Human settlement in England
POPULARITY
Categories
A newly disclosed attack called HTTP/2 Bomb can crash major web servers in seconds using a single computer and a modest internet connection. Researchers say the attack combines two known techniques into a powerful memory-exhaustion exploit affecting widely used platforms including Apache, NGINX, Microsoft IIS, and Envoy. The attack also highlights a growing trend in cybersecurity research: the use of artificial intelligence to uncover dangerous combinations of existing vulnerabilities. The episode also examines President Trump's new executive order creating a voluntary framework for reviewing advanced AI models before public release. The administration says the goal is to improve cybersecurity and national security visibility while avoiding mandatory regulation or licensing requirements. Next, a new Cloud Security Alliance report warns that organizations are struggling to keep up with the growing volume of vulnerabilities. Security teams increasingly face difficult choices about which flaws to patch first as cloud environments, containers, APIs, and third-party software continue to expand the attack surface. Finally, CISA warns that attackers are actively exploiting both a newly patched Android vulnerability and a years-old Linux flaw. The contrast highlights a simple reality: cybercriminals do not care whether a vulnerability is new or old. They care whether it remains exploitable. Stories in this episode HTTP/2 Bomb Can Crash Web Servers in Seconds Researchers disclose a denial-of-service technique capable of exhausting server memory in under a minute, while OpenAI's Codex helps uncover a novel attack chain. Trump Creates Voluntary AI Security Reviews as Government Seeks Visibility Into Frontier Models A new executive order establishes voluntary reviews of advanced AI systems before public release, raising questions about visibility, oversight, and national security. The Cybersecurity Industry's Patch-Everything Strategy May Be Breaking Down A Cloud Security Alliance report suggests organizations are overwhelmed by vulnerability volume and increasingly forced to choose which risks to address. CISA Warning Shows Attackers Don't Care Whether a Vulnerability Is New or Old Active exploitation of both a newly patched Android flaw and an older Linux vulnerability demonstrates that attackers focus on opportunities, not disclosure dates. Cybersecurity Today brings you the latest cybersecurity news, threat intelligence, breach reports, vulnerability disclosures, ransomware developments, cybercrime investigations, and security research affecting organizations around the world. #Cybersecurity #CyberSecurityToday #InfoSec #CyberNews #Ransomware #ThreatIntelligence #VulnerabilityManagement #AndroidSecurity #LinuxSecurity #ArtificialIntelligence #HTTP2 #CISA #CloudSecurity #OpenAI #PatchManagement
For twenty years the security playbook started in the same place, find a vulnerability, prioritize it, and patch it. Doug Merritt, CEO of Aviatrix and former CEO of Splunk, thinks that playbook is quietly breaking, and his explanation has nothing to do with anyone being careless. The economics of offense changed underneath us, and most security programs are still funded as if they did not.Why this conversation mattersDoug has sat in two seats that give this argument weight. At Splunk he evangelized detect and respond, and now at Aviatrix he is arguing that detect and respond, while still important, is no longer enough on its own. That is not a vendor pivot so much as an honest reading of the incentives, and it lands differently coming from someone who built a business on the previous era. If you are a practitioner watching AI rewrite the attacker's cost curve, or a leader trying to defend a prevention-heavy budget to a board, this conversation reframes where the money should actually go.Key takeawaysOffense became a compute problem, and that is permanent. Finding and exploiting a vulnerability is a search task, and the cost per token has been deflating faster than Moore's Law. That is why this is a structural shift rather than a few headline demos, and why throwing compute at offense keeps getting cheaper and faster.Patching has a ceiling that offense does not. Every patch carries the risk of breaking something, so testing, deployment, and organizational friction cap how fast defenders can move. When vulnerability discovery scales freely and patching cannot, "find more and patch faster" turns into a race you are structurally set up to lose.The interesting question is not how they got in, it is where they went. Attackers increasingly arrive with valid credentials and move through the trust graph that runs across cloud services and CI/CD pipelines, including malware injected into trusted repositories. Once they look legitimate inside the environment, lateral movement and egress are where the real damage happens.Cloud rewarded velocity, and security paid the bill. Cloud providers made identity default-deny because someone has to own and pay for a workload, but they left networking wide open because their economic engine is developer velocity and security reads as friction. New agentic frameworks inherit that same wide-open default, connected to the internet with little oversight.A strong identity stance is necessary and not sufficient. Identity answers whether someone is allowed to act, not whether the action is an attack, which is why attackers log in rather than hack in. Human, agent, and workload identities are genuinely different, and workload identity in particular has been underserved.Containment is about blast radius, not about keeping everyone out. The mindset shift is to accept that breaches will occur and to govern every path a workload can take, so an incident stays local and recoverable. Done well, containment holds firm whether or not anyone has detected the attack yet.Blast radius has to become a boardroom metric. Doug's argument is that CISOs, CIOs, CEOs, and boards should be able to answer how reachable anything is from anything else, and treat that number as something to drive down deliberately rather than discover after an incident.AI is the reason containment is finally workable. The historic blocker to micro-segmentation was cognitive load across tens or hundreds of thousands of workloads. AI is strong at synthesis and pattern matching, which makes a staged path of observe, discover, monitor, and then enforce realistic, ideally starting with the internet-exposed workloads that have no filtering at all.
Hosts Brad Causey and Spencer Alessi break down the 2026 Verizon Data Breach Investigations Report, focusing on the findings that actually matter for IT and security teams.The biggest surprise: vulnerability exploitation has overtaken stolen credentials as the top initial access vector, accounting for 31% of attacks, while credential abuse dropped to just 13%. This completely flips the script on years of "identity is the new perimeter" thinking.Topics covered include:Vulnerability explosion and remediation crisis: Why there are too many vulnerabilities and not enough time for patching, with only 26% of CISA KEV vulnerabilities fully remediated (down from 38%)The patching time paradox: Median remediation time increased from 32 days to 43 days despite organizations initially getting faster at patching from 2022-2024Web application sprawl: How the push to cloud and SaaS has created massive attack surfaces organizations don't own and can't patchThe top 4 initial access vectors: Vulnerability exploitation, phishing, credential abuse, and pretextingRansomware economics shifting: 48% of breaches involved ransomware, but 69% of victims didn't pay and median payments dropped to $139,875Mobile phishing success: Mobile-centric phishing had 40% higher success rates than email phishing as users get better at spotting email threatsSocial engineering evolution: The human element appeared in 62% of breaches, with pretexting requiring different countermeasures than traditional phishingShadow AI explosion: 45% of employees are regular AI users on corporate devices (up from 15%), with 67% using non-corporate accountsAI data exfiltration: Shadow AI is now the third most common non-malicious insider risk, with source code being the top data type leakedMCP and IDE extension risks: Real-world examples including PocketOS having their entire production database deleted by Claude connected to a railway CLI MCPBrad and Spencer emphasize that while the threat landscape is shifting dramatically, the fundamentals still matter. Organizations need to get comfortable with not being able to patch everything and focus on what matters most.Blog: https://offsec.blog/Youtube: https://www.youtube.com/@cyberthreatpovTwitter: https://x.com/cyberthreatpovFollow Spencer on social ⬇Spencer's Links: https://spenceralessi.comWork with Us: https://securit360.com | Find vulnerabilities that matter, learn about how we do internal pentesting here.
This show has been flagged as Explicit by the host. WARNING AI GENERATED NOTES AHEAD YMMW Here is a summary of the recorded training session regarding Android hacking from Hacker Public Radio, including web references for the main topics discussed. Overview The recording features a security consultant performing a live assessment of an Android application. The consultant uses a custom tool suite called "Jamboree" and various other utilities to test a location-sharing and vehicle management app. The session highlights the increasing complexity of mobile app security, specifically dealing with SSL pinning, encrypted traffic, and anti-tampering mechanisms 1 . Environment and Tools The assessment is conducted on a rooted Android emulator. The speaker utilizes several tools to set up the environment and intercept traffic: Jamboree : A custom automation tool developed by the speaker over six years to handle rooting, proxy setup, and app installation within minutes 1 . Burp Suite : The primary interception proxy used to analyze traffic between the app and the production server 1 . Frida : Used to bypass anti-root detection and SSL pinning 1 . Ghidra : A decompiler used to analyze the app's code, specifically helpful for patching the Flutter-based application 1 . Android Debug Bridge (ADB) : Used for troubleshooting, debugging, and analyzing logs ( logcat ) to extract user IDs and location data 1 . Technical Challenges: SSL Pinning and Flutter The target application is built using Flutter and implements rigorous security controls, including SSL pinning, which prevents standard Man-in-the-Middle (MitM) attacks. The app's HTTP client ignores system and user-installed certificates, and it does not respect device Wi-Fi proxy settings 1 . To overcome this: Traffic Redirection : The speaker uses iptables commands to force all HTTP and HTTPS traffic through the proxy's IP address at the network layer, bypassing the app's proxy ignorance 1 . Patching with AI : The speaker leverages AI (specifically mentioning Claude and access to "Kuro") to assist in patching the APK. The AI helped navigate Ghidra and generate Python scripts to bypass the app's protections, allowing the modified APK to trust the auditor's certificate 1 . Frida Scripts : "Frida anti-root SSL pinning" scripts are executed to further mitigate detection mechanisms 1 . Key Vulnerabilities Identified 1. Geolocation Spoofing The consultant successfully spoofed the device's GPS location using emulator settings (e.g., setting the location to Puerto Rico or Costa Rica). The application accepted this falsified location data as valid, indicating a lack of server-side verification for location origin 1 . 2. Insecure Direct Object Reference (IDOR) / Broken Access Control The most critical finding involves the app's user tracking feature. The consultant discovered that the API allows querying a user's location via a user_id . By intercepting traffic and analyzing adb logcat logs, the consultant extracted their own user_id and the user_id of a second test account 1 . While authenticated as one user, the consultant was able to send a request substituting the user_id with the target's ID. The server responded with the target's GPS coordinates. This confirms that an authenticated user can track any other user's real-time location if they possess the target's ID 1 . Proof of concept was created by copying the request as a curl command to demonstrate the exploit 1 . 3. Potential Information Disclosure The consultant began testing a feature that allows users to add vehicles by license plate. The concern is that querying a license plate might return excessive PII (Personally Identifiable Information), such as VIN numbers or registration details, beyond what the UI strictly requires (least privilege issue) 1 . 4. Access Control (Calendar Feature) The consultant tested whether calendar events could be accessed by switching user_id parameters. This test resulted in a "401 Unauthorized" error, indicating that this specific endpoint had proper access control in place 1 . Web References and Resources Below are references for the main tools and concepts discussed in the training: Hacker Public Radio : https://hackerpublicradio.org/ Burp Suite (Web Security Testing) : https://portswigger.net/burp Frida (Dynamic Instrumentation Toolkit) : https://frida.re/ Ghidra (Software Reverse Engineering) : https://ghidra-sre.org/ Android Debug Bridge (ADB) : https://developer.android.com/tools/adb OWASP Mobile Top 10 : https://owasp.org/www-project-mobile-top-10/ OWASP Testing for Insecure Direct Object References (IDOR) : https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/04-Authorization_Testing/04.1-Testing_for_Insecure_Direct_Object_References Flutter (UI Toolkit) : https://flutter.dev/ Provide feedback on this episode.
