Podcasts about remediation

The award-winning Compliance into the Weeds is the only weekly podcast that takes a deep dive into compliance-related topics, literally going into the weeds to explore a subject in greater depth. Looking for hard-hitting compliance insights? Look no further than Compliance into the Weeds! In this episode of Compliance into the Weeds, Tom Fox and Matt Kelly discuss the Southern Glazer NPA. The Southern Glazer Wine and Spirits' non-prosecution agreement is a rare example where prosecutors credited compliance program remediation, rather than self-disclosure or extensive cooperation, as central to a favorable outcome. Southern Glazer, the largest US liquor distributor, faced a major California kickback and bribery scheme involving five former employees, fabricated records, sham agreements, and luxury benefits to retailers and others, along with alleged tax impacts. The company resolved the matter with a $12.5 million payment and a two-year NPA requiring the CEO and CCO to certify program effectiveness. Tom and Matt review how the NPA affirms DOJ's Evaluation of Corporate Compliance Programs as still relevant and detail remediation steps: major headcount and budget increases, upgraded compliance leadership, audits of marketing spend, enhanced training, strengthened third-party controls and AP payment blocks, outside reviews, and tone-at-the-top messaging. Key highlights: Southern Glazer Case Setup Industry Risks and Scheme ECCP Guidance Still Matters Program Overhaul Timeline Concrete Remediation Metrics DOJ Signals Under Trump Era Resources: Matt in Radical Compliance Tom Instagram Facebook YouTube Twitter LinkedIn A multi-award-winning podcast, Compliance into the Weeds was most recently honored as one of the Top 25 Regulatory Compliance Podcasts, a Top 10 Business Law Podcast, and a Top 12 Risk Management Podcast. Compliance into the Weeds has received Davey, Communicator, and W3 Awards, all for podcast excellence. Learn more about your ad choices. Visit megaphone.fm/adchoices

A teaching strategy for nurse educators and nursing faculty: turn your nursing students' NCLEX readiness data into targeted remediation. In this nursing education lesson-plan walkthrough, Jon shows you how to teach students to read their own readiness data and turn it into a study plan that actually works, using the see-do-teach strategy. In this episode: The 3 linchpins of NCLEX readiness data: ReadyScore as a forecast (students who pass SIMCLEX pass the NCLEX at a 99.25% rate), the NPQ Tracker across 6,500+ NCLEX practice questions with focus scores and weak-area detection, and your educator dashboard for the whole cohort The GPS analogy: data doesn't shame the wrong turn, it recalculates NCJMM-mapped questions that turn studying itself into clinical judgment An unfolding case study that climbs Bloom's taxonomy Download the ready-to-use nursing lesson plan and unlock your free nursing.com educator account — concise lesson videos, visual nursing cheat sheets, and thousands of NCLEX questions you can use in the classroom today: nursing.com/educator

After a mold or water-damage remediation job wraps up, someone has to decide whether the space is clean. For Raj Manickam, CEO of SteamMaster Restoration and Cleaning in Colorado's Vail Valley, that decision should never rest with the company that did the work.

Try TrueDark glasses: https://truedark.comTry Danger Coffee: https://dangercoffee.com/discount/davetubeTry Suppgrade Labs: https://shopsuppgradelabs.com/Try Longevity Gummies: https://www.timeline.com/partners/dave-aspreyIf you're waking up exhausted, foggy, or inflamed and nothing seems to fix it, the answer might be hiding in your walls. This deep dive walks through how toxic mold and mycotoxins settle into your brain, nerves, and mitochondria, how to properly test your home and body for exposure, and the exact order of operations, environment first, then detox, that actually leads to recovery. Drawing from his own diagnosis with mold-related brain damage, the creator breaks down everything from HVAC contamination to binders and glutathione so you can finally stop chasing symptoms and address the real source.Thank you to our sponsors!Butcher Box | Go to ButcherBox.com/HUMANUPGRADE to get $20 off your first box, plus your choice of free ground beef for life, or free chicken thighNeuronic | Go to www.neuronic.online Code DAVE for $100 offiRestore | Unlock your best hair & skin with @iRestorelaser and HUGE savings on iRESTORE with code DAVE at irestore.com/DAVETimestamps:00:00 — Mold Toxins and My Story02:14 — How Mycotoxins Damage Cells04:09 — Three Sources of Mold05:35 — Track Symptoms by Location07:20 — Fix Environment Before Detox08:53 — Mold Testing Methods10:35 — Remediation and Moisture Control12:47 — Belongings Can Recontaminate14:45 — Why Recovery Varies17:23 — Detox Protocol and BindersConnect with Dave Asprey!Website: https://daveasprey.comTikTok: https://www.tiktok.com/@daveaspreyofficialInstagram: https://www.instagram.com/dave.asprey/Facebook: https://www.facebook.com/Daveaspreyofficial/X: https://x.com/daveaspreyYouTube: https://www.youtube.com/c/daveaspreybprThe Human Upgrade Podcast: https://www.instagram.com/TheHumanUpgradePodcast/ https://m.facebook.com/Thehumanupgrade/Upgrade Labs: https://upgradelabs.com40 Years of Zen: https://40yearsofzen.comSee Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

There's a sea of online math supplements, from drills to games to whole courses, all promising advancement for your struggling student (or your stellar student who has outpaced his cohort). What kind of program, if any, is right for your student? Under what conditions are digital tools most effective? Heights math teacher David Maxham gives us an extremely practical guide to the best digital resources out there and how to use them effectively. He also shares the failure modes you may not see coming when "hiring" a digital tutor for your child. Chapters: 2:19 Digital tools at a liberal arts school 3:47 For students at both ends of the spectrum 11:41 Online drills: assisting academic virtue 14:12 Parent guidance still needed 18:56 Benefits of in-person lessons 23:32 How digital data can help teachers 27:08 Getting student buy-in, gaining confidence 32:22 Whole online courses: Math Academy over Khan 41:44 Remediation without embarrassment 46:46 Common pitfalls to outside help Links: Math Facts Lab drills, broadly recommended by Mr. Maxham Rocket Math drills, also mentioned Math Academy courses, recommended by Mr. Maxham Khan Academy courses, Mr. Maxham says best as a supplement, not as a class Matific, gamified math practice Beast Academy The Digital Delusion: How Classroom Technology Harms Our Kids' Learning—and How to Help Them Thrive Again by Jared Cooney Horvath Also on the Forum: Automaticity and Creativity by David Maxham Automaticity: Where 'Rote' Fits into the Liberal Arts featuring David Maxham How to Help Your Son When He Struggles Academically: Part I by Michael Moynihan How to Help Your Son When He Struggles Academically: Part II by Michael Moynihan Featured Opportunities: Headmaster's Lecture at The Heights School (October 3, 2026) – link coming soon Fall Open House at The Heights School (October 24, 2026) Fatherhood Conference at The Heights School (early November 2026) – link coming soon Convivium Conference for Teaching Men at The Heights School (November 11-13, 2026)

