Podcasts about Logging

(August 26, 2026) Dolly Parton, music star, actor and beloved figure who spanned generations, dies of cancer at 80. Bill Gates says he’s worried AI will harm workers, kids and society. California couple confront their surrogate in a Texas court as dispute over newborn escalates. See omnystudio.com/listener for privacy information.

(August 25, 2026) KTLA & KFI tech reporter Rich DeMuro joins the show for ‘Tech Tuesday.’ Today, Rich talks about Amazon raising prices on devices because of AI, Oura defending itself against lawsuit challenging its sleep tracking, and Android getting a new feature designed to help motion sickness. Local group sues over Mamdani’s plan to open municipal grocery stores. Logging in was never supposed to be this difficult.See omnystudio.com/listener for privacy information.

The Trump administration recently moved to open up more public lands in Washington state to cattle grazing and logging. We’ll talk more about what this could mean for our public lands with the Oregon Capital Chronicle’s Alex Baumhart. Read more of Alex's reporting about grazing changes and the roadless rule. We can only make Seattle Now because listeners support us. Tap here to make a gift and keep Seattle Now in your feed. Got questions about local news or story ideas to share? We want to hear from you! Email us at seattlenow@kuow.org, leave us a voicemail at (206) 616-6746 or leave us feedback online or on the KUOW App.See omnystudio.com/listener for privacy information.

Recorded on location at Black Hat USA 2026, Eric Avigdor of Menlo Security describes an adoption pattern he hears in customer conversation after customer conversation. AI makes teams measurably more productive. The guardrails that keep company data inside the business arrive later, if they arrive at all. Eric Avigdor leads product for AI security and data security at Menlo Security, and he splits the problem into two categories that get very different levels of attention. One is how people use AI in the browser, including what data gets pasted into an assistant and how much of that usage anyone knows about. The other is autonomous agents built to run business processes, where the question is how to keep them productive without letting their goals get hijacked. The category Eric Avigdor says compliance teams skip past is the agent that holds sensitive data and internet access at the same time. Read a poisoned web page, take the hidden instruction, and the goal changes. What is the difference between an agent running analysis on an internal database and an agent doing financial analysis at a bank with customer records and web access? One of them can be told to send the data somewhere else. So who owns AI governance? In most companies, nobody does, at least not with authority. Responsibility lands with the endpoint team, the network team, or the browser team, and each one works its own angle. An endpoint team tracks agent traffic on the endpoint and then loses the trail when the agent moves data cloud to cloud. A cloud team has the reverse blind spot. Menlo Agent Runtime Security, or MARS, is built around what an agent actually does rather than what it intends to do. Agent traffic is proxied through the Menlo Security cloud browser, where data masking, indirect prompt injection prevention, and web-based and file-based threat prevention are applied before an incident becomes cleanup work. Browser and web traffic today, MCP traffic next. For regulated organizations, that architecture produces something auditors can use. Logging, dashboarding, and a visual record of what an agent attempted in the real world. Europe has the AI Act. The US has not landed comparable rules yet, and Eric Avigdor says that gap concerns him enough that he is talking with people working to close it. GUEST Eric Avigdor, Vice President of Product, Menlo Security | On LinkedIn: https://www.linkedin.com/in/eric-avigdor-0b561118/ RESOURCES Black Hat USA 2026 event coverage: https://www.itspmagazine.com/black-hat-usa-2026-cybersecurity-event-coverage-in-las-vegas Menlo Security: https://www.menlosecurity.com/ Menlo AI Agent Security: https://www.menlosecurity.com/product/ai-agent-security Menlo AI Adaptive DLP: https://www.menlosecurity.com/product/ai-adaptive-dlp Are you interested in telling your story? ▶︎ Full Length Brand Story: https://www.studioc60.com/content-creation#full ▶︎ Brand Spotlight Story: https://www.studioc60.com/content-creation#spotlight ▶︎ Brand Highlight Story: https://www.studioc60.com/content-creation#highlight ▶︎ Get your own Brand Briefing at an upcoming event: https://www.studioc60.com/buy-brand-briefings KEYWORDS eric avigdor, menlo security, sean martin, brand story, brand marketing, marketing podcast, brand spotlight, black hat usa 2026, mars, menlo agent runtime security, ai agent security, prompt injection, indirect prompt injection, data exfiltration, ai governance, browser security, agentic ai, autonomous agents, shadow ai, data loss prevention, eu ai act, ai compliance, coding agents, mcp security Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