Podcast: PrOTect It All (LS 27 · TOP 10% what is this?)Episode: AI Agents & Cybersecurity: Identity, Compliance, and the New Risks Facing IT and OTPub date: 2026-05-11Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarization AI agents are changing cybersecurity faster than most organizations can adapt. In this episode of Protect It All, host Aaron Crow welcomes back cybersecurity veteran Ken Foster for a deep dive into how AI is reshaping risk, identity, and resilience across IT and OT environments. With more than 30 years of experience spanning the Navy, manufacturing, fintech, government programs, and startups, Ken brings a grounded, real-world perspective on what organizations are getting right and dangerously wrong about AI adoption. Together, Aaron and Ken explore the growing challenges around AI agents, identity governance, shadow AI, compliance, and attribution in highly regulated industries. As AI tools become embedded into workflows and decision-making, organizations must rethink how they manage access, monitor activity, and maintain resilience against rapidly evolving threats. You'll learn: Why AI agents introduce new identity and governance risks The dangers of shadow AI inside enterprise environments How AI impacts compliance, attribution, and accountability Why foundational practices like patching, segmentation, and documentation still matter The role of continuous monitoring in AI-driven environments How organizations can balance innovation with resilience and control Whether you're leading cybersecurity strategy, managing critical infrastructure, or navigating AI adoption inside regulated environments, this episode delivers practical insights for securing the next generation of digital operations. Tune in to learn how AI is transforming cybersecurity - and what leaders must do to stay ahead - only on Protect It All. Key Moments: 07:47 AI guardrails discussion 12:02 Patching and network segmentation 20:44 AI changing job roles 24:24 FISMA and FedRAMP concerns 29:18 Emergency response planning 35:36 Choosing the right tech team 37:14 Discussing accountability and risk 46:31 Developer access problems 51:50 AI Dependence Risks 57:36 AI in pen testing 58:55 AI in risk prevention About the guest : Ken Foster is a veteran cybersecurity leader with 25+ years of experience in enterprise security, risk governance, and global infrastructure strategy. Currently Head of Global Architecture at Adient, Ken has previously led cybersecurity and compliance programs at Fleetcor and Fiserv, specializing in IAM, cloud security, regulatory compliance, and risk-based cybersecurity strategy. He is known for helping organizations balance innovation, resilience, and operational execution in highly regulated environments. How to connect Ken: http://linkedin.com/in/kennethfoster/ Connect With Aaron Crow: Website: www.corvosec.com LinkedIn: https://www.linkedin.com/in/aaronccrow Learn more about PrOTect IT All: Email: info@protectitall.co Website: https://protectitall.co/ X: https://twitter.com/protectitall YouTube: https://www.youtube.com/@PrOTectITAll FaceBook: https://facebook.com/protectitallpodcast To be a guest or suggest a guest/episode, please email us at info@protectitall.co Please leave us a review on Apple/Spotify Podcasts: Apple - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124 Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4The podcast and artwork embedded on this page are from Aaron Crow, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
This episode of Status Check has the boys wonder about the stagnation of racing games and how patching games had made us complacent.Back of The Rack is a podcast about games lost in the Bargain bins. The games you didn't know existed, or the games you don't want to remember. Catch us every episode right here for more.Watch the video version of this cast with gameplay footage and extended discussion at:https://youtu.be/-IBbfnKieMoJoin the Back of the Rack Discord!https://discord.gg/ZzPmVY2a9K
Managing Servers, and Kubernetes across on-prem, and multiple clouds, can quickly become complex, especially when you're juggling multiple tools. In this video, we explore how Azure Arc simplifies hybrid and multi-cloud operations by providing a single, consistent control plane for managing your entire infrastructure across Linux and Windows, on-prem, in Azure, or in any cloud. Once connected, you can patch Windows and Linux together with Azure Update Manager, enforce CIS benchmarks and Azure Security Baselines through Azure Policy, and pull consistent inventory, tags, and RBAC across your whole estate. Auto-recover unbootable Windows Server 2025 machines with Quick Machine Recovery, audit and configure WinRE using built-in Azure Policy. Run your virtual machines as Azure Virtual Desktop session hosts on Nutanix, VMware, Hyper-V, or using physical Windows hardware. Satya Vel, Azure Arc Principal Group PDM Manager (https://x.com/satya_vel) shares how to make Azure your operational standard for every workload, anywhere it runs. Learn more about Azure Arc at https://aka.ms/AzureArcServer, or join the community at https://aka.ms/ArcServerForumSignup ► QUICK LINKS: 00:00 - Azure Arc in hybrid environments 00:46 - Transitioning to Azure Arc 02:35 - Unified management 03:43 - How to bring in servers and containers 04:48 - Inventory management 05:30 - Patching 06:48 - Auto-manage future updates 08:25 - One-time update 09:32 - Configuration in a hybrid environment 11:05 - Auditing Windows machines 11:34 - Microsoft Defender for Cloud 13:06 - Desktop virtualization 13:51 - Wrap up ► Link References For more information go to https://aka.ms/AzureArc ► Unfamiliar with Microsoft Mechanics? As Microsoft's official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. • Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries • Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog • Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast ► Keep getting this insider knowledge, join us on social: • Follow us on Twitter: https://twitter.com/MSFTMechanics • Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/ • Enjoy us on Instagram: https://www.instagram.com/msftmechanics/ • Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics
Scott Xiao, Co-Founder and CEO of Luminopia, is developing a novel, FDA -cleared VR-based treatment for neurovisual disorders with a primary focus on amblyopia, lazy eye, in children aged 4- 12 years old. This approach uses popular TV shows to create an engaging, effective therapy that trains the eyes to work together and is designed as a replacement for traditional eye patching. Clinical data indicate that the vision improvements from this therapy are durable and that the VR approach is well-received by children and their parents. Scott explains, "We are pioneering a new class of treatments using virtual reality to treat various neurovisual disorders. So these are conditions where patients have vision loss that's driven by deficiencies in the brain, in the visual cortex. We're starting with amblyopia, which is often known as lazy eye. It's the number one cause of vision loss in children around the world. And it's an area of significant unmet need. There hasn't been much in the way of new treatments for decades. Typically, patients will go through glasses followed by eye patches, which is exactly what it sounds like. You take a patch, and you stick it on your stronger eye for multiple hours a day. And that's a really challenging treatment for a lot of kids and families. So we saw an opportunity to use technology to create something better, something that would be more engaging and more effective." "We've developed a VR-based approach that takes popular TV shows like SpongeBob and Sesame Street and turns them into a treatment by modifying how the images are shown to each eye. And this technology has been extensively validated at this point in multiple clinical trials. It was cleared by the FDA, and it's now commercially available. So over the past year, we've really been making strides on the commercial front, increasing awareness for the product among physicians and patients, and securing insurance coverage for the product." #Luminopia #Amblyopia #PediatricOphthalmology #VirtualReality #DigitalTherapeutics #LazyEye #VisionTherapy #Optometry #PediatricCare #HealthcareInnovation #MedicalTechnology luminopia.com Listen to the podcast here
Scott Xiao, Co-Founder and CEO of Luminopia, is developing a novel, FDA -cleared VR-based treatment for neurovisual disorders with a primary focus on amblyopia, lazy eye, in children aged 4- 12 years old. This approach uses popular TV shows to create an engaging, effective therapy that trains the eyes to work together and is designed as a replacement for traditional eye patching. Clinical data indicate that the vision improvements from this therapy are durable and that the VR approach is well-received by children and their parents. Scott explains, "We are pioneering a new class of treatments using virtual reality to treat various neurovisual disorders. So these are conditions where patients have vision loss that's driven by deficiencies in the brain, in the visual cortex. We're starting with amblyopia, which is often known as lazy eye. It's the number one cause of vision loss in children around the world. And it's an area of significant unmet need. There hasn't been much in the way of new treatments for decades. Typically, patients will go through glasses followed by eye patches, which is exactly what it sounds like. You take a patch, and you stick it on your stronger eye for multiple hours a day. And that's a really challenging treatment for a lot of kids and families. So we saw an opportunity to use technology to create something better, something that would be more engaging and more effective." "We've developed a VR-based approach that takes popular TV shows like SpongeBob and Sesame Street and turns them into a treatment by modifying how the images are shown to each eye. And this technology has been extensively validated at this point in multiple clinical trials. It was cleared by the FDA, and it's now commercially available. So over the past year, we've really been making strides on the commercial front, increasing awareness for the product among physicians and patients, and securing insurance coverage for the product." #Luminopia #Amblyopia #PediatricOphthalmology #VirtualReality #DigitalTherapeutics #LazyEye #VisionTherapy #Optometry #PediatricCare #HealthcareInnovation #MedicalTechnology luminopia.com Download the transcript here
Tom Mulcair can be heard every weekday morning at 7:40 on The Andrew Carter Morning Show.
WDAY First News anchors Scott Engen, Lisa Budeau and Lydia Blume break down your regional news and weather for Thursday, April 30. InForum Minute is produced by Forum Communications and brought to you by reporters from The Forum of Fargo-Moorhead and WDAY TV. Visit https://www.inforum.com/subscribe to subscribe.
Michael Crean, senior vice president and general manager of managed security services at SonicWall SonicWall published its 2026 Cyber Protect Report in March with a deliberate reframe: rather than threat intelligence for its own sake, the report is built around actionable content for solution providers. The centrepiece is the seven deadly sins of SMB cybersecurity – seven predictable, preventable failure patterns drawn from real breach data. The headline numbers are sobering: 88 percent of SMB breaches involve ransomware, more than double the enterprise rate, average dwell time sits at 181 days, and 85 percent of actionable alerts trace back to identity and credential compromise. Michael Crean, senior vice president and general manager of managed security services at SonicWall, came to the company through the acquisition of Solutions Granted, the MSSP he built – one of the early pioneers of SOC-as-a-service for the MSP market. He’s direct about what the data means for partners: the seven sins aren’t just an SMB customer problem. They’re an MSP problem too. His core argument is that mastering fundamentals – MFA, patching, privilege management – is non-negotiable, and owning the right tools doesn’t change that. You can have the same toolbox as your mechanic; that doesn’t make you a mechanic. On the MSP-to-MSSP question, his answer channels Yoda: do or do not, there is no try. A month after the report’s release, Crean says partners have already been using the sins framework directly in customer conversations – which he describes as the whole point. One postscript: his personal favourite of the seven sins is number five, cost-driven security decisions. His test – ask a room of MSPs how many bought the cheapest car on the lot. Nobody raises their hand. But too many of their customers are doing exactly that with cybersecurity. Read Full Transcript Robert Dutt: Hello and welcome to In The Channel from ChannelBuzz.ca, bringing news and information to the Canadian IT channel community for the last sixteen years. I’m Robert Dutt, editor of ChannelBuzz.ca and your host for the show. SonicWall has published annual threat research for years, but this year they did something different. They stopped calling it a threat report. The 2026 Cyber Protect Report reframes the conversation away from data for its own sake towards something MSPs can actually use – a set of tools and talking points for strategic conversations with customers. The hook they chose? The seven deadly sins of SMB cybersecurity. Seven predictable, preventable failures that show up in breach after breach. My guest is Michael Crean, senior vice president and general manager of managed security services at SonicWall. Michael came to SonicWall through the acquisition of Solutions Granted, the MSSP he built and one of the early pioneers of SOC-as-a-service for the MSP market. Before that, nine years in the military. So when he talks about what MSPs are getting wrong on security, he’s speaking from a fairly unusual vantage point – inside the SOC, inside the vendor, inside the partner community itself. The report had been out about a month when we sat down and I was curious what the actual conversation had looked like since launch. We got into that, the sins themselves, the 181-day dwell time that should make many MSPs uncomfortable, and what it really means to be or partner with a true MSSP. Let’s get right into it. My chat with Michael Crean. Michael, thanks for taking the time. I appreciate it. Michael Crean: Absolutely, sir. Robert Dutt: You called this report the Cyber Protect Report, not the threat report that you guys have been publishing for years. That seems like a deliberate choice. What are you trying to signal with that shift and who are you really talking to with this report? Michael Crean: I think every other threat report just looks the same. It’s got some different colors, it’s got some different logos, but everybody talks about the same exact thing and it felt boring. It felt like, “Why do we have to fit into the same role as everyone else? Why can’t we do something different that’s purposeful and should be meaningful to people?” It actually gives them something to talk about – not just with themselves internally, but also to their customers. That was the reason we went down this path and decided to call it the Protect Report. Robert Dutt: I’m guessing that also sets up why you went with the framing of those seven deadly sins – the seven predictable, preventable failures. I thought that was a really neat hook for it. When you look at that list, which one do you think most MSPs would be surprised to see themselves in? Not so much their customers, but themselves as MSPs? Michael Crean: Number one – ignoring the fundamentals. I mean, it’s incredible the amount of times – because of the work that we do at the SonicWall Security Operations Centers and the amount of compromises that we’re brought in to participate in, investigate, help people with – that you just find it’s this overwhelming amount of: you had the right tools, you had the right tech, and you didn’t know what to do with it. Or you did and you just didn’t take the time to really learn how to ride the bike well. We had a compromise today where a customer of ours got hit with Akira [verify], a ransomware, and we thought we probably knew that the penetration point was the firewall, but we had to do some more investigation. And when we did the investigation, the amount of misconfiguration was staggering [verify]. You pay for all these security services, and they weren’t even enabled – IPS, IDS disabled – and they paid for them. So it’s just unfortunate. These are just, again, what we call ignoring the fundamentals. Robert Dutt: Do you have any thoughts on what’s driving that? Is it a matter of, this is up and running, moving on to the next shiny thing, moving on to the next opportunity? What’s behind that? Michael Crean: I think some of it is that MSPs have found themselves in this place of challenge where they have so much responsibility and customers are looking at them. And I heard this a long time ago when I was a child – the smart person is the person that says what they don’t know. I think a lot of people are fearful to show that side of, “I don’t know something.” But saying “I don’t know” doesn’t mean you don’t know and you’ll never know. It just means, “Hey, I don’t know that, but I’m going to go here and ask this person, or I’m going to go to this vendor and get more information, or I’m going to do some more research and come back to you with a really solid answer.” Instead, there’s this constant – I hate to use the word – but it feels like there’s this constant necessity of yes that we have to keep giving our customers. I prefer somebody to tell me, “Nope, I don’t know how to do that, but I’m going to give you a great contact so that you can get it done right.” So I think that’s part of it. And then we, as manufacturers, we keep telling people all along the way, “Hey, buy my stuff, it fixes your problems. Just buy my stuff.” Well, I can go buy the same box of tools that my mechanic has, but that doesn’t mean I’m a mechanic and it obviously does not mean that my car is going to get fixed just because I’ve got the tools. Robert Dutt: Can attest to that. Fortunately, not with great experience, but there’s a reason I do take my car to someone else to get looked at. Michael Crean: Oh my goodness, you and me both. I want it done right. And as hard as I tend to drive my cars – because I have a thing for speed and adrenaline – I would actually like them to be as proper as they can be. Robert Dutt: Well, especially given that it’s important, when you’re testing the limits shall we say, that the thing stays together while you’re doing so. Michael Crean: Absolutely. Robert Dutt: And back to that point, I think there’s also the factor of when you are presenting yourself – and most MSPs do – as the trusted advisor, the expert on this, who’s going to take care of all this, that creates an even greater disincentive to admitting, “You know what? I need to check on that. Let me find out more,” rather than saying, “Yeah, I got this.” Michael Crean: I think it’s human nature, just in general. Because the moment you admit you don’t know something or you’re not certain, at that very moment in time, we just assume that to be a point of weakness. I believe through the military – I served for nine years – and being a CEO and founder for 22 years, what I really realized, and even when it came to my kids, sometimes when you just don’t know, it’s okay to say you don’t know, but I’m going to find out, or I’m going to figure it out, or we’re going to do it together and we’re both going to be better for it than we were when we started with the question. Robert Dutt: Funny, that came up early in my journalism career too. My editor at the time would say, “Your job is not to know. Your job is to find the person who does.” Along the same lines, a little bit of a different lens. You said something that I quoted in the news piece we did on the release of the report: that the danger isn’t that AI isn’t working – it’s