AIUC first got our attention with the NFDG backing, and have just announced a $40M series A today, with the most impressive industry advisor list we may have ever seen for an early startup behind AIUC-1, their agent standard backed by real insurance:From being Anthropic's first product hire to building the standards, testing, and insurance infrastructure meant to make frontier AI deployable, Rune Kvist is betting that the biggest constraint on AI adoption won't be capability it will be trust. In this episode, the AIUC cofounder joins swyx and Vibhu to announce a new $40M round and explain why companies like Cursor, Harvey, Lovable, and ElevenLabs are increasingly confronting a problem that gets harder as AI gets better: who is responsible when autonomous systems fail?We go deep on AIUC-1, the emerging standard for agent security, safety, and reliability; how AI agents are stress-tested for jailbreaks, hallucinations, and data leaks; and why Rune thinks standards and insurance could become critical infrastructure for AI. We also discuss the growing trust gap between governments and frontier labs, AI-enabled cyber and biological risks, why every model can ultimately be jailbroken, what happens when a $20 coding agent causes $200M of damage, whether AI engineers should be certified, and why even after AGI there may be one job the labs can never do themselves: be their own watchdog.We discuss:* Why risk, liability, and trust may become the binding constraint on AI adoption* Rune's path from reading the Scaling Laws paper to joining Anthropic in its earliest days* What Anthropic understood about scaling, compute, and the future years before it became obvious* Why Waymo illustrates the gap between AI capability and real-world deployment* AIUC's $40M round and work with Cursor, Harvey, Lovable, ElevenLabs, and other frontier AI companies* AIUC-1: a standard for AI agent security, safety, and reliability* How agents are tested for jailbreaks, hallucinations, and data leakage* Why most AI companies optimize the happy path without seriously stress-testing adversarial cases* Why AI standards may need to update every quarter instead of every decade* The emerging trust gap between frontier AI labs and governments* Cybersecurity, child safety, biological weapons, and the expanding frontier-model risk surface* Why standards and insurance may need to evolve together* How Lloyd's of London can insure AI systems and bring trust to enterprise deployment* What happens if a $20 Cursor subscription contributes to a $200M plane crash* The Air Canada chatbot case and how AI failures are beginning to clarify legal liability* Why copyright may be one of the hardest AI risks to insure* Evals, mechanistic interpretability, monitoring, and models becoming aware they're being tested* The impossible CISO mandate: adopt AI fast, but don't let anything go wrong* Why robotics will make AI liability dramatically more consequential* Whether AI engineers should have Level 1, 2, and 3 certifications* AIUC's roadmap across agents, frontier models, robotics, and universal red teaming* Why AGI could become a question of national sovereignty* Why the labs can never fully serve as their own watchdogs* The Big Short problem: how do you stop competing watchdogs from racing standards to the bottom?Rune Kvist* LinkedIn: https://www.linkedin.com/in/runekvist/* X: https://x.com/RuneKvistAIUC* https://aiuc.comTimestamps00:00:00 AIUC's $40M Round and the Risk Bottleneck for AI00:01:07 From Scaling Laws to Early Anthropic00:07:58 Why Trust, Not Capability, Could Limit AI Adoption00:12:19 Founding AIUC and Building AIUC-100:18:52 How AI Agents Are Audited and Stress-Tested00:25:26 Frontier Models, Government, and the AI Trust Gap00:33:32 Cyber, Child Safety, and AI-Enabled Biological Risk00:38:14 Why Standards and Insurance Belong Together00:41:45 What Does an AI Insurance Policy Actually Cover?00:50:44 The $20 Cursor Subscription and the $200M Plane Crash00:53:53 AI Liability, Monitoring, and Earning Enterprise Trust00:56:21 From AI Agents to Models to Robotics00:58:29 Copyright, Adverse Selection, and AI Insurance01:03:28 Evals, Mechanistic Interpretability, and Eval Awareness01:08:36 The Impossible Enterprise AI Mandate01:11:52 Prediction Markets vs. AI Audits01:14:43 Should AI Engineers Be Certified?01:19:10 AIUC's Roadmap, AGI, and Who Watches the Watchdogs?TranscriptIntroduction: AIUC, the $40M Series A, and Risk as the Adoption BottleneckSwyx [00:00:00]: Okay, we're in the studio with Rune from AIUC, the Artificial Intelligence Underwriting Company, with our trusty co-host, Vibhu. Welcome.Rune Kvist [00:00:10]: Thank you. Thanks for having me. Thank you.Swyx [00:00:11]: What are you announcing today?Rune Kvist [00:00:12]: We have raised $40 million, led by Ribbit Capital and First Harmonic.Swyx [00:00:17]: You first came to my attention when Nat and Daniel invested in you guys. Is the story, like, pretty much the same? Like, what are you today versus what you thought you were back then?Rune Kvist [00:00:26]: When we raised our seed round, we had a hypothesis that at some point risk was going to hold down adoption. At that point in time, that felt kind of hypothetical, and I think that is now over. Clearly, the moment is now with Mythos and Fable. It's pretty obvious that literally the binding constraint on adoption is risk. And so for us, it feels like this is a natural continuation of the same hypothesis, but where previously it was speculation, now it feels like fact.Swyx [00:00:54]: And let's get a list of the customers that you're highlighting as part of your Series A.Rune Kvist [00:00:58]: Totally. Yeah. So we are now working with folks like Cursor, Harvey, Lovable, ElevenLabs.Swyx [00:01:05]: Yeah. Amazing. Congrats.Rune Kvist [00:01:06]: Thank you.Swyx [00:01:07]: So you were famously one of the first hires involved in GTM and product. I'm just kind of curious: what was your path into AI? Just recap.Rune's Path Into AI: Scaling Laws, Capital, and AnthropicRune Kvist [00:01:18]: Yeah.Rune Kvist [00:01:19]: Late 2021, I sold a company, my first company, an edtech company. I had a bit of time to think about what was next. I came across the Scaling Laws paper, and that just struck me like lightning. I was just like, “This is a big idea.” In short, the Scaling Laws paper just says the bigger the model, the smarter the model.Swyx [00:01:38]: So this is the Kaplan one, not the Chinchilla one?Rune Kvist [00:01:40]: Exactly, the Kaplan one.Swyx [00:01:42]: Yeah.Rune Kvist [00:01:42]: And the important thing that clicked for me there was, oh, now capital will understand this. If you put in more money, you get more money out, and so that will kick off a hype cycle. And so you get a sense of predictable returns, which is, in fact, what's played out. And so I just packed my bags. I'd never been to San Francisco. I'd never been there. I just packed my bags, flew out here to find the people who had written it. And at the time, they had just started a small lab called Anthropic. There were around 40 people at the time or so. Drank a bunch of coffee until I eventually got introduced to Dario. And at the time, they were wrestling with some of these questions of, like, should we deploy our models? Should we make revenue? How should we engage with the rest of the world? They'd just broken off from OpenAI, and it's been publicly reported that they were kind of concerned with how they were dealing with deployment. So they were wrestling with some of those questions. At this point, this is early fog of war, like early 2022. The hottest product at the time was, like, Jasper. Like, there's nothing out there. So where value was going to accrue, and what the different parts of the stack were going to be, were all open questions.Swyx [00:02:48]: I want to highlight to people, you ask these questions because you have a PPE background.Rune Kvist [00:02:52]: Yes.Swyx [00:02:52]: I actually was in Singapore in one of the sort of feeder programs for prepping people for PPE. So I had a tutor. We learned, you know, philosophy and politics and economics. But, like, I think your kind of background matters. Machine learning people who read the neural, Scaling Laws paper would not necessarily draw the same conclusions that you did. Whereas any capitalist would read that and go, “Holy s**t.”Rune Kvist [00:03:19]: Correct.Swyx [00:03:20]: Right?Rune Kvist [00:03:21]: Yes.Swyx [00:03:21]: Who tipped you onto that paper? Because it's not a paper that you normally read, right, like, in your circles?Rune Kvist [00:03:26]: Yeah. I think I'd actually, ever since AlphaGo, had some appreciation that AI was a big deal.Swyx [00:03:36]: Yeah.Rune Kvist [00:03:36]: But it kind of felt like it raised all these kind of interesting philosophical questions, but it was kind of not clear from afar where exactly that would go. But it was obvious enough that it was like, this is going to be a big thing if we find the kind of right mechanism to kind of get the techno-capital machine to work on this. But it was just not clear. And so I think there was some way in which, like, that became obvious, and also it wasn't as obvious at the time than it is now, right? Like, it was just like, wow, this is so interesting. But it still felt, coming from kind of a philosophy and economics background, it felt like if this turns out to be true, you're going to be wrestling with all of the big questions in society. Everything you've learned about politics gets thrown out of the window. Everything you've learned about economics at least gets challenged. And so what felt interesting was to be at that frontier that has ramifications across everything. So that's why I sought it out.Swyx [00:04:32]: I mean, clearly really good insight. For people who don't know, the PPE program is, like, where prime ministers are born. So then you end up meeting Dario.Rune Kvist [00:04:41]: Yep. First Dario, yeah.Swyx [00:04:43]: Yeah. Well, I mean, like, so did you get extra insights from talking with them that you didn't get from your original hypothesis?Anthropic's Early Conviction and the Scaling Laws Crystal BallRune Kvist [00:04:50]: If you read the Scaling Laws paper, you get this, like, very vague sketch of like, wow, this seems kind of important. There are some lines on a chart. This seems kind of important. And what I think the team at Anthropic had thought more about than anyone was like, what are the implications of this if you really play this out? And back then they had, kind of vision documents for what the world would look like in 2026, and they were kind of in vivid detail playing out how much compute is going to be needed, what the CapEx was going to look like, what some of the societal concerns were going to be, but also what is the amount of economic value coming out here? And so it kind of felt like they held a crystal ball that in hindsight turned out to just be dramatically correct. And they weren't holding it like they were obviously correct. They were just like, “Take this hypothesis really seriously.”Swyx [00:05:38]: Think it through, yeah.Rune Kvist [00:05:38]: And think it through in the same way as the kind of situational awareness that isSwyx [00:05:43]: Across the street.Rune Kvist [00:05:44]: Across the street.Swyx [00:05:44]: Your office, yeah. Oh my God, we're all living across the street in the same one square mile.Rune Kvist [00:05:50]: Correct. And that's now a couple of years old, but also people keep referencing it these particular weeks with Fable and Mythos, and it's like, wow, if you take this one idea seriously- For the Scaling Laws, a lot of things fall into place.Vibhu [00:06:03]: And keep in mind, at this point, this is the same team that did GPT-1, GPT-2, and GPT-3.Rune Kvist [00:06:08]: Correct.Vibhu [00:06:08]: Which is also, like, it's not just some experimentation. Like, this is a real model that we just scaled up.Rune Kvist [00:06:14]: And they had deep conviction in this idea: if you take a big blob of compute and data, it just wants to learn, and out of that will come smarter and smarter models. And all the particulars were not clear.Vibhu [00:06:26]: Yeah.Rune Kvist [00:06:27]: And all the implications were not clear. But their deep conviction in this, like, core thesis, and that was kind of dizzying. It was both phenomenally interesting and exciting, and also very quickly you get to, like, the world we know today will no longer be if this hypothesis holds. So it also just felt, like, important in some kind of grand sense.Vibhu [00:06:48]: What kind of shaped you there? So that was early 2022. Not only had GPT-1, GPT-2, and GPT-3 come out, but, you know, the amazing founders of Anthropic that have never split up, the only ones, they actually had the conviction to leave OpenAI, start their lab. You said there were about 40 people there. What was the time like there?Inside Early Anthropic: Mission, Deployment, and RiskRune Kvist [00:07:06]: It was kind of remarkably like what it looks like on the outside today. Extremely cohesive, extremely mission-oriented, and living in this tension between their two ideas, which is AI could both go really well and really bad, and we want to be part of building it. That creates astounding amounts of tension. And they were wrestling with this incentive challenge where they know they're in a race that they're in where you might get forced to cut corners, but it also felt very important to them to be at the forefront of technology. And all of those ideas were just present at that time. It kind of feels like that line has been just very clear, and I think kind of love them or hate them, they have really stuck to their guns. There's a core set of beliefs that they hold more deeply than most companies hold any beliefs.Vibhu [00:07:58]: Yeah. Fast-forward to today.Rune Kvist [00:08:00]: Yeah.Vibhu [00:08:00]: What does that lead us to AI underwriting company? What are you up to? What motivated you to start this?From Waymo to AIUC: Confidence Infrastructure for AIRune Kvist [00:08:05]: Yeah. AIUC builds confidence infrastructure for frontier AI through standards and insurance. The link from Anthropic to building confidence infrastructure, looking out the windows at Anthropic offices and seeing Waymos driving by. Already back then, early 2022, Waymos were in some ways like AGI for cars. Like, they were superhuman drivers, but you couldn't take one to the airport. And now, four and a bit years later, you still can't take your Waymo to the airport, despite now everyone having kind of looked at the evidence and being like, “They're better drivers than humans.” So in that particular instance, what's clear is that the binding constraint on AI being useful is not capability, but is that liability or risk or trust. That problem is, general. The reason why right nowRune Kvist [00:08:52]: Fable is not open for access is not because it's not a good model, it's because it's a very good model. It's just hard to make promises about what it will or will not do. And this problem gets worse as AI gets better. Basically, more intelligent AI can be more autonomous. That's more valuable, but also the risk surface grows. And so - what Waymo illustrates is that unless you build the confidence infrastructure to make promises about AI, or at least bring light to the risks, you grind adoption to a halt. Governments, banks, hospitals, militaries need to have some sense of what AI will and will not do to be able to operate for them to incorporate it. And that's the problem that we're trying to solve. Now, why standards and insurance? If you trace this problem back through history, every technology wave has had some version of this problem. So if you go back to, like, year 1900, electricity comesVibhu [00:09:47]: Ben Franklin.Rune Kvist [00:09:48]: Cars burn down, sorry, houses burn down, lots of people die. 1930s, cars are a big deal, kill lots of people. 1950s, private nuclear energy is a big deal, poses big risks. In each of those instances, the market runs ahead of regulation to create confidence infrastructure because that's required to make go/go decisions. That is required for adoption, and the market fundamentally wants adoption. And in all of those instances, common blueprint emerges between standards and insurance. The reason these two components is standards kind of provide the rules of the road, and they also specify, like, what are the tests that need to be run so we can get a sense of how high the risk is. So take in the case of cars, that's like a car crash. Great, everyone, they inform your insurance pricing today, they inform your purchasing decisions, et cetera. That's basically the risk framework. The insurers are important because they pick up the bill. So they are the private institution that is most on the side of. That is best incentivized to quantify the risks truthfully and then figure out all the ways to reduce the risk ‘cause that increases their profit. So they're basically, they help shape the incentives. And these two work really well in unison. Now, how does that show up as a company? Well, one of the things that was obvious even - or starting to become obvious even a couple years ago was that frontier companies, some of our customers today, like Cursor, Sierra, ElevenLabs, Harvey, were going to have a very easy time selling a pilot to a bank. The, like, the demo just sells itself. It's magic. But bringing that through, if you want to do a wall-to-wall rollout at a bank or a hospital, you have to go through the risk process. These banks have no idea even which questions to ask, let alone which answers are sufficient, let alone, like, how do they go and test whether these agents actually work the way they're supposed to. And so they had this problem of, like, what can we say to earn the trust? And we think there's, like, a golden sentence that goes something like, “Hey, I hear you're really worried about hallucinations or jailbreaks or whatever it may be. We've had an independent third party test us against the gold standard. We passed with flying colors. And as a vote of confidence, the world's most conservative insurers have looked at the data.” And they're willing to take some of the risk onto their balance sheet.Swyx [00:12:06]: Yeah.Rune Kvist [00:12:07]: So if something does go wrongSwyx [00:12:07]: There's money behind it, yeah.Rune Kvist [00:12:09]: Exactly. So that's kind of like the link between all this. We can get into some of the hard parts related to the technical testing, which is, I think, the crux of the matter, but I'll pause there.Swyx [00:12:19]: How did you and Rajiv come together? This-- there's always, like, you come across very confident and, you know, and we're announcing your Series A and all these things, but I want to see, like, the early initial stages of, like, idea formation.Cofounding AIUC with Rajiv DattaniRune Kvist [00:12:31]: Yeah. Rajiv is actually my soon-to-be brother-in-law.Swyx [00:12:35]: Oh.Rune Kvist [00:12:36]: So I'm actually, in a week and a half getting married to Rajiv's sister.Swyx [00:12:42]: Okay, now you're tight.Rune Kvist [00:12:44]: Exactly.Swyx [00:12:44]: Now you know.Rune Kvist [00:12:45]: So - Rajiv and I have known each other for a decade. Funny story, I met both Rajiv and his sister, Hena, at the same time when Hena and I were interns at McKinsey in London, and Rajiv was assigned as my mentor. And so met them at the same time. For the longest time, it was not obvious that we were necessarily going to work together. I was in startups. He was, an insurance partner at McKinsey. Three or four years ago, I think Hena convinced him that AI was going to be a really big thing. And so he quit his job, cushy partner job at McKinsey in London, packed his bags, flew to San Francisco, and ended up joining METR. You guys are probably online enoughSwyx [00:13:24]: CEO.Rune Kvist [00:13:24]: Exactly.Swyx [00:13:24]: We've, we've, we've heard of METR.Rune Kvist [00:13:25]: You see the plot-- the chart of the horizons of the tasks that agents can take on is doubling extremely fast. So he was COO at METR, led their partnerships with Anthropic and OpenAI to test their models before release, but also working closely with the US and UK government, to figure out, like, how do you know whether a model can be released? And in some ways, that was, like, the perfect background. He's spent a lot of time in insurance, knows that world, spent a lot of time with frontier testing of models. And so when I was bumbling around this idea space, starting with some of the ideas we talked about related to Waymo, as soon as we got into the content, we were both like, “Oh, this would be an amazing business to build together.” This is wrestling with the problem that we both think is the most important in the world from a market angle, which is kind of our intuitions is that the market can do a lot, and the faster AI moves, the harder it is for government to solve some of these problems. And then it took a little bit of time to work through what is it like to work with family.Swyx [00:14:27]: Sure.Rune Kvist [00:14:27]: And,Swyx [00:14:30]: Because you were already dating at the timeRune Kvist [00:14:31]: Yeah. Yeah, exactly.Swyx [00:14:33]: Yeah.Rune Kvist [00:14:34]: Already back then, itSwyx [00:14:35]: Yeah.Rune Kvist [00:14:35]: We felt like we were a family.Swyx [00:14:36]: Nice.Rune Kvist [00:14:36]: And so starting a business together felt like kind of a big step. And, here we are with just immense amounts of trust.Vibhu [00:14:43]: Yeah. So now you're a company of how big? How big are you guys now?AIUC-1 Certification: Agent Security, Safety, and ReliabilityRune Kvist [00:14:46]: There are just 20 of us now.Vibhu [00:14:47]: 20 of you guys now, have Series A, and you have your first certification out, the AIUC-1. Let's bring up the certification. So this is the agent certification, right? What goes into the process? I have, like, two questions here. One is, walk us through the certification, and two is, what is the process for a company to get certified, you know?Rune Kvist [00:15:08]: Great. As it says right on the top, AIUC-1 is a standard for agent security, safety, and reliability. The fundamental design principle is take all of the concerns that slow down adoption, so all the questions, all the fears that keep, security leaders in the Fortune 1000 up at night, and put them into one comprehensive framework. That's what you'll see there. You can see the six categories. Two, you want to ground all of this in technical testing. So one of the concerns with security standards that often feel kind of like theater paperwork is that they're not actually ground out in, does any of this work? Does any of this matter? And so we had a conviction from early on that was going to be the kind of crux, was to pass this, you must get tested every quarter, basically run thousands of simulations to see, well, so can it actually be jailbroken? How hard is it to jailbreak? How often does it hallucinate? How often does it leak data? Et cetera. And then the last, core idea here, if you scroll up to the top here, is to refresh it quarterly.Rune Kvist [00:16:08]: So the core trait of AI is that it moves extremely fast. Whatever concerns we're discussing today were not the same ones three months ago, and this will keep changing. Typically, standards update on a, like, a decade cycle is obviously not going to work. But the question is kind of how do you update it? And the core thing here was to basically get the risk leaders of the Fortune 1000 around the table. So if you go over to the left hereVibhu [00:16:32]: YeahRune Kvist [00:16:32]: You'll see the AIUC-1 consortium. The consortium is a group of risk leaders who run real banks, real hospitals, real critical infrastructure, who are facing these challenges every day. And we meet with these folks twice a quarter and hear what's top of mind, what is keeping them up at night. There's tremendous amount of desire for that conversation. And then we operationalize that into a specific standard that gets into. And actually, we can go into and look at whatVibhu [00:16:55]: YeahRune Kvist [00:16:55]: What even is the standard. So if we go back to introduction, out there to the left, scroll up a little bit to the wheel, click into reliability. So if you take something like hallucinations sits in reliability. There is a number of requirements here. If you go into the top one, prevent hallucinated outputs, hallucinate outputs, this is one particular requirement. This is a technical control. Basically, we want some kind of ground in this filter. The first thing you see here is what's called a crosswalk. So everyone and their grandmother has put out a framework, very high-level framework for what are the AI risks.Swyx [00:17:27]: This is basically your competition,Rune Kvist [00:17:28]: In some ways our competitionSwyx [00:17:29]: Not seriously, yeah.Rune Kvist [00:17:30]: We're, in fact, friends with them. We'll come back to why.Swyx [00:17:31]: Yeah.Rune Kvist [00:17:32]: But mapping everything together so you have one superset. The claim you're trying to support here is, if you follow this framework, then you can also see how you follow the other frameworks. But the meat of it comes down here in control activities and evidence. So control activities is like, great, you have this high-level requirement. How do you turn that down to something operational? Here's what you must do, and then what is the evidence that we're looking for?Rune Kvist [00:17:57]: And the reason we go this deep is that there's actually not that much confusion about what are the big concerns in AI. Everyone agrees to these. The question, like, what are you actually supposed to do? And so. What we found a lot of demand for is getting down to the specific evidence, that people need to look for. Whether you are Cursor building something or, even JPMorgan building something, but also if you're just a risk leader at JPMorgan, like what exactly should you ask for? What can you ask for without sounding stupid? Like if you ask for some-- you won't believe the amount of time a risk leader has asked for the IP rights to the underlying model to Cursor or something, and you're just like “Sorry, what?” Like,Swyx [00:18:39]: You slip it in there and you seeRune Kvist [00:18:40]: SlipSwyx [00:18:40]: See if you notice.Rune Kvist [00:18:41]: See if they. Exactly.Swyx [00:18:42]: Yeah.Rune Kvist [00:18:42]: Put that in the questionnaire. All right, so that's kind of what our standard is, and we update this every quarter with these folks, to keep up with the latest concerns.Swyx [00:18:51]: Can I double-click on this one?Controls, Evidence, and Third-Party TestingRune Kvist [00:18:52]: Yeah.Swyx [00:18:52]: So first of all, the website's beautiful. Like, it's so confidence-inducing which is the whole point where, like, okay, I know exactly what I'm signing up for when I talk with you. Like, I don't even have to talk to you. I can just see your whole, certification, which is great. But, like, okay, so from here, like D001.1 configure a groundedness filter, how does that get applied? Like, you have a person thatRune Kvist [00:19:16]: Yeah,Swyx [00:19:16]: Goes through it?Rune Kvist [00:19:17]: If you, go backVibhu [00:19:19]: I did see somewhere there's like, you know, fifty-one requirements, a hundred thirty controls. There's like a wholeSwyx [00:19:25]: Right. I just want to. Like, to me, this doesn't translateVibhu [00:19:27]: Yeah.Swyx [00:19:27]: Into a test or an eval.Rune Kvist [00:19:28]: Yes. So if you go into, on the left-hand side. So actually, if - before we go in there are three types of requirements. The first is technical controls, like you must implement some guardrails.Rune Kvist [00:19:42]: Two, there are test controls. So you must have an independent third party go and run some tests against you. I'll show you one of those in a second. And then three, there are policy controls. For example, you must have a person whose name is on the line when you guys f**k up, and you must have a plan for how you tell your customers and how you engage with them. They're kind of more traditional, standard type stuff. So in this particular instance, we just check whether they in fact have a ground in filter. So we will partner with an auditor. So we partner with auditors like KPMG or like Schellman who go in and do the thing auditors do, which is to check the evidence. In this case, that might be a screenshot, it might be part of the code that they need to review to see that it actually. Just that it exists.Swyx [00:20:21]: Oh, okay.Rune Kvist [00:20:22]: And then the second thingSwyx [00:20:22]: So you're not testing the effectiveness of it.Rune Kvist [00:20:24]: That's the second thing. So if you go downSwyx [00:20:25]: Yeah.Rune Kvist [00:20:25]: To the third-party testing for hallucinations out on the left, that's basically the next requirement. This is where we test how well does it actually work.Swyx [00:20:32]: Okay, and is it you testing or the auditor?Rune Kvist [00:20:34]: We test them.Rune Kvist [00:20:35]: We test them.Swyx [00:20:36]: That's a lot of work.Vibhu [00:20:37]: How long does testing take? So if I want to get certified, justCertification Timelines, Remediation, and Quarterly UpdatesRune Kvist [00:20:40]: Yeah.Vibhu [00:20:40]: How long does the end roughly take?Rune Kvist [00:20:42]: Yeah, the end, almost always is dependent on, like, our customers needVibhu [00:20:47]: Yeah.Rune Kvist [00:20:47]: To look something for us. It takes somewhere between, like, 3 to 10 weeksSwyx [00:20:52]: Yeah.Rune Kvist [00:20:52]: Depending on how up to snuff they already are. So some people show up to us with, like, extremely rigorous security programs. When we test them, it works extremely well. We can get that done very quick. Some people come to us, and they're not that far along. We give them kind of the spec that they need to build towards, and then their security teams and engineers get to work and build to meet the standard. The testing itself typically takes a couple of weeks, including the time for them to remediate. Often, we'll find something that we cannot pass, where this is actually just not up to the standard. - you won't pass the standard. And then they will need to go and implement additional safeguards or additional remediation that makes them more robust so that they can actually kind of hand on heart look at their customers in the eyes and say, like, “Hey, we've done truly our very best.”Vibhu [00:21:35]: And they're certified for a year and have quarterly updates?Rune Kvist [00:21:38]: Correct, yeah.Vibhu [00:21:39]: And, yeah, it's pretty interesting. I think, you know, what's changed since. So this is certifying agents in production, right? Your customers, like you've had Lovable, ElevenLabs, Intercom, and they've all gone through this certification.Rune Kvist [00:21:50]: Yes.Vibhu [00:21:51]: What has changed? So I see you post, like, you know, Q2 added MCP agent,How Agent Risks Are Changing: Coding, MCP, and Agent-to-Agent InteractionsRune Kvist [00:21:56]: Yeah.Vibhu [00:21:56]: agent communication. Any other things that you want to kind of highlight since the first iteration? What comes in quarterly?Rune Kvist [00:22:03]: Yeah. So some of the changes have just been agents are not just one thing. So, like, if you take agents like Cursor and compare them to Sierra, they're really quite different. And compare them to Harvey again, compare them to you out of againSwyx [00:22:16]: ElevenLabs, yeah.Rune Kvist [00:22:17]: ElevenLabs, they're all quite different. And so we wanted to design a standard that works for all of the types of agents. And we started with one that was, like, pretty text-based, like, honestly, pretty customer support-focused. That's where there's a lot of existing demand. And then over time, we've picked, some of the frontier companies in each of these other domains that we could work with and build out the standard, so, such that we know that the same standard works for code, it works for customer support, works for automation, et cetera. So that's been one big thing. Yeah, then some of the things that have been top of mind recently, Mythos is bringing up a lot of concerns for security leaders. We're starting to get more and more questions around agent interactions. It's very nascent, at the moment, but it's starting to emerge. There've been a lot of, questions related to OpenClaw and MCP. Again, like agents starting to interact with each other, is really top of mind. Then as coding agents