Wil Santiago, Wil Santiago, chief security and trust officer at Blackpoint Cyber Wil Santiago, chief security and trust officer at Blackpoint Cyber, joins In The Channel to discuss the findings of the company’s 2026 Annual Threat Report – research grounded in thousands of real incidents investigated by Blackpoint’s security operations centre, not surveys. The headline finding: attackers are no longer trying to break in. They’re logging in. Using stolen credentials and commodity remote management tools, threat actors are walking through the front door, hiding in plain sight, and operating with system-level privileges – sometimes for days before anyone notices. Santiago walks through the key trends the SOC identified across 2025: ClickFix and fake CAPTCHA campaigns accounted for more than half of all identifiable incidents, with attackers abusing trusted infrastructure including Azure Blob storage and Cloudflare to deliver payloads. RMM abuse showed up in roughly 30 per cent of triaged incidents – threat actors installing their own version of the same tools MSPs use legitimately, then living off the land with god-mode access. And Adversary-in-the-Middle attacks are now routinely hijacking authenticated sessions even when MFA is in place, by abusing OAuth token handling. The conversation also covers Blackpoint’s detection philosophy: behavioral context over malware signatures. Understanding what normal looks like in an environment – who uses what tool, at what time, from where – is what allows the SOC to catch attackers before they act. It’s a philosophy that is producing results: Blackpoint disrupted 56 per cent of incidents before a payload was ever deployed. Santiago’s closing recommendation for MSPs is straightforward: start with an RMM audit. Know every remote management tool deployed across every endpoint and server you manage. You cannot protect what you don’t know exists. The 2026 Annual Threat Report is available for download on the Blackpoint Cyber website. Read Full Transcript Robert Dutt: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last 16 years. I’m Robert Dutt, editor of ChannelBuzz.ca and your host for the show. Wil Santiago is Chief Security and Trust Officer at Blackpoint Cyber, an MDR provider whose SOC monitors and responds to threats in real time across a large base of MSPs and their clients. And unlike a lot of threat research that’s survey-based or derived from external reporting, what Blackpoint publishes comes from live incident data, thousands of actual threat responses they’ve worked through in the SOC. Their 2026 annual threat report has a thesis that cuts right through it. Attackers are no longer trying to break in, they’re logging in, using stolen credentials and legitimate IT tools, the same RMMs, the same cloud platforms that MSPs rely on every day, to walk through the front door, hide in plain sight, and work their way towards payday. It’s a theme we’ve been tracking at ChannelBuzz.ca. If you caught our conversation with Tony Anscombe from ESET, that one dug into the mechanics of how MSP tools are being weaponized against the very clients they’re supposed to protect. This conversation is the data layer behind that story, and the detection philosophy that Wil and the Blackpoint team have built to counter it. Their SOC is disrupting 56% of incidents before a payload even deploys. We talk about how. Let’s get right into it. My chat with Wil Santiago. Wil, thanks for taking the time, I appreciate it. Wil Santiago: Thank you, Robert. Robert Dutt: For people who know Blackpoint primarily as an MDR provider, but maybe haven’t dug into the research side, can you give us a quick sense of what your SOC is actually seeing day to day? When you say this report is based on thousands of real incidents, what does that mean in practical terms, in terms of how you gathered this data? Wil Santiago: That’s a great question, Robert. It really starts at the core of what we focus on at Blackpoint Cyber. In 2025, we focused a lot of our detection efforts in the cloud endpoints, but what we realized is that at the core, at that identity layer, that’s the most important thing. But what we’re protecting at Blackpoint is the identity. What we observed in 2025 is this interesting shift where, yes, there’s vulnerabilities, there will continue to be vulnerabilities. However, threat actors don’t necessarily need to weaponize those vulnerabilities to gain access into an environment. They’re not really targeting customers or companies with any specific new zero-day technology or exploits that are novel. They’re just logging in using stolen passwords. We’re still at that pivotal point, but we’re still talking about the same things we’ve been talking about, password reuse, making sure you’re protecting yourself from phishing emails, so on and so forth. But the reality is that threat actors are getting in. They’re stealing credentials and they’re using legitimate tools to just log in, walking through the front door. Robert Dutt: Yeah, the headline from the report was very catchy with the attackers are no longer trying to break in. They’re just logging in, as you say. And that framing echoes what we’ve seen in other reports elsewhere. People are calling 2025 the year of the abuse of trust in terms of security trends, but your numbers are operational and not survey-based. I’m curious what trusted compromise looks like from where you sit. Is there really a shift away from what you were seeing a couple of years ago or three years ago, or has this always been the playbook and we’re only now measuring it properly? Wil Santiago: Yeah, so if I compare back to, let’s say, 2022, I think we at Blackpoint would still see a trend, the threat actors gaining access into an environment, usually using some type of exploit at that time. You can point to a number of Microsoft Exchange exploits that happened during that time. The Hafnium group was doing a lot of Exchange exploits. The reality is there came a certain time where we were detecting Cobalt Strike, a malware commodity tool, every single day in Blackpoint Cyber’s SOC. And then eventually it became once a week, and then it became once a month. So then we started to think, well, what’s happening with the shift of tactics with the threat actors? And what we found is instead of installing Cobalt Strike, they started to install legitimate IT tools. And that’s the trust component. When they’re installing tools that you use internally, they now can abuse those tools the same way that you use those legitimately. And so we have these threat actors that not only are abusing legitimate tools, but like I said, they’re abusing legitimate identities. So when you have what I call the keys to the kingdom, the passwords, I am you. I am now Robert, for all intents and purposes for this sort of webinar. I think the interesting part that we’ve seen at Blackpoint is that threat actors have really, really focused on leave-behinds. And those leave-behinds are commodity remote management tools. Why do they do that? Because EDRs don’t know how to detect them as malicious, right? These are legitimate IT tools that are being used to service MSPs and their customers. And a threat actor just installs their version of the same exact tool that you’re using legitimately. Right? And so the trust component is you go to review your assets and you see ScreenConnect installed in your environments because you use ScreenConnect, right? But then when you start taking a closer look, you start to realize, wait a second, there’s four different ScreenConnect IDs on this one machine. Now we have a more of a problem, right? And so the attack is a little bit of an invisible signature detection because it’s an authorized tool, right? And so we really have to get to this layer of identifying threat actor activity with behavior context. If you’re an AnyDesk shop, then why do you have TeamViewer installed on your file server that’s publicly facing, right? Let’s start to ask those questions and dig into that a little bit. Robert Dutt: Your SOC found that fake CAPTCHA and ClickFix campaigns accounted for, I think it was 50-odd percent of identifiable incidents. That’s a majority of attacks being driven by a technique that essentially requires the victim to step on the link to execute it themselves. Why is that scaling so fast right now? And especially for an MSP who tends to think, you know, my technicians are too smart to do that. What’s kind of the honest answer for what they need to be looking for and protecting against? Wil Santiago: Yeah. And, you know, ClickFix is such an easy attack when you really get into the root of what it does. But it starts with social engineering. You’re enticing someone, again, just like with phishing, to visit something that you’re going to tell them to do an action. And most of the time, they’re going to do that action. Now, why this is so effective is we’re seeing techniques that really enable the threat actor to deliver the payload. And how do they do that? Search engine optimization, right? These SEO links at the top, when you go look for an OBS installer, because you need your camera to look well, or you get a Google sponsor result. Threat actors are just buying those sponsored results and delivering their payloads on there. You click on it thinking you’re going to download OBS, and then it tells you, hey, wait a second, you have to make sure that you are human. Verify that we’re used to verifying we’re humans to download something. So we go and we click it. But then it says, hey, open up your Windows Run command and maybe run this command on us, on your computer for us. And what happens? Threat actors go and they put the commands on a website. They have this watering hole spread out all throughout infrastructure that’s globally distributed. Google, Microsoft, all these sort of cloud infrastructure hosting providers that exist. Threat actors use those. So when you’re looking at your firewall logs and you’re seeing your internal team going to Microsoft.com, hey, it’s Microsoft, right? But the reality is, it’s likely an Azure Blob site that’s just being hosted on Microsoft, that is a threat actor that’s actually hosting it. And so they’re abusing that trust function to say, hey, you need this OBS installer. You Googled it. I didn’t tell you to go Google that. You were the one that did that. And then they found my link, which I posted a malicious payload there. And so again, that abuse factor is all the things we’ve taught our employees, our customers, our MSPs to do, right? Go to Google, make sure you identify the link. Make sure you look for Microsoft. Make sure you see the end of a URL or domain. Validate that. Well, the adversary goes, okay, they want to play that game. I’m just going to host this on Cloudflare. And now we’re back to this gate where now someone clicks on something. Well, what’s this Cloudflare? That’s a legitimate service. I know that to be true, right? It’s very true. The reality is the infrastructure is very, very easy to set up. And it doesn’t require a lot of action. It just requires someone to take a command and put it on their machine. And all the background work happens in the background, right? And so beyond that, we used to see a lot of threat actors use this sort of technique to download malware onto machines. But again, going back to what I mentioned about RMMs, now they’re just downloading an RMM. And that just looks like a legitimate process to an EDR. Robert Dutt: Right. So for an MSP, especially when training or making sure their technicians are aware, is it just as simple as making sure they’re aware of this threat landscape and this wrinkle in it? Or is there something more that’s sort of the advice there on how to protect yourself as best you can? Wil Santiago: That’s a great question. And really, you know, I would say any MSP watching this show, starting today or tomorrow, the first thing that I always tell people, audit your RMM inventory. Asset inventory is the number one thing that customers should be doing, right? You cannot protect what you don’t know exists. And so every single remote management tool that’s deployed across every endpoint you manage, every server you manage, you need to audit those, right? Like you’re giving direct access to a system. And most of the time, those RMMs run in the system context, which means they have the permissions and privileges of any admin, right? And now you have this adversary that has a foothold. They can deploy tools using admin privileges and permissions. So you have to audit your RMM inventory, right? Making sure that you understand what’s happening across those production servers. And forcing MFA, that’s a big one. We see a lot of incidents that source from RMM abuse because they log into the MSP’s RMM console, the cloud-based consoles. Some of those don’t have MFA involved. Again, keys to the kingdom, MFA everywhere, that needs to be a reality. Then we need to start moving into what I call more resilient engineering, right? Conditional access policies, preventing individuals from logging in from untrusted sources, locations, right? There’s ways that you can lock down access to an RMM and assume a threat actor is able to steal credentials because they maybe installed an info stealer on a user’s machine, stole their browser credentials. They reuse the same credentials for Gmail that they do for their corporate environment. Well, now a threat actor just perusing finds their credentials and says, “Oh, I’ve got IT Glue permissions now. I’m going to go log into this and restore all these configs in IT Glue or whatever tools out there.” Well, now the threat actor has access to that. And so that’s how they’re pivoting across these environments. They’re going from cloud to on-prem, on-prem to cloud. One of the things that we caught at Blackpoint recently, and this was a really cool response, but the threat actor compromised the cloud environment first. They then took that cloud access, deployed an RMM using Intune to the devices, and then they used that on-prem access to go to those machines and do their own work directly from that console. I called it overkill. They didn’t have to do that because they had the cloud environment. But because they did that, that sort of prompted this investigation for this MSP to approach us and say, “Hey, we believe something is happening. We investigated and quickly saw the Intune process was the responsible process for deploying some of this malware. So we told them, “Hey, deploy our cloud response suite. We want to understand what’s happening in your cloud.” And sure enough, seven global admins were compromised. So again, limiting scope is important here, right? Least privilege. Why do we have so many people with admin privileges and permissions? I think there’s 192 admin roles or something like that in Microsoft, but we default to just, you get global admin, you get all the permissions. And so now an adversary compromises a Microsoft 365 tenant. Well, now they have the permissions of a global admin. And unfortunately for us, when we shifted from the on-prem strategy to the cloud strategy, we just started pushing everything in the cloud and we say, “Oh, it’s fine. It’s in SharePoint.” We didn’t realize though that that’s only being protected by a password and an MFA token, both of which can be stolen, right? So the protection is not really there. That’s why we have to move to that resilient engineering. And so it’s moving from that reactive alerting to that posture alerting, right? Why is someone trying to log in from France? We have nobody in France. Robert Dutt: So your report showed almost a third of triaged incidents involved RMM abuse. And that’s something, that kind of trend line is something that we’ve seen in other reports. You know, one of your peers is talking about a 200 plus percent spike in abuse of RMM in attacks. I’m curious, especially since you’re sitting in the SOC there, what does RMM based intrusion actually look like in the SOC here? You know, I’m guessing curious, is there a moment where it’s genuinely hard to tell, you know, is this actually a tech doing a routine task or is this an attacker? And if so, what kind of breaks the tie and causes you to go, “No, no, that’s not right.” Wil Santiago: Yeah. Well, there’s kind of two ways to look at it, right? We have threat actors that are compromising MSP RMM tools. These are tools that are owned, managed by the MSP. They’re usually protected with some cloud login, whether they self-host it or they have the vendor host it for them. Threat actors can log into those systems with a password and a username, right? So we see a lot of brute forcing of those systems, especially if they’re self-hosted systems, they usually don’t have the protections of the vendors. They don’t put a WAF in front of them. And so they’ll try to brute force them and just log in, right? Those are few and far between, to be quite honest. We don’t see those as often, but what we do see often is, again, they gain access into an environment, usually by compromising a VPN. Now they’re on the network. Now they can move throughout that network as they’re on the VPN, and they’ll usually find a foothold. And if they have a credential like a local admin, they’ll take that one foothold and then they’ll distribute their RMM across that entire fleet of the network with one command from that foothold. So for us, when we’re looking at RMM deployments, MSPs deploy RMMs in a certain manner and format. They’re not deploying an RMM at two o’clock in the morning on a Saturday when they’re a US-based company. And oh, by the way, they just logged in from a Chinese-based IP, right? So again, there’s indicators that are very clear cut of like, okay, this deployment of RMM tools absolutely malicious. Most of those cases come to the case of, you know, we have application control within Blackpoint that allows us to alert when someone is installing a new application that’s unauthorized. And so what we tell our MSPs to do is, hey, set up your policies that if you’re a Ninja RMM shop, you cannot have any other installations of any other RMM. ScreenConnect is not going to be involved. And so that allows us and affords us the ability to do is, when we get that alert that says someone’s attempting to install a ScreenConnect, we can go back and sort of recreate the path of how do they get here. And what that allows us to really get into is, again, that response, right? And that response is preventing the installation of the RMM, eradicating the threat actor by isolating the machine, making sure you remove their footholds, getting those SSL VPNs off of the public facing internet, and having that exposure management reduced, right? And so when we look at RMM abuse in practice, once they get that RMM installed, again, they’re living off the land with system privileges. System privileges is something that most people tend to understand, but it’s just keys to the kingdom. You are God mode at that point. You can do whatever you feel to deploy and ultimately spread your access with that level of access, right? And so they’ll use it for backdoors. And oftentimes, they may compromise the environment and say, “You know what? I’m busy.” We’ve actually seen this over the holidays where they go take their breaks. Just like everyone else does. It’s Christmas. I’ve done a lot of hacking. So they leave their leave-behind tools and they come back. That’s their access factor. Again, it’s one of those things where they’re hiding in plain sight. Robert Dutt: You touched on MFA a little while ago and the report flagged the use of adversary-in-the-middle attacks. AiTM attacks that let threat actors hijack authenticated sessions, even when the MFA is there. So I guess what’s the message to MSPs who are thinking, “All right, if we just get MFA everywhere, we’re good, we’re covered.” Wil Santiago: Token protection, right? MFA is great. You have to have it. But understand that there’s flaws in the way that MFA communicates to servers. And so the whole way that an adversary-in-the-middle attack works is by abusing OAuth. And OAuth is a standard protocol of just making sure that we understand how systems should communicate for authentication. And what’s really nice about that is we can take that offensive research and then make defensive practices towards that. And so token protection is really huge there. There are a lot of built-in protections in Microsoft that allow you to invalidate session tokens after a certain period of time. Every hour you could refresh these tokens. You now, again, when you get to this resilient engineering, you start to push the adversary to be a little bit more aggressive. And that’s your detection mechanism. When you allow an adversary to move unfettered throughout a network, they’re going to move unfettered throughout a network. But the moment that you give them that sort of, “Eh, stop here. Let me see your ID.” Then they start to get a little uneasy. They’re like, “Wait a second. I don’t know how to move anymore.” And so specifically in MFA, when we talk about session hijacking and session tokens, the token protection aspect is really important because that’s a conditional access policy that you can implement. And most people do not implement those conditional access policies. Now, there’s a slew of them that work in conjunction with each other. But the idea here is your tokens will likely be compromised at some point. If you are duped into clicking one of these phishing links, it’s very easy to steal a session token. So we have to move past that. Now that we know that’s going to happen, how do we prevent the adversary from actually using those session tokens successfully? And that’s where invalidating the sessions comes in, having the session protection, conditional access policies, protected devices, things of that sort. That prevents them from being able to use those session tokens. Robert Dutt: A stat that I keep looking at in the report was that you guys managed to disrupt in the SOC 55, 56 percent of incidents before a payload was deployed. It’s a real number. That’s pretty significant. I guess what is disrupted before the payload hits mean operationally? And what does it tell us about where the detection opportunity actually lives? Because it sounds like the window isn’t did malware execute? It’s something a lot earlier. Wil Santiago: That’s exactly right. When we look at the cyber kill chain, we want to start pushing our adversaries as far left of boom as possible. Right. And so when you hear about this whole right of boom concept, basically, you’ve met your match. And now boom, you’ve now been impacted. Right. And so there’s a lot of indicators of compromise that we can start to hone in on. That will give us an understanding of whether this is legitimate or illegitimate. Right before an adversary even types the command. And again, that’s the context. And the context is what the SOC is really understanding of a customer. Where do they operate? What are their hours of operation? Where are they globally distributed? What’s the infrastructure they use? What are the tools they use? How did they use those tools? Did they deploy tools every Thursday at 2 p.m.? So there’s this constant checklist that they’re doing every single day to understand this. And so when we talk about living off the land, threat actors are trying to execute commands. Right. They’re just trying to sit there. We’re typing on a keyboard command line. Hey, I’m not going to introduce any new factors to my intrusion. I’m just going to live off the land. Ultimately, they want to deploy a payload at the end of all of that. But if they deploy a payload too early in their kill chain, they risk getting caught. Right. And so what they’ll do is they’ll stage everything. They’ll compromise an endpoint. They’ll add a persistent backdoor user. They’ll deploy some small scripts to enumerate the network. Just to get an understanding of what’s happening. But they’ll usually stage those in like a C:UsersMusic folder. And that’s their staging environment. So you can catch them. And we’ve caught at Blackpoint a number of threat actors where their toolkits are still on the machine because we caught them so early left of boom that legitimately all they did was log into a machine, try to mount a share, but it failed. And then that failed share mount is like, wait a second. They have never tried to mount a share on this file server ever. And then you call the MSP and they’re like, yeah, Monday through Friday, our hours are from eight to three and it’s seven p.m. at Thursday. Right. Well, now the context of the intrusion starts to become a little bit more apparent. And so we have to do this very quickly. The reality is for us, behavioral context, it matters more than ever. That is the true bread and butter for stopping threat adversaries is understanding the behaviors in the context of which they employ to compromise the network or compromise an endpoint. And so we focus a lot of our threat intelligence and our adversarial intrusion analysis based off of what hack or tradecraft is. We always say this internally, you cannot protect what you don’t know how to hack. So we spend a lot of our time recreating these attacks, understanding where do we catch them? And one of the things that we found is in those early development cycles of understanding the behaviors of an adversary, we found key indicators of like, wait, that is a very high fidelity indicator that before an adversary even gets on a keyboard, we’ve already caught them. They don’t know that yet. Right. And so that’s a little bit of our secret sauce there. But the reality is that secret sauce was created because we thought like threat actors and we sort of recreated what they did in controlled environments and testing environments to then to make sure the detection and the efficacy of what they’re doing is caught within our product. Robert Dutt: So this is a bit of a sidebar, but it was a new term, at least to me. You flagged Etherhiding in the report, attackers embedding malicious logic and blockchain smart contracts to manage compromised sites. Can you walk me through that real quick? And how real is this in terms of how widely it’s being deployed today? And why does it matter for detection purposes? Wil Santiago: It’s a newer term. You know, I would like to say that we have way too many terms in security and security, you know, sort of like we’re trying to be cool. The reality is this is a technique that leverages transactions on a public blockchain to basically retrieve malicious payloads. Right. And so this is another sort of trend that an adversary is using where they’re just retrieving a payload from something that is trusted. In this case, cryptocurrency. A lot of people trust cryptocurrency. A lot of people trust public blockchains. And so the idea here is that, you know, threat actors are usually going to utilize some type of social engineering and then that social engineering is going to get you to come to like a WordPress site through that WordPress site. They’re going to basically have scripts that you’re going to download and ultimately run. Innocuously. Now, when that happens, you download something that you think is OBS, like the example I gave earlier, it’s actually a JavaScript payload. Well, that JavaScript payload goes and reaches out and it pulls a malicious payload from the ether blockchain. Right. And so that’s that aspect of there’s function calls that we’ve identified within Blackpoint that are related to that remote management of pulling payloads from that blockchain. My personal opinion of this sort of technique is, you know, it gives a lot of advantage to the threat actors in terms of stealth and flexibility. But it is one of those techniques that is complicated for majority of what we see at Blackpoint. Most threat actors are not getting to that complicated level of compromising. They’re just hosting malware on a compromised WordPress site of a legitimate company that they’ve co-opted the passwords for. Right. And again, we see threat actors from different angles. 90 percent of what we see sort of today is cybercrime related. Right. So you have a lot of the fake CAPTCHA, the ClickFix lures, the Etherhiding stuff. The reality is at the end of that payload, we see everything from Etherhiding to Cobalt Strike to ransomware and compromise. The way that they get to that sort of compromise is kind of the same, though. Robert Dutt: Last one for me, if an MSP is listening to this and they’ve just absorbed that, you know, more than half of the attacks they’re going to see start with legitimate credentials, their own tools are showing up in about a third of incidents. MFA isn’t necessarily a guarantee. Where do you start? You know, what’s the one thing they probably aren’t doing today that would meaningfully move the needle for them in terms of making sure things are as locked down, as protected as is possible? Wil Santiago: That’s a great question. I like to say we should probably be spending most of our time right now really focusing on posture and posture management, reducing the attack surface. Right. How do you how do you start? Where do you start reducing the attack surface? This is where frameworks really come into play. And there’s some really great frameworks that are really prescriptive out there. One of them is the Center for Internet Security Controls, CIS version 8.1. It’s very prescriptive and it starts from the very top, right? External facing assets and applications. How do you lock those down? Cloud assets and applications, internal assets, user accounts, passwords, right? And it gives you a prescriptive way to deal with incidents. Beyond that, there’s kind of this like practical implementation groups that they have, right? And so you can start by implementing the CIS Controls with implementing one Implementation Group, right? You don’t have to implement them all. And so I think there’s a subset of Implementation Groups that can be used, but it’s about identifying, you know, what of these sort of subset groups will really resonate with your organization and your maturity level, right? And so I tell most people, look at IG1, start with the essentials. If you’ve already fit the bill on that, then move to IG2, right? But the reality is IG1 is going to give you that foundational security for organizations. And then IG2 and IG3 are going to be a little bit more advanced for more complex things. Most people are probably in that IG1, but they probably could benefit from some of the things in the IG2, the Implementation Groups there. That’s really going to help you really target your defenses against ransomware. That’s going to help you sort of approach a risk-based approach. That’s another thing that, you know, all risk is not the same, right? Risk is treated differently. And it’s important for anyone running a security team to help understand how should I prioritize my risk, right? Where is my risk going to really give me issues if a threat actor gets into it? And therefore, I always say, start there. We all know what keeps us up at night. So that’s the areas that we need to focus on. Robert Dutt: All right. Some sage advice and some sobering numbers as well. I appreciate your taking the time and walking us through some good stuff. Wil Santiago: Thank you, Robert. I really appreciate it. Robert Dutt: There you have it. Wil Santiago from Blackpoint Cyber. I’d like to thank Wil for his time today and for bringing some real energy to what can sometimes be pretty dense subject matter. And of course, I’d like to thank you for listening. The data in this conversation is worth thinking about. More than half of the attacks Blackpoint’s SOC starts with someone simply logging in, using credentials that were stolen sometimes long ago, and that users are still reusing across platforms. A third of triaged incidents involve RMM tools, the same tools your techs are using right now to manage endpoints. And MFA, as much as we’ve come to rely on it, is no longer the finish line it once appeared to be. The antidote Wil describes is behavioral context, understanding what normal looks like in an environment so you can spot when something legitimate is being done illegitimately. Not “Is this malware?” But “Is this person, using this tool at this hour from this location, doing something they’ve never done before?” That’s a fundamentally different way about thinking of detection, and it’s why the human element in the SOC still matters. And I’ll add one thing that Wil mentioned after we wrapped the recording. It’s a dimension of this fight that doesn’t get talked about often enough. Blackpoint’s work doesn’t stop at detection and response. They’re actively working to identify and disrupt adversary infrastructure, notifying law enforcement, including, he noted, Canadian authorities, with the specific goal of making cybercrime economically painful. The logic is straightforward. If your infrastructure gets taken down every time you try to run a campaign, the math of operating a criminal enterprise starts to change. That’s offense, and it sounds like they’re playing it. If you’re finding the show valuable, I’d encourage you to follow or subscribe to the podcast. You can find us on Apple Podcasts, Spotify, YouTube, all the major directories. A rating review always helps. Until next time, I’m Robert Dutt for ChannelBuzz.ca, and I’ll see you in the channel.