that we’re using it as an excuse not to do the things we already know we should. That’s a remarkably direct thing for a security vendor to say, and it touches on that eating-your-vegetables kind of advice. What are you seeing that made you include that line? Michael Crean: It’s not what I’m seeing today. It’s what I’ve seen for the last 20 years in this industry. I mean, we went from deep packet inspection firewalls to next-generation firewalls. We got all of these extra added capabilities in the firewall, but then we got lazy on doing proper firewalling – controlling ports both inbound and outbound the way we used to do it – because we felt that we were overcompensating because we had so much power and capabilities. Then we went from signature-based AV to next-gen AV where we had these mathematical algorithms doing predictive analysis to understand whether a file is good or bad. Then we got EDR technologies helping us with the behaviour behind it. We just keep adding and adding and adding. I see AI as nothing more than just another tool. But how good can a tool be when you’re not performing the fundamentals? It helps, but it just can’t – I don’t know if you’re a sports guy or not, but think about it. When you look at the best of the best, whoever that may be – I’m a hockey guy – I’ll call Alex Ovechkin today. The best of the best, the all-time goal scorer. He beat Wayne Gretzky, he took that last year. That man works hard and he works on the fundamentals. I love what AI can do for us – to help get rid of some of the tasks that we don’t want to do, that we hate to do, that we can use for automation and make things faster, help us find bugs in our code, and in a security operations center, get through just mounds of data quicker. But you still have to do the fundamentals and you have to do the right things. Because when you do the right things and then you add something like AI to it, the world becomes a much different place. Robert Dutt: 88% of the SMB breaches you’re reporting on involved ransomware. That’s more than double the enterprise rate, if I’m remembering correctly. That’s a striking gap. What’s causing that? Do you see it as primarily resources, primarily end-user training, or something structural about how SMBs get attacked that’s different from enterprise? Michael Crean: I think it’s a little bit of everything that you mentioned, but mostly what it is, is this perception of, “I’m too little. I don’t have anything valuable. Why would somebody want to attack me?” When these large threat actors are going after huge enterprises – Colonial Pipeline, JBS, some massive organization – those organizations have better tools, better resources, better people, and they probably have more maturity to respond when they start to notice an attack taking place. When you think nobody’s ever going to break into your house, you may not lock your doors. You may not care about having the 70-pound German shepherd on watch when you’re not there. Because, I don’t have anything in my house of perceived value. But when you take that shotgun approach and you can knock down a hundred SMBs and get $10,000 out of each one, that’s a hell of a payday. It’s logical what we’re seeing right now. What it requires is that we all understand we have responsibility for the data that’s been entrusted to us – whether it’s customer data or supply chain data you’re responsible for because you’re supporting another vendor. The data we have is far more valuable than we give it credit for. Robert Dutt: And I guess there might also be an element of the ability to fly under the radar – the opposite of security through obscurity – in that you make that hit on Colonial Pipeline and it’s front-page news everywhere. You hit a bunch of small businesses for ten grand each, it gets a lot less attention from media. Michael Crean: I mean – I’m sure you’ve heard this, you’ve been doing this long enough – the idea around news and media: if it bleeds, it leads. And it’s not really sexy when you talk about a two-chair dental practice that gets hit with ransomware. And the two-chair dental practice doesn’t really want to talk about it either, because they’re a small community-based organization and it’s really damaging to how people potentially look at them. Whereas a Target, a Home Depot, a Lowe’s, whoever gets hit with ransomware – they’ve got the marketing machine, the attorneys, the dollars, the insurance. And at the end of the day, they’ll be as profitable, if not more profitable, a few quarters later. Robert Dutt: The report surfaces the number of 181 days of dwell time. For an MSP who’s running monthly security reports, quarterly reviews, thinks they have things in order – that number has to sting. What does it require of an MSP’s operating model to address that? Michael Crean: One, making sure that the investments you’ve made and the technologies you’ve decided to procure – the tools you’re going to use – make sure you’re well-trained on them and well-versed on the best practices so that you can get optimal outcomes. Patch management, man – I can’t tell you the amount of times we’ve seen… you talk about this 181 days, it comes down so many times to pure patch management. And the vast majority of manufacturers give you the patches for free. But we don’t think about it, we get distracted, we don’t see it as valuable as it really is. And it’s the really simple things. Again, it’s that number one – ignoring the fundamentals. Patching has been a fundamental thing we’ve talked about for so long. And I also think that for an MSP that just magically adds the additional S and starts calling themselves an MSSP – don’t dabble in security. Either do or do not. Do not try. We’re going to throw a little Yoda in here for the day. And if you’re not going to be a real MSSP, partner with one. There are so many great organizations out there – I’ll say we’re a great organization to partner with, that’s how we go to market – but there are lots of others out there who are purpose-built for this. It’s like being the best doctor in the world but you’re not a surgeon. So you refer somebody to a surgeon to get that surgery done. Robert Dutt: Your own background includes Solutions Granted – building out one of the first SOC-as-a-service models for MSPs before SonicWall acquired you. I’m curious, when you look back at your time on the other side, when you were the MSP – are there any of those sins you look at and go, “Hmm, that sounds awfully familiar”? Michael Crean: Oh, absolutely. I will say I went through that transition – 22 years of being a VAR, to being a government contractor, to being an MSP – realizing I was a really crappy MSP. Not going to lie. My bedside manner wasn’t great. I wasn’t passionate about what I was doing. And I think that’s something that gets lost sometimes. I was super passionate about security – getting out of the military, transitioning away from that, getting into IT and the tech space. And when I found my way into this SOC-as-a-service MSP space, it’s where I found my passion and love again. And I think that means a lot. Don’t do it for the sake of doing it. I think we all have to keep the lights on and put food on the table and clothe our kids and find a way to retirement one day, but find some happiness in that too and be really passionate about what you’re doing. And you’ll probably find a lot of these seven deadly sins aren’t as deadly for you. Robert Dutt: That’s one way of mitigating it, that’s for sure. The report is framed around protection outcomes and it’s explicitly aimed at giving MSPs the language to have strategic conversations with SMB decision-makers. But there’s a responsibility question underneath that. If the MSP is the last line of defense for most SMBs – and I think we’ve talked about this a little bit already – what does good actually look like? What’s the bar you have to reach before you either back off from security and/or partner with someone else who’s much more committed? Michael Crean: I think, one, it’s a team effort. It isn’t just the MSP’s responsibility. The business owners, the decision-makers, the board, whoever you’re dealing with that’s making these decisions – they have to buy in. And if they don’t, well, then you’re at a disconnect. You’re bringing in a subject matter expert – the MSP – to help make them more secure, for survivability, for all the things they’re asking for to make sure they can operate at the highest levels possible, and then you don’t allow them to do their job. That’s a huge risk. What I will say – and this is a hard lesson to learn, but one of the most valuable lessons to learn – is when you fire your first customer. Not get fired, but you actually fire your first customer because it wasn’t the right fit and the financial impact was going to hurt. It didn’t feel good. Nobody ever really wants to get fired or be fired. But when you do that, you start to mature. And inevitably, you also help that customer mature – because if they hear the same message from multiple people: “We’ve got to do patch management. Don’t tell me we can’t. We’re going to use MFA. We’re going to have a SOC monitoring this 24 hours a day, seven days a week, 365 days a year. We’re going to take away administrative privileges. We’re going to do the fundamentals. We’re going to make investments in tools and put the right people, process, and technology in place.” The outcomes really start to matter. But it is a team sport. I can’t tell you – and I’m sure you’ve heard this – MSPs talking about, “I can’t get my customer to use MFA, so I got them to sign this indemnification clause.” How many MSPs are getting sued, and these indemnification clauses aren’t holding up? Because you’re the expert. If you believe it’s 100% the right thing to do, then if they don’t follow – you fire them. Robert Dutt: It’s funny how often it comes down to that. I’ve heard that same sentiment from MSPs in the move towards, “This is what you have to take. It is not negotiable. It is the cost, as it were, of doing business with us.” I think that’s sage advice. Michael Crean: We accept it from our surgeons, right? If I’ve got a bum knee and I need it fixed and I’m a little overweight and he knows I’m drinking a little too much bourbon or eating a little too much red meat and he wants me to lose ten pounds so that he can be successful – if I’m not doing my part, well, why does he want to do surgery on me? Robert Dutt: Point taken. The report’s been out for a few weeks now. Curious – what’s the question you’re getting most from partners that you didn’t expect as they sit with this? What’s hit differently than you thought it might? Michael Crean: I thought we were going to get more pushback on why we called it a Protect Report instead of a Threat Report. That really isn’t the question we’ve been getting. What’s been surprising to me is the commentary. The unsolicited emails, the LinkedIn requests, the comments – people have really enjoyed receiving a report that just wasn’t like everything else. There’s been a lot of commentary along the lines of, “I’m going to have this discussion and use these analogies and use these seven deadly sins to have conversations with my customers.” That’s what we were hoping for, but you never know when you go against the grain how well it’s going to hit. I think we got lucky. Robert Dutt: It sounds very much like mission accomplished. I know it’s something that caught my attention and that I’ve heard out there as well. I look forward to seeing what comes next as you continue to reinvent what these kinds of reports do and what they look like. Michael, I thank you for taking the time to talk through this and to offer some advice. Michael Crean: I appreciate your time as well, sir. Thanks a lot. Robert Dutt: There you have it – Michael Crean from SonicWall. I’d like to thank Michael for his time, and for a conversation that felt a little different from the usual vendor security briefing. His background – building Solutions Granted from scratch, running a real MSSP, operating inside a SOC, and now sitting on the vendor side – gives him a perspective that’s harder to find than you’d think among people who are now in vendor roles. A few things will stay with me. The mechanic analogy – you can own the same box of tools, but that doesn’t make you a mechanic, and it doesn’t mean your car is going to get fixed. The surgeon line – if the patient won’t follow the pre-op advice, why are you doing the surgery? His answer on when an MSP reaches maturity – it’s the moment you fire your first customer who won’t implement MFA or basic patch management, even when it hurts. And the Ovechkin riff – even the greatest goal scorer in NHL history never stopped working on the fundamentals. Now, after we stopped recording, Michael mentioned something he wished he’d worked into the interview, and I promised I’d pass it along. Of the seven deadly sins in the report, I asked which one is most personally interesting to him and he landed on sin number five – cost-driven security decisions. He illustrated it this way: he’d been speaking at a conference recently and asked how many in the room had bought a car in the last eighteen months. A lot of hands. Then he asked how many of them had bought the cheapest car on the lot. Not one hand went down. Because we think about safety ratings, about the features, about whether the thing will hold together when we need it to. But when it comes to cybersecurity, too many businesses just reach for the cheapest option. As Michael said himself, it’s a little strange to have a personal favourite deadly sin. But there you have it. The 2026 Cyber Protect Report is well worth a look for any MSP or solution provider thinking about how to have a more strategic security conversation with their customers. Links in the show notes. If you found this useful, follow or subscribe to In The Channel from ChannelBuzz.ca wherever you get your podcasts – you’ll find us on Apple Podcasts, Spotify, YouTube, and all the major directories. Ratings and reviews are always appreciated and genuinely help other people in the channel find the show. Until next time, I’m Robert Dutt for ChannelBuzz.ca, and I’ll see you in the channel.
(00:00-6:35) More sex talk, please. I'm uncomfortable with my genitalia, too. Former Cardinals weighing in on Supp's repeated appearances. A snippet of Chairman's Jeff Suppan single "Soup's Gone Cold." A polarizing single.(6:43-10:26) It's time for Market Moves. Which local team can get back to being competitive fastest, and which can stay competitive longest. Some aren't happy with the question.(10:36-39:18) Cardinals broadcaster, Brad Thompson joins the show fresh off the getaway day loss in Miami. If you're gonna lose, lose quick. Brad's thoughts on getaway day lineups in general and the logic of yesterday's lineup. Finding ways to keep guys healthy over the long 162 game season. Days off beneficial in the long run. Finding ways to win in different ways. Good start without the top of the lineup getting going. Looking ahead at guys like Jordan and Crooks getting called up. Patching in Jeff Suppan to kick it around with Brad. Both guys are navy hats on the road guys. BT throws Albert under the bus for his only career error. Brad was the "Just In Case" guy. What a fun little reunion.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
They're trying to freeze us out of the studio. George Clooney's Bat Nipples. Best ride at Six Flags. Rough day in Miami in front of tens and tens of fans. A "no brainer" lineup. Debating the getaway day lineup. The Kilcoyne Index. Papers breakin' in the new place. It's a literal unpacking. Real nice water pressure. First segment Vaughn strikes again. Three weeks til The Dotem.Non-competes have been violated as Jackson and Chairman Kurt were on The Courtney Show this morning to play "Navy Caps on the Road." Sup, wet blanket? Jordan Walker has cooled off a bit since Summer '98 came out. Jimmy Crooks raking in Memphis still. How long do you leave him in AAA with Pages struggling? Blaze Jordan rakefest. Kind of agree with Ball Coach Steve. Three players have appeared in every game this season. Chairman's a fluid swiss army knife. The Milwaukee retirement plan. Tre Mason. Dr. Ben is on the phones and wants to talk to Jackson about the Jail Blazers documentary. Was he breathing heavy?Joined by Jason Love, father of soon-to-be NFL Draft pick Jeremiyah Love. Still not sure where his son will be drafted. The experience of having his son play at Notre Dame. Meeting Joe Montana and Jeremiyah having no idea who he was. Almost passing out meeting Jerome Bettis. Instilling great character and striving for greatness from a young age. Jackson's not very confrontational.Happy Birthday John Cena. Delivering on the tease with some Joe Lunardi bracketology. You won't believe who SLU and Mizzou will be playing in the first round of next year's tournament. Rock Chalk Jayhawk looming? Amazing that Lunardi is able to do this. Doug's not buying it.Doug's sippin' hot chocolate to try to beat the freeze. It's inspirational how we battle. Audio from Ice Guardians with Kelly Chase talking about Brett Hull calling the Blues front office to keep Chase from being traded to Montreal. Just be happy you're not in Queens. Mets finally break the streak. WFAN audio and they're not happy with the Mets. I like cute guys on Twitter.People want a "Tim Cam" during breaks. Patriots coach Mike Vrabel will seek counseling starting this weekend and won't be with the team for Day 3 of the NFL Draft. To be clear, it was NOT Hedonism. Jackson's mom was in a A League Of Their Own. Doug's addictions. No Sopranos spoilers. Cam Janssen at Drug Church. First time caller, Chicago Sean is on the line.More sex talk, please. I'm uncomfortable with my genitalia, too. Former Cardinals weighing in on Supp's repeated appearances. A snippet of Chairman's Jeff Suppan single "Soup's Gone Cold." A polarizing single.It's time for Market Moves. Which local team can get back to being competitive fastest, and which can stay competitive longest. Some aren't happy with the question.Cardinals broadcaster, Brad Thompson joins the show fresh off the getaway day loss in Miami. If you're gonna lose, lose quick. Brad's thoughts on getaway day lineups in general and the logic of yesterday's lineup. Finding ways to keep guys healthy over the long 162 game season. Days off beneficial in the long run. Finding ways to win in different ways. Good start without the top of the lineup getting going. Looking ahead at guys like Jordan and Crooks getting called up. Patching in Jeff Suppan to kick it around with Brad. Both guys are navy hats on the road guys. BT throws Albert under the bus for his only career error. Brad was the "Just In Case" guy. What a fun little reunion.I'm no stingray. Martin's beanie look. What a weave, Doug. Design Aire Heating & Cooling EMOTD.People love Summer '98. Takes Tim back to Columbia, MO. The magic of music. A bushel of blueberries. Airing of grievances. Kissing garbage men.And the winner of the Design Aire Heating & Cooling EMOTD is...See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
Podcast: Industrial Cybersecurity InsiderEpisode: OT Patching vs IT Patching: What's Commonly MisunderstoodPub date: 2026-04-14Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationMost cybersecurity teams treat patching like a universal fix. In manufacturing, that assumption can take down a production line, trigger a safety event, or void the warranty on a $2 million piece of equipment.In this episode, Dino Busalachi and Craig Duckworth break down why patching in operational technology environments is a fundamentally different problem than patching enterprise IT — and why closing that gap requires more than just pushing an update.The bottom line: A firewall is not a patching strategy. Neither is hoping your systems are isolated. Organizations that get this right use risk-based prioritization, lab testing, virtual patching, and real collaboration between IT and OT teams.If you are responsible for a plant floor — or for the people who are — this conversation is for you.
