 29, 2024.Isik, O., Chatterjee, D., and Lourenco, D.A. (2024). “Getting Cybersecurity Right,” California Management Review — Insights, Accepted for Publication, July 8, 2024. Chatterjee, D. (2023). “Mission critical – How American Cancer Society successfully and securely migrated to the cloud amid the pandemic,” I by IMD, March 13, 2023.Chatterjee, D. (2022). “Preventing security breaches must start at the top,” I by IMD, September 28, 2022, Institute for Management Development, Lausanne, SwitzerlandChatterjee, D. (2022). “Making Cybersecurity Readiness Mainstream,” Executive Blog Post, NETSPI, March 1, 2022Benz, M. and Chatterjee, D. (2020). “Calculated Risk? A Cybersecurity Evaluation Tool for SMEs,” Business Horizons, available online from May 4, 2020Chatterjee, D. (2019). “Should Executives Go To Jail Over Cyber Attacks,” Journal of Organizational Computing and Electronic Commerce, Vol

-Without a doubt, it was the most personally profitable period of any president's term in office, personally netting him a figure north of $2 billion. -According to an analysis from Zach Edwards, a staff security researcher at Infoblox, the person or group behind these accounts is running more than 10,000 malicious "crypto casino" websites. -Cloudflare has announced plans to automatically block mixed-use web crawlers that index websites for search engines and act as AI agents and trainers at the same time. Learn more about your ad choices. Visit podcastchoices.com/adchoices

CISA directs agencies to “patch smarter, not harder.” The House fails to extend FISA. Europol pulls over AudiA6. GitHub announces npm security updates. Anthropic rejects Fable 5 jailbreak claims. CISA gives feds three days to patch a critical Ivanti Sentry vulnerability. Google confirms ShinyHunters exploited a critical Oracle PeopleSoft vulnerability. FancyBear shifts part of its infrastructure to compromised edge devices. Pundits push for CyberCorps scholarship budgets. Our guest is Dr. Renée Burton, VP of Threat Intelligence at Infoblox, to discuss scams targeting the World Cup. Amazon drivers sweat through a software update.  Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today we are joined by Dr. Renée Burton, VP of Threat Intelligence at Infoblox, to discuss the World Cup and fans possibly getting caught out if they use SuperBox to view it. Selected Reading CISA directive orders agencies to prioritize vulnerability patching in a new way (CyberScoop) House votes against extending controversial wiretapping law set to lapse Friday (The Washington Post) Ransomware gangs cut off from EUR 336 million ‘AudiA6' crypto laundering pipeline - Europol analysis links the criminal service to over 15 international cybercrime investigations (Europol) GitHub to Update npm to Thwart Software Supply Chain Attacks (Infosecurity Magazine) Anthropic Disputes Fable 5 AI Jailbreak (SecurityWeek) CISA orders feds to patch actively exploited Ivanti flaw by Sunday (Bleeping Computer) Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters (SecurityWeek) GRU-Linked APT28 Uses MooBot Botnet and Compromised EdgeRouters for Cyber Operations (GB Hackers) CyberCorps is adapting to AI. The budget isn't keeping up. (CyberScoop) Software Update Automatically Turns off Amazon Delivery Drivers' AC During Dangerous Summer Heat (404 Media) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

Rethinking Security from the OS Up in the Age of AI Karen Heart discusses a file-system–first approach to security, arguing that most modern attacks—including ransomware and supply chain compromises—succeed because they inherit user permissions and operate inside overly trusted system structures. She explains how limiting file access, socket (network) access, and privilege escalation at the operating system level can reduce entire classes of attacks. Rather than relying on reactive detection, her approach emphasizes immutable, allowlisted controls embedded close to the kernel layer, designed to prevent both data exfiltration and malicious code execution at the source. The conversation also explores how AI agents and contractors expand the attack surface, reinforcing the need for strict isolation, backup protection, and deterministic system boundaries. Segment Resources: https://www.simonandschuster.com/books/Zero-Day-Secure/Karen-Heart/9781968865078 ​The New Era of DNS Resilience: Breaking down the newly finalized NIST SP 800-81 Craig Sanderson from Infoblox will dive into the newly finalized NIST SP 800-81 as it marks a pivotal shift in DNS security, emphasizing resilience through modernized practices tailored for today's distributed, cloud-driven, and threat-laden environments. This update provides actionable guidance for organizations to strengthen DNS infrastructure against evolving threats like ransomware and data exfiltration, while prioritizing initiatives like DNSSEC, encryption, and protective DNS for immediate risk reduction. This segment is sponsored by Infoblox. Visit https://securityweekly.com/infobloxrsac to learn more about them! Agentic AI and the Future of Threat Intelligence Operations Security teams collect large volumes of threat intelligence but often struggle to translate that information into coordinated operational response. This discussion explores how organizations are embedding intelligence directly into security workflows and introducing AI agents to support investigation, enrichment and response. Sachin will discuss Cyware's Agentic Fabric approach and the evolution toward an agent-centric model, where a portfolio of specialized agents assists analysts across threat intelligence, detection engineering and response workflows. The conversation will focus on how AI can support security teams while maintaining human oversight and operational control. This segment is sponsored by Cyware. Visit https://securityweekly.com/cywarersac to learn more about them! Beyond the Audit: Making Cyber Risk Continuous, Quantified, and Actionable Most companies assess cyber risk once a year and call it done — but for organizations managing dozens of subsidiaries or portfolio companies, that's a costly blind spot. In this RSA interview, Resilience's VP of Customer Engagement explores why measuring risk in dollars (not color-coded charts) changes the conversation at the board level, and why the organizations best positioned to prevent losses are the ones treating cyber risk as a continuous discipline rather than an annual exercise. See it in action. Request a demo at https://securityweekly.com/resiliencersac. Delinea: Redefining Identity Security for the Agentic AI Era As enterprises scale agentic AI and automation, privileged access is increasingly required by non-human identities (NHIs) that operate autonomously across hybrid and cloud-native environments, introducing risks that static, credential-based models were never designed to govern. Delinea's recent of acquisition of StrongDM. This segment is sponsored by Delinea. Visit https://securityweekly.com/delinearsac to learn more about them! Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-456

Rethinking Security from the OS Up in the Age of AI Karen Heart discusses a file-system–first approach to security, arguing that most modern attacks—including ransomware and supply chain compromises—succeed because they inherit user permissions and operate inside overly trusted system structures. She explains how limiting file access, socket (network) access, and privilege escalation at the operating system level can reduce entire classes of attacks. Rather than relying on reactive detection, her approach emphasizes immutable, allowlisted controls embedded close to the kernel layer, designed to prevent both data exfiltration and malicious code execution at the source. The conversation also explores how AI agents and contractors expand the attack surface, reinforcing the need for strict isolation, backup protection, and deterministic system boundaries. Segment Resources: https://www.simonandschuster.com/books/Zero-Day-Secure/Karen-Heart/9781968865078 ​The New Era of DNS Resilience: Breaking down the newly finalized NIST SP 800-81 Craig Sanderson from Infoblox will dive into the newly finalized NIST SP 800-81 as it marks a pivotal shift in DNS security, emphasizing resilience through modernized practices tailored for today's distributed, cloud-driven, and threat-laden environments. This update provides actionable guidance for organizations to strengthen DNS infrastructure against evolving threats like ransomware and data exfiltration, while prioritizing initiatives like DNSSEC, encryption, and protective DNS for immediate risk reduction. This segment is sponsored by Infoblox. Visit https://securityweekly.com/infobloxrsac to learn more about them! Agentic AI and the Future of Threat Intelligence Operations Security teams collect large volumes of threat intelligence but often struggle to translate that information into coordinated operational response. This discussion explores how organizations are embedding intelligence directly into security workflows and introducing AI agents to support investigation, enrichment and response. Sachin will discuss Cyware's Agentic Fabric approach and the evolution toward an agent-centric model, where a portfolio of specialized agents assists analysts across threat intelligence, detection engineering and response workflows. The conversation will focus on how AI can support security teams while maintaining human oversight and operational control. This segment is sponsored by Cyware. Visit https://securityweekly.com/cywarersac to learn more about them! Beyond the Audit: Making Cyber Risk Continuous, Quantified, and Actionable Most companies assess cyber risk once a year and call it done — but for organizations managing dozens of subsidiaries or portfolio companies, that's a costly blind spot. In this RSA interview, Resilience's VP of Customer Engagement explores why measuring risk in dollars (not color-coded charts) changes the conversation at the board level, and why the organizations best positioned to prevent losses are the ones treating cyber risk as a continuous discipline rather than an annual exercise. See it in action. Request a demo at https://securityweekly.com/resiliencersac. Delinea: Redefining Identity Security for the Agentic AI Era As enterprises scale agentic AI and automation, privileged access is increasingly required by non-human identities (NHIs) that operate autonomously across hybrid and cloud-native environments, introducing risks that static, credential-based models were never designed to govern. Delinea's recent of acquisition of StrongDM. This segment is sponsored by Delinea. Visit https://securityweekly.com/delinearsac to learn more about them! Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-456