Topics covered in this episode: Claude Code /insights Post-quantum crypto lands in Python MCP goes stateless — and FastMCP gets renamed inshellisense - IDE style command line auto complete Extras Joke Watch on YouTube About the show Sponsored by Xweather Xweather combines enterprise-grade weather intelligence with agent-ready APIs, natural language capabilities, and an MCP server so your agents can adapt workflows, automate responses, and make better decisions based on real-world conditions. Michael will tell you more about them later in the show. Get started for free at pythonbytes.fm/xweather Connect with the hosts Michael: Mastodon / BlueSky / X / LinkedIn Calvin: Mastodon / BlueSky / X / LinkedIn Show: Mastodon / BlueSky / X Join us on YouTube at pythonbytes.fm/live to be part of the audience. Usually Tuesday at 7am PT. Older video versions available there too. Finally, if you want an artisanal digest of every week of the show notes in email form? Add your name and email to our friends of the show list, we'll never share it. Michael #1: Claude Code /insights Michael's Insights: michael-kennedy-claude-code-insights-2026-08-09.html Be careful sharing these outputs, they include details references to your projects, errors, security findings, etc. ;) /insights reads your last 30 days of local session transcripts and hands back an interactive HTML report on how you actually work. One command, zero setup: type /insights in a session, or run claude -p "/insights" from the shell for a non-interactive version that just prints the path Reads what's already on disk: pulls session logs from ~/.claude/projects/, skipping agent sub-sessions and anything under 2 messages or 1 minute Project areas: clusters your sessions into themes like "CLI Tooling" or "Documentation" with session counts Friction analysis: categorizes where things went wrong by root cause - and quotes your own prompts back at you Interaction style: tells you whether you're a delegator or a micromanager, plus which workflows are worth doubling down on Actually actionable: suggests concrete CLAUDE.md additions and Claude Code features you're not using The catch: Haiku does the per-session classification, so the first run takes several minutes; results cache to ~/.claude/usage-data/facets/ and the report lands at ~/.claude/usage-data/report.html Calvin #2: Post-quantum crypto lands in Python pyca/cryptography 48 ships ML-KEM (key establishment) and ML-DSA (signatures) — NIST's post-quantum standards, now one pip install away. Big deal because it's the 11th most-downloaded package on PyPI (~1.2B downloads/month) and sits under Ansible, Certbot, Airflow, and paramiko. No PQ there, no PQ anywhere in Python. Trail of Bits did the work (Rust bindings, cross-backend API, tests, AWS-LC backend support), funded by the Sovereign Tech Agency. Timing tracks a June 22 White House order setting federal deadlines: PQ key establishment by end of 2030, PQ signatures by end of 2031. Not a drop-in swap — the wire sizes explode. ML-DSA-65 signatures are 3,309 bytes vs Ed25519's 64; ML-KEM-768 public keys are 1,184 bytes vs X25519's 32. Hardcoded field sizes and length prefixes will bite. API looks like the existing asymmetric primitives, except ML-KEM is encapsulate/decapsulate rather than a Diffie-Hellman exchange. SLH-DSA (the hash-based conservative backstop) is still in progress. The primitives are here, but protocols haven't caught up — so you won't be running post-quantum Certbot this week. Sponsor: Xweather You're using agents that can write code, summarize documents, and automate workflows. But they're missing one thing: awareness of the world around them. This is where today's sponsor, Xweather comes in. Xweather combines enterprise-grade weather intelligence with agent-ready APIs, natural language capabilities, and an MCP server built for tools like Claude, Codex, Copilot, and modern IDEs – so your agents can adapt workflows, automate responses, and make better decisions based on real-world conditions. Backed by Vaisala, whose instruments fly on NASA missions to Mars, Xweather delivers trusted data and unique insights that go beyond conditions to actual impact – from real-time lightning strikes to road surface forecasts. Start with 15,000 free API calls each month and pay only for what you use as you grow. Xweather is your full weather stack, for developers by developers. Start building for free today at pythonbytes.fm/xweather. The link is in your podcast player's show notes and on the episode page. Thanks so much to Xweather for supporting Python Bytes. Calvin #3: MCP goes stateless — and FastMCP gets renamed From Philipp Acsany over at Real Python The 2026-07-28 spec landed July 28 and the Python SDK shipped 2.0.0 the same day. Biggest rewrite since MCP launched, and it's breaking on purpose. Context for scale: the Tier 1 SDKs are pulling close to half a billion downloads a month, with TypeScript and Python each past a billion total. The headline is the stateless core. The initialize/initialized handshake and the Mcp-Session-Id header are both retired — protocol version, client identity, and capabilities now ride in _meta on every request, with an optional server/discover RPC if a client wants capabilities up front. Any request can land on any instance behind plain round-robin, no shared storage. Server-initiated calls are the hard part of the migration. Sampling, elicitation, and roots/list no longer call back to the client; instead the server returns resultType: "input_required" and the client retries with inputResponses attached. Multi Round-Trip Requests, MRTR. Also: Mcp-Method and Mcp-Name are now required headers so gateways route on headers instead of cracking JSON bodies, and missing-resource errors move to standard 32602. Deprecation sweep with an actual policy behind it — Roots, Sampling, Logging, and the legacy HTTP+SSE transport all deprecated with a twelve-month minimum offramp. Tasks graduated out of the experimental core into a real extension, which is what the formalized extensions framework was for. MCP Apps is now an official extension too, so a tool call can return sandboxed interactive HTML. Auth picked up RFC 9207 issuer validation, issuer-bound credentials, and a shift from DCR toward CIMD. Python SDK 2.0 is where it gets personal: FastMCP is now MCPServer, no alias, no shim. McpError → MCPError. Wire types went snake_case (is_error, input_schema) and moved to a standalone mcp_types package, with mcp.types kept as a permanent alias. One Client object replaces the old transport + ClientSession + initialize() stack. httpx became httpx2. Sync handlers run on worker threads now, so asyncio.get_running_loop() raises inside them. The good news: one MCPServer serves both protocol eras, so 2025-era clients keep working with nothing to configure, and a Resolve(fn) parameter lets one tool body cover MRTR and the old path. 1.x is maintenance-and-security-fixes only — pin mcp>=1.28,