A modern hospital can have 40,000 endpoints — laptops, lab stations, nursing workstations, medical IoT devices — and a razor-thin IT team responsible for keeping every single one of them patched, compliant, and secure. Miss just one, and attackers will find it.Recorded live at HIMSS 2026, this conversation features an IT specialist from HCL Software breaking down how BigFix IO is helping healthcare organizations move from reactive patching to proactive, automated endpoint management — at scale, across heterogeneous environments, and with AI-powered remediation bots that work around the clock.Topics covered:Why healthcare IT environments are uniquely complex and difficult to secureThe ransomware threat and why unpatched devices are the entry point attackers exploitHow BigFix IO provides complete asset visibility and compliance across 100+ operating systemsA real customer case study — from 60% to 97% compliance across 40,000 endpoints in two monthsPatching 100,000 endpoints in under an hour with smart scheduling and rollback policiesManaging legacy systems and heterogeneous environments in healthcareHow AI and agentic bots are automating level zero and level one IT tasksConversational bots for patients, IT provisioning, and onboarding through chat, mobile, and voiceThe future of AI in healthcare IT operations⏱️ YouTube Timeline0:00 — Introduction — Live at HIMSS 2026 with HCL Software's IT specialist Rajneesha0:26 — The state of healthcare IT — 40,000 endpoints and a thin IT team0:41 — Why managing and securing a modern hospital environment is a nightmare1:37 — Patching at scale — why it is far more complex than clicking a system update1:50 — Legacy systems, compliance documentation, and the cost of missing a single device2:34 — How attackers exploit unpatched healthcare environments and why downtime is a patient safety issue3:24 — Introducing BigFix IO — a single platform for compliance, visibility, and automation4:30 — BigFix is industry-agnostic — built for speed scale and complete compliance intelligence5:03 — Real customer case study — 60% to 97% compliance across 40,000 endpoints in two months6:15 — Heterogeneous environments — managing 100 plus operating systems including legacy systems6:30 — Patching 100,000 endpoints in under an hour with smart scheduling and rollback policies7:56 — AI in healthcare IT — where the technology has matured and what is now possible8:10 — Agentic bots for auto-remediation and reducing the burden on lean IT teams9:01 — Conversational bots for patients and IT users via chat mobile and voice10:19 — Final thoughts — endpoints are both the biggest opportunity and the biggest vulnerability10:33 — Reaching 98 to 99% compliance in healthcare with BigFix IO
A modern hospital can have 40,000 endpoints — laptops, lab stations, nursing workstations, medical IoT devices — and a razor-thin IT team responsible for keeping every single one of them patched, compliant, and secure. Miss just one, and attackers will find it.Recorded live at HIMSS 2026, this conversation features an IT specialist from HCL Software breaking down how BigFix IO is helping healthcare organizations move from reactive patching to proactive, automated endpoint management — at scale, across heterogeneous environments, and with AI-powered remediation bots that work around the clock.Topics covered:Why healthcare IT environments are uniquely complex and difficult to secureThe ransomware threat and why unpatched devices are the entry point attackers exploitHow BigFix IO provides complete asset visibility and compliance across 100+ operating systemsA real customer case study — from 60% to 97% compliance across 40,000 endpoints in two monthsPatching 100,000 endpoints in under an hour with smart scheduling and rollback policiesManaging legacy systems and heterogeneous environments in healthcareHow AI and agentic bots are automating level zero and level one IT tasksConversational bots for patients, IT provisioning, and onboarding through chat, mobile, and voiceThe future of AI in healthcare IT operations⏱️ YouTube Timeline0:00 — Introduction — Live at HIMSS 2026 with HCL Software's IT specialist Rajneesha0:26 — The state of healthcare IT — 40,000 endpoints and a thin IT team0:41 — Why managing and securing a modern hospital environment is a nightmare1:37 — Patching at scale — why it is far more complex than clicking a system update1:50 — Legacy systems, compliance documentation, and the cost of missing a single device2:34 — How attackers exploit unpatched healthcare environments and why downtime is a patient safety issue3:24 — Introducing BigFix IO — a single platform for compliance, visibility, and automation4:30 — BigFix is industry-agnostic — built for speed scale and complete compliance intelligence5:03 — Real customer case study — 60% to 97% compliance across 40,000 endpoints in two months6:15 — Heterogeneous environments — managing 100 plus operating systems including legacy systems6:30 — Patching 100,000 endpoints in under an hour with smart scheduling and rollback policies7:56 — AI in healthcare IT — where the technology has matured and what is now possible8:10 — Agentic bots for auto-remediation and reducing the burden on lean IT teams9:01 — Conversational bots for patients and IT users via chat mobile and voice10:19 — Final thoughts — endpoints are both the biggest opportunity and the biggest vulnerability10:33 — Reaching 98 to 99% compliance in healthcare with BigFix IO
Fortinet releases an emergency update for a critical vulnerability. A major outage disrupts Russian banking apps. A new report highlights critical skills gaps. CyberCorp scholars struggle to secure jobs. Scammers use QR codes in fake traffic violation schemes. A proposed lawsuit accuses Perplexity of oversharing users' AI transcripts. Cambodia outlaws scam centers. Scammers impersonate Harvard IT staff. With “wrench attack” threats of violence, life imitates art. Kevin Magee from Microsoft for Startups describes emerging trends. On Afternoon Cyber Tea with Ann Johnson, Ann speaks with Allie Mellen about her new book "Code War: How Nations Hack, Spy, and Shape the Digital Battlefield." Users find Copilot's terms of use highly entertaining. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today on our Industry Voices segment, we are joined by Kevin Magee from Microsoft for Startups discussing how cybersecurity startups can succeed by focusing on real problems and navigating emerging trends. Tune into the full conversation here. Afternoon Cyber Tea On this segment of Afternoon Cyber Tea with Ann Johnson, Ann speaks with Allie Mellen about her new book "Code War: How Nations Hack, Spy, and Shape the Digital Battlefield." You can listen to the full conversation here and catch new episodes of Afternoon Cyber Tea every other Tuesday on your favorite podcast app. Selected Reading New FortiClient EMS flaw exploited in attacks, emergency patch released (Bleeping Computer) Major outage hits Russian banking apps, metro payments across regions (The Record) SANS 2026 report flags cybersecurity skills crisis, putting critical infrastructure and OT sectors at measurable breach risk (Industrial Cyber) CyberCorps grads consider private sector as fed hiring challenges persist (Federal News Network) Traffic violation scams switch to QR codes in new phishing texts (Bleeping Computer) Perplexity's "Incognito Mode" is a "sham," lawsuit says (Ars Technica) Cambodian parliament passes landmark cybercrime law after scam centre scrutiny (Reuters) Harvard Warns of Active Cyberattack Impersonating IT Staff and Targeting Affiliates (The Crimson) Wealthy California crypto holders targeted in violent ‘wrench attacks' (KTLA) Security (xkcd) Censys raises $70 million in a Series D round. (N2K Pro Business Briefing) Even Microsoft know Copilot can't be trusted (The Register) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices
In this episode, Dr. K explores the "Alchemy of High Functioning Depression" (HFD)—a condition that is not officially recognized in the DSM-5 but may be even more common than regular depression. He explains why people who appear to be "keeping it together" are often just bailing water out of a sinking boat to keep from drowning. What to expect in this episode: The Coping Strategy Trap: Why an over-reliance on survival mechanisms allows you to plow forward without ever addressing the underlying problems in your life. Obsession with Role and Identity: A look at how the pressure to be a "good parent," a "successful doctor," or a "provider" forces people to double down on a life that makes them miserable. The Default Mode Network: The neurology of HFD, where the brain's "self-reflection" circuit hyperactivates, causing constant, exhausting thoughts about improving the self. Toxic Positivity and Denial: How avoidant coping—denying your negative feelings or your circumstances—leads to a higher risk of suicidality and mental burnout. Sublimation (The Inner Alchemy): Why taking the feeling of wanting to quit and turning it into "badass" effort can lead to a successful career in a profession you actually hate. The Risk of Cracking: Why those with high functioning depression have a 300% to 400% higher risk of eventually falling into a full-blown depressive episode. Patching the Hull: Practical advice on how to move forward by letting negative emotions surface and questioning if your idealized role is worth sacrificing your life for.Something sexy is coming to HG! Join the waitlist: https://bit.ly/3PGdmUAHG Coaching : https://bit.ly/46bIkdo Dr. K's Guide to Mental Health: https://bit.ly/44z3SztHG Memberships : https://bit.ly/3TNoMVf Products & Services : https://bit.ly/44kz7x0 HealthyGamer.GG: https://bit.ly/3ZOopgQ Learn more about your ad choices. Visit megaphone.fm/adchoices
Minor asphalt repairs like crack filling cost pennies per foot, but delays can explode into six-figure reconstruction bills. Hear about the Rule of Seven, hidden liability risks, and why freeze-thaw cycles make fall maintenance non-negotiable for commercial property managers. Avello Asphalt & Construction Corp City: Poughkeepsie Address: 141 Daley Road Website: https://www.avelloasphalt.com
On this episode of The Chris Mathis Show, Chris Mathis breaks down the Buccaneers' latest move in free agency — bringing back a familiar face who once wore the pewter and red. But is this reunion about production on the field, or a deeper attempt to fix the team's energy and locker room culture? Chris dives into what this move really means, whether it fills a true need or just serves as a temporary spark, and how it could impact the Buccaneers heading into the season.
Not long ago, OT environments were isolated islands.Control systems ran independently, accessible only through dedicated workstations requiring physical presence. The factory floor and the IT department might as well have been on different planets. That world is gone. Today's OT environments are connected. Remote access from IT workspaces to control systems is routine. And this is just the start. And it changes everything about how to secure them.In this episode of Threat Talks, Lieuwe Jan Koning and Rob Maas break down what happens when OT vs IT security models collide – and why IT/OT convergence is forcing organizations to rethink how they protect industrial environments.Patching is difficult, availability is critical, and legacy models like the Purdue model leave gaps attackers can move through.So, what does work?Zero Trust.If your organization relies on industrial systems, this is the shift you need to understand. Timestamps00:00 – OT vs IT Security Introduction and Key Differences00:57 – IT OT Convergence Is Changing OT Security04:49 – What OT vs IT Security Looks Like in Practice10:13 – Why IT and OT Teams Struggle to Communicate12:18 – How Zero Trust Applies to OT Environments14:21 – How to Secure OT with Zero Trust and IT OT Convergence Key Topics CoveredHow OT vs IT security requires a different approach in practiceWhy IT OT convergence is increasing risk across factory environmentsHow limitations like patching and availability shape OT security decisionsHow Zero Trust segmentation can reduce risk without disrupting operationsResourcesThreat Talks: https://threat-talks.com/ ON2IT (Zero Trust as a Service): https://on2it.net/ AMS-IX: https://www.ams-ix.net/amsThreat Talks episode on Hack the Boat: https://www.youtube.com/watch?v=Xa0TJ3eRTCwBlog: Purdue vs Zero Trust in OT security https://on2it.net/nl/blog/purdue-vs-zero-trust-in-ot-security/ Subscribe to Threat Talks and turn on notifications for deep dives into the world's most active cyber threats and hands-on exploitation techniques.