have really taken off, that's also where banks and hospitals, et cetera, are getting more and more precise on what it is they need. So really dialing in as that start to be, like, where most of the tokens flow through in the world, getting much sharper on that.Vibhu [00:23:26]: Can you share for people that are listening that don't really think about this? Like you mentioned, there's the obvious stuff, you know, hallucination, citations. What are best practices that people should do when building agents? Like, if they come to you pretty ready with certification like, you know, they'll probably pass certification. What are the things people don't think about that they should have?Best Practices for Agent Builders: Stress Tests and GuardrailsRune Kvist [00:23:46]: The most important thing is that a lot of companies have not done a serious stress test. They spend most of the time, perhaps rightly so, optimizing for how does it work in the good case, the average case, how high-quality is the output for the customer. And a lot of these companies are pretty new, so they haven't spent a lot of time stress testing the what is there as an adversary on the other side? What are some of the complicated corner cases that you've not really considered? So I think that's, like, a frame of mind. And you'll also see this in startups. It often takes a while until they hire their first security person. They- And that's a whole different kind of risk surface than just building a good product. So a lot of that applies. Most companies actually also have the right kind of architecture. Most of them will have some kind of guardrails in place, either some that come out of the box from their model provider or they'll have built their own filters that sit in between. They just don't work very well. The difference between putting a classifier in place that, like, maybe goes and checks whether you're giving medical advice when you shouldn't and says, “Hey, if this looks like medical advice, filter it out.” Lots of companies have that in place. The question is whether it works. And it's actually pretty fiddly to sit down and think about all the ways in which you could ask for medical advice, read the academic literature on what are the kinds ofRune Kvist [00:25:03]: Framings or tricks you might play to get an AI to give you medical advice when you really shouldn't. And so there's, like, an area of expertise that's just missing. So what we find is that most people have the right building blocks in place. They don'- It doesn'- It's not rocket science, but the finicky thing is, like, getting into the corners and testing whether it works such that you can look your customers in the eye, or maybe a bank or maybe a hospital and be like, “This is going to work for you.”Vibhu [00:25:26]: I see. So we talked a lot about the agent-level certification. Where do you guys go from here? So announcing series A camera, we talked about this a bit. There's the whole security risk of Fable, government stepping in. You guys are kind of announcing that you're also going into model certification?Toward Model Certification: The Government–Lab Trust GapRune Kvist [00:25:46]: When we do a bit of cutting afterwards,Vibhu [00:25:48]: YeahRune Kvist [00:25:48]: We will not yet be announcing this,Vibhu [00:25:49]: NiceRune Kvist [00:25:50]: The question that is top of everyone's minds now is at the model level. And Mythos, then Fable, has really brought this to the fore that in addition to the commercial risk and the kind of economic security risks that are happening at the agent layer, the models are going to present risk in the national security category. The shape of the problem is very similar. You have some people that are on the hook if something goes wrong. In the case of agents, it's often security leaders in the enterprise. In this case, it's the government. They don'- haven't necessarily spent their entire lives thinking about what are the new risks that come here, what is the kind of data you might be looking for, how might you test that? But they do have to make sure that their concerns are addressed. You have some frontier AI companies that are deeply technical. They know a lot about the risks, but they fundamentally have an incentive to not always be truthful. So you have a trust gap between the government and the labs. And in every other industry, you end up with some kind of body sitting between, a neutral third party sitting between those people. There's no other industry where you allow people to audit themselves. So there is going to be a need for a third party that can take the rigor of the labs to run frontier technical evals, but can also speak legible trust in the way that the government trusts PwC to go and run financial audits. And they know that they output audit reports in a way that's consistent, that's easy to read, that's factual, that's, trustworthy. Those two things need to be brought together. And what we've learned from our work with agents is that if you want those-- that communication between those two parties to be smooth, there has to be one common standard that is public, that people can go and inspect. What are the risks that matter? Within each of these risks, what are the kinds of threat models that you're really looking for? You need to specify for each of those risks, what are the guardrails that need to be in place, and what are the tests they need to run to see whether those guardrails are effective? And then you need to go and run audits that are - technical audits that are consistent. So if you're trying to bring trust, it's extremely important that you methodically work your way through the risks. You can't send one researcher in and say, like, “Come back with whatever you find.” You need to be able to explain exactly what you did, exactly what you tried, exactly what you did not try, and therefore the kinds of promises you can and cannot make at the end of it. I think ofNeutral Third Parties, CAISI, and Model Risk AuditsRune Kvist [00:28:13]: Fable as a direct symptom of this problem that the government was told that there's a risk. The government may struggle to assess just how big that risk is. They call Anthropic, and Anthropic is trying to tell them, “Hey, actually, every model can be jailbroken.”Swyx [00:28:28]: That's not what you want to hear, right?Rune Kvist [00:28:32]: As the government, that might be hard to trust.Rune Kvist [00:28:36]: And we think that a broker is the most natural solution. In other markets, you see something like, in financial markets, you see Moody's. Moody's goes in, and they look at a bond, and they output a rating. They say like, “Here's the evidence we found. Here's the rating.” We don't decide whether anyone should buy this bond or not buy this bond. Well, that depends on their risk appetite. But we do provide this common information layer that everyone can rely on. In the case of Moody's, the government, points to them and say, “Hey, pension funds, you should probably really take care. You shouldn't risk your pensioners' money, so you can only invest in triple-A rated bonds.” That means that now the government doesn't have to staff thousands of financial technical experts to rerun forecasts every week to see whether things are correctly rated. They get to point to some neutral third party. So my hypothesis is, my hunch is that you will see a third party that sits between the government and the labs, and it could either be the government builds it themselves. So something like CAISI was set up to do exactly this. And the questionSwyx [00:29:44]: Sorry, I'm not familiar with CAISI.Rune Kvist [00:29:45]: CAISI is the Center for AI Standards and Innovation.Swyx [00:29:49]: Okay.Rune Kvist [00:29:50]: I won't get into the details, but it's a body of NIST that typically sets standards. So it's basically a government body that has AI experts. Yeah, exactly. Exactly.Swyx [00:29:59]: Very key. Very key.Rune Kvist [00:30:00]: Very key.Vibhu [00:30:00]: I think, you know, it's one of those things where when you just sit back and listen-- look at it, like, is there enough technical expertise in the government to measure, test these things right now? Probably not, right? And Fable is a result of, okay, we've had to scale back and pause things,Rune Kvist [00:30:17]: Yeah. And they have excellent people, but they have an extraordinarily small budget compared to the scale of the challenge that's ahead of us. And I think they have a role to play. The question is kind of like, who does what? We have now outlined the jobs to be done, and they're quite extensive. Every model release, there is an astounding-- Given that they take in any input, their risk surface is astounding. And so the question is really: what can only the government do, and what can the market provide here that can keep up with the pace as AI risk changes? Our perspective is that also at the model layer, the risks that people care about today are not the same ones they cared about three months ago. So the pace of legislation is too slow to deal with pinpointing the risks here. And so we think there's a lot that the market can do to surface timely information. Ultimately, there is a bunch of policy decisions here. Is the national security risks of a model too high?Swyx [00:31:12]: Yeah.Rune Kvist [00:31:12]: That's a political answer. But what we want to make sure is that the process that produces this risk information is compatible with very fast innovation. So you don't want to. This is not a question of like, can you slow the things down? Can you keep, the models locked up until-- for months on end until everyone can make a guarantee? But it is this, can you, in the time it. Given that the US is competing with China on releasing models, can you insert risk information that allows the government to, like, make rapid decisions on some of these questions? Balancing that trade-off between failing to adopt AI is going to put us at risk, but also reckless adoption is going to put us at risk. And that's a very kind of fine balance that they're going to need, like, a lot of high-quality intelligence to make.Chinese Models, Data Flows, and National Security ConcernsSwyx [00:31:55]: Just a side mention, because you mentioned Chinese models, any specific concerns that you're hearing from your CISOs about that? ‘cause I guess it's free, but.Rune Kvist [00:32:05]: CISOs have a bunch of concerns around data flows in general that they're really concerned about. So there's a lot of questions like, if these models are Chinese, where does that, where does that data go? I think a lot of this can be addressed, but they come up often.Swyx [00:32:18]: I mean, they understand they're running on American GPUs.Rune Kvist [00:32:21]: Some of them, some of them understand that they're running on American GPUs.Swyx [00:32:23]: They're not, like, phoning home every time you, like, call home.Rune Kvist [00:32:26]: No. A year ago, there was not a lot of understanding of this. I actually think, you're seeing the security leaders becoming kind of AI literate at a blistering pace, and you're actually also seeing my Twitter timeline that's very pilled and my LinkedIn feed that used to not at all be pilled kind of converge. They're both talking about Fable.Swyx [00:32:45]: Right. Yeah, that's true.Rune Kvist [00:32:46]: They are both talking about whether you can prevent models from being jailbroken these days.Swyx [00:32:51]: Yeah.Rune Kvist [00:32:52]: Like national security national security risks are now the conversation that is actually emerging. Other than that, I think you mostly see a kind of general picture: there are no concerns with any particular model or any particular model output, but there is a general nervousness of having critical infrastructure run on models that are not produced in America by Americans where the American government has control.Swyx [00:33:14]: But it doesn't necessarily show up in your framework that directly, or it might, I don't know.Rune Kvist [00:33:18]: There's a bit of stuff in there actually on the, like, the provenance of the models and disclosing that. But I think there's a bunch of use cases where running a Chinese open-source model is just the best solution.Swyx [00:33:27]: Yeah.Rune Kvist [00:33:27]: And a concern is slightly more macro here, which is not best addressed at any particular certification level.Vibhu [00:33:32]: Is there anything interesting that you see at the. You know, if you're trying to fill that middle gap, that mediation gap, any interesting stuff that you guys forecast would be required other than, you know, what the average person might expect?Cyber, Child Safety, Bio Risk, and Expert CoordinationRune Kvist [00:33:47]: There's a bunch of interesting questions about what are the risks that matter here. So right now, the risk of the day is cyber, because it's very real, very tangible. And some of the risks that are also emerging as pretty real and pretty tangible are things like child safety is becoming both extremely important, but also politically important. And then there are some of the risks that are coming down the pipeline that today feel kind of speculative, but people who spend a lot of time with the models see them coming down is things like, risks that relate to biology.Rune Kvist [00:34:18]: And specifically whether models will help adversaries produce biological weapons and making that extremely cheap, extremely accessible, producing-- making the chance of another COVID or worse pandemic. COVID was not engineered to be bad, as if you were trying to do that. So I think those are some of the risks that are coming down the pipeline. I think one other thing to just note is that agents are kind of deliberately narrow. So, like, when a frontier agent company puts a chatbot that interacts with customers, they've really tried to narrow the topics it's interested in talking about. Such that if you ask it, like, “What do you think of the president?” it will just decline, which means that the kind of risk area is somewhat smaller. For models, it is infinite. And so there's not a single expert out there who can competently evaluate the risks of cyberattacks and fifteen-year-olds having month-long conversations with a chatbot and seeing whether it will in fact recommend suicide or something horrendous like that, and can evaluate the risks that terrorists can use AI to produce bioweapons. The risk surface is just too big. And so the central challenge actually becomes how do you get those subject matter experts to work within a one coherent framework that outputs one coherent report and rating that the world can go and inspect? ‘Cause that global perspective is central, but there's not a single organization today that could produce that.Swyx [00:35:47]: And you would be the presumptive one when you put out your model standards.Rune Kvist [00:35:51]: We think there can be one company that can, with a consortium of experts, build one coherent standard. I think we've shown that across all of the enterprise risks today. We think it could be one company that could, with a consortium, specify the audit rules, basically like the inputs and outputs that all these technical experts need. What access do they need? How should they treat infosec- info security? They can look at whether the eval- evals are well-produced without necessarily being able to say, “Hey, is this a threat or not a threat?” But overall, evaluating whether the evals are good, well-constructed, that set of audit rules that basically becomes the interface for all these experts, we think one clearinghouse could put together. To be clear. When I say one company, I think of it as one company coordinating lots of this in the same way that when we saw our consortium, it's not like we say we have all the answers on agent security. What we say is we are taking on the role of eliciting all of the concerns and being the secretary that puts it together and runs a tight house such that the standard updates lockstep every quarter, and that the audit reports that come out, in this case, 100-page audit reports, uniform and crisp and clear all to the level of detail that is required for executives that need to make a clear go/go decision. So that's kind of the role that we think we might play.OWASP, Frameworks, and the Operational Audit LayerSwyx [00:37:11]: I think in many ways you're performing the role that OWASP used to do there, and you said, like, you know, competition and partners.Rune Kvist [00:37:18]: Yeah.Swyx [00:37:19]: Can you go more into, like, how they partner?Rune Kvist [00:37:20]: Yeah. So first of all, OWASP is basically an open source community of security practitioners that are coming together to build frameworks for addressing the latest security concerns. We think they are phenomenal at creating frameworks. We'- In fact, we'- First of all, we're partners with them, so we have a joint article. Two, we've learned a lot from them. We think they're a tremendous source of intelligence. What OWASP does not do is building the machine that runs third-party audits such that a company like Cursor or a company like JPMorgan could get a third party to go and review them against this and say, “Hey, you've passed the standard, and here is the report that you can use to build trust and preempt your partners' or customers' questions.” So they fundamentally try to do something different. You - They are part of the information gathering and intelligence gathering and creating clarity, but the operational layer of turning this into promises is not the business they try to be in.Swyx [00:38:14]: The standard is emerging and is doing very well. Was it necessary to then also do underwriting? Obviously it's in the name, so please remember you thought about it first. I feel like if you just have enough consensus, you don't actually need the money angle, but it does help.Vibhu [00:38:30]: I did want to also note, you guys are a profit company too, right? It's not profit where there's a whole business side to it as well?Why For-Profit Standards and Insurers MatterRune Kvist [00:38:39]: Yeah. Yeah, so I'm just getting crazySwyx [00:38:41]: I think about the money part.Rune Kvist [00:38:42]: Yeah. Yeah, let's get into the money part. Let's start from actually your question, profit versus profit. In the security space today, cybersecurity, most of the standards are produced by nonprofits. I think that's an issue.Rune Kvist [00:39:00]: The question you have to ask yourself is, how do you create good incentives for these standards to be good and keep up?Rune Kvist [00:39:09]: Nonprofits tend to not have these adverse profit incentives where they, hollow out their standard and create a race to the bottom, but they're also not at all responsive by default to the communities that they serve. There's no process-- They don't have customers that they serve where they go and ask, “What do you want? What do you want? What do you want?” And when you look at the overall satisfaction with the security standards today, people tend to just not like them very much. You do see in other domains, that profit standards can serve the world quite well. So there are examples, like we talked about Moody's before. It's not without flaws, but, it is absolutely critical societal infrastructure that gets run at an astounding scale today. Your credit score, it's FICO. It's also a profit business. And when you go back even further in history, some of the crash testing standards came out of insurance companies.Rune Kvist [00:40:06]: The insurance companies together founded the Insurance Institute for Highway Safety because they were very interested in, like, how can we use standards to drive down mortality and save money? Go back, prior-- Our name actually pays homage to the Underwriters Laboratories, UL, which, was started right around when electricity came out. Houses started burning down. Insurers, again, were paying the bill, and they were maybe also good people, but their profit incentive was, let's prevent houses from burning down. Let's test all the electrical products, the light bulbs. All the light bulbs in here are probably tested, the toasters, et cetera. And they set up, an entity to create those standards. Today, UL has a profit entity and a profit entity. What they've recognized, they spun - They started profit. They spun out a profit because what they recognized was like, hey, actually to serve customers well, you need a profit entity. The lesson here is one of the ways that the market can align incentives so you're both responsive to customersRune Kvist [00:41:07]: And not hollowing out your standard over time is to align it with insurers because they fundamentally have good incentives. And so if you're a profit standard that works closely with insurers, you get the feedback loop in such that you're really tuned into your customers, but also have their interest at heart. So that's the model that we - the kind of inspirational model that we've learned a lot from, and that's also where the name comes from. In some ways, the term underwriting can both be associated with insurance, but it's also a broad term for, like, making decisions.Rune Kvist [00:41:40]: If you underwrite a decision, you're fundamentally kind of taking ownership for the consequences of it.AI Insurance Contracts, Lloyd's of London, and ElevenLabsSwyx [00:41:45]: Yeah, I mean, what does an insurance contract look like for AI?Rune Kvist [00:41:49]: Yeah. Most of the demand comes today for insurance contracts is, sitting between people who've built AI and people who are buying AI.Swyx [00:41:56]: Yes.Rune Kvist [00:41:57]: And what you want—the reason why people want insurers involved, both for the traditional reasons, hey, if something goes wrong, we want to be compensated, but it's in particular because insurers can bring trust to the equation. Because insurers will pay for the damages, if they're willing to write an insurance policy, that is them saying, “Hey, we think there is risk here, but that is manageable.” And that is kind of a. Their incentive aligns with the enterprises adopting it, so that's a really a good signal to the market. In the same way, actually, one of the things that Waymo tried to get their first permit to even operate in San Francisco was to get a lot of insurers to stack up a huge insurance policy. In the case if something went wrong, not because Google can't pay, but because it was very valuable to have a third party go and look at that dataRune Kvist [00:42:47]: That are trusted by governments, trusted by enterprises as conservative people and say, “Hey, we've looked at it. We're actually willing to take some of this on our balance sheet.” So that's, that's kind of the reason why people are interested in it. What it looks like is, in some ways like every other insurance contract. You specify what are the perils you want to cover, how much do you want to cover them, like up to what limits, and what does it cost to cover that. And in the case of, if we take a really concrete example, ElevenLabs, bought a first of its kind AI agent insurance policy. They work with some of the biggest, enterprises that work with governments. They're really interested in going above and beyond and making promises to their customers. So they wrote a policy that covers just some of the core concerns that their customers have been asking about. And, the crucial thing was really to get Lloyd's of London, the world's oldest insurer, one of our partners, to look at this data and be that third party alongside us to say, “Hey, we think there's something here that's worth underwriting.” and that's actually what it looks like. And so they will show that contract to their customers, and they can see how much they're covered for. They can see what exactly it covers, and that will also probably change next year. They will want to write an insurance policy that might cover more.Swyx [00:44:04]: When you say Lloyd's, is it reinsurance, or are they sharing somehow at the same level orRune Kvist [00:44:11]: Yeah. So typically, the way, new companies get into insurance is that they partner with insurers such that the insurers take the majority or all of the financial risks. Fundamentally, if insurance is useful, because it brings trust, you have to be able to pay the bill. Lloyd's of London is 400 years old. They've never not paid a claim. They're extremely trusted. What Lloyd's of London struggle to do on their own is to figure out which of the risks are real, what should we be looking for, what are the kinds of technical controls, and running the tests. So they use AIUC-1 as kind of the underwriting framework, and we produce a bunch of eval results that then directly feed in to inform the pricing. So this means that ElevenLabs customers know that payment will be there. They don't have to look to our series A and see, like, do we think they have enough cash on the balance sheet? They will look at Lloyd's.Swyx [00:45:05]: Yeah.Rune Kvist [00:45:05]: Yeah.Swyx [00:45:05]: And Lloyd's, like, famously very creative. I think I remember some headline like, they insured Jennifer Lopez's, butt or something.Rune Kvist [00:45:13]: Correct.Swyx [00:45:13]: Right?Rune Kvist [00:45:13]: And I think, was it, David Beckham's right foot?Swyx [00:45:16]: So, yeah. Right?Rune Kvist [00:45:17]: And stuff like this.Swyx [00:45:18]: So, like, clearly not a large data set.Rune Kvist [00:45:22]: Exactly. It's actually a remarkable institution that's both kind of has some of the truly school virtues of having been around for a long time. They, like, really. They really operate like a trusted entity, and they have appetite to figure out the future. And I think there's a lot of recognition that both there is, like, tremendous amount of risk in AI that is poorly understood today, so getting into this business carries real risks. But also this is where lots of the risk exposure will happen in the future. This is the one market where risk is truly growing. This is the one market that will also take out some of the existing markets. Take, like, auto insurance. When there are no human drivers, how's that market going to look? Well, it's clearly going to change. How are you going to assessSwyx [00:46:08]: You want to insure Waymo?Rune Kvist [00:46:10]: I. All I'll say is the principles for how you insure Waymo are very similar to how you insure other kinds of AI.Swyx [00:46:15]: Right.Rune Kvist [00:46:15]: So again, crash testing, that's what we do for customer share at Lovable. That will also need to happen for Waymo, which is not how you do it for human drivers. So there's this growing awareness that the world is changing very fast, and the only way to learn how to underwrite AI is to write some policies. You may incur some losses and think of that as R&D expense, really. But the question for them is, like, who are the trustedtechnical partners they can get into this business with that can help them navigate and make sure they don't make, kind of foolish mistakes? But also who is willing to hear the wisdom that they have? They've done this before. They've seen it was. They were there when cyber came out. So there are lots of ways in which AI feels completely new, but there's also lots of ways in which risks look the same. And so there's actually a tremendous amount of wisdom sitting in some folks that may have gray hair, but really have, like, a keen sense of, how to quantify risk.Swyx [00:47:08]: Yeah. And the number is. So it's basically like I want fifty million dollars worth of coverage against these perils, and Lloyd's will give you a quote on it, and then you have, like, a small markup or something, and then you turn it around and do that? Is that as simple as it is?Risk Capital, Premiums, and Working with InsurersRune Kvist [00:47:23]: You basically share some of that premium.Swyx [00:47:25]: Yeah.Rune Kvist [00:47:25]: X percent goes to the people who do the pricing of it.Swyx [00:47:28]: You're. It's kind of like a. It's kind of like a merchant bank for insurance type of thing.Rune Kvist [00:47:33]: Exactly. You basically split the fee, and you can think of the insurance supply chain as, like, there's bringing the capital, there is doing the pricing, and there is doing the distribution. And typically, you will pay out some X percent of premium here, Y percent of premium here, and the rest of it will go here.Swyx [00:47:46]: Does all the insurance world work like this, or is there some point at which, like. So if right now you have equity capitalRune Kvist [00:47:51]: Yeah.Swyx [00:47:52]: At some point, maybe you start raising, debt or whatever, and then you have enough of a bank account and enough history, let's say you've been in operation for ten yearsRune Kvist [00:48:00]: Correct.Swyx [00:48:00]: That you don't need Lloyd's anymore?Rune Kvist [00:48:02]: That's totally an option. And I could see some worlds where that makes sense, specifically if there are risks that we feel high confidence that we'd want to insure where the incumbent insurers are too slow to find appetiteSwyx [00:48:13]: Okay.Rune Kvist [00:48:13]: Or simply struggle to evaluate it such that they don't want to do it. But by and large, in general, you do not want to compete with insurers on, bringing risk capital to the game for two reasons. One is that's fundamentally a cost of capital game. They have extremely low cost of capital. Startups have high cost of capital, by and large. And two, you want to hedge your bets, and it's very helpful then to also have a portfolio of home insurance, of car insurance. And we're not about to become a car insurer nor a home insurer.Rune Kvist [00:48:43]: So they have some natural advantages, which makes it much more likely that we'll partner.Swyx [00:48:48]: Yeah.Rune Kvist [00:48:48]: And they bring that, the capital at scale, and we bring the technical expertise.Swyx [00:48:51]: You're, you're going to work with them for a long time.Vibhu [00:48:52]: How are the discussions with the insurers as well? So basically, they're going off of your certification, right? They're trusting the diligence on you that your certification is valid, you tested the right things, and they're backing the money that, you know, you have the right testing in place. So any interesting takeaways from working with insurers?Rune Kvist [00:49:12]: I think the maybe the first thing is they feed into the standard as well. So if there are things that they feel like they need that they're not seeing, we are also taking that as input into the standard, because fundamentally we think a good standard is one that creates a really healthy promise ecosystem, and we think insurers are a critical part of that. And again, they are the most well-incentivized to. They see all the lost data across every. Any particular CISO knows their particular concerns. Insurers see the concerns across the entire portfolio and often have direct access to, like, what exactly happened, who was at fault, et cetera, as they do part of their forensics. So they're actually, like, a great source of intelligence on this. One of the big takeaways from cyber insurance, which is a market that didn't work that well, was that the insurance and the technical expertise was not married up. What our conviction is that standards have to precede insurance. Fundamentally, what everyone first and foremost want, whether you're a CISO at JPMorgan or a CISO at Cursor or an underwriter at Lloyd's of London syndicate, is you want to not have an incidentRune Kvist [00:50:19]: In the first place. You want to know that the risk is well-managed, and only then does insurance start to make sense. So we'll see the standard ecosystem basically run ahead of the insurance. And the reason why we. You asked us kind of why I also do insurance, this is kind of proving what we think a whole promise confidence infrastructure ecosystem needs to look like, and we think it's very compelling to bring that to life, even if we think the standard is kind of the core linchpin that unlocks the rest.Claims, Liability, Air Canada, and Duty of CareSwyx [00:50:44]: There's been no claims yet, right?Rune Kvist [00:50:45]: Nope.Swyx [00:50:46]: This is one of those things where, you know, if people haven't really worked through what it means to cover things.Rune Kvist [00:50:52]: Yeah.Swyx [00:50:52]: So for example, I pay Cursor $20 a month.Rune Kvist [00:50:55]: Yep.Swyx [00:50:56]: And I write a vibe code something that makes, a plane crash, causing $200 million worth of damage.Rune Kvist [00:51:02]: Yes.Swyx [00:51:02]:

This week, we invited our state senator, Katie Muth, to give us a peek behind the curtain into her work to stop the Pennhurst data center and the unexpected factors that make that work harder. No matter where you live, this is essential information to understand how this relatively new issue dramatically affects your life and well-being. 00:00 - Introduction 00:57 - How Does the Data Center Issue Uniquely Affect Pennsylvania? 05:54 - Pennsylvania's Energy Infrastructure 09:05 - Background Info on Data Centers 15:30 - The Aidans' Plan to Bring Pennsylvania Back 17:00 - Our Community, Data Centers, and the Environment 50:00 - Dyatlov Pass, the Khamar Daban Incident, and the Dangers of Infrasound 54:20 - Will Data Centers Bring in Tax Revenue? 57:42 - It's All the Oil and Gas Lobby? Always Has Been 1:16:00 - The Politics of Data Centers 1:30:08 - AI in the Workplace and Social Life 1:35:43 - Campaign Finance, Corruption, and Issues in State Government 1:57:00 - Remediation and Regulation 2:01:14 - Local Control 2:13:50 - Conclusion

The Vapor Intrusion 101 training series provides an overview of vapor intrusion (VI) and presents information from the 2026 ITRC VI Toolkit (which includes fact sheets, technology information sheets, and checklists). This course introduces participants to the fundamentals of vapor intrusion, the process by which vapor-forming chemicals in contaminated soil or groundwater volatilize and migrate into buildings. The course will discuss sources, pathways, and receptors. It will identify and assess VI risks in various settings (residential, commercial, industrial) and familiarize participants with regulatory frameworks and guidelines (e.g., USEPA, state-specific regulations). The participants will gain working knowledge of how to develop a Conceptual Site Model (CSM), design and implement sampling strategies, establish data quality objectives (DQOs), and conduct data and risk evaluations. It will provide an overview of mitigation strategies, including various closure strategies, land use covenants, and institutional controls. Session 1 will focus on:What is Vapor IntrusionVI Exposure PathwayVI in Practice - including common CSMs, Scenarios, and ChemicalsPotential Limiting Factors for VI - PVI vs Chlorinated VI, Geology, Hydrogeology, and Building Operating ConditionsHow is VI Different & Challenges in Evaluating VI Session 2 will focus on:How VI is DifferentHow to assess VI - CSM, Sample Collection, Data Interpretation, Risk Assessment, and Project Life CycleManaging VI Risk at a Site - Mitigation, Remediation, MonitoringWhat does Closure look like & Various Exit Strategies The course will provide connections to the 2026 ITRC VI Toolkit to help the audience understand how to find and use these new resources for VI sites. To view this archive online or download the slides associated with this seminar, please visit http://clu-in.org/conf/itrc/VI-introductory_090826/

In this The CIRS Group Podcast episode, hosts Jacie and Barbara interview Max McCord, an indoor environmental professional and president of the Stonecrest Team, about why mold remediation projects can fail even after visible mold is removed. Max explains that the biggest misses are often hidden, hard-to-see species like whitish Aspergillus, and that relying on basic air sampling can wrongly suggest a home is “clear,” while PCR-based testing, such as ERMI dust tests, can reveal what was missed.  He describes using detailed building history, CIRS-focused building science, macro photography, and advanced thermography to identify microclimates, insulation and vapor issues, and other hidden sources. The conversation also covers common containment and demolition mistakes that spread contamination, why coordination among IEPs, remediators, HVAC and insulation contractors matters, and how post-remediation “clearance” can be undone during remodeling by contaminated tools and materials. Max shares his personal CIRS diagnosis and his work with Christian Medical Ministries. Check out https://www.stonecrest.team and https://www.christianmedicalministries.org to learn more. TIMESTAMPS 00:00 Intro - meet Max McCord 03:20 Why remediation fails 07:46 Tools to detect hidden mold 13:09 Teamwork between IEPs, remediators and contractors 16:28 Containment done right 20:22 Tips to make sure things are done correctly 26:52 Max shares his own CIRS diagnosis 31:02 Ministry and Resources 34:15 Wrap Up and Next Steps For more information and support, join us at https://thecirsgroup.com HELPFUL LINKS: Work with Max McCord: https://www.stonecrest.team/ Christian Medical Ministries: https://www.christianmedicalministries.org/our-board Order Jacie's book! The 30 Day Carnivore Bootcamp: https://a.co/d/7MgHrRs The CIRS Group: Support Community: https://thecirsgroup.com Instagram: https://www.instagram.com/thecirsgroup/ Find Jacie for carnivore, lifestyle and limbic resources: Jacie's book on the Carnivore diet!  https://a.co/d/8ZKCqz0 Instagram: https://www.instagram.com/ladycarnivory YouTube: https://www.youtube.com/@LadyCarnivory Blog: https://www.ladycarnivory.com/ Find Barbara for business/finance tips and coaching: Website: https://www.actlikebarbara.com/ Instagram: https://www.instagram.com/actlikebarbara/ YouTube: https://www.youtube.com/@actlikebarbara Jacie is a Shoemaker certified Proficiency Partner, NASM certified nutrition coach, author, and carnivore recipe developer determined to share the life changing information of carnivore and CIRS to anyone who will listen. Barbara is a business and fitness coach, CIRS and ADHD advocate, writer, speaker, and a big fan of health and freedom. Together, they co-founded The CIRS Group, an online support community to help people that are struggling with their CIRS diagnosis and treatment.