In Episode 79 of The Landing, Jason sits down with Brock Cota of Timber Harvesting, Inc. for an honest conversation about growing up in a logging family, running a modern timber harvesting operation, and the challenges facing tower logging in the Pacific Northwest.Brock shares how he was raised around the industry, from spending his childhood on landings to eventually taking on greater responsibility within the family business. He and Jason discuss planning difficult tower units, balancing production with safety, retaining experienced employees, and carrying decades of hard-earned logging knowledge into the next generation.They also explore the rising cost of operating a logging company, the importance of strong relationships between contractors and landowners, and why the lowest bid does not always provide the best value. Brock offers his perspective on changing technology, the loss of experienced woodsmen, public timber policy, fluctuating log markets, and what the future may hold for contractors working increasingly difficult ground.This episode is sponsored by Drew's Boots, offering rebuildable logger, fire, and work boots made for long days and demanding conditions. Visit Drew's Boots and use the code JASON DAVENPORT at checkout to receive 10% off your order.

The Bowhunter Chronicles Podcast - Episode 413: Jared Van Hees - Habitat Podcast In this episode of the Bowhunter Chronicles Podcast, we dive deep into the real work behind better deer hunting: habitat management, food plots, timber cuts, hinge cutting, access, and how to think like a deer all year long. Jared Van Hees breaks down why chainsaw work can create more value than food plots alone, how logging changes deer movement, why thick cover and transition zones matter, and how to build a property that consistently holds and patterns deer.We also get into practical food plotting strategy for private land, including where to plant, how much to plant, and how to use small high-impact plots near stand locations to pull deer where you want them. Along the way, we talk saddle hunting, first-sit success, public vs. private land, out-of-state hunting, and the mindset shift that turns deer hunting into a year-round process.If you're into deer hunting, habitat work, food plots, public land strategy, saddle hunting, and learning how to make properties better for wildlife, this episode is packed with useful, real-world insight.Topics covered: Deer habitat management Food plots and fall planting Logging, hinge cutting, and chainsaw work Deer movement and bedding cover Public land vs. private land hunting Saddle hunting and first-sit strategy Out-of-state whitetail hunting Building better deer properties Subscribe for more conversations about hunting strategy, land management, and creating better habitat for deer and wildlife.https://huntworthgear.com/ https://www.yellowstone.ai/  - CHRONICLES for 15% off https://www.paintedarrow.com - BHC15 for 15% off https://www.spartanforge.ai (https://www.spartanforge.ai/)  - save 25% with code bowhunter   https://www.latitudeoutdoors.com (https://www.latitudeoutdoors.com/) s https://www.zingerfletches.com (https://www.zingerfletches.com/) https://www.bigshottargets.com (https://www.bigshottargets.com/)   https://genesis3dprinting.com (https://genesis3dprinting.com/) https://vitalizeseed.com (https://vitalizeseed.com/) http://bit.ly/BHCPatreon Learn more about your ad choices. Visit megaphone.fm/adchoices

Australia Wide presents: The Bunbury woodchip bombing50 years ago, the city of Bunbury woke to a bang. Two men had tried to blow up the city's port in protest of the woodchipping industry. Five decades later, one of the bombers reflects on the incident which leaves a complicated legacy in Australia's conservation history.