In part one of Red Eye Radio with Gary McNamara and Eric Harley, House Republicans passed a short-term funding patch for the Department of Homeland Security (DHS) over the fierce objections of Democratic lawmakers late Friday evening. But the 42-day shutdown that has snarled air travel and left tens of thousands of federal employees without pay is far from over. House lawmakers voted 213-203, largely along party lines, to approve a two-month funding extension for the beleaguered department, which has been operating without full-year appropriations since the funding lapse began on Feb. 14. A Senate proforma session resumes later today. Also the "No Kings" protests over the weekend proved to be nothing more than entertainment for Republicans, audio from CNN's Scott Jennings on the left's financing these rallies, the "Obama Chant Fight Song" deifying the former President and proving disingenuous to the "No Kings" message, Dems want a "straight white Christian man" for their Presidential nominee and an historic profile of the men Democrats have chosen to represent their party. For more talk on the issues that matter to you, listen on radio stations across America Monday-Friday 12am-5am CT (1am-6am ET and 10pm-3am PT), download the RED EYE RADIO SHOW app, asking your smart speaker, or listening at RedEyeRadioShow.com. Learn more about your ad choices. Visit podcastchoices.com/adchoices
Patching Games Into Oblivion best gaming podcast 581|Crimson Desert has had some amazing patches it has also patched itself into a game that feels dramatically different compared to the game many wanted when they bought it. A drastic cut to difficulty, huge swaths of changes on healing and travel, I discuss my thoughts. Join this channel to get access to perks:https://www.youtube.com/channel/UC5zKbGokI0oI6SeZrHTfJjA/joinSubstack https://substack.com/@acgreviewhttps://amzn.to/43LY1Gv Amazon Affiliate LinkJoin this channel to get access to perks: https://www.youtube.com/channel/UC5zKbGokI0oI6SeZrHTfJjA/join Each Friday ACG and some pals Silver, Rej, Abssi, and Jonny from https://www.twitch.tv/jonnyplayslive get together to discuss games, life, books, movies and everything else. New home of the ACG Best Gaming Podcast Follow me on Twitter for reviews and info @jeremypenter-JOIN the ACG Reddit https://www.reddit.com/r/ACGVids/ https://www.patreon.com/AngryCentaurGaming
Ernie floated a sports reference to Ben in a recent discussion, the concept of an NFL team patching together the holes in their lineup with trades and free agents versus completely rebuilding it from the ground up. Patching of course is the quick fix -- it gets you results now, so you can field a team and compete this season. The results, however, may not be what you want, and often the patched-together team doesn't hold up over a long season. Rebuilding is the long road. It usually means suffering now so that you can have a strong, cohesive unit to play with next season (or sometimes several seasons in the future). A team built from the ground up also has depth. When things go wrong, and injuries happen, that team has seasoned players who can fill the gaps and still act as a cohesive unit. Well, it turns out the same is true for our money habits. Ben and Ernie run through a list of common habits that are trying to patch the holes in your spending plan, and compare them to sustainable building habits, which lead to a strong, flexible plan that aligns with your life. Follow Budget Nerds on YouTube Budget Nerds Livestreams: https://www.youtube.com/@YNABofficial/streams Budget Nerds Episodes: https://www.youtube.com/channel/UCuIUGmbCDklkDCDm-cQqv2g Share your YNAB win with Ben and Ernie! budgetnerds@ynab.com
So much of appsec's efforts can be consumed by vuln management and a race to patch security flaws. But that's more a symptom of the ease of scanning and the volume of CVEs. Erik Nost walks through the principles behind proactive security, why the concept sounds familiar to secure by design, and why organizations still struggle with creating effective practices for visibility. Resources https://www.forrester.com/blogs/proactive-security-platforms-will-cumulate-visibility-prioritization-and-remediation/ Visit https://www.securityweekly.com/asw for all the latest episodes! Show Notes: https://securityweekly.com/asw-375
So much of appsec's efforts can be consumed by vuln management and a race to patch security flaws. But that's more a symptom of the ease of scanning and the volume of CVEs. Erik Nost walks through the principles behind proactive security, why the concept sounds familiar to secure by design, and why organizations still struggle with creating effective practices for visibility. Resources https://www.forrester.com/blogs/proactive-security-platforms-will-cumulate-visibility-prioritization-and-remediation/ Show Notes: https://securityweekly.com/asw-375
So much of appsec's efforts can be consumed by vuln management and a race to patch security flaws. But that's more a symptom of the ease of scanning and the volume of CVEs. Erik Nost walks through the principles behind proactive security, why the concept sounds familiar to secure by design, and why organizations still struggle with creating effective practices for visibility. Resources https://www.forrester.com/blogs/proactive-security-platforms-will-cumulate-visibility-prioritization-and-remediation/ Visit https://www.securityweekly.com/asw for all the latest episodes! Show Notes: https://securityweekly.com/asw-375
So much of appsec's efforts can be consumed by vuln management and a race to patch security flaws. But that's more a symptom of the ease of scanning and the volume of CVEs. Erik Nost walks through the principles behind proactive security, why the concept sounds familiar to secure by design, and why organizations still struggle with creating effective practices for visibility. Resources https://www.forrester.com/blogs/proactive-security-platforms-will-cumulate-visibility-prioritization-and-remediation/ Show Notes: https://securityweekly.com/asw-375
"I can't think about cybersecurity this week; I'm thinking about 1099s."You're not alone. Many SMBs see the NIST Cybersecurity Framework (CSF) as an overwhelming manual for government contractors, not a local shop or startup. Jen Stone sits down with Daniel Eliot, NIST's lead for small business engagement. We break down the new NIST CSF 2.0 Small Business Quick Start Guide —a "small-chunk" resource designed for under-resourced organizations to move from chaos to a structured program. In this episode:Why having "everyone" responsible means "nobody" is.How to build a "reasonable" security program while managing payroll and daily operations.Why taking security seriously helps you win bigger contracts and scale safely.The exact steps (MFA, patching, backups, and more) that even large orgs get wrong.NIST ResourcesNIST (National Institute of Standards and Technology): https://www.nist.gov/Small Business Cybersecurity Corner: https://www.nist.gov/itl/smallbusinesscyberNIST CSF 2.0 (Cybersecurity Framework): https://www.nist.gov/cyberframeworkSmall Business Quick Start Guide: https://www.nist.gov/publications/nist-cybersecurity-framework-20-small-business-quick-start-guideContact Daniel and his team: smallbizsecurity@nist.govKey Term DefinitionsThe 6 Functions: Govern, Identify, Protect, Detect, Respond, and RecoverMFA: Multi-Factor Authentication—essential for account access. Patching: Updating software to fix security "holes." MSP/MSSP: Local experts you can hire to manage IT security. Timestamps00:00 – Many hats of small business owners00:26 – Daniel Eliot and NIST's Mission02:25 – Exploring the Small Business Cybersecurity Corner03:20 – What is the NIST CSF?04:26 – The Small Business Quick Start Guide for CSF 2.006:52 – How to Identify Your Most Critical Assets09:56 – When to Seek Help: Engaging MSPs and Local Resources10:52 – Defining a "Successful" Cybersecurity Program13:21 – Essential Fundamentals: MFA, Patching, and Backups15:35 – How to Engage Directly with NIST Jen Stone (MCIS, CISSP, CISA, QSA) is a Principal Security Analyst at SecurityMetrics. With 25+ years in IT and 100+ high-level assessments, Jen specializes in making complex compliance actionable for businesses of all sizes. Outside of security, she is an aerial arts enthusiast and motorcycle rider. Request a Quote for a PCI Audit ► https://www.securitymetrics.com/pci-audit Request a Quote for a Penetration Test ► https://www.securitymetrics.com/penetration-testing Get the Guide to PCI DSS compliance ► https://www.securitymetrics.com/lp/pci/pci-guide Get FREE security and compliance training ► https://academy.securitymetrics.com/ Get in touch with SecurityMetrics' Sales Team ► https://www.securitymetrics.com/contact/lets-get-you-to-the-right-place
We kick off with a CVSS 10 in n8n, then look at self-hosted AI assistants with weak defaults and prompt injection risks. Are your API keys, inbox, and drives safe if a bot is open to the web? What should you rotate, patch, and hide behind a VPN? We are always happy to answer any questions, hear suggestions for new episodes, or hear from you, our listeners. DevSecOps Talks podcast LinkedIn page DevSecOps Talks podcast website DevSecOps Talks podcast YouTube channel
How do you find hope when a doctor gives you 8 years to live? This moving episode proves that Living Well with Dementia is about more than just a diagnosis; it's about choosing a new way to thrive. Our guest was diagnosed with young-onset Alzheimer's at 50, but a decade later, he is rewriting the narrative through cycling and advocacy. Living Well with Dementia requires a shift in perspective. Consequently, we explore the "Jim Berry method"—a strategy that allowed Peter's father to live with the condition for 25 years by staying engaged in the family business. Furthermore, this conversation provides caregivers with practical "hacks," such as using digital clocks and open toolboxes to maintain independence. Ultimately, the secret to Living Well with Dementia lies in making moments, not memories. Specifically, learn why you should stop "testing" a loved one's memory and start entering their world instead. If you want to move from fear to action, this episode is for you. Discover how to unmask the person behind the diagnosis and find joy in the "different" life that follows. 0:00 – Intro: Challenging the 8-year Alzheimer's prognosis. 01:45 – Catching up with Peter and Deb: Life as an advocate and author. 04:12 – The early signs: Recognizing young-onset symptoms at age 50. 07:30 – “The Compass”: How cycling became Peter's greatest therapy. 09:45 – The science of lifestyle: Why exercise is non-negotiable for brain health. 11:15 – 25 years with Alzheimer's: The incredible story of Peter's father. 14:50 – Modifying the workplace: Creative ways to keep a loved one engaged. 17:30 – Dealing with the "Dementia Monster": Staying independent through small hacks. 21:10 – The "Gray Box" analogy: Seeing the person, not just the diagnosis. 24:45 – Slow Puncture vs. Patching the Puncture: Evolution of the books. 27:20 – Top Caregiver Advice: Why you should stop "testing" memory. 31:00 – Entering their world: How to adapt when reality shifts. 34:15 – Making moments, not memories: Living in the present. 37:50 – Closing thoughts: Why life is different, but not over. ++++++++++++++++++++++++++++++++++++++++ Related Episodes: Navigating MCI - Not The End of The Road, Just A Bend in The Road Practical Strategies for Coping with Cognitive Changes ++++++++++++++++++++++++++++++++++++++++ Sign Up for more Advice & Wisdom - email newsletter. ++++++++++++++++++++++++++++++++++++++++ Please help us keep our show going by supporting our sponsors. Thank you. ++++++++++++++++++++++++++++++++++++++++ Make Your Brain Span Match Your LifeSpan Relevate from NeuroReserve With Relevate nutritional supplement, you get science-backed nutrition to help protect your brain power today and for years to come. You deserve a brain span that lasts as long as your lifespan. ++++++++++++++++++++++++++++++++++++++++ Feeling overwhelmed? HelpTexts can be your pocket therapist. Going through a tough time? HelpTexts offers confidential support delivered straight to your phone via text message. Whether you're dealing with grief, caregiving stress, or just need a mental health boost, their expert-guided texts provide personalized tips and advice. Sign up for a year of support and get: Daily or twice-weekly texts tailored to your situation Actionable strategies to cope and move forward Support for those who care about you (optional) HelpTexts makes getting help easy and convenient. ++++++++++++++++++++++++++++++++++++++++ List of the Top 20 Alzheimer's Podcasts via FeedSpot! See where we rank. Join Fading Memories On Social Media! If you've enjoyed this episode, please share this podcast with other caregivers! You'll find us on social media at the following links. Instagram LinkedIn Facebook Contact Jen at hello@fadingmemoriespodcast.com Or learn more at Our Website
Podcast: Industrial Cybersecurity InsiderEpisode: The Patching Gap Putting Industrial Operations at Risk: IT vs OTPub date: 2026-01-27Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationCraig and Dino tackle one of industrial cybersecurity's most critical challenges in this Rewind episode: the massive gap between IT and OT patching strategies. IT organizations patch constantly—think Patch Tuesday. OT environments rarely patch at all, creating dangerous vulnerability gaps across connected networks. The hosts explore why this disconnect exists. Production floor downtime costs are astronomical, making patching a risky business decision. OEM restrictions complicate matters further. Many vendors won't support systems or warranties after unauthorized updates. Managing decades-old equipment alongside modern systems creates another layer of complexity. Legacy PLCs weren't designed with patching in mind. The consequences of not patching are mounting. Insurance companies are tightening requirements and regulatory pressures are intensifying. Craig and Dino offer practical solutions that don't require shutting down production lines. Virtual patching technologies can protect legacy control systems without traditional software updates. The hosts emphasize the urgent need for IT-OT collaboration. All stakeholders—including OEMs and system integrators—must be part of strategic cybersecurity conversations. This episode is essential listening for CISOs, plant managers, and anyone responsible for protecting industrial operations. The connected world isn't waiting for OT to catch up. Chapters:00:00:00 - Introduction to Patching Challenges00:01:08 - IT vs OT Patching: Key Differences00:02:55 - Understanding the Cost of Downtime in OT00:03:32 - Overcoming Challenges with Legacy Systems00:05:21 - Navigating OEMs and Safety Concerns00:06:45 - The Role of Safety in OT Patching00:08:52 - Exploring Virtual Patching Solutions00:13:11 - Enhancing Vendor Collaboration and Risk Management00:16:48 - Impact of Mergers and Acquisitions on Cybersecurity00:18:33 - Addressing Insurance and Compliance Issues00:20:12 - Significant Consequences of Not Patching00:23:14 - Building an Effective Collaborative Cybersecurity Strategy00:24:03 - Conclusion and Actionable InsightsLinks And Resources:Want to Sponsor an episode or be a Guest? Reach out here.Industrial Cybersecurity Insider on LinkedInCybersecurity & Digital Safety on LinkedInBW Design Group CybersecurityDino Busalachi on LinkedInCraig Duckworth on LinkedInThanks so much for joining us this week. Want to subscribe to Industrial Cybersecurity Insider? Have some feedback you'd like to share? Connect with us on Spotify, Apple Podcasts, and YouTube to leave us a review!The podcast and artwork embedded on this page are from Industrial Cybersecurity Insider, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Audio Sermon for Sunday January 18, 2026
Finding the root cause of an erratic signal can feel like chasing a ghost, especially when your trend lines show noise that shouldn't be there. In this session, we walk through a real-world troubleshooting scenario involving a Yamaha robot simulation where the A3 axis exhibited mysterious spikes. While it initially looked like signal noise or a math error in Studio 5000, the investigation led deep into the interaction between the PLC and the Ignition SCADA system. We explore why a standard cross-reference in the PLC didn't reveal the culprit and how switching to read-only communications finally exposed a hidden bidirectional tag write.We also discuss the common trap of "patching" problems with software filters instead of identifying the source. Whether it is a bad shield on an analog line or an accidental setting in your HMI, understanding the "why" behind the spike is what separates a technician from a parts changer. Additionally, we touch on the challenges of modern Ethernet troubleshooting, the limitations of Wireshark without port mirroring, and why the "View Diagnostics" tool in Ignition is a game-changer for identifying communication conflicts.Helping you become a better technician so you will always be in demandNot sure what video to watch next? Enhance your skills and track your progress at https://controls.tw/yt-courses!Items used in this video:PLC Trainer https://controls.tw/yt-plc-trainersThe above links make these videos possible. Please use them!
Send us a textMy guest for this week is long-time Belfast -based journalist, Hugh Jordan. Hugh explains what being a journalist was like during some of Belfast's most turbulent years as elements of the Loyalist and Republican paramilitaries tried to derail the peace-process and plunge the North back into violence.Hugh tells us about how he acquired and kept his sources during this time, often members of the IRA, UVF, UDA and more. He speaks about the dangers that come with his role, threats that have made against his life, being assaulted on the job and meeting some of the conflicts most famous "touts"/informers.He also shares stories about the Shankill Butchers, ex- SF publicly director Danny Morrison and how Hugh repaired his relationship with Johnny "Mad Dog" Adair. Hope you enjoy!!00:00 Intro4:10 Paisley's role in early violence in N.I 16:00 Sources within the IRA26:10 Dealing w/ sources 34:10 Sources lying ?36:40 Meeting with INLA40:30 Willie Carlin & Ray Gilmour 52:25 Paramiltaries post- troubles 57:00 Cameron Hastie 1:00:30 Basher Bates 1:06:45 Danny Morrison story 1:10:50 Naming Thomas “Slab” Murphy 1:15:00 Patching up relationship with Johnny Adair 1:24:50 RUC man Ronnie Flanigan 1:32:30 Hugh gets PUNCHED on the job PLEASE HELP OUT THE SHOW IF YOU CAN SPARE IT.. THANK YOUhttps://www.buymeacoffee.com/goodlistenerpodcast CONTACT THE SHOW: thegoodlistenerpodcast@gmail.comLiving the Dream with CurveballOn the living the dream with curveball podcast I interview guests that inspire.Listen on: Apple Podcasts
Joe and Hollywood break down the Dolphins' turnaround from 1-6 to 5-7 and the chance to move to 6-7, reflecting on the fired GM and longtime staffers who hadn't delivered results. They discuss whether the team is truly restarting or just patching things up, noting that Tua's contract limits options amid a league-wide quarterback shortage. Joe and Hollywood also weigh in on Frank Smith's comments about Tua potentially returning next season, the challenge of finding a better QB, and why they don't expect Tyreek Hill to be back.