Light Science Technologies Holdings PLC (AIM:LST, FRA:9FD) CEO Simon Deacon spoke with Proactive's Stephen Gunnion about growing opportunities for the company's passive fire protection (PFP) division, including a major new public-sector fire safety and building remediation framework from Efficiency East Midlands (EEM). Deacon said EEM has launched an £800 million fire safety and building remediation framework for public buildings in the Midlands, replacing the existing one and set to start in February 2027. LSTH is focused on two lots covering external walls, facades, cladding and cavity barriers, worth a combined £584 million over four years. The company is seeking to get specified and win cavity barrier remediation work under the framework, supporting growth of its PFP division and IP-protected Injectaclad solution. Deacon also highlighted increased activity since the Building Safety Regulator moved between government departments at the end of January, roughly doubling the company's work compared with the previous 12 months and boosting its quoted pipeline. "Our £20 million quoted pipeline this year, we've had 11 projects which are live projects currently underway across the country," he said, spanning schools, hospitals, hotels and social housing. Deacon pointed to a remediation market worth more than £14 billion, with work potentially continuing for 15 to 20 years. Looking ahead, he expects growing demand for Injectaclad to support margins and cash generation, with the PFP division potentially leading the group in revenue, gross margin and cash generation in 2027. Visit Proactive's YouTube channel for more company interviews and market updates. Don't forget to give the video a like, subscribe to the channel and enable notifications for future content. Read Proactive's Editorial Policy here: https://www.proactiveinvestors.co.uk/pages/editorialPolicy #LightScienceTechnologies #LSTH #SimonDeacon #Injectaclad #FireSafety #BuildingSafety #PassiveFireProtection #PFP #BuildingRemediation #FireProtection #Cladding #CavityBarriers #BuildingSafetyRegulator #SocialHousing #UKConstruction #AIMStocks #UKInvesting #ProactiveInvestors

In this short podcast episode, Bryan and Roman talk about the ethics of IAQ, particularly in terms of microbial growth testing vs. remediation conflicts, based on Roman's recent experience hiring a mold assessor and then a remediation expert in his home. Remediation is governed by S520 of the IICRC. Microbial growth is tricky because it is often hidden and has real health effects, but there is a history of fraud in its assessment and remediation. To help combat that fraud, in Florida, assessment and remediation are two separate practices with two separate licenses. Roman got to see the differences in action by working with different assessment and remediation professionals and witnessing how the two practices depend on each other but differ. First, an assessor came to Roman's house with testing equipment and a means of collecting lab samples; this assessment started outdoors and continued indoors, and the assessor produced a thorough 87-page report with the tool findings, lab findings, and pictures. As with HVAC, the results are based on science and data, and reputable assessors are licensed, independent, and have the tools and training to carry out the job without using scare tactics on homeowners. After the assessment, remediation must be done separately. In Roman's home, all equipment was isolated, and the house was brought under negative pressure with HEPA filtration. There was also surface cleaning and HEPA vacuuming. Then, after remediation, there is a post-remediation verification (PRV). The PRV is carried out by a mold assessor, not a remediator, and determines whether the remediator did their job (and in some states, like Florida, there are criminal penalties for referral payments between assessors and remediators). A PRV consists of IAQ tests and lab measurements, and the results should reveal lower numbers than the original assessment and the outdoor air.   Have a question that you want us to answer on the podcast? Submit your questions at https://www.speakpipe.com/hvacschool Purchase your tickets or learn more about the 8th Annual HVACR Training Symposium at https://hvacrschool.com/symposium. Subscribe to our podcast on your iPhone or Android. Subscribe to our YouTube channel. Check out our handy calculators here or on the HVAC School Mobile App for Apple and Android.

Dr. Wilson brings us another solo episode this time, opening up about how accommodations can make an enormous difference for students who learn and process information differently. Extended time, audiobooks, speech-to-text, movement breaks, preferential seating, and other means of support can truly reduce barriers and help students participate more successfully in school, but what happens when those supports improve performance but do very little to address the underlying skills a student still needs to develop? Dr. Wilson touches upon the distinction between accommodations, interventions, and modifications, focusing on what can happen when skill building is missing from a student's educational plan, and she explains why helping a child complete an assignment, produce more writing, or finish a test does not necessarily mean that the child is becoming a stronger reader, writer, or independent learner. Using examples involving dyslexia, dysgraphia, ADHD, and sensory differences, Dr. Wilson examines the problems with relying solely on accommodations and discusses several examples: audiobooks can provide access to grade-level material, but they don't teach decoding; typing and speech-to-text can make it easier to express ideas, but they don't automatically strengthen written organization or language formulation; extra time and assignment chunking can reduce pressure for students with ADHD, but they don't inherently teach planning, organization, or self-monitoring. The conversation also considers what happens as students get older. Dr. Wilson discusses the importance of pairing accommodations with evidence-based intervention and explicitly teaching skills which can gradually increase independence over time without treating support as something that should simply be removed or using skill development as an excuse to force neurodivergent students to mask. Technology adds another interesting layer to Dr. Wilson's lecture, particularly as calculators, speech-to-text, and AI can help compensate for difficulties almost instantly. Dr. Wilson asks listeners to consider an important distinction: Are we helping students perform better right now, or helping them become more capable over time? Show Notes: [0:48] - This episode covers how accommodations provide essential access but cannot replace interventions that actually build underlying skills. [3:30] - Without targeted intervention, accommodations may improve performance while still leaving the underlying difficulties without improvement. [5:54] - Hear how effective support pairs accommodations with skill building, particularly for students struggling with reading and written expression. [8:04] - Dr. Wilson points out that students with ADHD need explicit instruction in executive functioning skills and also accommodations that reduce those barriers. [11:23] - Accommodations should support growth rather than lower expectations. [14:11] - In closing, the ultimate goal is more independence, confidence, and long-term success, not just completing the next assignment. Links and Related Resources: Episode 237: Beyond Accommodations: How Neurodivergent Students Can Thrive in College with Eric Endlich, Ph.D Episode 246: Accommodations, Modifications, or Remediation? How to Know What Your Child Really Needs with Amy Cushner Episode 248: The Power of Early Intervention: How Neuroplasticity Shapes Young Brains with Dr. Viannae Nelkin Episode 261: When Helping Becomes Overhelping: Helping Neurodivergent Kids Build Independence with Dr. Tara Williams More Podcast Episodes Join Our Community: Substack    

Podcast: Nexus: A Claroty Podcast (LS 32 · TOP 5% what is this?)Episode: Tal Kollender on Closing Remediation Gaps in SecurityPub date: 2026-08-30Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationRemedio cofounder and Chief Executive Officer Tal Kollender joins the Nexus Podcast to discuss the challenges and security gaps enterprises and critical infrastructure organizations face with insecure configurations and other risky exposures. As AI and advanced attackers accelerate the speed at which exposures are uncovered and exploited, organizations are beginning to consider automated remediation. Subscribe and listen to the Nexus Podcast here. The podcast and artwork embedded on this page are from Claroty, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Remedio cofounder and Chief Executive Officer Tal Kollender joins the Nexus Podcast to discuss the challenges and security gaps enterprises and critical infrastructure organizations face with insecure configurations and other risky exposures. As AI and advanced attackers accelerate the speed at which exposures are uncovered and exploited, organizations are beginning to consider automated remediation. Subscribe and listen to the Nexus Podcast here. 

Have you already remediated your home, gotten your ERMI results back, and still don't feel any better?Or - have you recently been told that the ERMI test you have isn't low enough, despite having symptoms that are significantly better since lower your mold exposure in your home?If you said yes to ANY of these questions, then this episode is for you!In today's episode, I'm walking you through how clean is clean enough in your home after mold exposure — so you can stop chasing a perfect ERMI score and start healing in the home you're already living in.Today, I'll be breaking down:The biggest myth about what is a "good" score for an ERMI test How to make progress in healing from toxic mold even if you can't live in a perfectly clean, remediated home right away Real stories from clients and past guests who made their homes livable again without gutting everything at once11 ways to lower your mold exposure at home — including one thing you can start doing tonight for free!What to do if your ERMI score truly is low, but you're still stuck with symptoms If you're tired of feeling like your mold healing has stalled out, exhausted from wondering whether you need anotherround of mold remediation, or ready to stop holding your breath every time you walk through your own front door — and you don't want to spend another dollar guessing — then this episode is for you! TIMESTAMPS:00:00 - Clean Enough After Mold 01:30 - Podcast Welcome And Disclaimer 02:41 - ERMI Myth And Reality 05:11 - Progress Over Perfection 06:32 - Real World Wins With Steps 11:16 - Defining Clean Enough 12:50 - 11 Ways To Lower Exposure 18:19 - Out Of Home Exposure Clues 21:09 - When Symptoms Still Persist 22:09 - Wrap Up And Next Steps EPISODES MENTIONED:Catch up and binge our 1st Mold Series episodes here! WORK WITH US:Option #1)

Have you already remediated your home, gotten your ERMI results back, and still don't feel any better?Or - have you recently been told that the ERMI test you have isn't low enough, despite having symptoms that are significantly better since lower your mold exposure in your home?If you said yes to ANY of these questions, then this episode is for you!In today's episode, I'm walking you through how clean is clean enough in your home after mold exposure — so you can stop chasing a perfect ERMI score and start healing in the home you're already living in.Today, I'll be breaking down:The biggest myth about what is a "good" score for an ERMI test How to make progress in healing from toxic mold even if you can't live in a perfectly clean, remediated home right away Real stories from clients and past guests who made their homes livable again without gutting everything at once11 ways to lower your mold exposure at home — including one thing you can start doing tonight for free!What to do if your ERMI score truly is low, but you're still stuck with symptoms If you're tired of feeling like your mold healing has stalled out, exhausted from wondering whether you need anotherround of mold remediation, or ready to stop holding your breath every time you walk through your own front door — and you don't want to spend another dollar guessing — then this episode is for you! TIMESTAMPS:00:00 - Clean Enough After Mold 01:30 - Podcast Welcome And Disclaimer 02:41 - ERMI Myth And Reality 05:11 - Progress Over Perfection 06:32 - Real World Wins With Steps 11:16 - Defining Clean Enough 12:50 - 11 Ways To Lower Exposure 18:19 - Out Of Home Exposure Clues 21:09 - When Symptoms Still Persist 22:09 - Wrap Up And Next Steps EPISODES MENTIONED:Catch up and binge our 1st Mold Series episodes here! WORK WITH US:Option #1)

Not all mold testers are created equal. In this episode, we break down why hiring a mold inspector with hands-on remediation experience makes all the difference — and why skipping this step can cost you thousands of dollars. We cover: The blind spots a "testing-only" inspector can miss that a remediation-experienced tester catches. How remediation experience changes the way someone reads lab results, samples, and site conditions. If you're dealing with a mold problem — or just want to protect yourself before you have one — this episode gives you the questions to ask. We have several digital bundles available on Stan store. Copy and paste this link https://stan.store/csimoldguy We appreciate all of you, have a great week!

In this episode, we welcome back Danielle Stevenson, founder and Executive Director of the Centre for Applied Ecological Remediation (CAER), to explore the transformative potential of ecological remediation. We also feature clips of Merlin Sheldrake, the biologist and bestselling author of Entangled Life: How Fungi Make our World. He spoke at the 2024 Bioneers Conference, stressing how critically important fungi are and discussed the visionary work of the Society for the Protection of Underground Networks (SPUN) and its efforts to map and protect the mycorrhizal fungal communities of the planet. Join us as Danielle discusses innovative nature-based techniques for cleaning up contaminated sites, the importance of community involvement, and the vital role of fungi and native plants in restoring our ecosystems. Discover how we can collectively address pollution and promote environmental justice while honoring Indigenous practices and knowledge. Danielle continues the conversation on phyto & mycoremediation, and post-fire & ecosystem restoration. Danielle's restoration techniques allow fungi and native plants to break down toxins such as: petroleum, plastics, and pesticides into less toxic chemicals. CAER's mission is to advance research and application of ecological remediation to equitably address pollution, promote public health, provide education and workforce development, build climate resilience & ensure environmental justice. Regeneration is possible in even the most dire situations if we follow the ways of Nature. Danielle joins us to explain how we can be part of this collective remembrance. Support the Podcast via PayPal https://www.paypal.com/donate/?hosted_button_id=LBGXTRM292TFC&source=url For an extended interview and other benefits, become an EcoJustice Radio patron at https://www.patreon.com/ecojusticeradio Danielle Stevenson [https://www.danielle-stevenson.com/] founded and runs the Centre for Applied Ecological Remediation (or CAER) [https://caer.earth/] and is the Founder & Director of DIY Fungi. She is an environmental toxicologist, applied mycologist, and bioremediation innovator with expertise in soil, water, and waste remediation. She has led community-academic-government partnerships to develop accessible soil testing programs and implement nature-based cleanup strategies, including plant-fungal remediation models. She provides approaches for post-fire bioremediation projects, and advances scalable bioremediation solutions for polluted sites. Carry Kim, Co-Host of EcoJustice Radio. An advocate for ecosystem restoration, Indigenous lifeways, and a new humanity born of connection and compassion, she is a long-time volunteer for SoCal350, member of Ecosystem Restoration Camps, and a co-founder of the Soil Sponge Collective, a grassroots community organization dedicated to big and small scale regeneration of Mother Earth. Podcast Website: http://ecojusticeradio.org/ Podcast Blog: https://www.wilderutopia.com/category/ecojustice-radio/ Support the Podcast: Patreon https://www.patreon.com/ecojusticeradio PayPal https://www.paypal.com/donate/?hosted_button_id=LBGXTRM292TFC&source=url Executive Producer and Intro: Jack Eidt Hosted by Carry Kim Engineer and Original Music: Blake Quake Beats Episode 290

Matt Cook of HomeTeam Inspection Services discusses indoor air quality, inspection, pre-remediation, and how restorers can build stronger relationships with inspectors on the latest episode of Ask The Expert.

What Blocks Brain Recovery After Stroke: The Exposures Nobody Tests For Introduction In 1987, Dr. Robert Hedaya found an office he loved. It overlooked a stream and a forest, and it had a balcony. Within about an hour of arriving each morning, he would become tired and mentally foggy, something he describes as unlike him. It took him time to work out what was happening. The building had mold. He is a Clinical Professor of Psychiatry at Georgetown University Medical Center and a pioneer of functional medicine psychiatry. He had spent his career studying why brains underperform. And he still didn’t see it until it was affecting him personally. That story is worth sitting with, because it goes to the heart of a question most stroke survivors eventually ask: if I’m doing the therapy, the exercises, the sleep, the diet, why am I still stuck? Why this question matters more than any rehab program When Dr. Hedaya returned to Recovery After Stroke for his third conversation with Bill Gasiamis, the topic was not a new treatment. It was the opposite: the things that get in the way of treatments already working. His argument is structural. After a stroke, the brain rebuilds by growing new connections between neurons. That process is physical. It requires materials, energy, and an absence of interference. If something is interfering, no amount of repetition in a rehab gym will overcome it. So the useful question is not only what helps my brain recover but also what blocks brain recovery after stroke and whether any of it is happening in your own house, your own mouth, or your own bloodstream without anyone having looked. Dr. Hedaya raised three: mercury, mold, and Lyme. Mercury: how a metal stops neurons from branching Picture a neuron as a tree in winter: a trunk with branches extending outward. After a stroke, under the right conditions, neurons grow new branches to make new connections. To do that, the cell has to lay down a structure for the new branch to grow through. It uses a protein called tubulin, small oval molecules that link together into a tube, the way Lego pieces connect to form a ring. Mercury interrupts that linkage. Dr. Hedaya points to footage from the University of Calgary, filmed in 1999, showing the process under a microscope: the growing nerve branch shrivels and retracts within seconds of mercury exposure. It runs about two and a half minutes and is worth watching, because seeing it is more persuasive than reading about it. Where does mercury come from? Two main sources. Dental amalgam fillings, the dark grey ones, were largely phased out from roughly the 1970s onward, which means people now in their fifties and sixties are the most likely to still have them. And fish. Mercury accumulates up the food chain, so large predatory fish such as tuna and swordfish carry substantially more than small fish. Sardines, anchovies, herring, and mackerel carry very little, and bring DHA and B12 with them, the raw materials neurons need. Testing involves a baseline urine sample, then a challenge dose of DMSA (a sulfur-containing compound), then a second sample. A jump between the two indicates mercury was being stored and is now being pulled out. If you have amalgam fillings removed, Dr. Hedaya is emphatic that it should be done by a biological dentist who follows a protocol: preparation with sulfur-containing compounds beforehand, a dam in place during the procedure, and rinsing afterward. Removal done badly can expose you to more mercury than leaving it alone. Mold: the ceiling Dr. Hedaya says he has never seen broken This is his strongest claim, and he states it without hedging: he has not seen anyone fully recover from a neurological problem while living in a mold-exposed environment. His estimate of the ceiling is around fifty percent improvement. There are two separate things at work. The spores the visible organism. And the mycotoxins, which are molecular, airborne, invisible, and travel far beyond the patch you can see. They inhibit mitochondria, which is how cells produce energy, and they increase oxidation, which is hard on neurons. You cannot rule mold out by smell or by looking. Dr. Hedaya has every patient run an ERMI test Environmental Relative Mold Index. You mark ten areas in the home that don’t get cleaned, wipe them down, leave them for a month, then collect dust with a supplied cloth and send it to a lab. He uses Mycometrics. The second test asks a different question: is your immune system actually reacting? A lab such as MyMycoLab measures IgE (an immediate response, within minutes to hours) and IgG (a delayed response that can begin a day or two later and persist for weeks). You then compare which molds are in your home against which ones your immune system is responding to: Aspergillus, Cladosporium, Chaetomium, Stachybotrys, and others. In Dr. Hedaya’s experience, the two lists usually overlap. Remediation is where it becomes expensive and inconvenient. Cleaning the visible growth achieves little on its own. You have to find the water: poor grading, a roof leak, blocked downspouts, a badly installed HVAC system, damp ductwork, because if the water source remains, so does the mold. As Bill put it in the conversation: there is no point putting a year of work into a rehabilitation program and then walking out of it into a moldy house. The cost of remediation is real. So is the cost of never getting past fifty percent. Lyme disease: the great imitator Lyme is a close relative of syphilis, which was historically called the great imitator because it could present as almost any disease. Lyme behaves the same way, and a single tick can carry around twenty pathogens that affect humans, including Bartonella and Babesia, both of which drain cellular energy. Dr. Hedaya’s issue is with the testing. It relies on antibodies, and antibodies take weeks to develop, so testing soon after a bite returns a negative that means nothing. The result is also reported as a binary against an optical density threshold: above the cutoff you have it, below it you don’t. His comparison: a blood glucose of 120 is not diabetes; 121 is. The line does not reflect biology. He also rejects the common reassurance that a tick embedded for under 24 hours is safe. His word for it was “insanity.” Where to start Asked which of the three to address first, his answer was immediate: mold. Mercury needs no test to begin acting on; switch to smaller fish, eat more cruciferous vegetables, garlic, cilantro, and greens, and you are doing something useful whether or not you had a problem. Test in six to twelve months if you want to know. Lyme comes last, unless you have had a recent tick bite. And mold has to be dealt with before Lyme treatment is worth attempting. How to raise this with your doctor Dr. Hedaya’s advice here is practical, and it applies well beyond this topic. Don’t arrive with a theory. Arrive with a literature review. He suggests using SciSpace over PubMed; ask it for a literature review on the effects of mold on the human nervous system, and it will assemble one in fifteen or twenty minutes. Print it, along with a couple of the underlying papers. Then add the step most people skip: ask it for the counter-argument. Ask why mold might not be a factor in brain function. You are not there to win. You are there to have a real conversation, and a doctor is far more likely to engage with someone who has already tested their own position. If they refuse outright to order the testing? His view was blunt: find another doctor. Getting out of your own way None of this replaces rehabilitation. It removes the obstacles to it. That distinction matters, because the work you are already doing is not wasted; it may simply be running into something invisible. Checking your fillings takes a minute and someone willing to look in your mouth. Testing your house takes a month and a cloth. Neither is a treatment. Both are ways of making sure the treatment can do its job. This is the third conversation with Dr. Hedaya on this show. The first covered photobiomodulation and laser therapy (https://recoveryafterstroke.com/photobiomodulation-stroke-recovery/). The second covered hormones, thyroid function, and fatigue (https://recoveryafterstroke.com/hormones-and-stroke-recovery-dr-robert-hedaya/). Both are useful companions to this one. If you want a fuller framework for thinking about recovery, Bill’s book The Unexpected Way That A Stroke Became The Best Thing That Happened walks through ten tools for recovery and personal transformation. You can find it at https://recoveryafterstroke.com/book. And if this show has helped you, you can support it financially at https://patreon.com/recoveryafterstroke. Footer Disclaimer This blog is for informational purposes only and does not constitute medical advice. Please consult your doctor before making any changes to your health or recovery plan. Related links: Dr. Hedaya’s practice First conversation, photobiomodulation Second conversation, hormones The mercury video, University of Calgary Background on that video ERMI mold testing lab Mould antibody blood testing Tick-borne and Lyme testing Literature reviews in minutes Research database The toxins textbook he mentions The post The Things Getting In The Way Of Your Recovery – Dr. Robert Hedaya appeared first on Recovery After Stroke.