Rethinking Security from the OS Up in the Age of AI Karen Heart discusses a file-system–first approach to security, arguing that most modern attacks—including ransomware and supply chain compromises—succeed because they inherit user permissions and operate inside overly trusted system structures. She explains how limiting file access, socket (network) access, and privilege escalation at the operating system level can reduce entire classes of attacks. Rather than relying on reactive detection, her approach emphasizes immutable, allowlisted controls embedded close to the kernel layer, designed to prevent both data exfiltration and malicious code execution at the source. The conversation also explores how AI agents and contractors expand the attack surface, reinforcing the need for strict isolation, backup protection, and deterministic system boundaries. Segment Resources: https://www.simonandschuster.com/books/Zero-Day-Secure/Karen-Heart/9781968865078 ​The New Era of DNS Resilience: Breaking down the newly finalized NIST SP 800-81 Craig Sanderson from Infoblox will dive into the newly finalized NIST SP 800-81 as it marks a pivotal shift in DNS security, emphasizing resilience through modernized practices tailored for today's distributed, cloud-driven, and threat-laden environments. This update provides actionable guidance for organizations to strengthen DNS infrastructure against evolving threats like ransomware and data exfiltration, while prioritizing initiatives like DNSSEC, encryption, and protective DNS for immediate risk reduction. This segment is sponsored by Infoblox. Visit https://securityweekly.com/infobloxrsac to learn more about them! Agentic AI and the Future of Threat Intelligence Operations Security teams collect large volumes of threat intelligence but often struggle to translate that information into coordinated operational response. This discussion explores how organizations are embedding intelligence directly into security workflows and introducing AI agents to support investigation, enrichment and response. Sachin will discuss Cyware's Agentic Fabric approach and the evolution toward an agent-centric model, where a portfolio of specialized agents assists analysts across threat intelligence, detection engineering and response workflows. The conversation will focus on how AI can support security teams while maintaining human oversight and operational control. This segment is sponsored by Cyware. Visit https://securityweekly.com/cywarersac to learn more about them! Beyond the Audit: Making Cyber Risk Continuous, Quantified, and Actionable Most companies assess cyber risk once a year and call it done — but for organizations managing dozens of subsidiaries or portfolio companies, that's a costly blind spot. In this RSA interview, Resilience's VP of Customer Engagement explores why measuring risk in dollars (not color-coded charts) changes the conversation at the board level, and why the organizations best positioned to prevent losses are the ones treating cyber risk as a continuous discipline rather than an annual exercise. See it in action. Request a demo at https://securityweekly.com/resiliencersac. Delinea: Redefining Identity Security for the Agentic AI Era As enterprises scale agentic AI and automation, privileged access is increasingly required by non-human identities (NHIs) that operate autonomously across hybrid and cloud-native environments, introducing risks that static, credential-based models were never designed to govern. Delinea's recent of acquisition of StrongDM. This segment is sponsored by Delinea. Visit https://securityweekly.com/delinearsac to learn more about them! Show Notes: https://securityweekly.com/esw-456

Rethinking Security from the OS Up in the Age of AI Karen Heart discusses a file-system–first approach to security, arguing that most modern attacks—including ransomware and supply chain compromises—succeed because they inherit user permissions and operate inside overly trusted system structures. She explains how limiting file access, socket (network) access, and privilege escalation at the operating system level can reduce entire classes of attacks. Rather than relying on reactive detection, her approach emphasizes immutable, allowlisted controls embedded close to the kernel layer, designed to prevent both data exfiltration and malicious code execution at the source. The conversation also explores how AI agents and contractors expand the attack surface, reinforcing the need for strict isolation, backup protection, and deterministic system boundaries. Segment Resources: https://www.simonandschuster.com/books/Zero-Day-Secure/Karen-Heart/9781968865078 ​The New Era of DNS Resilience: Breaking down the newly finalized NIST SP 800-81 Craig Sanderson from Infoblox will dive into the newly finalized NIST SP 800-81 as it marks a pivotal shift in DNS security, emphasizing resilience through modernized practices tailored for today's distributed, cloud-driven, and threat-laden environments. This update provides actionable guidance for organizations to strengthen DNS infrastructure against evolving threats like ransomware and data exfiltration, while prioritizing initiatives like DNSSEC, encryption, and protective DNS for immediate risk reduction. This segment is sponsored by Infoblox. Visit https://securityweekly.com/infobloxrsac to learn more about them! Agentic AI and the Future of Threat Intelligence Operations Security teams collect large volumes of threat intelligence but often struggle to translate that information into coordinated operational response. This discussion explores how organizations are embedding intelligence directly into security workflows and introducing AI agents to support investigation, enrichment and response. Sachin will discuss Cyware's Agentic Fabric approach and the evolution toward an agent-centric model, where a portfolio of specialized agents assists analysts across threat intelligence, detection engineering and response workflows. The conversation will focus on how AI can support security teams while maintaining human oversight and operational control. This segment is sponsored by Cyware. Visit https://securityweekly.com/cywarersac to learn more about them! Beyond the Audit: Making Cyber Risk Continuous, Quantified, and Actionable Most companies assess cyber risk once a year and call it done — but for organizations managing dozens of subsidiaries or portfolio companies, that's a costly blind spot. In this RSA interview, Resilience's VP of Customer Engagement explores why measuring risk in dollars (not color-coded charts) changes the conversation at the board level, and why the organizations best positioned to prevent losses are the ones treating cyber risk as a continuous discipline rather than an annual exercise. See it in action. Request a demo at https://securityweekly.com/resiliencersac. Delinea: Redefining Identity Security for the Agentic AI Era As enterprises scale agentic AI and automation, privileged access is increasingly required by non-human identities (NHIs) that operate autonomously across hybrid and cloud-native environments, introducing risks that static, credential-based models were never designed to govern. Delinea's recent of acquisition of StrongDM. This segment is sponsored by Delinea. Visit https://securityweekly.com/delinearsac to learn more about them! Show Notes: https://securityweekly.com/esw-456