Have you ever felt anxious before your workday even begins?Maybe your heart starts racing before you log in. Maybe your stomach tightens during your commute. Or perhaps you end every shift emotionally exhausted, wondering why work seems to drain so much more than your energy.If any of that sounds familiar, you're not alone.Workplace anxiety affects millions of people, yet many of us dismiss it as “just part of being an adult.” We tell ourselves to push through, work harder, and be grateful to have a job. But chronic workplace stress doesn't just disappear—it often follows us home, disrupts our sleep, impacts our relationships, and slowly chips away at our mental and emotional well-being.In this episode of The Grounded Bag Podcast, we're unpacking the hidden causes of workplace anxiety, exploring why work can feel emotionally overwhelming, and sharing practical tools you can use to protect your peace without sacrificing your career.What Is Workplace Anxiety?Workplace anxiety isn't simply having a stressful day.It's the ongoing emotional, physical, and psychological distress connected to your work environment or job responsibilities. It can show up as:* Racing thoughts before work* Difficulty concentrating* Trouble sleeping the night before a shift* Feeling emotionally numb or constantly overwhelmed* Muscle tension or headaches* Irritability and emotional exhaustion* Fear of making mistakes* Feeling like you're never doing enoughSometimes the anxiety comes from the job itself. Other times, it's the environment surrounding the work.Why Does Work Make Us So Anxious?There isn't one universal cause. Workplace anxiety is often the result of multiple stressors building over time.Toxic Workplace CulturesConstant criticism, gossip, favoritism, micromanagement, poor leadership, or lack of psychological safety can leave employees feeling emotionally guarded every day.When survival becomes the goal instead of growth, anxiety naturally follows.Unrealistic ExpectationsMany workplaces expect employees to produce more with fewer resources while remaining constantly available.The pressure to always perform can create chronic stress that eventually leads to burnout.PerfectionismSometimes the workplace isn't the only source of anxiety.Many of us carry internal beliefs that tell us we must never make mistakes, disappoint others, or ask for help.Perfectionism often disguises itself as ambition—but beneath it is frequently fear.BurnoutBurnout doesn't happen overnight.It develops when stress becomes chronic and recovery never happens.You may begin feeling emotionally detached, physically exhausted, cynical about work, or disconnected from the purpose that once motivated you.Unresolved Stress and TraumaPast experiences—whether from previous jobs, personal relationships, childhood environments, or discrimination—can influence how we respond to workplace challenges today.Sometimes work activates wounds that were never fully healed.Practical Coping Tools for Workplace AnxietyWhile we can't always change our work environment immediately, we can develop healthier ways to care for ourselves while planning our next steps.Create BoundariesBoundaries protect your mental health.That might mean:* Logging off on time* Taking your lunch break* Avoiding checking emails after work* Saying no when your workload becomes unrealisticBoundaries aren't selfish—they're sustainable.Notice Your Physical Stress SignalsPay attention to your body.Do your shoulders tense up during meetings?Does your breathing become shallow?Does your stomach tighten before speaking with certain coworkers?Awareness is often the first step toward healing.Practice Grounding TechniquesSimple grounding exercises can help regulate your nervous system during stressful moments.Try:* Box breathing* A five-minute walk* Stretching between meetings* Naming five things you can see, hear, or feel* Progressive muscle relaxationSmall moments of regulation throughout the day can have a significant impact.Challenge Anxious ThoughtsAsk yourself:* Is this thought based on facts or fear?* What evidence supports this belief?* Am I assuming the worst-case scenario?* What would I tell a friend experiencing this?Learning to question anxious thinking helps reduce its power.Seek SupportYou don't have to navigate workplace anxiety alone.Whether it's therapy, support groups, trusted mentors, or loved ones, talking through your experiences can reduce isolation and help you develop healthier coping strategies.Seeking help is a sign of strength—not weakness.Grounded Reflection QuestionsTake a few moments to reflect honestly.* What specific parts of work trigger my anxiety?* Do I feel pressure to hide my stress?* What would a psychologically safe workplace feel like?* Am I holding tension I haven't processed?* What helps me feel grounded during the workday?Healing often begins with awareness.Free Mental Health ResourcesIf workplace anxiety has become overwhelming, these organizations offer education, support, and helpful resources:* Anxiety & Depression Association of America (ADAA): https://adaa.org* National Alliance on Mental Illness (NAMI): https://www.nami.org* HeyPeers: https://heypeers.comJoin the ConversationWhat has helped you manage workplace anxiety?Share your experiences, coping strategies, or lessons you've learned. Your story may encourage someone else who needs the reminder that they are not alone.Continue Growing With MeIf this conversation resonated with you, I'd love for you to join our growing community.

Crime, homelessness, and a bit about fishing on the Nooksack...

How to deal with homeless encampments...

Logging cuts, also known as clear-cuts, are some of the best places to find mature bucks in the big woods. They provide a focal point in an otherwise monotonous landscape. You can also readily spot them while e-scouting. The problem is, everyone else realizes this too. While clear-cuts attract deer for bedding or browse, they also attract a lot of pressure. Luckily, whitetails adapt regardless of hunting pressure, and logging cuts can still hold...

Episode: 3390 Geraldine Watson & The Big Thicket National Preserve.  Today, Geraldine Watson & The Big Thicket National Preserve.

Jake and Michael discuss all the latest Laravel releases, tutorials, and happenings in the community.Show linksRoute Metadata Support in Laravel 13.17Worker Metrics on the WorkerStopping Event in Laravel 13.18Help make Filament faster!Clonio CLI: Clone Production Databases With Anonymized DataA Copy/Paste Detector CLI for PHP 8.5+EnvKit: A Local Development Stack for Laravel on Windows and macOSMonitor and Control Schedules, Queues, and Errors in Laravel with WatchtowerYammi Audit Log: Track Who Really Made a Change Across Jobs and QueuesUSAIGE: Track Token Usage and Costs for Laravel AI SDK RequestsTurn PHP Attributes Into Docs With SignalLaravel WhatsApp: Two Backends Behind One Facade Laravel AI Tasks: An AI Orchestration Package for Queues, Logging, and Cost ControlTutorialsShip AI with Laravel: Failover, Queues, and Middleware for AI AgentsShip AI with Laravel: Test Your AI System with Zero API Calls

A towering creature carrying a deer across a logging road. Violent howls echoing through a North Carolina swamp. A silent figure watching campers from the tree line in Michigan. Trail camera photos capturing a massive Bigfoot deep in the forests of northern Vermont.Episode 1149 brings together three firsthand witnesses whose experiences span decades and hundreds of miles. Logging crews, hunters, campers, and longtime investigators describe encounters involving visual sightings, powerful vocalizations, tree knocks, tracks, mysterious behavior, and moments that changed the way they see the wilderness.Locations featured include southeastern North Carolina, Port Huron State Game Area, Tomahawk Creek, Luzerne, Roscommon County, Manistee National Forest, and northern Vermont.

Nearly 5 million acres of forest and grasslands in Oregon could be seeing drastic changes under the federal government's new draft plan for the Blue Mountain Forests. The draft, which was recently released to the public, proposes tripling the logging happening across three national forests in the state’s Blue Mountain region. While some are hopeful this could boost timber jobs that have declined in the region, others worry about the wider implications it could have on recreation and hunting. April Ehrlich covers lands and environment for OPB. She joins us to share more on plan.

For many of us in the US, it's the beginning of a holiday weekend. So we figured we'd try and help you out. We grabbed a bunch of Verge staffers, and asked them all a simple question: How do you disconnect? We have ideas about Wi-Fi, about phone hygiene, about smartwatches, and much more. We're certainly not here to tell you to ditch screens entirely, but... screen responsibly, you know? Send us your tips, and have a great summer vacation! Subscribe to The Verge for unlimited access to theverge.com, subscriber-exclusive newsletters, and our ad-free podcast feed.We love hearing from you! Email your questions and thoughts to vergecast@theverge.com or call us at 866-VERGE11. Learn more about your ad choices. Visit podcastchoices.com/adchoices

This episode we're sharing reviews of recent reads. Michelle discusses The Long Haul by Hannah Doyle and Logging Off by Adele Zeynep Walton. Caitlin talks about George Kemp's debut novel Soft Serve.For your convenience, here's everything else we mentioned in this episode:Mhairi McFarlaneGroundhog Day (film)Palm Springs (film)A Smart Girl's Guide to Second Chances by Steph VizardPrima Facie by Suzi MillerBig Small Talk podcastEnjoyed this episode? Please share it with a bookish friend to help spread the word. Make sure you're following the podcast so new episodes appear in your feed as soon as they're available.We've ⁠got a Substack publication⁠. At the end of the month, we share recommendations for two things we reckon you should read/watch/listen to. The beauty of Substack is you can revisit all our old editions and comment on our episode updates to share your thoughts. ⁠Come say hi!⁠Connect with us on Instagram: ⁠@betterwordspod

AI isn't necessarily creating impossible new attacks, but it is drastically lowering the technical barrier to entry for cybercriminals. In this episode, Ashish Rajan speaks with Simon Biggs, Cyber Incident Response Specialist at Varonis, about how AI is accelerating the attack lifecycle. Simon explains how attackers are using AI kits to instantly set up ephemeral phishing portals, query SQL databases in minutes, and bypass AI guardrails to compile Remote Access Trojans (RATs). We also discuss the shift in ransomware tactics from "encryption-first" to "data-theft-first," and how AI empowers attackers to post-process terabytes of stolen data to monetize it in novel ways. For defenders, the message is clear: if your S3 access logs and SQL transaction logs aren't turned on before a breach, your forensics team won't be able to tell lawyers or regulators what data was actually lost. Discover why data classification and proactive logging are the ultimate lifelines for IR teams in the AI age. Guest Socials -⁠⁠ ⁠⁠⁠⁠Simon's Linkedin Podcast Twitter - ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@CloudSecPod⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:-⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Cloud Security Podcast- Youtube⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠- ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Cloud Security Newsletter ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠If you are interested in AI Security, you can check out our sister podcast -⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ AI Security Podcast⁠Questions asked:(00:00) Introduction(02:00) Simon Biggs' Background in Law Enforcement and Varonis(03:10) Is There a Huge Volume of Sophisticated AI Attacks?(04:10) How AI Accelerates SQL Queries and Business Email Compromise (BEC)(05:15) Why AI Kits Are the New Metasploit and BloodHound(08:15) Varonis Threat Labs: Copilot Prompt Injection Vulnerability(09:20) The Forensic Challenge: Auditing Prompts vs. Understanding AI Output(10:30) Tricking AI Guardrails to Compile Malware(12:15) Defensive Strategies: Shadow AI, Permissions, and Logging(15:30) Using Defensive AI and BloodHound for Threat Hunting(17:30) Why Ransomware is Now "Data First, No Encryption"(20:50) The Legal Nightmare of Unclassified Stolen Data(23:20) Why Windows Forensics Can't Tell You What Data Was Stolen(31:20) The Crucial Importance of Enabling S3 and Cloud Audit Logs(35:10) How AI Allows Attackers to Post-Process Terabytes of Stolen DataResources spoken about during the episode:Simon's Research at VaronisArticle about SearchLeak Article about RepromptVaronis Threat LabsThank you to Varonis for sponsoring this episode of Cloud Security Podcast

Hi Mamas,  As working moms, many of us take pride in doing our jobs well.  We show up.  We work hard.  We care deeply about the quality of our work.  And whether we absolutely love our jobs or simply see them as a way to provide for our families, many of us have something in common:  We don't know how to stop.  In today's Monday Mindset, I'm sharing a powerful reminder that has been on my heart lately:  You can be committed to your career without being consumed by it.  This episode isn't just for the moms who are passionate about their careers. It's also for the moms who show up every day, do their best, take pride in being high performers, and carry a lot of responsibility—both at work and at home.  We'll talk about the difference between being committed and being consumed, why so many working moms struggle to separate the two, and how to create more space for the life you're working so hard to build.  Because at the end of the day, your career is part of your life.  It shouldn't become your entire life.   