Sumedh Thakar joined Qualys as an early software engineer on the scanner, back when a 90-day scan cycle came with another 90 days to fix whatever it found. Twenty-three years later he leads the company, and the number he uses now is 90 seconds. At Black Hat USA 2026 he walks through what that compression asks of security teams. So what has actually changed? The questions have not. Where are my assets, what is my assessment of them, what do I prioritize, and what do I fix. Thakar points at the clock instead, citing a CISA directive that gives government agencies three days and zero-day conversations built around a 24-hour window. Layering dashboards on top of that produces what he calls dashboard tourism when nothing gets fixed at the end of it. Qualys organizes its response around three pillars. AI speed detection compresses the gap between a vendor disclosure and a confirmed finding. Hyper prioritization runs an actual exploit to see whether firewall and EDR controls already block it, cutting a theoretical 1% down to roughly 20% of that 1%. Autonomous remediation applies the fix without routing it through a human first. How far along is autonomous patching already? Qualys has deployed over half a billion patches, 150 million of them in the past 12 months, and 40 million of those went out with no human intervention. Thakar describes a global company with 450,000 employees running the agent for autonomous patching, where the board metric is a maximum four-hour exposure window from the time a patch is released rather than a count of vulnerabilities. He expects the monthly patch cadence to give way as disclosures accelerate. Qualys recently released InstaScan, which Thakar calls scanless scanning, delivering a finding within an hour of a vendor disclosure. A patch reliability score built using AI lets an agent judge whether a patch is dependable and reboot-free before applying it on a laptop. His closing advice to CISOs is to show up as a business partner. The board and the CEO need visibility into potential loss, current spend, and whether risk sits inside an acceptable appetite. For a $500 million business that means pricing what a breach would cost, funding the reduction of an $80 million exposure, and transferring what remains to cyber insurance. His shorthand for the operating model is the ROC alongside the SOC. This is a Brand Briefing. A Brand Briefing is an on-location conversation recorded on site at Black Hat USA 2026, putting a spotlight on the guest and their company and pairing it with the editorial reach of ITSPmagazine. Learn more: https://www.studioc60.com/performance/#briefing GUEST Sumedh Thakar, President and CEO at Qualys On LinkedIn: https://www.linkedin.com/in/sumedhthakar/ RESOURCES Black Hat USA 2026 event coverage: https://www.itspmagazine.com/black-hat-usa-2026-cybersecurity-event-coverage-in-las-vegas Qualys: https://www.qualys.com/ InstaScan announcement: https://www.qualys.com/company/newsroom/news-releases/usa/qualys-launches-instascan-to-detect-vulnerabilities-within-minutes-of-disclosure Agent Insta and scanless detection: https://blog.qualys.com/product-tech/2026/08/03/instascan-agent-insta-scanless-detection The Risk Operations Center with Enterprise TruRisk Management: https://blog.qualys.com/product-tech/2024/10/09/qualys-launches-enterprise-trurisk-management-the-industrys-first-cloud-based-risk-operations-center Are you interested in telling your story? ▶︎ Full Length Brand Story: https://www.studioc60.com/content-creation#full ▶︎ Brand Spotlight Story: https://www.studioc60.com/content-creation#spotlight ▶︎ Brand Highlight Story: https://www.studioc60.com/content-creation#highlight ▶︎ Get your own Brand Briefing at an upcoming event: https://www.studioc60.com/buy-brand-briefings KEYWORDS Sumedh Thakar, Qualys, Sean Martin, brand briefing, brand story, brand marketing, marketing podcast, Black Hat USA 2026, autonomous remediation, patch management, vulnerability management, hyper prioritization, AI speed detection, scanless scanning, InstaScan, risk operations center, cyber risk management, zero day remediation, CISO, exposure management Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.

A bi-weekly news show informing you on the latest in Bitcoin, privacy and open source tech hosted by Ungovernables, Max and Q. THIS IS THE TWEET Q WANTS YOU TO SEE: https://x.com/justh0dl/status/2086202393998291138AOBWhat a fucking weekKeyOS v1.3.1 now publicly availableSomething exciting to share on Friday's FTF (delayed by 2 weeks)NEWSThe Coldcard entropy catastropheSources: Coinkite technical backgrounder / The Rage, L0la L33tz / TRM Labs / coldcard.rip / cktripwire.com / Bitcoin Magazine victim surveyEXPLAINERThe largest self-custody theft on record, and it traces back to a single wrong conditional. In March 2021 a build guard checked whether Coldcard's hardware random number generator was defined rather than whether it was enabled, so seed generation silently fell back to a deterministic software PRNG. Every seed made on an affected device from that point carried roughly 40 bits of entropy on Mk2 and Mk3, and about 72 on Mk4, Mk5 and Q, instead of the intended 128. That is guessable. Someone did the maths offline, derived the addresses, checked them against the public chain, and swept everything with a balance. Somewhere between 1,400 and 1,800 bitcoin gone, depending on whose forensics you trust, with a median victim loss of one BTC. The part people keep missing: updating the firmware does not fix an existing seed. A weak seed is weak forever.ACTION FOR LISTENERSMove funds to a brand new seed BEFORE upgrading firmware (Lopp's guidance, on reports of update problems).Use high fees. If you see your own coins in the mempool, the attacker opted into RBF and you can outbid them. Window is minutes.Multisig users: consider a private mempool like Marathon's Slipstream.Keep the device; the UID may prove ownership in any recovery process.Updating does NOT fix an existing seed. A weak seed is weak forever.You are exempt only if you added 50+ fair independent private dice rolls, or used a strong unique BIP39 passphrase stored separately.BTCPay Server: unauthenticated LND macaroon theft, actively exploitedSources: BTCPay security advisory / v2.4.2 release / CoinDesk / TFTCCRITICAL FRAMING NOTE: this is ONE story, not two. The "BTCPay bug" and the "LND credential exploit" are the same event. The vulnerability is the macaroon leak. The Aug 8-9 wave of coverage is follow-up hardening, not a new incident. Do not present them separately.REMEDIATION (updating alone is NOT enough)Update to v2.4.2. Verify "2.4.2" in the footer.Update NBXplorer to 2.6.10+.Revoke and regenerate LND macaroons. Updating stops new theft but does nothing about already-stolen credentials. Deleting files is insufficient; the macaroon root signing key must be destroyed at node level. v2.4.2 does this automatically for standard Docker deployments. Custom reverse proxies, separate Tor services or port forwarding must rotate manually.Move funds out of any BTCPay-generated on-chain hot wallet and recreate it.Update LND to 0.21.1. Audit for unrecognised channel closures, unknown peers, unexplained balance changes.SIDE EFFECT WORTH FLAGGING: v2.4.2 removes public LND API access on Docker deployments, which breaks remote wallet connections such as Zeus connecting to your own BTCPay node. Intentional, no restoration timeline published.BREAKING CHANGE: Greenfield Basic authentication disabled by default five minutes after account creation (#7492). BTCPay: "We are not aware of any user impacted by this breaking change, as API Keys authentication is generally used."Boltz suspends all swaps indefinitelySources: Boltz statement / canary.boltz.exchange / The Defiant / TFTC / Bull Bitcoin statementCORRECTION TO THE COMMON FRAMING: Boltz has not shut down. It suspended swap services indefinitely. And the canary sequence runs the opposite way to the rumour: lapsed → suspended → renewed clean.The Bitcoin Red TeamSources: Calle and Rob Hamilton on Nostr/X / Bitcoin Magazine / CoinDesk / TFTC / OpenSats Red Team FundSUMMARYThis is the story that explains the other four. After the Coldcard exploit, Calle and Rob Hamilton pointed frontier AI models at the open-source Bitcoin stack and started auditing everything. In 108 hours, 25 developers scanned 501 projects and produced 7,958 findings, 1,280 of them rated high or critical, at a compute cost north of 58,000 dollars. They found the BTCPay bug's neighbours, and Boltz cited exactly this dynamic when it switched itself off. The uncomfortable symmetry is that the same capability doing the defending is what an attacker almost certainly used on Coldcard in the first place. And the bottleneck turns out not to be finding bugs, it is telling anyone: only 19.5% of the projects they scanned even have a SECURITY.md file, and only 13.1% list a security contact. The scanners move at machine speed. Responsible disclosure is still hunting around for an email address.BIP-110: the fork that mined two blocks and frozeSources: bip110monitor.com / Peter Todd code review / Aaron van Wirdum, Bitcoin Magazine / Lopp's Layman's Guide / Saylor essay / CoinDeskRELEASESBitcoin core / protocollibsecp256k1 v0.8.0 - 2026-08-03Adds a native Silent Payments (BIP-352) module directly into the crypto library nearly every self-custody wallet builds on, plus up to ~11% faster signature verification. Quietly the most consequential positive release of the fortnight: it lowers the bar for every wallet to ship reusable static receive addresses.Bitcoin Knots v29.4 - 2026-08-08Non-urgent maintenance: fixes a chainstate DB bug causing repeated large rewrites, and adds corruption-detection safeguards around BIP-110 mandatory signaling. No critical fixes. (No Bitcoin Core release in window; latest is v31.1 from 2026-07-08.)Hardware / signingColdcard Firmware 4.2.0 (Mk2/Mk3) - 2026-08-03The patch for the entropy catastrophe. Affected ranges: Mk2/Mk3 4.0.1 through 4.1.9; Mk4/Mk5 all before 5.6.0; Q all before 1.5.0Q. Companion fixes shipped the same day: 5.6.0 Mk4/Mk5, 1.5.0Q, 6.6.0X Edge, 6.6.0QX Edge Q. Updating does NOT fix an existing seed - changelog says Mk3 users "must regenerate any seeds made on earlier versions as their entropy is critically low at just ~40 bits." TAPSIGNER, OPENDIME and SATSCARD unaffected.Krux 26.08.0 - 2026-08-04Maintainer odudex is stepping down and the project may be archived. "Krux was not created by me: Jeff started it and passed it on to me, and now it is my turn to pass the torch." On succession: "Krux may be carried on by another maintainer, if a proof-of-work backed Krux contributor accepts the role. Otherwise the Krux project will be put in sunset mode and gracefully archived in a few months." Cause is hardware, not drama: "K210 chips are no longer produced, and Canaan dropped the Kendryte line entirely." Substantial release regardless: fixes a heap buffer overflow in the camera entropy module, adds stricter PSBT fee-calculation checks, replaces the Python UR stack with a faster C module, and makes Krux Installer fully offline.Frostsnap v0.3.0 - 2026-08-05FROST threshold-signing device ships reproducible/deterministic builds and "a fresh release signing key as part of an overhauled release-signing pipeline." Well timed in a fortnight where "can you verify what is running on your signer" is the whole conversation. Catch: the new key breaks in-place Android updates, so direct-APK users must uninstall, reinstall, and re-visit their threshold devices to restore.Trezor Suite v26.7.4 - 2026-08-04Lowers minimum Normal-priority fee rate to 0.2 sat/vB and ships updated Safe 7/5/3 and Model T firmware with security improvements.BitBoxApp 4.51.4 - 2026-08-07Bundles new BitBox02 firmware v9.26.5.Specter Desktop v2.1.11 - 2026-08-09Genuinely security-relevant: adds auth and CSRF protection to the HWI bridge settings, restores validation of active API tokens so revoked JWTs are rejected, and warns that Specter's auth layer does not encrypt the data folder. Also ships an in-app Coldcard Mk3 seed-entropy advisory.Bitkey source/2026-08-02-0031 - 2026-08-02Block's consumer hardware wallet, routine source drop.LightningBTCPay Server v2.4.2 - 2026-08-07Actively exploited, funds already stolen. "This release contains fix of a critical vulnerability that is being actively exploited. You need to update as fast as you can." Unauthenticated remote .macaroon disclosure for LND, plus a TOTP 2FA bypass via Greenfield Basic auth. Requires NBXplorer 2.6.10. Breaking change: Basic auth disabled by default five minutes after account creation. See News item 2 for full remediation.lnd v0.21.2-beta.rc1 and v0.20.3-beta.rc1 - 2026-08-08Not security releases and not related to the BTCPay exploit. Migration/stability fixes only: KV-to-SQL payment migration edge case, channeldb migration recovery, invoice handling, data races, bounded memory on graph sync.Zeus v13.1.3 - 2026-07-27Adds LND v0.21.1-beta support for embedded and remote nodes; patches known vulnerabilities in the ws, js-yaml and markdown-it dependencies. (Note: Zeus also shipped an unreleased swap-security sprint on 08-04 - verify…