Big thank you to Infoblox for sponsoring this video. To learn more about Infoblox please visit: https://www.infoblox.com/ Do you know the difference between encrypted DNS and secure DNS? DNS veteran Cricket Liu, author of DNS and Bind, joins David Bombal to break down common misconceptions, explain the crucial distinction between security and privacy; and outline a massive update to the NIST Secure DNS Deployment Guide (SP 800-81). If you run a network, you cannot afford to ignore this control point. Detailed Breakdown: DNS is the Achilles' heel of internet infrastructure. While newer protocols like DNS over HTTPS (DoH) and DNS over TLS (DoT) solve the cleartext privacy problem, they do not stop malware, phishing, or data exfiltration. In fact, attackers are now using encrypted DNS against us. In this deep-dive interview, Cricket Liu explains how DNS security must evolve beyond simple encryption to include Protective DNS (PDNS) using Response Policy Zones (RPZ). Learn how to turn your existing DNS infrastructure into a low-cost, high-efficiency control point that blocks malicious C2 rendezvous, phishing links, and DNS tunneling automatically. We also tackle the DNSSEC confusion head-on. Cricket clarifies exactly why DNSSEC is about validation and integrity, not encryption, and discusses the looming threat of quantum computing on modern cryptographic standards. Finally, we discuss real-world attack vectors, including a wild story about a dangling CNAME record on CDC.gov that was hijacked to game search engine rankings, and how the updated NIST guide shifts focus from just network administrators to security practitioners. // Links to documents // NIST SP 800-81: https://nvlpubs.nist.gov/nistpubs/Spe... Inflox Q&A on NIST SP 800-81: https://www.infoblox.com/blog/securit... // Cricket Liu's SOCIAL // LinkedIn: / cricketliu // Renee Burton's SOCIAL // LinkedIn: / ren%c3%a9e-burton-b7161110b Blog Posts: https://www.infoblox.com/blog/author/... // Infoblox SOCIAL // LinkedIn: / infoblox Website: https://www.infoblox.com/ // Books by Cricket // DNS on Windows Server 2003: Mastering the Domain Name US: https://amzn.to/4byNAtQ UK: https://amzn.to/4rjqgoz DNS & BIND Cookbook: Solutions & Examples for System Administrators 1st Edition US: https://amzn.to/40iZPob UK: https://amzn.to/3Nk2MBM DNS and BIND on IPv6: DNS for the Next-Generation Internet 1st Edition US: https://amzn.to/3MXly1Y UK: https://amzn.to/4s2SFRe Learning CoreDNS: Configuring DNS for Cloud Native Environments 1st Edition US: https://amzn.to/4sC4GwS UK: https://amzn.to/4ro0T59 DNS & Bind 4th Edition: US: https://amzn.to/4s8WaWm UK: https://amzn.to/4sztLbB // Website REFERENCE // Nist: https://www.nist.gov/ Secure Domain Name System Deployment Guide: https://www.nist.gov/news-events/news... // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #dns #dnssec #cybersecurity

This week we interview Christopher J. Millerick. Christopher is a revenue architect, go-to-market strategist, and expert in partner eco-systems leadership who has spent more than fifteen years engineering the systems that translate Private Equity and Venture Capital investment theses into predictable, capital-efficient revenue growth for enterprise SaaS and cybersecurity companies. As Global Vice President of Worldwide Partner Sales, Alliances & Hyperscalers at Infoblox—a Vista Equity Partners and Warburg Pincus portfolio company—Chris led the structural transformation of a stagnant $450M transactional channel into a strategic growth ecosystem that now executes 97% of total company revenue. Under his leadership, partner-sourced revenue grew from 38% to 73% of new customer bookings, new customer acquisition increased 43%, and the organization scaled steadily toward $1B in annual recurring revenue—all while meeting the board's rigorous "Rule of 60" profitability and growth mandates. Chris brought expertise that in collaboration with Infoblox's previous CRO led to the adoption of the "3 WHYs" qualifying framework — a buyer-centric methodology that aligns direct sales, marketing, and partner engagement around the three questions every enterprise buyer must answer before committing: Why now? (Urgency drivers) What happens if I do nothing? (Cost of inaction) Why this solution? (Value clarity) The framework has been deployed across global organizations to compress complex sales cycles and systematically improve capital efficiency. His operating experience spans the full PE value creation lifecycle. He built a greenfield enterprise region at Nutanix from zero to a top-producing region in North America within 24 months, led global revenue responsibility through the successful acquisition of Unitrends by Kaseya and co-led the Plexxi go-to-market turn-around through to acquisition by Hewlett Packard Enterprise. Chris led global channel sales for EMC Corporation's flagship storage business and held a variety of sales and GTM roles with progressive financial impact across a twelve-year tenure. A 5-time CRN Channel Chief honoree, Executive Revenue Growth Advisor in the Hubble network, and Limited Partner at Stage 2 Capital, Chris holds a BA from the College of the Holy Cross, an MBA from Babson College and Chief Revenue Officer Leadership Program Certificate from the University of Chicago Booth School of Business. He speaks on partner ecosystem transformation, PE/VC value creation through GTM architecture, leveraging AI in GTM and building revenue engines that deliver both growth and profitability at scale.

Internationella bedrägeriföretag med bas i Sydostasien omsätter mer än flera länders BNP. Vilka är offer och förövare, i den här växande industrin? Lyssna på alla avsnitt i Sveriges Radios app. Medverkande: Johan Lindström, företagare som driver ett hockeyutbildningsföretag i Stenungsund, Björn Seth, polisens nationella bedrägericentrum, Mech Dara, frilansjournalist, Winston Casio, talesperson för The Presidential Anti-Organized Crime Commission (PAOCC), Jacob Sims, expert på Harvard universitetets Asiencenter, Lin, tjej från centrala Kina som letar efter sin försvunne bror, ”Herr Guo”, bonde från centrala Kina som letar efter sin försvunne son, John Wojcik, senior analytiker på cybersäkerhetsföretaget Infoblox, Monika Steffens från Katrineholm och Violet Petersson från Orust, som båda utsatts för varsitt romansbedrägeri, och som efter det har startat en föreningen för att hindra att fler utsätts.Programledare: Kajsa Boglindkajsa.boglind@sr.seReportrar: Axel Kronholm, Johanna Sjöqvist Harland, Moa KärnstrandTekniker: Rasmus HåkansProducent: Ulrika Bergqvistulrika.bergqvist@sr.se

Big thank you to Infoblox for sponsoring this video. For more information on Infoblox have a look at their website: https://www.infoblox.com/ // Get Wireshark Certified // Check out the official training course