Send us Fan MailThe reality of MBB recruiting: 100 candidates apply. 15 get an interview. 1 gets the offer.Most of the 99 who don't get it aren't underqualified. They just had a bad plan.Kabreya Ghaderi, who coached hundreds of candidates and spent time at McKinsey, PwC, and Bridgespan, sees strong candidates still miss because their prep plan has a hole in it they can't see from the inside.In this episode, Kabreya walks through the 4 gaps that sink even candidates who are doing everything "right." What stood out:Logging more cases can actually lock in the wrong habits, fasterOne candidate did 80 practice cases and was still nowhere near readyFeeling ready and being ready are two different things, and most people can't tell which one they areResources:Get the personalized plan you need + expert coaching by joining Black BeltBook 15 minutes with Katie to get your questions answeredStart building case proficiency today with our free Case Foundations starter courseBook 1:1 coaching with KabreyaFree Consulting Prep Just Got a Whole Lot BetterCreate a free MC account for access to step-by-step learning pathways, a brand new case prep course, and more. Download the MC app to prep anywhere.Connect With Management ConsultedCreate a free MC account or download the MC app (Apple, Android) to start your prep todaySchedule a free 15min consultation with the MC TeamWatch the video version of the podcast on YouTubeFollow us on LinkedIn, Instagram, and TikTokJoin an upcoming live event – case interviews demos, expert panels, and more

Three retired loggers, five encounters, and a run of deep timber none of them could ever explain. In this episode of Backwoods Bigfoot Stories I share firsthand Sasquatch accounts I gathered over the better part of two years from three men who spent their working lives cutting timber across the Pacific Northwest and the Mountain West in the 1950s, 60s, and 70s.You'll meet them by first name only, the way they asked, as Earl, Roy, and Hollis, three plainspoken men with no books to sell and every reason to keep quiet, who finally set the weight of what they saw down in front of me.Earl was a young choker setter in the Oregon Coast Range in 1958 when something started emptying the crew's lunch buckets and turning up in head-high brush twenty feet away, and three years later, in 1961, he was pinned in a wall tent on a Cascade lake while a slow, heavy weight walked the gravel behind his head.Roy was a redwood faller in Northern California in 1963 when he looked up a hillside gallery of old-growth and watched a near eight-foot figure lay its hand flat against a trunk and knock twice, and heard two knocks answer from across the canyon. Hollis worked the Idaho panhandle and western Montana, where eyeshine paced his truck on a one-lane logging road in 1971, and a scream came down off the slope above a river camp in 1974 that emptied that camp by first light. I came up a skeptic, and I went looking for the place each story breaks. These three didn't break the way a made-up story breaks. What surfaces in all of it, from men who never met and never compared notes, are the same small, specific things: the dog that walks backward into the tent, the smell that arrives a beat ahead of the sight, the wood knocks answered across open ground, and a thing that watched men work and chose, over and over, to let them walk away. Listen for the details, and decide for yourself what these old men carried out of the woods.Have you experienced a Bigfoot sighting, Sasquatch encounter, Dogman experience, UFO sighting, or any unexplained cryptid or paranormal event deep in the woods? We want to hear your story.Email your encounter to brian@paranormalworldproductions.com for a chance to be featured on a future episode of Backwoods Bigfoot Stories.Backwoods Bigfoot Stories is a paranormal storytelling podcast featuring real Bigfoot encounters, Sasquatch sightings, Dogman reports, cryptid experiences, and true scary stories from the backwoods.Follow the show and turn on automatic downloads so you never miss a chilling encounter from the forest. Listen with the lights off… if you dare.

Myles McNamara is Tarkenton's lead technical architect and full-stack developer, specializing in building secure, scalable software solutions. He oversees infrastructure, code, and system design, serving as the team's in-house expert. Previously, he worked with Fortune 500 government contractors and ran his own software and hosting companies. In this episode… Integrating responsible AI tools and systems into business operations depends less on the model itself and more on the privacy and security controls a company embeds around it. "We need AI" is often where the conversation starts, but turning that need into a safe and controlled environment requires a clear understanding of where data lives, who can access it, and what the AI system is allowed to do. Those considerations shape whether AI can support the business without creating unnecessary risks. How can organizations design and implement AI in a way that is secure and grounded in real business needs?  Before companies implement a new AI system, they need to set guardrails around how it will operate in practice. Governance needs to be built into the system from the beginning, not left in a policy or bolted on later. Establishing clear data boundaries, access controls, and system-level permissions defines what the AI tool can access and which actions it can perform. Logging and audit trails give companies visibility into how the system is functioning, so if something goes wrong, they can understand what happened and why. AI will continue to evolve, and companies also need to ensure that their privacy and security controls keep pace through regular monitoring and continued improvements.  In this episode of She Said Privacy/He Said Security, Jodi and Justin Daniels talk with Myles McNamara, Principal Software Engineer at Tarkenton, about designing and implementing AI tools and systems responsibly. Myles shares what it takes to build AI agents and systems in a secure, controlled way, including how companies should think about whether AI is needed and how much autonomy it should have. He emphasizes the importance of integrating governance into system design and offers advice for safeguarding data. Myles also shares how engineering teams can balance business expectations with privacy and security concerns and discusses why AI governance might get overlooked in practice.

Eytan Seidman, VP of Product at Shopify, returns to the Liquid Weekly Podcast for a special Spring '26 Editions walkthrough with Karl and Taylor.It is a full tour of what is dropping for developers: static app home extensions, the App Events API, AI Kit, Sidekick app extensions going GA, the ongoing Dev Dashboard overhaul, a rebuilt logging experience, UCP and agentic commerce, next-gen events replacing webhooks, and the shift from Managed Pricing to Shopify App Pricing. Basically a whole episode of changelog.A must-listen for app developers, agencies, and anyone building on the Shopify platform.Subscribe to Liquid WeeklyDon't miss out on expert insights and tips. Subscribe to Liquid Weekly for more content like this: https://liquidweekly.com/Find Eytan OnlineLinkedIn: https://www.linkedin.com/in/eytanseidman/X: https://x.com/eytanseidmanSee the Spring '26 Editions: https://www.shopify.com/editions/spring2026Timestamps(00:00) Intro snippets(01:03) Intros and welcoming back Eytan Seidman(02:17) Static app home extensions: building apps fully on Shopify(08:08) App Events API: observability and monitoring in Dev Dash(13:03) AI Kit: store auth, store execute, and how it differs from MCP(17:54) Sidekick app extensions GA: data and app action extensions(25:21) Dev Dashboard overhaul: store and team management(31:34) Logging overhaul: API requests, filtering, and unified logs(35:40) Catalog improvements and the UCP CLI(38:16) Building carts across merchants with UCP(40:35) Agent to agent purchasing and accountability(44:04) Next-gen events: rebuilding webhooks(52:08) Shopify App Pricing: usage-based pricing and meters(58:27) Closing: what Eytan is most excited for devs to try(1:00:50) Picks of the WeekPicks of the WeekTaylor: A MagSafe power bank. After his recording died in the fourth inning of his daughter's softball game, he picked one up so he can hot-swap batteries mid-game and record full-length games start to finish. https://amzn.to/4vXCZAjKarl: Atkins chocolate truffles, found in the reduced aisle at Kroger. A cheap, high-protein, low-carb sweet that hits the spot if you are doing keto. https://www.kroger.com/p/atkins-endulge-dark-chocolate-truffles/0063748000511Eytan: Two aviation books. Flying Blind by Dominic Gates, a Seattle Times reporter, on the 737 MAX and the fall of Boeing, tracing the program from the 1960s through the late 2010s: https://www.goodreads.com/book/show/55994102-flying-blind. And The Sporty Game, an older read on the early Boeing vs Airbus competition: https://www.goodreads.com/en/book/show/312480.The_Sporty_Game

➡️ Search OCD HELP app on App Store and Google PlayThis podcast shows you how to fully recover from OCD.Each episode breaks down the exact techniques and nuances that stop rumination, reduce compulsions, and help you retrain your brain out of the OCD cycle. We cover every major OCD theme, including:Pure-O OCDRelationship OCDHarm OCDReal Event OCDSO-OCD / Sexuality OCDReligious / Scrupulosity OCDCleaning & Contamination OCDPhysical CompulsionsAll other OCD subtypesMy goal is simple: clear guidance that actually works, explained in a way that is calm, direct, and easy to apply immediately.You can fully recover from OCD. Don't give up — you're not stuck, and your brain can change.