Get ready to roll up those sleeves because we're diving into some seriously handy DIY talk! Eric G and John Dudley kick off with the top 10 DIY projects every homeowner should know to keep your hard-earned cash from slipping through the cracks. Why hire someone to change a leaky faucet when you can just tackle it yourself and save a boatload? These guys are here to spill the tea on everything from replacing water heaters (trust me, you don't want to pay that plumber) to the fine art of patching drywall—because who wants to pay someone else for that? So grab your toolbelt (or just your favorite snack, we won't judge) and tune in for some money-saving wisdom that'll make you feel like a DIY rockstar!If you're a homeowner, you probably have a love-hate relationship with DIY projects. You love the idea of saving money, but hate the thought of getting your hands dirty. In this episode, Eric G and John Dudley dive deep into the top 10 DIY projects that can help you cut costs and flex your handyman skills. Picture this: you're standing in your kitchen, staring at a leaky faucet, and instead of calling a plumber, you confidently grab your toolbox and tackle it yourself. That's the kind of empowerment we're talking about! From replacing a toilet (seriously, it's not as gross as you think) to installing a ceiling fan (with all the right safety measures, of course), they break down each project with a playful banter that makes you feel like you're chatting with buddies over beers rather than listening to a DIY podcast. Throughout their chat, Eric shares some hilarious anecdotes, including the outrageous costs of hiring a plumber for a simple water heater replacement. Trust me, you'll want to hear about the time his brother learned the hard way that calling in a pro can cost you an arm and a leg. Spoiler alert: DIY-ing that water heater would've saved him thousands! They also discuss the importance of getting the right tools and materials, and how sometimes saving a few bucks on a cheap faucet can lead to more headaches down the line. The episode is packed with tips, tricks, and a healthy dose of sarcasm that makes home improvement feel less daunting and more like a fun challenge.So, if you're ready to don your DIY cape and tackle some projects that will not only save you money but also give you bragging rights at the next barbecue, this episode is for you! With Eric and John's guidance, you'll feel like a pro in no time, or at least like someone who knows the difference between a wrench and a hammer. Tune in, take notes, and prepare to be inspired to finally fix that leaky faucet instead of just complaining about it!Takeaways: Learning to replace your own water heater can save you thousands of dollars compared to hiring a plumber, who might charge you more than a fancy dinner out. Patching drywall holes with a California patch technique is a game changer, making you look like a DIY pro without the need for a professional. Don't underestimate the importance of quality paint; buying cheap paint means you'll spend more time and money on multiple coats than if you just invested upfront. Regrouting tile is no picnic, but using a grout removal tool attached to a multi-tool makes the process a whole lot less painful and way quicker. When installing a ceiling fan, make sure you have a proper support box; otherwise, you might end up with a fan on your bed instead of spinning above it. Installing new faucets is easier than you think, and calling customer service for parts can sometimes save you a trip to the store, as many brands offer free replacements. Links referenced in this episode:aroundthehouseonline.comCompanies mentioned in this episode: Connoisseur Media KXL Salem...
Happy Thanksgiving! Kiera gives ideas of service opportunities, from a personal to a practice-wide scale. Episode resources: Subscribe to The Dental A-Team podcast Schedule a Practice Assessment Leave us a review Transcript: The Dental A Team (00:00) Hello, Dental A Team listeners. This is Kiera and happy, happy Thanksgiving. I am so honored to share today with you. You guys, I love Thanksgiving. It used to not be one of my favorite holidays, but gosh, you know, the secret to living is giving and to have a day dedicated to gratitude, a day dedicated to love, a day dedicated to families and friends and to just come together and to remember how good our lives truly are. I think is beyond special. And I just want to say, for me, it would feel crazy for me not to jump on here and to say thank you to all of you. You guys are my favorite humans. You're the people that I love, that I get to talk to so many times a week, that I get to hang out with, that I get to see your stories, that I get to know personally and professionally, that I get to see your wins. I get to see you tag us on social media. I get to see the emails that come in. I get to see your reviews that you leave. I get to see you positively impacting the world of dentistry. And just to truly know, that you guys are doing so good out there. And I just want to say thank you. Thank you for being here. You guys, this podcast was a hope, a wish, a dream when I was hiking up, I'm not joking, Half Dome in Yosemite. And I thought there is nothing out there that's serving dentists and teens. And it's a niche and it's a space. And I'm going to come in and I'm going to positively impact. And I'm going to get both sides of the coin to come together to really, truly influence and impact dentistry in the greatest way possible. And that is such a huge testament to all of you for being here. for being a part of the Dental A Team family. So I just wanna say thank you for being here. And to this, I just wanna say like, if you've been an OG, thank you for being here from the beginning. And if you're a newbie, welcome. I hope that you feel loved. I hope you feel appreciated. I hope you just feel great. And I hope you remember how amazing life truly is. So I want you guys to just know that watching this podcast evolve, to seeing millions of downloads, to seeing us in so many countries, my like... It's mind boggling to me. It's crazy because when I built this, didn't know how many people would listen and to see the fans, to see the love, to see the raving fans, to see the clients come through, to laugh with you, to celebrate with you, to cry with you. I just want to say like, gosh, like this is a journey. It's a joy and it's an honor and it's a privilege because I know your time is your greatest asset. And so I just want to say thank you. And today with it being Thanksgiving, you know, I really just want you to know that I believe that the secret to living is giving. And we have a portion of our company called Live To Give. And I've talked about it on a few other podcasts. I've talked about how like, you know, it was back in 2019, I went to a Tony Robbins event. And a lot of you know how much I love Tony Robbins. That was because I caught one of my lightning moments in life where I was in a space so focused on myself and it was random because I was building a company called Live To Give. and that was where we were non-believable and we were like getting donations to help these nuns who didn't even have a house. Like it was crazy and we raised so much money so quickly and I've done it a few other times. Like another one idea was the Vibe prison ventures where inmates were actually like I went I actually went to the prison and it was crazy and I was scared out of my mind ⁓ but I saw these inmates take their skills that got them into prison which were not the best. and turn them into good and they pitched us their business ideas and to be able to sit there with them. That was another business that I got that was part of the Live To Give to be a part of that and to give back. And I found that so many of the times in my life that are my happiest moments are those where we like went above and beyond. And a few years ago, I talked about like probably my favorite Live To Give moment that we've ever had was when we were able to, one of my friends in Arizona, her son was struggling with stomach cancer and I really wanted to do a make a wish and make a wish is like really, really hard to get in touch with. And I had committed that year. I was going to do a make a wish. I didn't know what it was going to look like. I didn't know how we were going to do it. I told my team, this is what we wanted to do. And we found this boy and his goal, his dream was to go to Italy. And I was like, this is it. Like guys, this is it. We have a team member who's a stomach cancer ⁓ survivor as well. And I was like, this is it. This is our live to give. And our whole team was able to participate in it. We're able to give this, this child who's 12 years old, him and his family, a complete all expense paid trip to Italy when he got done with cancer and to give him the hope and the wish. And you guys like that moment in my life, I think about the ones that really impact us the most, the ones that changes, the ones that are like those lightning bolt moments. And I, the bulk of them are ones that we've been able to give to serve, to love. ⁓ We were able to last year as a team go and like help so many kids at the children's hospital. our team has done angel tree where we go and like shop for these families. And Shelbi and I, I remember we went shopping for a family of nine and that was the exact of my family. I think back to when I was at, ⁓ United Way and I was able to bring holiday magic to hundreds of families from the donations of others. And I remember there was a time where I just was feeling grumpy about life. I realized like, I haven't checked my, giving like vitals. in me in a while. I think about businesses and I think about all of you and we are constantly looking at our KPIs of our business. We're looking at the KPIs that drive us to success, but I'm like, what are the KPIs of our life that drive us to success? And maybe those are some of the pieces that are there. And I've just realized that giving and serving and loving should be an area that maybe we want to check those vitals, especially today. of where is my giving my love, my service, KPI? Is it high? Is it low? Is it on track? Is it off track? And I will say that if it's off track, today's a great day to get it on track. And maybe a couple of ways for us to give back is just to love a little bit more, to text someone today that you might love. A few years ago, my brother-in-law and I have a kind of a unique relationship. When I met... He was a business owner and I always thought he was so grumpy. I didn't really like him that much. was like, Jason, your brother is so just rude. I did not care for him. And as I become a business owner further into my career, I understand this brother-in-law so much. And he's kind of like, I don't know, I would say like a little crusty on the edges. He's not soft, I'll put it that way. And I was actually really, really scared to text him. But just cared about him so much and I appreciated so much of what he's done and he's been a mentor to me. And I just said, take a risk, a gamble. I remember I was sitting on the beach in Maui and I texted him and I just said, hey, I just want you to know how much I appreciate you. I value you. And how much of a mentor you've been to me and you've given me hope when I didn't know that there was hope. And I'm just so grateful for you. And he wrote back, he's like, Kiera, I don't usually cry. And that text meant so much to me. And I just think that's our giving. KPI. So what little love bombs could you send out? What service could you and your team do together? Our team, every year in December, we do a Live to Give. Could you guys adopt that in your company and together collectively as a podcast family? Think of all the lives that we could give back to. I think about my husband was talking about another brother that he has and this brother literally is in such a hard place in his life right now and does not have a lot of money, has a lot of family dynamics, I won't get into it. And when I say like, pretty much homeless, that's literally what's going on with him. And I only highlight that because his situation is so hard. we were, Jason was talking about struggling with something and he was like, ⁓ I could help you with that. And Jason and I talked about it and we thought about who are the people that give to those that are struggling? A of times it's those that are like, not hardly better off than they are. And I think like, Could today or this next month, could we maybe boost that live to give side of us where we look for people in need, we look for opportunities that can be in our patient base, that can be in our team base, it can be in our community, it can be in our families. Can I give out little love bombs? It might be cold in your area. A few years ago, we did a coat drive and this came from one of my friends in Utah who... would ask all his friends to donate coats that they're no longer wearing and would drive around and hand out coats to people on the side of the road that could really use it. I'm not here to say you've got to go do that, but I just think like, what a blessing to those people. What a space for us to be able to share and to love and to give back. Like you guys, are so insanely blessed. I promise every single person listening to this podcast today, we all collectively could say that we have been unruly blessed. in our lives. And so where is that? Could I text a team member and tell them like, Hey, you're doing such a great job. I'm not joking. I have a little list over here to write thank you cards to my team members sporadically and unexpectedly for great things that they do. Could I text my spouse if it's been a while and tell them how much I love them? Could I maybe call my parents? I think about like, if you have your parents alive right now, I hope that you just love them. I hope that you call them, I hope that you tell them, I hope you forgive them. Even offering forgiveness to somebody that maybe doesn't deserve it, it's not a gift to them, it's a gift to you. ⁓ Patching up and cleaning up when it maybe doesn't seem like it's necessary. ⁓ All these are little gifts of gratitude, of giving, of serving, of loving people. And what's crazy is the more you give that, the more you feel alive, the more your bucket's filled like, Every year we go and do something and I leave those events just on like cloud nine. We have a team member who last year she was so inspired by it. She like found a girl in Africa and basically like adopted her and has been like helping her get through college and like she sends her letters and her dad did it and they were just so inspired that they've like changed these lives of people. And like, but that team member changed as well. And so I just think today, Let's look at our KPI of our giving metric and how can we add maybe a little bit more service and give back? Because I promise you guys, the secret to living is giving. That's why I have Dental A Team's Live to Give. And if you know somebody that could benefit from Dental A Teams Live to Give, it's completely like on us. It's not even that I might make it the 1031 or excuse me, our nonprofit in the future. Like that just is a great idea on the podcast that came to me. because I want to build a nonprofit. But if you know a family that's deserving, you know of somebody that could have a make a wish experience, you know someone in your community, I would love to partner up with you. I'd love to help make magic happen. I'd love to use the podcast. I'd love to connect with a lot of you. But like, there are so many people, including ourselves, including our team, that a little more love, a little more kindness, a little more gratitude could go a long ways. And I just want to encourage you today as you're in this space for you to think of how can you do just a little bit more? How can you make a little bit more impact and change in people's lives? How can you just truly like not be as lonely as an owner and to give heartfelt thanks and gratitude to any person around you. And I was like, team members to your doctors, to your owners, it is lonely at the top. It is hard. And to give a genuine heartfelt thank you of gratitude, could truly go so far. And so I think just go out of your way, text your team members, tell them how much you love them, tell them how much you appreciate them, how much you value them. Team members, tell your doctor, tell your family. Like these things don't have to be monetary. It's us just loving of being kind and to give. to just give back a little bit more. And then I'd also encourage you to also give a little gratitude to yourself for the things that you've overcome, for the things that you've been able to do, for the challenges, for the person you've been able to become. Think back to who you were when you started your business, to who you are today and give grace and gratitude. Because the reality is like, I think about this, like if you were... to look back and to be able to talk to your younger self, what would you say to that person? You'd probably be like so freaking proud of that person. Like you're gonna do it. I'm so proud of you and I'm so grateful for you. And then I think like, let's go even further. What if you only had one week left to live? What would you be doing right now with your life? I promise you, you'd be living on your highest cloud nine. You'd be telling everybody thank you. You'd be telling everybody you love them. You'd be giving hugs. ⁓ one of my friends from high school just posted recently that his mom passed away unexpectedly. And he wrote, he said, hug your parents, hug your family, tell them that you love them, love your cousins, love your aunts, all of your uncles, like tidy up because your life can change so quickly. And what I