Our daily digital tools—browsers, apps, and smart devices—offer convenience but also expose us to hidden security risks. This guide reveals how ordinary technologies can imperil privacy and safety, focusing on three major areas: browser extensions, typo-prone website visits, and internet-connected cameras.The Hidden Spy on Your BrowserBrowser extensions, designed to block ads or save passwords, can also harvest personal data or hide malware. Researchers recently found popular Chromium extensions secretly recording entire conversations with AI chatbots such as ChatGPT and Gemini—logging prompts, responses, and timestamps, then transmitting them to outside servers. Many of these tools were deceptively labeled as privacy enhancers and featured in official stores, masking their data collection practices under carefully worded policies.Another danger, exemplified by the GhostPoster malware campaign on Firefox, showed how malicious code can bypass security. The attackers embedded it in an image file within the extension's icon—an area security software rarely scans. The code then downloaded additional payloads from remote servers in timed stages to avoid detection. Together, these examples illustrate that browser extensions can function as open doors for data theft and hidden malware, exploiting misplaced trust.When a Typo Becomes a TrapEven something as minor as mistyping a web address now carries serious risk. A "parked domain"—an inactive site often resembling a misspelled version of a popular URL—has become a common tool for cybercriminals. Once relatively harmless, these domains are now overwhelmingly malicious. According to Infoblox research, over 90% of visits to parked domains result in exposure to scams, illegal content, or automatic malware downloads, compared to less than 5% a decade ago.Simply visiting one of these pages can trigger pop-ups for fake antivirus subscriptions, redirect you to scam sites, or silently infect your device. In today's environment, a typo is no longer an inconvenience—it's a gateway to immediate compromise.The Camera That Turns on YouInternet-connected security cameras promise safety but can create severe privacy breaches when poorly secured. A massive hack in South Korea exposed footage from over 120,000 cameras in homes, clinics, and salons, which hackers later sold online. Most intrusions stemmed from weak or unchanged default passwords. This event underscores that devices we install for protection can become surveillance tools for attackers if we fail to secure them properly.Staying Smart and SafeThe dangers from compromised extensions, malicious parked domains, and insecure cameras highlight one shared truth: convenience often conceals risk. To navigate safely, users should: 1. Question their tools—research extensions or apps and limit unnecessary permissions. 2. Avoid careless mistakes—double-check URLs before pressing enter. 3. Secure devices—use strong, unique passwords and update firmware regularly.Ultimately, cyber safety depends on ongoing vigilance rather than one-time fixes. Like Santa in a playful ESET report who “tightened his security” after a fictional data breach, users too can—and must—strengthen their defenses. Staying alert, skeptical, and proactive transforms technology from a source of danger into a safer partner in modern life.

　土橋氏は就任にあたって「企業内でサイロ化しがちなDDI環境を可視化・統合することで、ITインフラの運用効率を高めるだけでなく、グローバルレベルでのITガバナンスの強化にも貢献できる」とコメントしている。

Dr. Renée Burton, Vice President of Threat Intelligence from Infoblox, is sharing the team's work on "Deniability by Design: DNS-Driven Insights into a Malicious Ad Network." Infoblox returns with new threat actor research uncovering Vane Viper, a Cyprus-based holding company behind PropellerAds—one of the world's largest advertising networks. The report reveals that Vane Viper isn't just being exploited by criminals but operates as a criminal infrastructure itself, built to profit from fraud, malware, and disinformation through offshore entities and complex ownership structures. The findings highlight the growing convergence between adtech, cybercrime, and state-linked influence operations, suggesting that elements of the global digital advertising ecosystem are now functioning as infrastructure for large-scale cyber and disinformation campaigns. The research can be found here: Deniability by Design: DNS-Driven Insights intoa Malicious Ad Network Learn more about your ad choices. Visit megaphone.fm/adchoices

Dr. Renée Burton, Vice President of Threat Intelligence from Infoblox, is sharing the team's work on "Deniability by Design: DNS-Driven Insights into a Malicious Ad Network." Infoblox returns with new threat actor research uncovering Vane Viper, a Cyprus-based holding company behind PropellerAds—one of the world's largest advertising networks. The report reveals that Vane Viper isn't just being exploited by criminals but operates as a criminal infrastructure itself, built to profit from fraud, malware, and disinformation through offshore entities and complex ownership structures. The findings highlight the growing convergence between adtech, cybercrime, and state-linked influence operations, suggesting that elements of the global digital advertising ecosystem are now functioning as infrastructure for large-scale cyber and disinformation campaigns. The research can be found here: Deniability by Design: DNS-Driven Insights intoa Malicious Ad Network Learn more about your ad choices. Visit megaphone.fm/adchoices

“Cyber resilience isn't just about protection, it's about preparation.”Every business in this day and age lives in the cloud. Our operations, data, and collaboration tools are powered by servers located invisibly around the world. But here's the question we often overlook: what happens when the cloud falters?In this episode of Tech Transformed, Trisha Pillay sits down with Jan Ursi, Vice President of Global Channels at Keepit, to uncover the real meaning of cyber resilience in a cloud-first world. Are you putting all your trust in hyperscale cloud providers? Think again. Trisha and Jan explore why relying solely on giants like Microsoft or Amazon can put your data at risk and how independent infrastructure gives organisations control, faster recovery, and true digital sovereignty.Takeaways:The importance of cyber resilience in a cloud-first worldHow independent cloud infrastructure protects your SaaS applicationsCommon shared responsibility misconceptions that can cost organisations dataStrategies for quick recovery from ransomware and cyberattacksWhy digital sovereignty ensures control and complianceChapters:00:00 – Introduction to Cyber Resilience and Cloud Strategy05:00 – The Importance of Independent Infrastructure10:00 – Shared Responsibility and Misconceptions15:00 – Digital Sovereignty and Compliance20:00 – Practical Tips for CISOs and CIOs22:00 – ConclusionAbout Jan Ursi:Jan Ursi leads Keepit's global partnerships, helping organisations embrace the AI-powered cyber resilience era. Keepit is the world's only independent cloud dedicated to SaaS data protection, security, and recovery. Jan has previously built and scaled businesses at Rubrik, UiPath, Nutanix, Infoblox, and Juniper, shaping the future of enterprise cloud, hyper-automation, and data protection.Follow EM360Tech for more insights:Website: www.em360tech.comX: @EM360TechLinkedIn: EM360TechYouTube: EM360Tech

　DNS をめぐる事態はさらに進展する。2025 年 5 月 10 日、米国 NIST（米国国立標準技術研究所）が発行する DNS のベストプラクティスに関する最も権威と影響力のある文書「NIST SP 800-81」の改訂イニシャル版が公開されたのだ。SP 800-81 の改訂は 2013 年以来 12 年ぶり。改訂ポイントは次の三つ。

Take a Network Break! We start with follow-up on post-quantum support in firewalls and DPDK, then highlight a command injection vulnerability in Ruckus SmartZone software. In tech news, Broadcom rolls out the Jericho4 ASIC to help scale AI across multiple data centers, InfoBlox beefs up DNS protection to spot malicious domains faster, and HPE announces... Read more »

Take a Network Break! We start with follow-up on post-quantum support in firewalls and DPDK, then highlight a command injection vulnerability in Ruckus SmartZone software. In tech news, Broadcom rolls out the Jericho4 ASIC to help scale AI across multiple data centers, InfoBlox beefs up DNS protection to spot malicious domains faster, and HPE announces... Read more »

Take a Network Break! We start with follow-up on post-quantum support in firewalls and DPDK, then highlight a command injection vulnerability in Ruckus SmartZone software. In tech news, Broadcom rolls out the Jericho4 ASIC to help scale AI across multiple data centers, InfoBlox beefs up DNS protection to spot malicious domains faster, and HPE announces... Read more »