Over the years I've worked as a sleep coach, I've seen long-term logging sleep become more and more common. But have you paused to reflect if logging sleep is helpful or harmful to your sleep or mental health? Is all that data actually useful? In this episode I'm talking you through the pros and cons of logging sleep. I hope this episode encourages you to be more intentional with logging, or even to stop all together if you notice some of the potential negative impacts. Connect with Kim Grab a free sleep myth busting guide and learn more about working with Kim: https://intuitiveparentingdc.com/Instagram: instagram.com/intuitive_parenting_dcFacebook:  facebook.com/intuitiveparentingdc

In this episode of The Landing, Jason Davenport sits down with Gary Warner of Warner Enterprises to discuss nearly five decades of logging, forestry, firefighting, and innovation in Northern California's timber industry.Gary shares the story of Warner Enterprises, founded by his father in 1977, and how the company has evolved from traditional logging operations into a diversified business involved in biomass utilization, wildfire mitigation, forest restoration, emergency response, and infrastructure projects.The conversation dives into the realities of modern logging, including the rising cost of equipment and fuel, the challenges of recruiting and training the next generation of operators, and the incredible advances in harvesting technology that have transformed production in the woods. Gary also discusses his involvement with the Sierra Cascade Logging Conference, educating future generations about forestry, and why public understanding of forest management matters now more than ever.Jason and Gary explore topics including:• The history and growth of Warner Enterprises• Modern logging technology and production efficiency• Workforce development and operator training• Forest health, wildfire mitigation, and restoration forestry• Biomass utilization and emerging wood products markets• The importance of industry outreach and education• Family business succession and leadership transitions• Lessons learned from nearly 50 years in the timber industryThis episode offers a thoughtful look at where the timber industry has been, where it's headed, and the people working to ensure forests remain productive, healthy, and resilient for future generations.Sponsors:Finster Forestry is currently hiring an experienced harvester operator for their cut-to-length operations in the Corvallis and Philomath area. Competitive benefits include 100% employer-paid health, vision, and dental insurance for employees. Contact finsterforestry@gmail.com with the subject line: Harvester Operator.Drew's Boots — Built for loggers, firefighters, contractors, and anyone who depends on their boots every day. Use code JasonDavenport for 10% off your order.

Send us Fan MailWe sit down with Paul from NJ Shed Hunters and dig into how he finds piles of sheds across New Jersey while turning every hike into real deer scouting. We also get into bear hunting, wild game cooking, and the strange things you can stumble on when you're deep in Garden State woods. • Paul's backstory and how NJ Shed Hunters starts • Logging miles and rotating properties for consistent shed finds • What to do with sheds including giving some away and returning old chewed antlers • How harsh winter weather pushes deer into cedars and pines • Why edges, security, and pressure shape mature buck movement • Using stomach contents and sign to learn what deer really eat • First New Jersey bear harvest and how bear meat tastes and cooks • Unexpected woods finds including trash, camps, urns, and a handgun • A simple approach to asking permission for shed access and building trust The link to his Instagram will be down in the description below. Make sure you check him out.https://www.instagram.com/nj_shed_hunters/Support the showHope you guy's enjoy! Hit the follow button, rate and give the show a comment!Ghillie Puck- https://www.ghilliepuck.com?sca_ref=6783182.IGksJNCNyo GP10 FOR 10% OFFGET YOUR HECS HUNTING GEAR :https://hecshunting.com/shop/?avad=385273_a39955e99&nb_platform=avantlink&nb_pid=323181&nb_wid=385273&nb_tt=cl&nb_aid=NAInstagram: https://www.instagram.com/bdhunting/Youtube: https://www.youtube.com/channel/UCZtxCA-1Txv7nnuGKXcmXrA

➡️ Search OCD HELP app on App Store and Google PlayThis podcast shows you how to fully recover from OCD.Each episode breaks down the exact techniques and nuances that stop rumination, reduce compulsions, and help you retrain your brain out of the OCD cycle. We cover every major OCD theme, including:Pure-O OCDRelationship OCDHarm OCDReal Event OCDSO-OCD / Sexuality OCDReligious / Scrupulosity OCDCleaning & Contamination OCDPhysical CompulsionsAll other OCD subtypesMy goal is simple: clear guidance that actually works, explained in a way that is calm, direct, and easy to apply immediately.You can fully recover from OCD. Don't give up — you're not stuck, and your brain can change.

The oldest logging museum in the nation is located in Rhinelander, dry conditions raise fire concerns in the U.P. and northern Wisconsin, AI's impact on business and education discussed in central WI

A fundamental structural shift underway is the movement of AI from isolated features to operationalized, production-level workloads in MSP tooling and client environments. This transition is not primarily about the capabilities of individual AI models but about their integration into existing operational platforms and workflows. Companies such as PDQ, Senteon, Domotz, and Zoom are incorporating AI agents directly into management layers, endpoint automation, and workflow orchestration, thereby increasing both the scope and complexity of AI impact. The locus of value is shifting from features to workflow control and integration, creating new demands for governance, consumption monitoring, and exit strategies. The most consequential development referenced is the transition in AI billing and operational models from static user or seat licenses to variable, usage-based consumption. He cites TechCrunch's coverage of GitHub Copilot's move to token-based billing and Semafor's reporting of Uber's rapid exhaustion of its 2026 AI budget in four months due to unbounded consumption by generative tools. F5's State of Application Strategy report is referenced to confirm that multi-cloud and parallel model operations are now common, with significant instances of AI-related security incidents already reported. Secondary developments reinforce this structural realignment of risk and accountability. PDQ, for instance, is expanding multi-tenant management and integration capabilities, while Senteon enables endpoint hardening and drift control directly in Rewst's platform. Domotz's MCP server allows AI agents to operate across 40,000 networks globally, and Zoom is packaging AI context protocol features for workflow automation. Each of these changes is designed to increase operational efficiency, but also expand the surface area for unintended consequences, elevated operational complexity, and potential budget overruns. For MSPs and IT leaders, the operational implications center on governance, spend control, and clear accountability over AI-driven tools and workflows. The risk is that without adequate monitoring, policy setting, and contractual clarity—especially around data portability and exit costs—MSPs may face liability for unplanned consumption, misconfigured automation, or governance gaps. The evidence indicates the need to proactively audit AI integrations, set usage thresholds, instrument logging and budgeting controls, and renegotiate vendor contracts to ensure service boundaries and oversight mechanisms are in place before workflows become too deeply embedded. 00:00 MSP Stack Resets  04:09 AI Needs Governance 06:45 Govern AI or Pay 09:22 Why Do We Care?  Supported by:  Nerdio Zero Networks   

In this Tuesday Fitness Focus Q&A, Coach JK works through a few fitness questions that seem simple at first, but need more context to answer well.Topics include:How should you log weight on the Smith machine?What cardio machine makes the most sense for a home gym?Why some fat-loss questions need better context before better advice can happen.How to think about calories in, calories out without pretending the equation is always simple.Coach JK also closes with a quick note about the direction of Help Me Understand in June and the upcoming launch of Make Fitness Make Sense in July.-------Instagram: @coachJKmcleodEmail: JK@jkmcleod.com

The Trump Administration is fast-tracking logging on more than 100 million acres of Forest Service land. But some locals are pushing back against one of the projects just north of Yellowstone National Park.

Claim your complimentary gift of my exclusive mini weight care guide today!Link: Weight Care Guide — Dr. Francavilla Show (thedrfrancavillashow.com)Have you ever wondered if counting calories is actually worth your time — or if it's just another diet trap dressed up in a tracking app? In this week's episode, we talk about just that, and the answer is more nuanced than a simple yes or no. Calories are real, they matter, and paying attention to them can be genuinely useful — but the way many people approach calorie counting is often where things go sideways.Here's the thing though — calories are calculated using a  lab device. Which means it doesn't take into account how the body actually processes those calories. You digest food, respond to it hormonally, and process it completely differently depending on what you're actually eating, not just how much. Protein burns some of its own calories just through digestion. Fiber doesn't get absorbed at all. And the same 100 calories from apple juice versus a whole apple with peanut butter will hit your body in completely different ways — one spikes your blood sugar and leaves you hungry again fast, the other keeps you full and satisfied for hours. Same number on paper, totally different story inside your body.That's why the old "calories in, calories out" model, while not entirely wrong, is a pretty significant oversimplification. Your metabolism adapts, your hunger hormones shift, and the quality of what you eat plays just as important a role as the quantity. Calories are one important piece of the puzzle — but they're far from the whole picture.In this episode, we cover:Why Not All Calories Are Created EqualMacros, Metabolism, and Why Your Body Isn't a MachineLog Like a Scientist, Not a JudgeWhen You've Already Done the WorkDitch the "I Blew It" MentalityThere's a lot more where this came from — tune into the full episode and you might just walk away thinking about food completely differently.Connect with me:Instagram: doctorfrancavillaFacebook: Help Your Patients Lose Weight with Dr. FrancavillaWebsite: Dr. Francavilla ShowYoutube: The Doctor Francavilla ShowGLP Strong: glpstrong.com

Logging

Col Bill Wehrung - Horny sits with us to talk Naval Academy, Marine Aviation - including 235 combat missions in Vietnam, getting hit twice and an amazing career spanning 3 decades... starting before Safety Standards were a 'thing!'

Federal agencies will shift to a priority and risk-based method of logging cybersecurity events under a Friday memo from the Office of Management and Budget aimed at cutting “red tape” and costs. The memo from OMB Director Russell Vought rescinds and replaces a previous directive from the Biden administration issued after the 2020 SolarWinds breach that affected both the public and private sectors. While the previous policy “improved foundational capabilities across agencies,” OMB said the amount of data agencies were required to retain was costly and operationally difficult. In its place, the Trump directive outlines “a risk-based, prioritized logging approach” to logging. OMB's policy comes amid concern about the use of artificial intelligence and automation to fuel cyberattacks. That technology can speed up the process of gaining access to a system and help covertly maintain that access for a long time. It's also increasingly being used by threat actors, the memo said. Anthropic's Mythos large language model is the talk of federal tech and cyber practitioners across the Beltway, and for good reason. According to the company, its month-old Project Glasswing initiative, which allows select researchers to get their hands on the Mythos model, has uncovered more than 10,000 high- or critical-severity software vulnerabilities across systemically important code, a finding that Anthropic says has shifted the central problem in cybersecurity from discovering flaws to verifying and patching them. The findings, drawn from partner reports and independent evaluations, mark one of the first large-scale accountings of what a frontier AI model can do when pointed at widely used code, and of the bottlenecks that emerge once it does. Several partners reported that their rates of bug discovery had increased more than tenfold. The Daily Scoop Podcast is available every Monday-Friday afternoon. If you want to hear more of the latest from Washington, subscribe to The Daily Scoop Podcast  on Apple Podcasts, Soundcloud, Spotify and YouTube.