"Our goal is not zero Legionella pneumophila bacteria. Our goal is zero cases." – Patsy Root  Legionella risk becomes harder to manage when building teams treat every detection as equivalent—or collect samples without first deciding what a positive result will trigger. Patsy Root, Senior Manager of Government Affairs at IDEXX Water, explains how a clear water management program can replace uncertainty with defined responsibilities, routine monitoring, and proportionate action.     Focus Testing on the Organism of Concern   Patsy distinguishes between the broader group of Legionella species and Legionella pneumophila, the organism she recommends prioritizing during routine monitoring. She reviews research indicating that detecting non-pneumophila Legionella does not automatically mean L. pneumophila is present.  That distinction matters operationally. Remediation can require significant time, money, facility disruption, and lost revenue. Testing targets and corrective actions should reflect public-health risk rather than a generalized fear of any Legionella detection.  The goal is management, not eradication. A well-designed program aims to prevent disease while recognizing that completely eliminating the organism from every water system is not realistic.  Define the Response Before Sampling  Questions about routine monitoring remain among the most common Patsy receives: Where should samples be collected? How often should testing occur? Which laboratory and method should be used? What actions should follow a positive result?  When reviewing a positive laboratory report, determine whether L. pneumophila was detected, its concentration, how many locations tested positive, and whether those locations are clustered or distributed throughout the building. Then compare the findings with the action limits and response procedures established in the water management program.  Testing without a response plan can create unnecessary confusion. Likewise, writing a program does not protect a facility unless the assigned monitoring, flushing, temperature checks, chlorine residual measurements, documentation, and corrective actions are consistently completed.    Connect Water Treatment, Exposure, and Ownership  A conventional water treatment program designed for heat-transfer efficiency does not automatically address every public-health exposure route. Building teams must consider where people could encounter aerosolized or otherwise unsafe water—not only whether treatment chemistry is operating as intended.  Patsy uses a milk-jug analogy to explain building ownership. Farmers, processors, transporters, and grocery stores maintain milk until it is purchased. Once the customer brings it home, however, that customer becomes responsible for storing it safely. Likewise, once water passes through the meter, the building owner becomes responsible for maintaining its quality.  A comprehensive water management team may require a decision-maker with financial authority, a water treatment professional, plumbing expertise, maintenance and facilities personnel, and representatives from housekeeping, kitchens, or infection prevention where applicable.  Communication with the public water system can also provide essential context about the incoming water source, seasonal temperature, distribution conditions, and disinfection. For water professionals advising building owners, the leadership challenge is translating risk information into repeatable actions that every responsible person understands and can sustain.  Listen to the full conversation above. Explore related episodes below. Stay engaged, keep learning, and continue scaling up your knowledge!    Timestamps  02:00 — Trace Blackmore shares how Legionella Awareness Month began in 2020, why the topic continues to evolve, and why these episodes remain among the podcast's most downloaded and shared.  04:56 — Trace introduces returning guest Patsy Root, Senior Manager of Government Affairs at IDEXX Water, and revisits her appearances in Episodes 403 and 434.  06:25 — Interview with Patsy Root about Legionella pneumophila testing, effective water management programs, professional education, and building-water responsibility.  08:50 — Patsy explains why Legionella education remains necessary six years after the pandemic highlighted the risks associated with reopening stagnant building water systems.  10:40 — Foundational Legionella education should be adapted to an audience's experience, responsibilities, and understanding of microbiology.  13:35 — AWT conferences and professional communities connect new practitioners with experienced professionals whose field knowledge may not appear in books or technical papers.  16:10 — Patsy explains how professional collaboration helps the industry reassess long-standing assumptions about Legionella species and focus more precisely on L. pneumophila.  20:20 — Patsy discusses how CWT and ASSE 12080 certifications are understood outside the water treatment industry and why credentials should be evaluated alongside experience, references, and work products.  23:20 — Research from KWR, the World Health Organization, and the Journal of Hospital Infection challenges the use of non-pneumophila Legionella as an indicator for L. pneumophila.  27:10 — Patsy distinguishes water management from eradication and explains why the objective should be zero disease cases rather than zero Legionella bacteria.  29:40 — Legionella longbeachae is associated primarily with soil, potting mix, and compost, illustrating why professionals must consider the environmental context of published research.  31:20 — Routine monitoring questions—where, when, how, and what to test—remain the questions Patsy receives most frequently from facility teams and water professionals.  32:30 — Sustainable implementation depends on teaching everyone responsible for the program what to do and why each activity matters.  34:30 — Patsy challenges the belief that avoiding Legionella testing eliminates risk and explains why routine verification remains necessary even when treatment measures are in place.  37:10 — A conventional water treatment program may support heat-transfer efficiency without addressing every point where people could be exposed to unsafe water.  38:40 — Patsy shares the milk-jug analogy to explain why a building owner becomes responsible for water quality after the water passes through the meter.  42:00 — Patsy discusses the regulatory gap surrounding water inside many buildings and the need for persistent education, communication, and outreach to building owners.  46:20 — Legionella requirements are beginning to appear in insurance policies as insurers and building owners recognize the financial consequences of outbreaks.  48:40 — Accurate outbreak reporting should explain transmission, exposure routes, risk factors, and reliable sources of public-health information without creating unnecessary panic.  51:20 — Patsy outlines how to interpret a positive laboratory result by reviewing the organism, concentration, number of positive locations, distribution, and established action limits.  54:00 — Sampling should not begin until the facility knows how it will respond if Legionella is detected.  55:30 — A cross-functional water management team should include financial authority, water treatment knowledge, plumbing expertise, facilities personnel, and representatives familiar with potential exposure areas.  58:30 — Stronger collaboration between public water systems and building water management teams can clarify incoming water conditions and each party's responsibilities.  1:02:00 — Patsy answers four Legionella Awareness Month questions about management, trusted resources, common implementation failures, and the value of focusing on L. pneumophila.  1:04:00 — Trace shares the episode discussion guide and the Scaling UP! H2O Legionella Resources Library for professionals reviewing the topic with their teams.  1:07:00 — Words of Water with James McDonald     Quotes "It's important to have everybody at the table, make sure everybody understands not only what they're doing, but why they're doing it."  "Don't test the water for Legionella bacteria until you know what you're going to do if it comes back positive."  "The housekeeping person's not going to think like the plumber, and the plumber's not going to think like the infection person, and the finance person's going to think differently, too."  "Having a water management program does not absolve you from the daily or weekly activities that are required to be done. It must be done for it to be effective."    Connect with Patsy Root  Phone: (207) 523-0835   Email: patsy-root@idexx.com   Website: IDEXX: Overview | LinkedIn   LinkedIn: Patsy Root | LinkedIn     Guest Resources Mentioned  World Health Organization — Legionella and the Prevention of Legionellosis  CDC Toolkit: Developing a Legionella Water Management Program  ANSI/ASHRAE Standard 188-2021: Legionellosis—Risk Management for Building Water Systems  KWR Publication: The Right to Effective Legionella Prevention—Section 7.4.4 begins on page 54  Compulsory Screening for Legionella pneumophila and Legionella spp.—Journal of Hospital Infection  Water Research Foundation: Occurrence of Legionella pneumophila in Drinking Water Distribution Systems  The Analyst — AWT publication and archive for water treatment professionals  Certified Water Technologist — CWT professional designation    Scaling UP! H2O Resources Mentioned  AWT (Association of Water Technologies)  Scaling UP! H2O Academy video courses  Submit a Show Idea  The Rising Tide Mastermind Scaling UP! H2O Legionella Resources Library  403 Navigating the New Frontier: Patsy Root on Legionella Legislation  434 Encore Interview with Patsy Root  435 Optimizing Legionella Control Strategies with Dr. Vincenzo Romano Spica    Words of Water with James McDonald  Today's definition is the sodium salt of hypochlorous acid and is most commonly known as liquid bleach.    2026 Events for Water Professionals  Check out our Scaling UP! H2O Events Calendar where we've listed every event Water Treaters should be aware of by clicking HERE.    This episode made possible through our valued partners at:   

PFAS rules from the EPA have been getting a lot of attention, as the Trump administration looks to make controversial adjustments. One recent rule change effected drinking water, but crucially, only impacted publicly owned municipal drinking water systems.  HRP's Bryan Massa, LSP, Regional Office manager for HRP Massachusetts, and PFAS expert, has worked closely with exactly the type of drinking water utilities that will have to be incompliance with these agency rules.  For today's episode of the PFAS Pulse Podcast, Bryan will walk us through the rules as they've stood and explain the nuances and complexities that come with utilities remaining in compliance.  Listen to learn more and subscribe to The Pulse for all the details.

Scientists funded by the NIEHS Superfund Research Program (SRP) developed a new strategy to effectively break down stubborn chemicals in water. Researchers at the Yale University SRP Center, led by Jaehong Kim, Ph.D., used advanced engineering approaches to create a stable and reusable material that targets specific pollutants.

All links and images can be found on CISO Series Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by David Spark, the producer of CISO Series, and Dan Walsh, CISO, Datavant. Joining is our sponsored guest, Elizabeth Nammour, founder and CEO, Teleskope. In this episode: Data ownership before automation A shared vocabulary for agent risk Maturing from crawl to run Trust earns automation its place A huge thanks to our sponsor, Teleskope Most DSPMs stop at finding the risk. Teleskope fixes this: it automatically finds sensitive data, including IP documents or board decks, and remediates exposure across cloud, SaaS, and AI environments natively, with human-in-the-loop controls, improving your team's efficiency tenfold. Trusted by Ramp, Polymarket, and Chevron Phillips, and more. teleskope.ai  

Today is a special episode! I'm joined by Jenny McCarthy, who you might know as an actress, television personality, or the founder of Formless Beauty. But today, she's here to share her full mold story.After years of unexplained symptoms, countless doctor visits, and trying to piece together what was happening to her health, Jenny finally discovered that mold and mycotoxins were a major part of the puzzle.We discuss why mold illness is so often missed, how exposures can happen in places you'd never suspect, and why testing both your body and your environment can help connect the dots much sooner.Jenny also opens up about what her recovery looked like, including the treatments and strategies that helped her heal, why opening detox pathways mattered, and the role gut health played in getting her life back.If you've been struggling with symptoms that no one seems to have an answer for, or you've wondered whether your environment could be part of the problem, I think you'll get a lot out of this episode.Want to learn more about Jenny's clean beauty brand?Visit FormlessBeauty.comReady to connect the dots between your home and your health? Check out the MycoTOX Profile® & The Dust Test Kit Bundle:https://www.thedusttest.com/product/mycotox-profile-the-dust-test/01:45 From Defcon 1 to Hope02:58 Symptoms and Terrain Theory07:48 Air Quality Mold Epidemic10:05 Where Exposure Came From13:15 Five Years of Decline17:01 Why Doctors Miss Mold19:15 Testing Earlier Saves Years22:39 MARCoNs and Detox Urgency25:56 Why Mold Is Increasing29:41 Quick Fixes While You Wait32:20 Retesting and Finding Sources34:08 Remediation and Tracking34:53 Fighting Insurance and Policy36:36 Finding the Right Inspectors39:56 What a Real Inspection Looks Like42:07 Report Call and Priorities45:20 Detox and Treatment Plan50:51 Peptides and Gut Repair54:03 Autism Terrain and Mold56:18 Key Advice Dust Testing57:11 Why Formless Beauty Exists01:03:40 Wrap Up and TakeawaysIG: @MoldFindersNot sure the best way to get started? Follow these simple steps to hit the ground running…Step 1: Subscribe To Our Podcast!Step 2: Want a Test More Advanced Than ERMI? www.TheDustTest.com⁠Step 3: Already Have An ERMI? Find Out What It Actually Means. ⁠⁠www.ErmiCode.com⁠Step 4: Text Me (yes, it's really me!) The Mold Phone: 949-528-8704Step 5: Book A FREE Consultation https://yesweinspect.com/call

Join hosts Tom Simmons and Matthew Wallace as we talk the U.S. Environmental Protection Agency's newly released Draft Guidance for Reducing Risk from PFOA and PFOS in Biosolids. We begin by explaining what biosolids are, why they can contain PFOA and PFOS—the two most historically used and commonly detected PFAS chemicals in the United States—and why these contaminants have become a growing concern. While the EPA's new guidance offers recommendations for testing, monitoring, and reducing risk, it's important to note that the guidance is entirely voluntary. We also explore how states are taking their own approaches to regulating PFAS in biosolids. Finally, we examine the practical challenges facing wastewater treatment plants if biosolids can no longer be land applied Join us as we unpack the latest EPA guidance, the growing patchwork of state regulations, and what comes next for biosolids management in the evolving world of PFAS. Listen to learn more and subscribe to The Pulse for all the details.

LA County approves a soil cleaning program for Eaton Fire survivors. Why California lawmakers want to protect some health care providers from anti-abortion states. The plan to clean up downtown L-A's "graffiti towers." Plus, more from Evening Edition. Support The L.A. Report by donating at LAist.com/join and by visiting https://laist.comSupport the show: https://laist.com

Jake Hildreth, Principal Security Consultant at Semperis and Microsoft MVP, is back on the podcast fresh off a trip to PowerShell Conference Europe, where he and Andrew co-presented a session on securing PowerShell. Jake also gave his own talk on Stepper, his open-source module for building resumable, step-by-step scripts — a tool that's grown considerably since his last appearance on the show. The two dig into what makes PSConf EU such a standout event, the refreshing lack of elitism in the PowerShell community, and the updates Jake's been shipping, including named steps, built-in logging, and secret suppression. The conversation winds into burnout, the importance of actually taking your vacation days, and how the same mindset that drives good automation — knowing when to stop and reset — applies to taking care of yourself. Key Takeaways: Stepper has gotten some meaningful quality-of-life updates since Jake last appeared on the show, including named steps, automatic logging, and the ability to suppress secrets from logs — making it more practical for real-world production scripts. PSConf EU punches above its weight as a conference experience: technically deep but genuinely welcoming at every skill level, with none of the elitism that can creep into security-adjacent events. Your vacation time is a benefit, not a backlog item. Jake makes the case that getting good at separating your work time from your off time isn't a soft skill — it's a sustainability practice. Guest Bio: Jake Hildreth is a Principal Security Consultant at Semperis, a Microsoft MVP in both PowerShell and Identity/Access, and a recovering sysadmin with 25 years of IT under his belt. He's probably best known for building Locksmith, the open-source AD CS auditing and remediation tool, but he's also the creator of Stepper, Deck, BlueTuxedo, and PowerPUG! — a suite of tools designed to make identity security a little less painful for the admins who live in it. When he's not untangling Kerberos or chasing down ADCS misconfigurations, he goes by "horse" in the PowerShell Discords. Resource Links: Jake Hildreth's Website: jakehildreth.com Jake's GitHub: github.com/jakehildreth Stepper (Resumable PowerShell Scripts): github.com/jakehildreth/Stepper Locksmith (AD CS Auditing & Remediation): github.com/jakehildreth/Locksmith Locksmith 2 (Next-Gen AD CS Toolkit): github.com/jakehildreth/… PowerShell Conference Europe: psconf.eu PDQ Discord: discord.gg/PDQ The PowerShell Podcast on YouTube: https://youtu.be/Rqkuaeps_jM

In episode 370, Steve talks about the necessary steps for mold remediation. Steve will cover the scope of work and contract phase. He'll then explain what you should expect when floor protection and containments are established. Steve reminds everyone that mold must be physically removed. If a company claims that a spray or fogging solution works, please reach out to Steve. We appreciate all of you and hope you have a great week!

Barbara and Jacie kick off their annual CIRSx 2026 Conference recap series, focusing this episode on remediation and environmental talks, with a reminder to consult an indoor environmental professional (IEP) for climate-specific guidance. They summarize key presentations: Bill Weber and Christine Semabeu on prevention-first building and homeowner maintenance (leak management, access panels, alarms, early mechanical planning, and the book “Mold Controlled” by John Banta); contractor Brian Tinker on why building code isn't sufficient for “medically clean homes,” the need to budget for mold-safer materials, identify dust reservoirs, and validate with testing throughout construction; forensic engineer Joe Lstiburek's moisture-management building science emphasizing drying potential and prioritizing people/building health over energy efficiency; Air Oasis updates including a planned 2027 model with requested features and current 2.0 model features; Max McCord on using thermal imaging to find hidden moisture; Osman Zelaya on making inspection reports function like construction blueprints through clearer communication; and Jack Getz's case study building an 800 sq ft CIRS-friendly home over a garage with detailed design choices and costs. For more information and support, join us at https://thecirsgroup.com TIMESTAMPS 00:00 Intro and disclaimer 01:40 Bill Weber and Christine Cimabue: Prevention is better than remediation 07:00 Brian Tinker: building beyond code 12:03 Joseph Lstiburek - Building Science Masterclass: Don't do stupid things 16:07 Brad Baxter, COO of Air Oasis: new model in 2027 21:17 Max McCord: finding hidden moisture 24:51 Osmin Zelaya: better inspection reports - better communication 28:06 CIRS Friendly Home Case Study 35:09 Key Takeaways and Wrap Up For more information and support, join us at https://thecirsgroup.com LINKS: Bill Weber's website: https://avelar.net/articles_publications/team/bill-weber/ Christine Cimabue's website: https://byholistichomes.com/ John Banta's book, Mold Controlled: https://www.johncbanta.com/publications Brian Tinker's website: https://breathewellhomes.com/ Joseph Lstiburek's website: https://buildingscience.com/users/jlstiburek Air Oasis air filters: https://www.airoasis.com/ Max McCord's website: https://www.stonecrest.team/ Osmin Zelaya's website: https://medviro.com/Leadership John Goetz's recommendation for people interested in building their own CIRS safe home: https://buildshownetwork.com/  Order Jacie's book! The 30 Day Carnivore Bootcamp: https://a.co/d/7MgHrRs The CIRS Group: Support Community: https://thecirsgroup.com Instagram: https://www.instagram.com/thecirsgroup/ Find Jacie for carnivore, lifestyle and limbic resources: Jacie's book on the Carnivore diet!  https://a.co/d/8ZKCqz0 Instagram: https://www.instagram.com/ladycarnivory YouTube: https://www.youtube.com/@LadyCarnivory Blog: https://www.ladycarnivory.com/ Find Barbara for business/finance tips and coaching: Website: https://www.actlikebarbara.com/ Instagram: https://www.instagram.com/actlikebarbara/ YouTube: https://www.youtube.com/@actlikebarbara Jacie is a Shoemaker certified Proficiency Partner, NASM certified nutrition coach, author, and carnivore recipe developer determined to share the life changing information of carnivore and CIRS to anyone who will listen. Barbara is a business and fitness coach, CIRS and ADHD advocate, writer, speaker, and a big fan of health and freedom. Together, they co-founded The CIRS Group, an online support community to help people that are struggling with their CIRS diagnosis and treatment.