Her early inspiration while growing up in Goa with limited exposure to career options. Her Father's intellectual influence despite personal hardships and shift in focus to technology.Personal tragedy sparked a resolve to become financially independent and learn deeply.Inspirational quote that shaped her mindset: “Even if your dreams haven't come true, be grateful that so haven't your nightmares.”Her first role at a startup with Hands-on work with networking protocols (LDAP, VPN, DNS). Learning using only RFCs and O'Reilly books—no StackOverflow! Importance of building deep expertise for long-term success.Experiences with Troubleshooting and System Thinking; Transitioned from reactive fixes to logical, structured problem-solving. Her depth of understanding helped in debugging and system optimization.Career move to Yahoo where she led Service Engineering for mobile and ads across global data centers got early exposure to big data and machine learning through ad recommendation systems and built "performance and scale muscle" through working at massive scale.Challenges of Scale and Performance Then vs. Now: Problems remain the same, but data volumes and complexity have exploded. How modern tools (like AI/ML) can help identify relevance and anomalies in large data sets.Design with Scale in Mind - Importance of flipping the design approach: think scale-first, not POC-first. Encourage starting with a big-picture view, even when building a small prototype. Highlights multiple scaling dimensions—data, compute, network, security.Getting Into ML and Data Science with early spark from MOOCs, TensorFlow experiments, and statistics; Transition into data science role at Infoblox, a cybersecurity firm with focus areas on DNS security, anomaly detection, threat intelligence.Building real-world ML model applications like supervised models for threat detection and storage forecasting; developing graph models to analyze DNS traffic patterns for anomalies and key challenges of managing and processing massive volumes of security data.Data stack and what it takes to build data lakes that support ML with emphasis on understanding the end-to-end AI pipelineShifts from “under the hood” ML to front-and-center GenAI & Barriers: Data readiness, ROI, explainability, regulatory compliance.Explainability in AI and importance of interpreting model decisions, especially in regulated industries.How Explainability Works -Trade-offs between interpretable models (e.g., decision trees) and complex ones (e.g., deep learning); Techniques for local and global model understanding.Aruna's Book on Interpretability and Explainability in AI Using Python (by Aruna C).The world of GenAI & Transformers - Explainability in LLMs and GenAI: From attention weights to neuron activation.Challenges of scale: billions of parameters make models harder to interpret. Exciting research areas: Concept tracing, gradient analysis, neuron behavior.GenAI Agents in Action - Transition from task-specific GenAI to multi-step agents. Agents as orchestrators of business workflows using tools + reasoning.Real-world impact of agents and AI for everyday lifeAruna Chakkirala is a seasoned leader with expertise in AI, Data and Cloud. She is an AI Solutions Architect at Microsoft where she was instrumental in the early adoption of Generative AI. In prior roles as a Data Scientist she has built models in cybersecurity and holds a patent in community detection for DNS querying. Through her two-decade career, she has developed expertise in scale, security, and strategy at various organizations such as Infoblox, Yahoo, Nokia, EFI, and Verisign. Aruna has led highly successful teams and thrives on working with cutting-edge technologies. She is a frequent technical and keynote speaker, panelist, author and an active blogger. She contributes to community open groups and serves as a guest faculty member at premier academic institutes. Her book titled "Interpretability and Explainability in AI using Python" covers the taxonomy and techniques for model explanations in AI including the latest research in LLMs. She believes that the success of real-world AI applications increasingly depends on well- defined architectures across all encompassing domains. Her current interests include Generative AI, applications of LLMs and SLMs, Causality, Mechanistic Interpretability, and Explainability tools.Her recently published book linkInterpretability and Explainability in AI Using Python: Decrypt AI Decision-Making Using Interpretability and Explainability with Python to Build Reliable Machine Learning Systems  https://amzn.in/d/00dSOwAOutside of work, she is an avid reader and enjoys creative writing. A passionate advocate for diversity and inclusion, she is actively involved in GHCI, LeanIn communities.

A hacking group goes after Salesforce data, the FBI takes down the BidenCash carding forum, China offers rewards for Taiwanese military hackers, and high risk bugs are patched in enterprise software from HPE and Infoblox. Show notes

Phishing e-mail that hides malicious links from Outlook users Jan found a phishing email that hides the malicious link from Outlook users. The email uses specific HTML comment clauses Outlook interprets to render or not render specific parts of the email s HTML code. Jan suggests that the phishing email is intented to not expose users of https://isc.sans.edu/diary/Phishing%20e-mail%20that%20hides%20malicious%20link%20from%20Outlook%20users/32010 Amazon changing default logging from blocking to non-blocking Amazon will change the default logging mode from blocking to non-blocking. Non-blocking logging will not stop the application if logging fails, but may result in a loss of logs. https://aws.amazon.com/blogs/containers/preventing-log-loss-with-non-blocking-mode-in-the-awslogs-container-log-driver/ Cisco Removes Backdoor Cisco fixed a Cisco Identity Services Engine on Cloud Platforms Static Credential Vulnerability. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-aws-static-cred-FPMjUcm7 Infoblox Vulnerability Details disclosed Details regarding several vulnerabilities recently patched in Infoblox s NetMRI have been made public. In particular an unauthenticated remote code execution issue should be considered critical. https://rhinosecuritylabs.com/research/infoblox-multiple-cves/

Welcome to another exciting episode of The SaaS CFO Podcast! Today, we have the pleasure of hosting Pete Foley, the dynamic CEO and co-founder of ModelOp. With a rich background as a serial entrepreneur, Pete has successfully launched and sold several companies in the enterprise software space, including notable names like Infoblox and a thriving security company out of Israel. Now, Pete's latest venture, ModelOp, is pioneering in the rapidly growing field of AI governance, helping enterprises seamlessly and safely integrate AI models into their operations. ModelOp offers an enterprise software designed to ensure compliance with internal and external regulations while maintaining the efficacy of AI models. This innovative approach positions ModelOp at the forefront of the AI market, which continues to expand at an unprecedented pace. In this episode, Pete shares invaluable insights into his journey, market dynamics, and the strategic vision driving ModelOp forward. Whether you're interested in AI, SaaS, or entrepreneurial growth, this is an episode you won't want to miss! Tune in for an in-depth conversation packed with industry expertise and forward-looking perspectives. Show Notes: 00:00 Exited tech startups, ventured into emerging AI market. 03:43 Enterprise software for AI governance and orchestration. 07:49 AI interest spans all industries, emphasizing global opportunities. 09:58 Emerging Chief AI Officer role within organizations. 14:00 AI attracts significant attention and market tailwind. 19:09 Competitive advantage and strong multi-year contracts secured. 22:16 Understanding market maturity prevents over-investment mistakes. 23:44 ARR reflects growth and competitive advantage focus. Links: SaaS Fundraising Stories: https://www.thesaasnews.com/news/modelop-raises-10-million-in-series-b Pete Foley's LinkedIn: https://www.linkedin.com/in/petefoley2/ ModelOp's LinkedIn: https://www.linkedin.com/company/modelop/ ModelOp's Website: https://www.modelop.com/ To learn more about Ben check out the links below: Subscribe to Ben's daily metrics newsletter: https://saasmetricsschool.beehiiv.com/subscribe Subscribe to Ben's SaaS newsletter: https://mailchi.mp/df1db6bf8bca/the-saas-cfo-sign-up-landing-page SaaS Metrics courses here: https://www.thesaasacademy.com/ Join Ben's SaaS community here: https://www.thesaasacademy.com/offers/ivNjwYDx/checkout Follow Ben on LinkedIn: https://www.linkedin.com/in/benrmurray

Six Five Media is live for a segment on network management within hybrid & multi-cloud environments! Host Steven Dickens is joined by Infoblox's Chief Product Officer, Mukesh Gupta, for a conversation on reinventing DDI (DNS, DHCP, and IPAM) solutions for modern hybrid and multi-cloud environments with their new Universal DDI Product Suite. Their discussion covers: The evolving landscape of DDI management in hybrid and multi-cloud environments Key features and innovations within the Universal DDI™ Product Suite How Infoblox's solutions are designed to meet the needs of modern enterprises The importance of scalability and security in DDI solutions for businesses today Insights into future trends in DDI management and cloud infrastructure  

On this episode of Six Five On the Road, host Patrick Moorhead is joined by Infoblox's CEO Scott Harrell, for a conversation on redefining network services in the multi-cloud era. Their discussion covers: The evolution of network services in response to the demand for cloud solutions Infoblox's strategic approach to navigating the multi-cloud landscape Future trends in networking and cloud technologies  