What if, one day, you suddenly became the target of an “internet terrorist”? Who can find you, no matter where you are, and make your life hell. Logging off? Is not an option.  That's what's happened to Esther, Natasha and Ava. They all fell into the crosshairs of a dangerous online predator who had one mission; to control, harass and bully women and girls like them out of online gaming. A skilled hacker, he'd extort his victims. But his weapon of choice was swatting – calling in fake emergencies to get armed police to raid people's homes, terrifying them.  He seemed unstoppable, until the young female streamers he targeted joined forces and fought back… and a determined country cop took up the case.  Journalist Leigh Alexander investigates a story where digital danger bursts through the screen and into real life, that will leave you wondering if any of us are really safe… Want the full story? Binge every episode of U R NEXT ad-free now by subscribing to The Binge+. You'll unlock over 60 true crime series instantly, get early access to drops on the first of every month, and hear exclusive bonus episodes.  Search for the channel on Apple Podcasts or head to GetTheBinge.com. For behind-the-scenes details, join our free newsletter at Patreon.com/TheBinge.  U R NEXT is a production of Sony Music Entertainment and Novel. Follow @sonypodcasts and discover more at ⁠sonymusic.com/podcasts⁠. Learn more about your ad choices. Visit podcastchoices.com/adchoices The Binge — feed your true crime obsession.  Learn more about your ad choices. Visit podcastchoices.com/adchoices

What if, one day, you suddenly became the target of an “internet terrorist”? Who can find you, no matter where you are, and make your life hell. Logging off? Is not an option.  That's what's happened to Esther, Natasha and Ava. They all fell into the crosshairs of a dangerous online predator who had one mission; to control, harass and bully women and girls like them out of online gaming. A skilled hacker, he'd extort his victims. But his weapon of choice was swatting – calling in fake emergencies to get armed police to raid people's homes, terrifying them.  He seemed unstoppable, until the young female streamers he targeted joined forces and fought back… and a determined country cop took up the case.  Journalist Leigh Alexander investigates a story where digital danger bursts through the screen and into real life, that will leave you wondering if any of us are really safe… Want the full story? Binge every episode of U R NEXT ad-free now by subscribing to The Binge+. You'll unlock over 60 true crime series instantly, get early access to drops on the first of every month, and hear exclusive bonus episodes.  Search for the channel on Apple Podcasts or head to GetTheBinge.com. For behind-the-scenes details, join our free newsletter at Patreon.com/TheBinge.  U R NEXT is a production of Sony Music Entertainment and Novel. Follow @sonypodcasts and discover more at sonymusic.com/podcasts. Learn more about your ad choices. Visit podcastchoices.com/adchoices The Binge — feed your true crime obsession.  Learn more about your ad choices. Visit podcastchoices.com/adchoices

On this episode of Bounced From The Roadhouse:Special Guests in 4B:Kids These Days12 Year Old Ukraine boyMalcolm in the MiddleCollege Dumpster Divers World Record Dude David Rush Icing InjuriesLogging Days in Hill CityMarry, Kill, Mate - Crocs, Cowboy Boots, or HeelysFancy Food WordsPerfect Bodies That's a Great QuestionWoman Dies In Manhole Divers in MaldivesSummer Nights one weekQuestions? Comments? Leave us a message! 605-343-6161Don't forget to subscribe, leave us a review and some stars Hosted on Acast. See acast.com/privacy for more information.

(0:00) - IntroListed points:1- Always needing to be full-Hunger won't kill you, nor will boredom2- Not eating enough food volumebig salads, veggies, berries, Greek yogurt, chicken, etc3- Having junk snack foods in the houseHave “I'm bored but want something foods”Carrots, cucumbers, water, diet beverage.4- Filling up on the wrong foodsAlways start with protein & veggies5- Eating too fast-Have a “pause rule”Before seconds, wait 10 minutes and drink water first. Most cravings pass.6- Logging everything at the end of the dayPre-log food before eating it7- Not intentionally eating, eating distractedDon't multitask while eatingPhones, TV, laptops massively disconnect hunger/fullness cues.Thanks for listening! We genuinely appreciate every single one of you listening.➢Follow us on instagram @colossusfit➢Apply to get your Polished Physique: https://colossusfitness.com/

In this episode of Maximize Your Hunt, host Jon Teater and Ethan Tapper, who shares insights from his book 'How to Love a Forest', delve into the intricacies of deer hunting and forest management, exploring the physical demands of tracking deer, the challenges of managing degraded forests, and the strategies for restoring ecological health. They discuss the impact of invasive species and the nuanced use of herbicides in conservation efforts, emphasizing the importance of understanding forest ecosystems and the role of various species in maintaining biodiversity. takeaways Tracking deer can be a physically demanding yet rewarding experience. Maintaining physical fitness through hunting can prepare one for other outdoor activities. Every forest has unique characteristics that require tailored management strategies. Degraded forests can present significant challenges for restoration efforts. Invasive species like Japanese barberry can severely impact forest health. Herbicides can be used responsibly to manage invasive species and promote biodiversity. Understanding historical forest conditions can guide restoration practices. Creating structural diversity in forests enhances resilience and habitat quality. Acorn years can provide opportunities for regenerating oak species in degraded areas. Collaboration with conservation organizations can lead to effective management practices.   Social Links https://ethantapper.com/ https://www.bearislandforestry.com/ https://www.instagram.com/howtoloveaforest/?hl=en https://www.youtube.com/channel/UCG5pCDPHUyOiA2vW1l7L6oA https://www.facebook.com/howtoloveaforest/ https://whitetaillandscapes.com/ https://www.facebook.com/whitetaillandscapes/ https://www.instagram.com/whitetail_landscapes/?hl=en Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

➡️ Search OCD HELP app on App Store and Google PlayThis podcast shows you how to fully recover from OCD.Each episode breaks down the exact techniques and nuances that stop rumination, reduce compulsions, and help you retrain your brain out of the OCD cycle. We cover every major OCD theme, including:Pure-O OCDRelationship OCDHarm OCDReal Event OCDSO-OCD / Sexuality OCDReligious / Scrupulosity OCDCleaning & Contamination OCDPhysical CompulsionsAll other OCD subtypesMy goal is simple: clear guidance that actually works, explained in a way that is calm, direct, and easy to apply immediately.You can fully recover from OCD. Don't give up — you're not stuck, and your brain can change.

➡️ Search OCD HELP app on App Store and Google PlayThis podcast shows you how to fully recover from OCD.Each episode breaks down the exact techniques and nuances that stop rumination, reduce compulsions, and help you retrain your brain out of the OCD cycle. We cover every major OCD theme, including:Pure-O OCDRelationship OCDHarm OCDReal Event OCDSO-OCD / Sexuality OCDReligious / Scrupulosity OCDCleaning & Contamination OCDPhysical CompulsionsAll other OCD subtypesMy goal is simple: clear guidance that actually works, explained in a way that is calm, direct, and easy to apply immediately.You can fully recover from OCD. Don't give up — you're not stuck, and your brain can change.

In this episode, the ladies celebrate how learning Mahjong has become an intentional ritual that has helped them log off and put their phones away. The intentional, forced slow down has reminded us that we're all craving community and connectedness, and that we have to be disciplined in order to achieve this.

Don't get to the end of this year wishing you had taken action to change your business and your life.Click here to schedule a free discovery call for your business: https://geni.us/IFORABEShop-Ware gives you the tools to provide your shop with everything needed to become optimally profitable.Click here to schedule a free demo: https://info.shop-ware.com/profitabilityUtilize the fastest and easiest way to look up and order parts and tires with PartsTech absolutely free.Click here to get started: https://geni.us/PartsTechTransform your shop's marketing with the best in the automotive industry, Shop Marketing Pros! Get a free audit of your shop's current marketing by clicking here: https://geni.us/ShopMarketingPros In this episode, Arun Coumar joins Lucas Underwood and David Roman to discuss the challenges and rewards of multi-shop ownership. Arun highlights the critical role of shop culture and management in shop performance, emphasizing how the right team can make or break operations. The conversation also dives into the evolving automotive industry landscape, touching on consolidation trends and the necessity for adaptability in both business structure and mindset.00:00 Implementing an alternative work week schedule10:26 Considering leaving a job13:46 Realizing success isn't easy19:57 Logging mileage for efficiency26:01 Focus on local expansion first29:37 Considering sole ownership vs. growth33:54 Finding purpose after life challenges42:44 Creating and defining meaning45:40 Talking about single life challenges53:06 Choosing your life's challenges58:51 Challenges in the parts distribution industry01:00:58 Discussing future market changes

➡️ Search OCD HELP app on App Store and Google PlayThis podcast shows you how to fully recover from OCD.Each episode breaks down the exact techniques and nuances that stop rumination, reduce compulsions, and help you retrain your brain out of the OCD cycle. We cover every major OCD theme, including:Pure-O OCDRelationship OCDHarm OCDReal Event OCDSO-OCD / Sexuality OCDReligious / Scrupulosity OCDCleaning & Contamination OCDPhysical CompulsionsAll other OCD subtypesMy goal is simple: clear guidance that actually works, explained in a way that is calm, direct, and easy to apply immediately.You can fully recover from OCD. Don't give up — you're not stuck, and your brain can change.

Independent investigative journalism, broadcasting, trouble-making and muckraking with Brad Friedman of BradBlog.com

"We know he didn't disappear. He had too much going for him here. It's not like him. It's 100 percent not like him."For a young geologist with the right skills and the right tools, 1970s Wyoming was a place of opportunity. The oil crisis of 1973 had sent shock-waves through the American economy and suddenly, the vast mineral deposits beneath the west's plains and hills were incredibly valuable.In May of 1976, a twenty-five-year-old geologist from Mead, Colorado, drove his specialized geological truck into the open country around Gillette, Wyoming to conduct a routine exploration trip and was never seen again...Learn more about this podcast at http://unresolved.meCheck out the podcast store at unresolved.dashery.comIf you would like to support this podcast, consider heading to https://www.patreon.com/unresolvedpod to become a Patron or ProducerBecome a supporter of this podcast: https://www.spreaker.com/podcast/unresolved-a-true-crime-mystery-podcast--3266604/support.