hope for all of you is that your life does not change so quickly, but it does change so quickly, not in a negative way of losing somebody and wishing we could love on them more. but that your life could change so quickly that you start to live your day every single day of having gratitude and love and telling your family and calling them and sharing with your team and not holding back. It's like, I'm hoping that you just feel this like confetti explosion of love being able to be finally released and unshackled from you to give it to yourself, to give it to your team, to give it to your family, to give it to those around you. I hope you know that I love you. and that I care about you. And I think that you're doing way better than you ever imagined you could be. That I'm so proud that you're living the dreams that you once thought were impossible and you made them into the possible. That you push yourself, that you evolve, that you want to be this good human, that you're positively impacting your community and your team. You're doing so much good. And I just hope that you feel the love. I hope that you feel strengthened and I hope that you just know that I adore you. And with that, I would also be completely ridiculous because I cannot let today pass without doing one of my favorite traditions. And that is publicly thanking my entire team, the team that stands behind Dental A Team that makes Dental A Team incredible. And this year our team has drastically and radically grown. And I'm so proud of the company that we've built. I'm proud of the team that we built. I'm proud of the deliveries that we're able to give, the consulting, the changing of lives. Um, one of our consultants said at best, said, I love what we get to do because every single day we get to change someone's life. And that's the magic of Dental A Team That's the people we have. So I'll go kind of an order of where it's at. Um, and I'll just kind of go by like people, uh, I'll put them in like no exact order because that feels really weird to me. And so just going to like, go through the list of all of our team. So kicking it off is the one and only Spiffy Tiffy. I am so grateful for Tiff. You guys, she jumped into this company from day one, pretty much. I asked her to put an ice cream cone on her head and that girl has never looked back. Not an ice cream cone with ice cream in it, but just the cone. We get asked that question a lot. And Tiff is just my ride or die. She's someone that I adore. She's someone who pushes me. She's a safe space for me to ⁓ be messy, to be vulnerable. She pushes me to be my best self. She encourages me. She'll co-present with me. If you guys, mastermind this year with Tiff was pure and utter euphoria. And if you were not a part of it, I hope you choose to come and join us because this was something that Tiff pushed me on. was part of Tiff's vision. We talked about it multiple years sitting in a hotel room. We were on a trip and she said, you know, Kiera, I really have this idea of doing these events. And here they are. Tiff has been my ride or die. And she's someone that has really this year grown in her leadership and is running this incredible consulting team. And I'm just so thankful for Tiff being someone that I love and adore. Someone who makes me laugh so hard. Someone who I've watched just really show up for herself and to challenge herself to grow, to not put blame, to look at herself as a leader and to rise and to go to the next level and to drive a consulting team far better than I ever could have imagined. And you guys, if you know her, you love her, Spiffy Tiffy, she's on the podcast. She does the podcast, she writes newsletters, she does consulting, she drives her consulting team and she makes all of us laugh and she's literally the walking like Dental A Team mascot for our company. And I just hope that Tiff knows publicly and privately how grateful I am that she took a chance, that she's been my ride or die, that she's something that I just freaking love and adore so much and I'm so grateful for Spiffy Tiffy. Coming up next, No BS Britt. You guys, if you've heard her, you love her. ⁓ Brittany Stone is just this magical human who is a yin to my yang. I have so much respect for Britt and the way that she leads. Britt is like our HR guru. She's the one who creates policies. She helps hire. ⁓ Britt is someone that I see. She hates this nickname. So don't call her it. Gritty Britty. And the reason I like Britt has so much grit. She is someone that will just keep showing up day in day out. She's very stable for me. She's very consistent. When you think about a boat rocking in the ocean and they have stabilizers, that's Britt for our company. She is just this amazing stabilizer who I am so grateful for. And not only that, she consults incredibly well. Teams love her. Our team loves her. She gets the MVP word often. And Britt is someone that I am grateful who has pushed me as a leader, who's pushed our team, who stabilized, but also has shown me like how strong somebody with humility is. And also someone who has a quieter personality can be an incredibly, incredibly talented leader. I'm just so grateful for her. I'm also grateful for you guys know her, you love her. Shelbi Poppins, Shelbi has been my personal and executive assistant for several years. She's customer success. Literally this girl is like the grease between all the wheels. You guys probably all know her. She helps with the podcast. She helps with the company. She puts on events. Shelbi Poppins is practically perfect in every single way. And our whole team would agree to that. So I'm not showing favoritism. She just genuinely is someone that we all love. And I am so thankful for Shelbi being my right hand. I know Shelbi would take a bullet for me. And you guys, if you don't have someone like that, gosh, it's an honor to have someone that just like, you know, will jump in front of a train to make sure you're taken care of. Wow. Greatest gift you can give. And those of you that are the personal assistants, the executive assistants behind the scenes, just know that you're, ⁓ The person that you're helping values you more than I think words could ever put into play. Shelbi just is magic. She is ease. She knows how to have everything done. And I'm so thankful for this girl taking a risk, you guys. We shared a wall, like she's my next door neighbor and I knocked on her door, offered her a job, had her send the job, convinced her to come back. Like Shelbi is someone that I am so thankful and I will say great talent is often sitting next door to you. So don't be afraid to like knock on the door and like mad kudos and appreciation to Shelbi for just showing up constantly every single day. Shelbi is in my opinion, our definition of passion for excellence and results focused. That girl does not miss a beat and she's constantly showing up. She's constantly figuring things out. She makes sure that the boats run on time, that everything is done perfect and that the experience for all of you is absolutely magic. And I just, our company truly is so blessed to have Shelbi Poppins on our team. Coming up next is a new player on our team, Jenna. Jenna is our COO, and I will say she has been one of the greatest additions to our company. And I think kudos to our leadership team who saw the need for us to bring on this COO to take us to the next level, to drive us in ways that we didn't know. And I will say that Jenna has come in with this like ray of sunshine when I think a lot of us were covered in clouds. And Jenna has this amazing ability to cut through the noise to see what really needs to happen. She's a freaking wizard with numbers. You guys, I love numbers and Jenna loves numbers too. Like she is just magical. And I will say for owner doctors out there that are struggling needing that implementer integrator, Jenna has taught me that the right person seated next to you really can drive a company and you it's okay. You can hire a fractional. You can hire somebody that you don't know. ⁓ But bringing someone in with insane experience who has passion and love, Jenna is one of the most driven. ⁓ giving people you guys like I hope there's an opportunity for a lot more of you to get to know Jenna because her stories and her passion inspire me to want to be a better person professionally and personally she's one of the most giving like the story she has of the impact and the companies this woman is a miracle girl for companies and she does it because she believes in their passion their cause and I will say her clarity her accountability her continuity her ways that she is constantly doing the right thing day in and day out and just showing up for our team, showing up for me, but driving us. Like when I talk about someone who holds a team accountable, that is Jenna. And I have seen her just rise and drive our company in ways that I never imagined. And I am beyond grateful until like I got the freaking jackpot bringing Jenna to our company. And I know our whole team feels that way. She's been an amazing addition and someone we could not live without. So, so grateful for Jenna. Next up, you guys know, ⁓ Our consulting team, Dana. Dana has been with us so long. Dainey, ⁓ her and I, Dana is just someone who is, if you haven't gotten the opportunity to work with Dana, you're missing out. Dana is grit, tenacity, and that girl, there is no challenge, no problem bigger than her. Like she will, she just takes it. She's like a beast when it comes to life problems that are thrown at her. And she does it with fun and grit and grace. And Dana is someone that I can count on to be consistent. to be thorough, to show up day in and day out. That girl does not miss for me. And I'm so grateful for her. And I have also watched Dana have insane passion for excellence and drive to become the next version of herself. Like before my eyes, have watched Dana be, Dana, when I hired her to Dana, like 4.0, this girl has just grown through the ranks and she takes it on and she takes every challenge and she takes the feedback and she... just grows and to see the results she drives for her clients. You guys, this woman blows me away constantly, but she does it in a way of ease, Grace. She's got all the kids, she's got the soccer practice or the baseball practice. Like she's always busy and yet she's able to maintain and serve clients galore. Help Our Team Makes Me Laugh All The Time has the funniest stories. And I'm just so grateful for Daney taking a chance on Dental A Team for being an incredible hygienist who brings value, who speaks for us, who presents for us. Dana is just like Dynamite Dana. That might have to be her new nickname because she's so, and maybe it's not Dynamite, but Dynamic Dana. Like she is truly someone that I am honestly in awe and impressed by her so much and so grateful to learn from her, to watch her, to grow with her because Dana is someone who is so special and someone I'm so thankful for in my life and in our company. Our company is beyond lucky and blessed to have Dana. ⁓ and she just shows up constantly. She's taught me more about life and gratitude for life than I think any other person I've ever met in my entire life. And I'm just grateful for that. We also have Kristy. is such a, her name is Kristy Treasure and she is a treasure on our team. Kristy came onto our team as this dynamic consultant who just, I call her like our truffle hunting. Like she looks for profitability in every practice she goes to and she drives offices to success. She rivals me on my numbers, which is so fun. And what I love about Kristy is she has this calm, tenacious personality that just goes after it, figures it out. And I know that I can count on Kristy to deliver insane results every single time. And she never, ever, ever misses. This is a woman who has so much knowledge of dentistry, but she has so much passion for your success. She is obsessed with driving offices to their ultimate dreams, their ultimate goals. She just has like mad following of people that love her, adore her, honor her, and I'm one of them. Kristy is such a beautiful blessing. We were looking for our next consultant. We were wanting somebody and Kristy just, I feel like popped out of the air like Glenda in her little bubble and showed up in the most perfect way, in the most perfect space. She is someone who sees people. She's someone who loves people and she's someone who's got a heart of gold. And I just truly am so lucky and so blessed to have Kristy on our team. Dental A Team would not be the same without her. And following Kristy is Trish. Trish is such a, my gosh, we call her Tada, which stands for Trish Ackerman, Dental A Team ambassador. Like Trish is such, I mean, she's rivaling Tiffany on how much she loves Dental A team. And Trish just comes in with this, like she is a walking magnetic dynamic human. You can like, she is so fun and she's so hilarious and teams love her. And she comes in this way where she gets you to like navigate to your goals and results, but you were laughing and joking and having the most hilarious time. Trish knows everybody. Everybody who knows Trish loves Trish. And Trish is just this beautiful, incredible woman who does consulting in such a fun, positive and impactful way. I learned so much from her. Trish has the best one-liners that we all snag from her. She's constantly making us laugh. But what I love about Trish is her positivity in her outlook where every day is a golden ray of sunshine for Trish. She shows up every day with positivity. She shows up of how every day is the best day. She's the one who said like, are so blessed to consult because we get to change lives, we get to create magic and we get to truly inspire and bless people. And honestly, I don't know what I did for all these years without Trish in my life because Trish is just magic. Trish is fire and spice and fun and beauty and just... Reminds me that life is so freaking fun and I need to laugh and have so much more fun and I'm so grateful for her I'm grateful for her knowledge. This girl has gosh Like coached teams of 150 people and so I learned from her and I'm inspired by her and you guys Offices who are working with any of our consultants are just beyond blessed Following Trish's Monica Monica is so special. She just has this whimsical fairy ease about her that just is so poised, collected, brilliant, that is so magical for me to watch her consult, to have me watch her like with her email recaps. I see beautiful emails come from this woman. Like this woman can write. ask her, like Britt is so brilliant. We ask her all the time like, hey Monica, we need help writing this. And Monica comes with it. Like a lot of the things about our company have been written by Monica. She just got this like ease and grace and loves her. creativity space and I'm just so grateful to have that ⁓ I think flow example in our company of someone who just can navigate the storms of life, who can go with the flow, who has poise and polish and professionalism and just like truly makes people sparkle in jazz. She's a very fun dynamic human that I'm so grateful is on our team. I'm so happy she's joined our team. And like I said, our consulting team is top notch. I do not hire. anybody on our team unless they come with massive experience, massive years of experience, coming with consulting experience. Like these women truly know how to drive practices to their greatest fulfillment and profitability and do it in ease and fun. And we were just so lucky. Like our consulting team is absolutely incredible. So moving on from our consulting team, ⁓ we have just this amazing marketing team and Eve, she's like my little pixel fairy over there. We call her her pixel best. If you have ever attended an event, if you have ever gotten anything from Dental A Team a newsletter, a flyer, anything, it is Eve's magic. And Eve just makes my life so easy. She told me, she Kara marketers are so easy to find. And I said, actually they're not because to find a marketer, Eve is not just a marketer. She's freaking funny. Like honestly, this girl makes me laugh so hard. She is so brilliant. She's stunning. She makes gorgeous design for me all the time. And she's just as magical human that I I don't know what my life was like without Eve. Eve is someone that has just elevated our company. She's constantly here for brilliant designs. But something that I have loved that I've watched Eve just explore this year is this like new found, like vibrancy blossoming coming out of her where she is taking ownership. She's watching these metrics. She's seeing different things. And Eve can pretty much consult people now. Like this girl does not just build me a slide deck. a typical marketer would. She thinks through how to make the experience for all of you the absolute best it can be, how to make the experience the best for me. And then she's the funniest person in our chats. So if you ever get a chance to meet Eve, you heard her on the podcast, Eve is this dynamic human that all of us, and she's freaking funny. Eve is like the comedy central of our company who makes all of us giggle. Her and Trish, we just, mean, Tiff is in that rally with them, but Eve is someone who is just. beyond magical and someone that I'm so grateful came into our life personally and professionally. Her stories, her example, her like zuberance for life just inspires me. And I'm so grateful for her and grateful for her on our team. Following her is Jacintha. Jacintha has been with us and she's just really helped grow our team and evolve our team. And she helps make sure the podcast is taken care of and trains people and does social media. And she's really great at just making sure a lot of the pieces get done in our company. ⁓ Her just joyous laughter and vivaciousness