(0:00) Intro.(1:03) About the podcast sponsor: The American College of Governance Counsel.(1:50) Start of interview. *Reference to E137 with Coco Brown (CEO of Athena Alliance).(2:47) Yvonne's origin story.(5:49) Her executive career starting with Accenture, and later with VMware, New Relic, and CEO of Airware and Puppet.(9:03) On her board journey. Distinctions between private and public company service. Plus non-profits.(17:43) Explaining board composition and dynamics in VC-backed companies.(23:23) Explaining board composition and dynamics in PE-backed companies. "It's much more straightforward, structured, and contained."(27:39) On the 'Stay Private vs Go Public' debate and other considerations on private markets.(34:29) On the AI boom and how to think about it from a board's perspective: "how do you experiment and lean in without committing?"(39:06) On the increasing relevance of cybersecurity in the age of digitization. "Cyber attacks are like earthquakes in California. They're going to happen."(42:33) On geopolitics and the boardroom. "How you think about it really depends on what type of company you're in, how big it is, and what you're trying to achieve."(45:40) How to think about the ESG landscape.(49:56) Podcasts that she regularly listens to: Boardroom Governance with Evan Epstein :)The Economist PodcastsGrit Podcast with Joubin MirzadeganAcquired Podcast(52:03) Her mentors and sponsors. Carl Eschenbach John Chambers(54:44) Quotes that she thinks of often or lives her life by: "Be the change you want to see in the world" by Mahatma Gandhi,(55:15) An unusual habit or absurd thing that she loves: misting plants.(56:35) The living person she most admires: MacKenzie Scott.Yvonne Wassenaar is a seasoned Silicon Valley C-level executive and board member with experience across public, private equity-backed, and venture-backed companies. She currently serves on the boards of Forrester, Rubrik, Arista Networks, JFrog, Alation, Braze, and InfoBlox. She also serves on the boards of Harvey Mudd College and UCLA Anderson's Easton Technology Management Center. You can follow Evan on social media at:Twitter: @evanepsteinLinkedIn: https://www.linkedin.com/in/epsteinevan/ Substack: https://evanepstein.substack.com/__You can join as a Patron of the Boardroom Governance Podcast at:Patreon: patreon.com/BoardroomGovernancePod__Music/Soundtrack (found via Free Music Archive): Seeing The Future by Dexter Britain is licensed under a Attribution-Noncommercial-Share Alike 3.0 United States License

Dan is joined by Mark Himelstein, President of Heavenstone. Most recently, as Chief Technology Officer at RISC-V International, Mark contributed to shaping RISC-V technology through visionary leadership and industry expertise. He has a track record of executive roles at Graphite Systems, Quantum, and Infoblox. Dan discusses… Read More

On this episode of the Six Five in the Booth, Will Townsend of Moor Insights & Strategy is joined by Infoblox's Mukesh Gupta, Chief Product Officer for a conversation on the future of cybersecurity in an ever-evolving threat landscape. Their discussion covers: Strategies to track the constantly evolving threat landscape Emerging attack trends to watch The significance of DNS in cybersecurity enhancements by Infoblox Infoblox's latest innovations for enhanced protection and control Mukesh Gupta's insights on the biggest challenges for security professionals in 2025  

  On this episode of the Six Five in the Booth, Will Townsend of Moor Insights & Strategy is joined by Infoblox's Dr. Renée Burton, Vice President, Threat Intelligence, for a deep dive into the world of DNS-based threat intelligence and how Infoblox is leading the charge in protecting businesses from an array of cyber threats. Their discussion covers: The pivotal role of DNS in the cybersecurity landscape and Infoblox's approach to unmasking threat actors. The intriguing story behind the names of threats like seahorses, pumas, vipers, dogs, and meerkats, and the significance of DNS in safeguarding against them. An exploration of Zero Day DNS and its importance in the battle against cyber threats. Infoblox's strategic shift from threat aggregator to creator and the reasoning behind this transition. The necessity of introducing new security products in a market flooded with solutions.  

Meerkats are dangerous, I guess. Especially in DNS. Yeah, that Meerkat. Why should we know about this type of attack? How does China play in here? Where is the risk? Does this type of attack merit increased concern?

In today's episode, we dive into the sophisticated DNS activities of the China-linked threat actor known as Muddling Meerkat, who manipulates internet traffic and abuse DNS open resolvers. This cyber espionage endeavor has global implications as explained by Infoblox in an article at The Hacker News (https://thehackernews.com/2024/04/china-linked-muddling-meerkat-hijacks.html). Also, we discuss the FBI's warning about fake verification schemes targeting dating app users, uncovering the scam processes and providing tips to safeguard against such fraudulent activities as detailed in the BleepingComputer article (https://www.bleepingcomputer.com/news/security/fbi-warns-of-fake-verification-schemes-targeting-dating-app-users/#google_vignette). Lastly, we explore Google's efforts to enhance mobile security by preventing over 2 million malicious apps from entering the Play Store, highlighting their proactive measures and collaborations to safeguard user privacy. Read more about this at The Hacker News (https://thehackernews.com/2024/04/google-prevented-228-million-malicious.html). 00:00 Introduction 02:36 Dating App Scams 04:12 Google's Security Enhancements 06:47 Muddling Meerkat's DNS Manipulation Generate single use credit card numbers: https://app.privacy.com/join/GL3U7 Tags: Muddling Meerkat, DNS activities, reconnaissance, China, fake verification schemes, dating app users, FBI warning, fraudsters, Google, Play Store, security, review process Search Phrases: Muddling Meerkat DNS activities China Muddling Meerkat reconnaissance Fake verification schemes dating apps FBI warning fraudsters Protect from fake verification schemes Unauthorized credit card charges prevention Google Play Store security measures Prevent sensitive data access Google app review process Infiltration prevention in Play Store Apr30 The FBI is warning that dating app users are being targeted by fake verification scams that are leading to costly recurring subscription charges, as well as theft and misuse of personal information. How can users protect themselves while using dating apps? Google blocked over 2 million policy violating apps from the Play Store in 2023. In a proactive security measure that also saw over 790,000 apps guarded against sensitive data access. How has Google improved its security features and review process to prevent these malicious apps from infiltrating the Play Store? And finally, a China linked threat named Muddling Meerkat has been caught manipulating DNS activities globally to evade security measures. They've been conducting reconnaissance since 2019. What are these unique DNS activities that Muddling Meerkat are undertaking, and what is their end goal? You're listening to The Daily Decrypt. So the FBI is warning of a new scam that's targeting dating app users, which can lead to fraudulent recurring subscription charges and even identity theft. So basically, the scammers will develop a romantic connection with you on the dating app of your choice, whether that's Tinder or Bumble or Hinge or whatever you choose, then they're going to ask to move this conversation to a safer platform to verify that you are in fact a human. Well, we're all on dating apps to try to find someone, so of course I'm going to verify that I'm human. It's a valid request. Well, the only way to verify that you're human now is to provide a credit card number and some information. Can't do anything without that. And that's where they're going to get you. This is going to lead to maybe small, maybe large, but seemingly anonymous charges on your credit card bill. And if you're not paying close attention to that, you might miss them. So this attack, at its core, is not very complex, but it is remarkably effective, because remember, there are a few different situations that we put ourselves in where we're a little more desperate and a little less careful. than we normally are. For example, dating apps. You're really on there to look for connection. Also when you're applying for a job, you're pretty desperate for a job. And sometimes when you need groceries or when you're hungry and you need DoorDash, you might be a little more susceptible to this type of attack. It's no secret what everyone's looking for on a dating app. It's all pretty similar. And so it might not be that hard to convince. Someone that they're having a genuine romantic connection. So, the FBI has some advice. They advise you not to open any attachments from anybody. And to keep the conversations on the dating platform. As well as reporting any suspicious profiles. Now, an additional tip from the Daily Decrypt, I myself just signed up the other day for a service called privacy. com that is a free service at its core creates new credit card numbers for you to use with different services. So when you sign up for Netflix, this site will create a credit card number for you. You can set a spending limit on it and You can cancel it at any time. So if you're signing up Netflix and thats for 20 dollars a month, you limit that card to $20 a month. Now, if Netflix decides they want to upcharge you, it won't go through. You're good to go. And so in the case of this specific attack, if you were to give them one of these generated credit card numbers and you set the limit for 1, which is what it usually costs to verify your ID, even though you'll get it returned, And say, no recurring charges allowed. the attacker will have this dummy credit card number and won't be able to get anything out of you. I'd highly recommend using this for any subscription. It makes the process of canceling so much easier. And especially with the boom in subscription services, like, everything has a subscription, so Some of them might be less secure than others. And if for some reason that site is breached, they get the credit card numbers. They're only gonna have this dummy credit card. And you've already set limits on it, so Attackers who come into ownership of this credit card number can't make extra purchases besides the subscription charges you've allocated. Google has revealed that in 2023 they prevented 2. 28 million policy violating apps from being published on the Play Store by leveraging new security features, policy updates, and advanced machine learning processes. So that's a lot of apps. Apple Store is known for having pretty stringent requirements for apps, even though in recent news they've had some pretty big slip ups with LastPass. Imitation app that was harvesting all the credentials stored in your LastPass account, all the way down to fake crypto apps that will take your credentials for your crypto and drain your accounts. But this is a big deal because of how easy it is for fraudulent apps to take over your entire life. Like those examples I just mentioned, if you happen to download a fake banking app for Bank of America, it Then the attackers would have your credentials to log into your Bank of America account. And I haven't been on the Google Play Store in a while, but I'm sure you can buy ad space there, and you know how we feel about Google Ads on this podcast. Don't click them. But it is very easy to spend 30 bucks and get any website up to the top of your Google search results. So just stay away from Google ads and any ads you may see on the app store. And you'll seriously reduce the likelihood of clicking a bad link or downloading a bad app. But Google has blocked 333, 000 bad accounts in 2023 from attempting to distribute malware or violating policies on the Play Store. Google has partnered with SDK providers to restrict sensitive data access and sharing, as well as strengthen developer onboarding and review processes, mandating additional identity verification steps to prevent bad actors from exploiting the system to propagate malicious apps. Google's efforts to secure the Android ecosystem include real time scanning at the code level to combat new Android malware threats and the introduction of independent security review badge for VPN apps that have undergone a mobile application security assessment. So I know some of you out there are Apple haters, but I have no intention of ever switching away from Apple. Mostly because, up until this point, they seem to be the provider that cares about app security. Whether or not that's true, I don't know, but that's how it appears. But this step from Google is one in the right direction towards winning over Apple fanboys like myself. So keep up the good work Google, and hey, who knows, maybe I'll switch back. So, recently, a new cyber threat named Muddling Meerkat has been identified conducting sophisticated DNS activities globally since October 2019. And this specific threat is likely linked to China and is capable of manipulating, quote, the Great Firewall. So how does it work? Muddling Meerkat exploits OpenDNS resolvers to send queries from Chinese IP spaces demonstrating a high level of DNS expertise uncommon amongst most threat actors. The threat actor triggers DNS queries for various record types to domains not owned by them under popular top level domains like com and org, using fake DNS MX records to probe the target domain. Infoblox detected over 20 domains targeted by muddling meerkat. Receiving anomalous DNS MX record requests from customer devices, indicating a unique and unprecedented attack method. The purpose behind Muddling Meerkat's prolonged DNS operations remains unclear, but is suggesting potential motives such as internet mapping or undisclosed research efforts. And a quote from Dr. Rene Burton, Vice President of Threat Intelligence for Infoblox, Muddling Meerkat elicits a special kind of fake DNS MX record from the Great Firewall, which has never been seen before. For this to happen, Muddling Meerkat must have a relationship with the Great Firewall operators. And for those of you like me who aren't unfamiliar with the Great Firewall, Just pulling up their Wikipedia page and reading from it, it says it's the combination of legislative actions and technologies enforced by the People's Republic of China to regulate the internet domestically. So it's a critical role in internet censorship in China. And be sure to check the show notes for this episode for the domains that you might see DNS MX records from, and other IOCs of this type of scanning. I'm anticipating there to be more news to come on this topic. This has been the Daily Decrypt. If you found your key to unlocking the digital domain, show your support with a rating on Spotify or Apple Podcasts. It truly helps us stand at the frontier of cyber news. Don't forget to connect on Instagram or catch our episodes on YouTube. Until next time, keep your data safe and your curiosity alive.

Every week on Pipeline Visionaries, we sit down with amazing marketing leaders to uncover the pipeline strategies that have been fundamental to their success. In each episode, we ask these guests which three areas of investment are most important to their marketing strategies. Tune into this special series to hear the budget items our CMO guests can't live without!Find parts one, two, three, four, five, six, seven, eight and nineEpisode Timestamps: *(01:37): Grant Johnson, CMO at Billtrust*(04:22): Jessica Gilmartin, CMO at Calendly*(06:11): Megan McDonagh, CMO at Amperity*(07:17): Shafqat Islam, CMO at Optimizely*(08:42:) Efrat Ravid, CMO at Quantum Metric*(10:59): Orlando Baeza, CMO & CRO at Flock Freight*(13:32): Jenny Victor, CMO at Epicor*(16:18): Jessica Shapiro, CMO at LiveRamp*(19:09): Jacqueline Woods, CMO at Teradata*(21:24): Brad Rinklin, CMO at Infoblox*(24:33): Celia Fleischaker, CMO at isolved  Sponsor:Pipeline Visionaries is brought to you by Qualified.com, the #1 Conversational Marketing platform for companies that use Salesforce and the secret weapon for pipeline pros. The world's leading enterprise brands trust Qualified to instantly meet with buyers, right on their website, and maximize sales pipeline. Visit Qualified.com to learn more.Links:Connect with Ian on LinkedInLearn more about Caspian Studios

This episode features an interview with Brad Rinklin, CMO at Infoblox, a Computer and Network Security company that unites networking and security to deliver unmatched performance and protection for a world that never stops. In this episode, Brad shares with us how Infoblox is expanding its buyer persona reach, what a modern marketing team looks like, and the importance of adapting to whatever your data tells you. Brad also talks about what makes a great marketer better than the average marketer - creating the right thing, in the right place, at the right time.  Key Takeaways:Bringing in new buyers through education. When you're looking at personas outside of your normal reach, be sure you're providing educational resources so they can better understand who you are and what you offer.Partner marketing acts as a force multiplier for your brand. Good partner relationships provide credibility in spaces you're not currently in and can potentially cut marketing efforts and costs in half.A lesson in marketing from fly fishing. Whether it's the buyer journey, the “bait” or content you create, remember your efforts should be focused on one buyer at a time. So, how can you be a better marketer? Provide the right thing, at the right place, at the right time. Quote: “What makes a great marketer better than an average marketer? Two fishermen go on the lake, they both have the exact same rod, the same reel. You might even have the same bait. What makes the one just ripping fish out left and right? And the other one doesn't catch anything at all? It's the same concept. You've gotta understand the behaviors of the buyers that you're selling to and the market that's out there and what else is out there trying to steal their attention.” Episode Timestamps: *(05:09) - The Trust Tree: Passive decisions have big implications*(25:11) - The Playbook: Partners as as force multiplier for your brand*(32:46) - Quick Hits: Brad's Quick Hits Sponsor:Pipeline Visionaries is brought to you by Qualified.com, the #1 Conversational Marketing platform for companies that use Salesforce and the secret weapon for pipeline pros. The world's leading enterprise brands trust Qualified to instantly meet with buyers, right on their website, and maximize sales pipeline. Visit Qualified.com to learn more. Links:Connect with Ian on LinkedInConnect with Brad on LinkedInLearn more about InfobloxLearn more about Caspian Studios