of life is so infectious and I'm so grateful to learn from her. She's one of the people that has just taken live to give and giving a next level that I think is just beyond magical and something that I've learned so much from her. She just lives life at a high level and she enjoys life and she lives life fully and that's something I'm so thankful for her for. Following her. ⁓ Joash Joash is new to our team. And I think all of us would be lost without Joash. Joash is behind the scenes, but if you guys are in our company and you're part of our analytics or different platforms, Joash is your guy. Joash makes so many things. He's like our second Shelbi in the company. He builds spreadsheets. He's a data analyst. He figures out different things. He builds beautiful pieces for us. He just is constantly looking for ways to serve. But Joash reminds me of the beauty of life. Joash is just such a special human He really is taking things to the absolute next level and I'm so grateful for him I love seeing his little messages come in He is someone who reminds me to be so grateful every single day for living this life every day in his slack messages He's like, thank you team. It was a beautiful day. Have a wonderful day tomorrow. We're so lucky to be alive build the best quotes for our company Joash ish is just this like dynamic, special human that I feel we are so blessed to have helping fill in so many different gaps in our company. And we're so grateful for Joash. ⁓ Robi Robi's on our team and he's in the marketing department. And I love that Robi is just here to help to support, help our marketing team just flourish and thrive. And I love that he thinks of different ideas. He's a great designer. He's a great creator. And I'm so grateful to have Robi take on tasks, fill in the gaps wherever we need him to be. And he's just fun. He's got a lot of He's got a lot of just energy and drive and like reminds me of how good life is. And I'm so thankful that Robi also is on our team. Following Robi is Paul. Paul is our new CRO. Again, I title, didn't even know existed nor did I know I needed. And what I love about Paul is Paul has been able to come into our company similar to Jenna and just brings this element of poise, of guidance, of knowledge. I love meeting really smart people and Paul is so smart. He sometimes intimidates me in the best way possible. I love someone who can rival me, someone who can challenge me, somebody who inspires me. And I'm so excited for Paul to come in with so many years of knowledge and so much experience and to see our marketing and our customer success department and bring them together to just make it better for our entire team and for all of you coming to our company. And I'm just so grateful for Paul for taking a chance on us. I think... I think when I look at consulting, often think like, gosh, those clients, like I feel so bad. I want to take care of them. I just want to help them out. And I think Paul felt that way about Dental A Team. Like, okay, Dental A Team needs some help and I can see how I can really drive. And I'm just so grateful for him coming in, jumping in the passion for excellence that he has, the drive, the tenacity. I'm so truly grateful for him. The Dental A Team (33:32) And we have our incredible consultant Pam. Pam is just a joy. She is someone who just loves deep. She is so freaking brilliant at all things dental. She comes with this incredible experience of DSOs and of running huge teams and of consulting to tons of offices. And she just is a joy. She's someone who is thorough and on top of her A game. And I am just truly so grateful for her on our team, on our consultant team, being able to just deliver incredible value to our clients. and also bringing insane value to our company as well. And then we also have Tyler. Tyler is on our customer success team and Tyler just brings this extensive background of dentistry with him. He is someone who really just jumps in, who has a very soft demeanor, but is a go-getter, has grit, has determination, who loves our clients. Our clients feel so safe and seen and heard by him. And for him to be one of the first impressions of Dental A Team, I think is just such a compliment to him. to his skillset, to who he is as a person, and we are so lucky to have him on our team as well. The Dental A Team (34:38) And I think like, as I look at my whole team, as I look at all these people that yes, I just said them in front of you. I told you. and I'd be remiss if I didn't talk about Alex and Sissy who are podcast gurus behind the scenes that have been doing this with me for years. Alex writes the most beautiful show notes of any person that I've ever met. That woman is so magical with words. She's a published author this year. Just so freaking proud of her and so grateful to know her and to have her put together the podcast for you guys every single day, every single week. Sissy for editing it up for us, for making the commercials, for making sure that all the pieces are always put together for you guys. Like these people just love, they're so incredible. They're just magical. I'm so, so grateful that we get to have all of these people to serve you, to love you. I'd be remiss if I didn't say thanks to Jason. Jason is my ride or die, my love. He's such an amazing human. He just loves me so purely guys. Like to have someone in your corner that loves you and loves you fully and completely. and just wants the best for you. He's my biggest cheerleader. He's the one who brings me food when I'm on meetings all day. He's the one who's like pumping me up behind the scenes. He's the one who makes every single one of my dreams not seem crazy, audacious and just loves me for them and encourages me to pursue them. Constantly boosts me up, tells me to join you guys, tells me to take the risk, tells me that people need to hear these messages. And I'm so thankful for him. You guys, I'm so grateful. As I say this and like, I'm not gonna lie to you, all of you, should go tell your team how much you love them because me just doing this podcast helps me see how lucky I am to be surrounded by brilliant people. You guys had so many be like, I look at last year to this year. My team has almost doubled in size. If you've listened to this for the years, you've heard me just go through this every single year. And I will continue to do this forever because my team deserves public recognition and private recognition. These men and women are here as amazing people that make me better. that push me, that challenge me, that make me laugh. And this is a team of virtual people. So I want you just to love on your teams, to love on yourselves, and to really, truly, truly know that like, we are so blessed to live this world, to be able to be a part of this. I'm so thankful for my team. And if you didn't know, that's just our team. That's all of us. And I'm so grateful for them because I really would encourage each of you to do what I just did to your team. in some way. And as you guys wrap today, I just hope that you have the most magical day, that you have a ton of fun doing whatever it is, and that you really do check your vital of how is my giving KPI? Am I giving? Am I feeling fulfilled? And if not, I would encourage you guys to choose one thing, one area of your life to make it just a little bit more bright, a little bit more giving, because honestly, the secret to living is giving. And I hope that you know that I adore you, that I cherish you, that I'm so excited for you and me to be hanging out on the podcast. And I want you to know how much I value you, how much I appreciate you. And I hope you know that and I hope you feel loved. I hope that you feel appreciated. I hope that you remember that you are so blessed to be doing what you're doing, to be living the life that you're living, no matter how great or hard it is today, you are so blessed to be able to do this. One day you dreamed about this life and now it's yours. And I'm so, so, so grateful to have you guys here. I'm so grateful for all the blessings that we get to be. I'm so excited for this next year around us. I'm so excited to work with you. I'm so excited to see you in person. I'm so, so, so excited for this beautiful life. And I'm honored and blessed to be able to serve you, to love you, to encourage you, to inspire you, and to be in this journey and this part of your life with you. And if I can serve you in any way, reach out, Hello@TheDentalATeam.com Go have a magical Thanksgiving. Love people, give them hugs. Remember, we get one life to live and I hope that you make it the most magical you possibly can. And with that, thanks for listening and I'll catch you next time on the Dental A Team podcast.
Got a question or comment? Message us here!A new zero-day. 63 flaws. Endless patching chaos. This week's #SOCBrief breaks down Microsoft's November Patch Tuesday and what it means for your SOC. We'll cover the top critical CVEs, patching priorities, and how to keep your systems resilient before attackers strike.Support the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.
Schon mit ihrer ersten E-Mail-Adresse nannte sich runo plum Rockstar. Nun kommt sie der kindlichen Manifestation einen Schritt näher: die Musikerin aus Minnesota veröffentlicht ihr Debütalbum «patching». «patching» beheimatet süsse Folk-Song über eine bittere Trennung. Die Umstände? Eher kompliziert: Die Herzschmerzsongs nahm runo plum mit ihrer jetzigen Partnerin auf. Das Ex-Gspusi spielt nun aber wieder in der aktuellen Bandformation. Wie man das emotional aushält? Gar nicht so schwierig, meinte runo plum im Sounds!-Interview. «patching» ist das aktuelle Sounds! Album der Woche. Wir verlosen täglich CDs - nur live im Radio.
Host, Commissioner and part-time pumpkin picker Zach Osowski is back to preview Week 8 in the BCFFL. Is this the worst week ever for fantasy football, is Zach the best Thursday night fantasy player ever and is he betting against Aaron Rodgers in a revenge game?
In this episode, host Jason Kikta talks with Dmitri Alperovitch – CrowdStrike co-founder and chairman of the Automox board – about how speed and precision define modern cyber defense. Alperovitch explores how the OODA loop (Observe–Orient–Decide–Act), a concept rooted in military strategy, can help IT and security teams detect, respond, and adapt to threats in real time.They discuss why cloud-native automation is essential for staying ahead, how to close gaps between IT and security teams, and what happens when organizations react too slowly. Drawing on decades of experience in cybersecurity and threat intelligence, this conversation challenges you to rethink what it means to be fast enough to defend your environment.This episode originally aired on June 13, 2024.
Guests Rich Hilton - Nile Rodgers Studio guy, keyboards for Chic Steve Hillier - producer, songwriter, educator Robbie Puricelli Pro Synth Network SonicTALK 861 on YouTube: https://youtube.com/live/qzGf5iVJSRs For preshow and Ad free version and much more: Patreon.com/sonicstate Native Instruments Modular Icons vintage modular synth sounds from iconic artists and instruments. Made in collaboration with the Bob Moog Foundation, more than 60% of each sale goes to them. Part of the Play Series: Great-sounding presets and real-time control. IZotope Ozone 12 - Go beyond the limits of mastering with Ozone 12. Unlock the impossible with this complete suite of 20 pro modules, including 3 brand-new, best-in-class additions. Plus, make Master Assistant your own with a new customizable flow. With intelligent tech that guides, not decides, you're always in control. 00:00:03 SHOW START 00:01:30 Win UVI Sonic Bundle 00:02:13 AD:Patreon 00:13:41 Roland Flute Controller 00:25:11 AD:iZotope Ozone12 00:26:55 Elektron Tonverk 00:34:10 Tiny Vinyl is a thing 00:42:53 Castle Studios For Sale 00:48:35 AD: NI Modular Icons 00:50:48 MCP To MIDI With AI 23:48:04 Roland Flute Controller
Guests Rich Hilton - Producer, keyboards for Chic Steve Hillier - producer, songwriter, educator Robbie Puricelli Pro Synth Network SonicTALK 861 on YouTube: [https://youtube.com/live/qzGf5iVJSRs] For preshow and Ad free version and much more: Patreon.com/sonicstate Native Instruments Modular Icons vintage modular synth sounds from iconic artists and instruments. Made in collaboration with the Bob Moog Foundation, more than 60% of each sale goes to them. Part of the Play Series: Great-sounding presets and real-time control. IZotope Ozone 12 - Go beyond the limits of mastering with Ozone 12. Unlock the impossible with this complete suite of 20 pro modules, including 3 brand-new, best-in-class additions. Plus, make Master Assistant your own with a new customizable flow. With intelligent tech that guides, not decides, you're always in control. 00:00:03 SHOW START 00:01:30 Win UVI Sonic Bundle 00:02:13 AD:Patreon 00:13:41 Roland Flute Controller 00:25:11 AD:iZotope Ozone12 00:26:55 Elektron Tonverk 00:34:10 Tiny Vinyl is a thing 00:42:53 Castle Studios For Sale 00:48:35 AD: NI Modular Icons 00:50:48 MCP To MIDI With AI 23:48:04 Roland Flute Controller
Plus tech journalism's dinner with Sam Altman, and why you need to be skeptical of that Booking.com link.Starring Tom Merritt, Huyen Tue Dao, and Brian Brushwood.Show notes found here. Hosted on Acast. See acast.com/privacy for more information.
Topics covered in this episode: rumdl - A Markdown Linter written in Rust * Coverage 7.10.0: patch* * aioboto3* * You might not need a Python class* Extras Joke Watch on YouTube About the show Connect with the hosts Michael: @mkennedy@fosstodon.org / @mkennedy.codes (bsky) Brian: @brianokken@fosstodon.org / @brianokken.bsky.social Show: @pythonbytes@fosstodon.org / @pythonbytes.fm (bsky) Join us on YouTube at pythonbytes.fm/live to be part of the audience. Usually Monday at 10am PT. Older video versions available there too. Finally, if you want an artisanal, hand-crafted digest of every week of the show notes in email form? Add your name and email to our friends of the show list, we'll never share it. Michael #1: rumdl - A Markdown Linter written in Rust via Owen Lamont Supports toml file config settings Install via uv tool install rumdl. ⚡️ Built for speed with Rust - significantly faster than alternatives
SANS Internet Stormcenter Daily Network/Cyber Security and Information Security Stormcast
Microsoft Released Patches for SharePoint Vulnerability CVE-2025-53770 CVE-2025-53771 Microsoft released a patch for the currently exploited SharePoint vulnerability. It also added a second CVE number identifying the authentication bypass vulnerability. https://msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770/ How Quickly Are Systems Patched? Jan took Shodan data to check how quickly recent vulnerabilities were patched. The quick answer: Not fast enough. https://isc.sans.edu/diary/How%20quickly%20do%20we%20patch%3F%20A%20quick%20look%20from%20the%20global%20viewpoint/32126 HP Enterprise Instant On Access Points Vulnerability HPE patched two vulnerabilities in its Instant On access points (aka Aruba). One allows for authentication bypass, while the second one enables arbitrary code execution as admin. https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04894en_us Revealing the AppLocker Bypass Risks in The Suggested Block-list Policy AppLocker sample policies suffer from a simple bug that may enable some rule bypass, but only if signatures are not enforced. While reviewing Microsoft s suggested configuration, Varonis Threat Labs noticed a subtle but important issue: the MaximumFileVersion field was set to 65355 instead of the expected 65535. https://www.varonis.com/blog/applocker-bypass-risks Ghost Crypt Malware Leverages Zoho WorkDrive The Ghost malware tricks users into downloading by sending links to Zoho WorkDrive locations. https://www.esentire.com/blog/ghost-crypt-powers-purerat-with-hypnosis
In this short podcast episode, Bryan talks about band-aids, hacks, and ethics. He explores ethical "band-aid" solutions and how to charge for them. He also covers the difference between patching up equipment ethically and unethical repairs. Temporary fixes and ugly permanent fixes fall into the ethical gray area for a lot of people, especially if technicians or HVAC business managers don't know where to draw the line between replacing a part completely and patching up issues. Patching condenser coils is an example of repair work that can be ethical. Some protocols say that the copper needs to be cut out and couplings need to be installed, but you can often patch tubing in areas where there isn't too much vibration. As always, you want to make sure that the system can hold pressure whenever you patch up a leak. The ethics question comes into play when the longevity of the equipment or repair is questionable. Bryan draws the line when the system has structural integrity issues, including damaged fins and severe corrosion. Beyond a certain point, patching a system up either won't be effective or will be an added expense without a payoff. Some companies also strongly favor sales over repairs, so some of those decisions may also come down to company policy. The key to ethical and successful "hack" work is situational awareness; you need to know which repairs you're capable of, your company's policies, and the client's needs. You ultimately need to make sure your actions are legal and safe for you and the client. Have a question that you want us to answer on the podcast? Submit your questions at https://www.speakpipe.com/hvacschool. Purchase your tickets or learn more about the 6th Annual HVACR Training Symposium at https://hvacrschool.com/symposium. Subscribe to our podcast on your iPhone or Android. Subscribe to our YouTube channel. Check out our handy calculators here or on the HVAC School Mobile App for Apple and Android