Proxy trojan targets macOS users for traffic redirection Indoor navigation has had a slow start Krasue RAT uses cross-kernel Linux rootkit to attack telecoms U.S. approves first gene-editing treatment, Casgevy, for sickle cell disease The DNS Deep-Drive continues with guests Josh Kuo, DNS expert, and Ross Gibson, Principal Solutions Architect of Infoblox, to talk about external authoritative DNS - whether enterprises should fully manage their own external DNS or use managed services, threats like domain hijacking, using load balancers, and more. Hosts: Curtis Franklin and Brian Chee Guests: Josh Kuo and Ross Gibson Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT lookout.com vanta.com/ENTERPRISE

Proxy trojan targets macOS users for traffic redirection Indoor navigation has had a slow start Krasue RAT uses cross-kernel Linux rootkit to attack telecoms U.S. approves first gene-editing treatment, Casgevy, for sickle cell disease The DNS Deep-Drive continues with guests Josh Kuo, DNS expert, and Ross Gibson, Principal Solutions Architect of Infoblox, to talk about external authoritative DNS - whether enterprises should fully manage their own external DNS or use managed services, threats like domain hijacking, using load balancers, and more. Hosts: Curtis Franklin and Brian Chee Guests: Josh Kuo and Ross Gibson Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT lookout.com vanta.com/ENTERPRISE

Proxy trojan targets macOS users for traffic redirection Indoor navigation has had a slow start Krasue RAT uses cross-kernel Linux rootkit to attack telecoms U.S. approves first gene-editing treatment, Casgevy, for sickle cell disease The DNS Deep-Drive continues with guests Josh Kuo, DNS expert, and Ross Gibson, Principal Solutions Architect of Infoblox, to talk about external authoritative DNS - whether enterprises should fully manage their own external DNS or use managed services, threats like domain hijacking, using load balancers, and more. Hosts: Curtis Franklin and Brian Chee Guests: Josh Kuo and Ross Gibson Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT lookout.com vanta.com/ENTERPRISE

Hackers Can Easily Extract ChatGPT Training Data Cheebert's prediction about VDI just came true Big Tech jobs are not as immune to layoffs as we thought Siemens PLCs are Still Vulnerable to Stuxnet-like Cyberattacks Josh Kuo, DNS Expert and Ross Gibson, Principal Solutions Architect of Infoblox join Brian Chee and Curt Franklin for part 1 of a 3 part in-depth primer on enterprise DNS, from the basics of DNS lookup, key considerations like security and encryption, and why run your own DNS versus other free alternatives? Hosts: Brian Chee and Curtis Franklin Guests: Josh Kuo and Ross Gibson Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Sponsors: kolide.com/twiet bitwarden.com/twit GO.ACILEARNING.COM/TWIT

Hackers Can Easily Extract ChatGPT Training Data Cheebert's prediction about VDI just came true Big Tech jobs are not as immune to layoffs as we thought Siemens PLCs are Still Vulnerable to Stuxnet-like Cyberattacks Josh Kuo, DNS Expert and Ross Gibson, Principal Solutions Architect of Infoblox join Brian Chee and Curt Franklin for part 1 of a 3 part in-depth primer on enterprise DNS, from the basics of DNS lookup, key considerations like security and encryption, and why run your own DNS versus other free alternatives? Hosts: Brian Chee and Curtis Franklin Guests: Josh Kuo and Ross Gibson Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Sponsors: kolide.com/twiet bitwarden.com/twit GO.ACILEARNING.COM/TWIT

Hackers Can Easily Extract ChatGPT Training Data Cheebert's prediction about VDI just came true Big Tech jobs are not as immune to layoffs as we thought Siemens PLCs are Still Vulnerable to Stuxnet-like Cyberattacks Josh Kuo, DNS Expert and Ross Gibson, Principal Solutions Architect of Infoblox join Brian Chee and Curt Franklin for part 1 of a 3 part in-depth primer on enterprise DNS, from the basics of DNS lookup, key considerations like security and encryption, and why run your own DNS versus other free alternatives? Hosts: Brian Chee and Curtis Franklin Guests: Josh Kuo and Ross Gibson Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Sponsors: kolide.com/twiet bitwarden.com/twit GO.ACILEARNING.COM/TWIT

iLeakage gives hackers access passwords and sensitive data on iOS and macOS browsers. 0ktapus is "one of the world's most dangerous financial criminal groups" says Microsoft. Apple backs national right-to-repair bill. Pro-Russia hackers exploiting 0-day in Roundcube webmail software. 9 innovative ways to boost security hygiene for Cyber Awareness Month Josh Kuo, Senior Educator and SME in Cyber Security of Infoblox talks about why we need Punycode and how DNS can be a security solution for malicious Punycode. Hosts: Louis Maresca, Brian Chee, and Curtis Franklin Guest: Josh Kuo Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Sponsors: lookout.com kolide.com/twiet Miro.com/podcast

On This Week in Enterprise Tech, Lou Maresca talks with Josh Kuo, Senior Educator and SME in Cyber Security of Infoblox about punycode, why we need it and how to guard against malicious punycode with DNS. For the full episode, visit twit.tv/twiet/567 Host: Louis Maresca Guest: Josh Kuo You can find more about TWiT and subscribe to our podcasts at https://podcasts.twit.tv/ Sponsor: GO.ACILEARNING.COM/TWIT

iLeakage gives hackers access passwords and sensitive data on iOS and macOS browsers. 0ktapus is "one of the world's most dangerous financial criminal groups" says Microsoft. Apple backs national right-to-repair bill. Pro-Russia hackers exploiting 0-day in Roundcube webmail software. 9 innovative ways to boost security hygiene for Cyber Awareness Month Josh Kuo, Senior Educator and SME in Cyber Security of Infoblox talks about why we need Punycode and how DNS can be a security solution for malicious Punycode. Hosts: Louis Maresca, Brian Chee, and Curtis Franklin Guest: Josh Kuo Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit Sponsors: lookout.com kolide.com/twiet Miro.com/podcast

Gil Allouche is the Co-founder and CEO of Metadata, a company with patented technology that combines predictive scoring and programmatic advertising to deliver a predictable pipeline of opt-in lead-qualified leads for B2B enterprises. Metadata's customers include Cisco, UserVoice, Mulesoft, Salesforce, Infoblox, and Aerospike. Gil is a software engineer turned data-driven growth marketer who founded the company to make demand generation easy for non-technical marketers.  In this episode… As a B2B marketer, are you trying to free yourself from mundane tasks so you can focus on doing the work that matters the most? How can you do so and spend more time on the big things like strategy, creativity, and driving revenue? After doing marketing for three B2B companies, Gil Allouche discovered he was dealing with too many manual and repetitive tasks. As a software engineer turned data-driven growth marketer, he started looking for ways to drive more revenue without getting bogged down by all the manual work. He shares his journey of building a platform to automate repetitive marketing tasks to give marketers time to focus on revenue-generating activities. In this inspiring episode of the Inspired Insider Podcast, Dr. Jeremy Weisz welcomes Gil Allouche, Co-founder and CEO of Metadata, to discuss ways to automate your marketing. Gil talks about Metadata and what it does, the evolution of its product, customer success stories, and its ideal client profile.