Traditional SCA and SAST tools are notorious for drowning security teams in false positives, historically flagging nine out of ten alerts incorrectly. But while generative AI seems like a magic bullet, simply wrapping an out-of-the-box LLM around your code can result in confident hallucinations and astronomical costs extrapolating to as much as $52 million a year for a large enterprise using frontier models.In this episode, Ashish sits down with Harry Wetherald, CEO and co-founder of Maze, to discuss the evolution of AI-native AppSec and Cloud Security. Harry breaks down the critical difference between vulnerability reachability (is the code active?) and true exploitability (can an attacker actually trigger it logically?). He also explains why the historical walls between cloud security and application security teams are finally crumbling as AI acts as a perfect translator between the two domains.If your team is debating "Build vs. Buy" for AI security tools, this episode is essential. Harry shares the biggest red flags to watch out for in AI vendors (beware the "black box"), how to intelligently route across models to optimize token costs by 100x, and how a true "security brain" orchestrates multiple investigations to provide reliable context across your entire environment.Guest Socials -⁠⁠ ⁠⁠⁠⁠⁠⁠Harry's Linkedin ⁠Podcast Twitter - ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@CloudSecPod⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:-⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Cloud Security Podcast- Youtube⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠- ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Cloud Security Newsletter ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠If you are interested in AI Security, you can check out our sister podcast -⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ AI Security Podcast⁠Questions asked:(00:00) Introduction to AI in AppSec(01:50) Harry Wetherald's Background and the Founding of Maze(02:30) Reachability vs. Exploitability Explained(04:45) The "Build vs. Buy" Dilemma for AI Security Tools(08:30) Bridging the Gap Between Siloed AppSec and CloudSec Teams(11:30) Evaluating Out-of-the-Box LLMs vs. Specialized Security Tools(14:20) Solving the Historic AppSec False Positive Problem(18:50) AI Vendor Red Flags: The Danger of "Black Box" Products(20:50) How to Build a True AI-Native Security Architecture(24:45) The Hidden Cost of AI Models: Why Optimization is Crucial(28:00) When to Keep a Human in the Loop for Remediation(34:00) Building a "Security Brain" to Inform AI Coding Agents(39:20) The Launch of Maze Code for Deep Cloud and Code Investigations

Remediation is a word that can strike fear into the hearts of learners and educators alike — but does it have to? Hear from Drs. Ryan Batenhorst and Heather Davis, two veteran EMS educators, as they unpack what remediation really means and how programs can approach it with more compassion and less stigma. Hosts Hilary Gates and Ginger Locke dive into Ryan's research on paramedic students' post-traumatic stress symptoms and how it reshaped his understanding of clinical rotation stress. Heather asks us to consider the striking etymology of the word "remediation," reframing the concept as taking appropriate measure rather than assigning blame. Together they explore how to tell the difference between a learner issue, a preceptor issue, and an environmental issue — and why proactive, preventative support leads to better outcomes. A must-listen for anyone who wants their program's rigor to build learners up, not tear them down.Rob Lawrence provides the "Rob Recap."Mentioned in the episode:"What Happened to You?" https://bookshop.org/p/books/what-happened-to-you-conversations-on-trauma-resilience-and-healing-bruce-d-perry/13381a9ac2577776?ean=9781250223180&source=aw&sv1=affiliate&sv_campaign_id=1264447&utm_source=awin&utm_medium=Affiliate&utm_campaign=1264447&utm_term=0&sscid=92005_1783098987_ddf9c57510e5df2ddb9fa6a17f833906&awc=92005_1783098987_ddf9c57510e5df2ddb9fa6a17f833906Ryan Batenhorst Publications: https://www.creighton.edu/campus-directory/ryan-batenhorstThe EMS Educator is published on the first Friday of every month! Be sure to turn on your notifications so you can listen as soon as the episode drops, and like/follow us on your favorite platform.Check out the Prodigy EMS Bounty Program! Earn $1000 for your best talks!  https://www.prodigyems.com/bounty-programGet your CE at www.prodigyems.com. Follow @ProdigyEMS on FB, YouTube, TikTok & IG.

Send us Fan MailMillions of people struggle with thyroid disease, fatigue, autoimmune conditions, and unexplained symptoms without ever addressing what may actually be driving them.In this episode of Never Been Sicker, Michael Rubino sits down with chiropractor and thyroid expert Dr. Eric Osansky to discuss his own battle with Graves' disease, why conventional treatment often falls short, and how environmental toxins, chronic stress, gut health, and mold can all play a role in thyroid dysfunction.They also discuss why autoimmune diseases continue to rise, the connection between indoor environments and chronic illness, and what it really means to treat the root cause instead of simply managing symptoms.Whether you've been diagnosed with Hashimoto's, Graves' disease, another autoimmune condition, or you're simply searching for answers after years of unexplained symptoms, this conversation offers a different perspective on healing.-----------------------------------------------------------------------------------------------Chapters00:00 Introduction01:00 Dr. Eric's Graves' disease journey03:30 Symptoms that led to his diagnosis06:00 Why he chose a natural approach09:15 Why we've never been sicker10:45 Environmental toxins and thyroid disease13:45 Mold, autoimmunity, and chronic illness15:20 The biggest lie in medicine18:20 Why mold is often overlooked22:00 Why fixing the environment matters28:00 Why families experience mold differently34:00 Hidden toxin exposure at home39:45 Common thyroid myths47:30 The SAVE Thyroid Method49:45 What needs to change in thyroid care52:40 Where to learn more from Dr. Eric Osansky-----------------------------------------------------------------------------------------------

Interview with Ankita Gupta, CEO of Akto How to Navigate Shadow AI Risk in the enterprise This week, we discuss AI governance in the enterprise, starting with the nuts and bolts of how to discover and understand shadow AI. Following that, we dive into what security and tech leaders should do next with this information: apply guardrails? Limit vendor options? Ankita has a wealth of experience and anecdotes to share here, from years of working with customers and seeing all the unexpected things that happen with AI in today's workplace. Segment Resources: Website: https://www.akto.io Book a Free Demo: https://www.akto.io/agentic-security-demo LinkedIn: https://www.linkedin.com/company/akto-io YouTube: https://www.youtube.com/@aktodotio This segment is sponsored by Akto. Visit https://securityweekly.com/akto to secure your AI agents before attackers do. Topic Segment: Verizon's Breach Impact Study The same team that delivers the DBIR every year gave us a bonus, based on over 70,000 insurance claims! Some of my favorite insights: Cost of breaches, broken out by SMB, mid-sized enterprise, and large The claim amount as a percentage of the company's revenue Losses broken down by loss TYPE This data validates something I think everyone in cyber needs to understand: cyber events are rarely business-ending events. Every cybersecurity professional and vendor, frustrated by companies "not taking security seriously enough" now have data explaining why: breaches don't hurt as much as you thought they did. Maybe you think they should hurt more? Push for regulation/fines/etc. With that said, the report also shows breach costs increasing significantly over the past 6 years and the quantity of incidents shooting up. Specifically, the median impact has almost doubled. Security failures aren't getting any cheaper. Weekly Enterprise News Finally, in the enterprise security news, A $100M seed round! Accenture acquires 3 security vendors Some thoughts on the government takedown of Fable and Mythos One of the craziest security mistakes I've ever seen, in the software FIFA uses to manage World Cup streams! A Critical Copilot vulnerability 75,000 Fortinet Firewalls get compromised Remediation is broken Using guardrails to evade detection All that and more, on this episode of Enterprise Security Weekly. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-464

Interview with Ankita Gupta, CEO of Akto How to Navigate Shadow AI Risk in the enterprise This week, we discuss AI governance in the enterprise, starting with the nuts and bolts of how to discover and understand shadow AI. Following that, we dive into what security and tech leaders should do next with this information: apply guardrails? Limit vendor options? Ankita has a wealth of experience and anecdotes to share here, from years of working with customers and seeing all the unexpected things that happen with AI in today's workplace. Segment Resources: Website: https://www.akto.io Book a Free Demo: https://www.akto.io/agentic-security-demo LinkedIn: https://www.linkedin.com/company/akto-io YouTube: https://www.youtube.com/@aktodotio This segment is sponsored by Akto. Visit https://securityweekly.com/akto to secure your AI agents before attackers do. Topic Segment: Verizon's Breach Impact Study The same team that delivers the DBIR every year gave us a bonus, based on over 70,000 insurance claims! Some of my favorite insights: Cost of breaches, broken out by SMB, mid-sized enterprise, and large The claim amount as a percentage of the company's revenue Losses broken down by loss TYPE This data validates something I think everyone in cyber needs to understand: cyber events are rarely business-ending events. Every cybersecurity professional and vendor, frustrated by companies "not taking security seriously enough" now have data explaining why: breaches don't hurt as much as you thought they did. Maybe you think they should hurt more? Push for regulation/fines/etc. With that said, the report also shows breach costs increasing significantly over the past 6 years and the quantity of incidents shooting up. Specifically, the median impact has almost doubled. Security failures aren't getting any cheaper. Weekly Enterprise News Finally, in the enterprise security news, A $100M seed round! Accenture acquires 3 security vendors Some thoughts on the government takedown of Fable and Mythos One of the craziest security mistakes I've ever seen, in the software FIFA uses to manage World Cup streams! A Critical Copilot vulnerability 75,000 Fortinet Firewalls get compromised Remediation is broken Using guardrails to evade detection All that and more, on this episode of Enterprise Security Weekly. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-464

Interview with Ankita Gupta, CEO of Akto How to Navigate Shadow AI Risk in the enterprise This week, we discuss AI governance in the enterprise, starting with the nuts and bolts of how to discover and understand shadow AI. Following that, we dive into what security and tech leaders should do next with this information: apply guardrails? Limit vendor options? Ankita has a wealth of experience and anecdotes to share here, from years of working with customers and seeing all the unexpected things that happen with AI in today's workplace. Segment Resources: Website: https://www.akto.io Book a Free Demo: https://www.akto.io/agentic-security-demo LinkedIn: https://www.linkedin.com/company/akto-io YouTube: https://www.youtube.com/@aktodotio This segment is sponsored by Akto. Visit https://securityweekly.com/akto to secure your AI agents before attackers do. Topic Segment: Verizon's Breach Impact Study The same team that delivers the DBIR every year gave us a bonus, based on over 70,000 insurance claims! Some of my favorite insights: Cost of breaches, broken out by SMB, mid-sized enterprise, and large The claim amount as a percentage of the company's revenue Losses broken down by loss TYPE This data validates something I think everyone in cyber needs to understand: cyber events are rarely business-ending events. Every cybersecurity professional and vendor, frustrated by companies "not taking security seriously enough" now have data explaining why: breaches don't hurt as much as you thought they did. Maybe you think they should hurt more? Push for regulation/fines/etc. With that said, the report also shows breach costs increasing significantly over the past 6 years and the quantity of incidents shooting up. Specifically, the median impact has almost doubled. Security failures aren't getting any cheaper. Weekly Enterprise News Finally, in the enterprise security news, A $100M seed round! Accenture acquires 3 security vendors Some thoughts on the government takedown of Fable and Mythos One of the craziest security mistakes I've ever seen, in the software FIFA uses to manage World Cup streams! A Critical Copilot vulnerability 75,000 Fortinet Firewalls get compromised Remediation is broken Using guardrails to evade detection All that and more, on this episode of Enterprise Security Weekly. Show Notes: https://securityweekly.com/esw-464

Your bloodwork came back normal. Your doctor says you're fine. But the brain fog, the joint pain, the fatigue that won't lift — something is off, and no one can tell you what.It might be in your house.In this episode, functional medicine practitioner Laurel Brennan tells the story of her own mold exposure — what it did to her health and her family's, how long it went undetected, and the moment she finally connected the dots. She breaks down how mold drives inflammation behind autoimmune conditions, brain fog, and neurological symptoms, and why so many people live in water-damaged homes for years without knowing it.You'll learn why standard air sampling can miss the problem, how dust-based testing like the ERMI gives you a clearer picture of what's actually in your environment, and the first steps to take if you suspect mold in your home.Because when you don't know, you don't know. And once you do, you can't unknow it. TakeawaysMold can cause a wide range of symptoms, from neurological issues to joint pain.Air samples may not be reliable; an ERMI, like The Dust Test, provides better insights.Curiosity and instinct are important in detecting mold problems.Water-damaged homes often harbor hidden mold that affects health.Testing your environment can help prevent long-term health issues.Chapters00:00Introduction and Personal Journey01:00Understanding Mold and Its Health Impacts03:18Mold Inspection Experiences06:03Symptoms and Family Health Issues10:19Moving to a New Home and Initial Relief12:08Emerging Symptoms and Concerns15:46Learning About Mold Testing19:50Deciding on Remediation or Moving20:34Challenges in a New Apartment22:49The Impact of Mold on Health24:20Lessons Learned and Final ThoughtsResourcesDust Test EnviroBiomicsEpisode #9 with Brian Karr from WeInspect

Interview with Ankita Gupta, CEO of Akto How to Navigate Shadow AI Risk in the enterprise This week, we discuss AI governance in the enterprise, starting with the nuts and bolts of how to discover and understand shadow AI. Following that, we dive into what security and tech leaders should do next with this information: apply guardrails? Limit vendor options? Ankita has a wealth of experience and anecdotes to share here, from years of working with customers and seeing all the unexpected things that happen with AI in today's workplace. Segment Resources: Website: https://www.akto.io Book a Free Demo: https://www.akto.io/agentic-security-demo LinkedIn: https://www.linkedin.com/company/akto-io YouTube: https://www.youtube.com/@aktodotio This segment is sponsored by Akto. Visit https://securityweekly.com/akto to secure your AI agents before attackers do. Topic Segment: Verizon's Breach Impact Study The same team that delivers the DBIR every year gave us a bonus, based on over 70,000 insurance claims! Some of my favorite insights: Cost of breaches, broken out by SMB, mid-sized enterprise, and large The claim amount as a percentage of the company's revenue Losses broken down by loss TYPE This data validates something I think everyone in cyber needs to understand: cyber events are rarely business-ending events. Every cybersecurity professional and vendor, frustrated by companies "not taking security seriously enough" now have data explaining why: breaches don't hurt as much as you thought they did. Maybe you think they should hurt more? Push for regulation/fines/etc. With that said, the report also shows breach costs increasing significantly over the past 6 years and the quantity of incidents shooting up. Specifically, the median impact has almost doubled. Security failures aren't getting any cheaper. Weekly Enterprise News Finally, in the enterprise security news, A $100M seed round! Accenture acquires 3 security vendors Some thoughts on the government takedown of Fable and Mythos One of the craziest security mistakes I've ever seen, in the software FIFA uses to manage World Cup streams! A Critical Copilot vulnerability 75,000 Fortinet Firewalls get compromised Remediation is broken Using guardrails to evade detection All that and more, on this episode of Enterprise Security Weekly. Show Notes: https://securityweekly.com/esw-464

Niels Provos on why you don't need a frontier model to find zero days, why the Vulnpocalypse is overstated, and how security invariants change the game.DescriptionNiels Provos has spent twenty-five years in security, from writing bcrypt to running security at Google and Stripe, and he came on to push back on the panic around AI and vulnerabilities. He explains why finding zero days is an orchestration problem rather than a frontier-model problem, using his Iron Curtain runtime and an open-weight model to surface net-new bugs for the cost of a cheap scan. We get into security invariants and egress control, why remediation is the real bottleneck, why AI coding tools ignore the security abstractions you build, and why someone this technical keeps coming back to incentives over technology.Key takeawaysYou don't need a frontier model to find zero days. Niels used his Iron Curtain runtime and an open-weight model to surface net-new vulnerabilities, which is why he calls this an orchestration problem rather than a frontier-model problem.The Vulnpocalypse framing is overstated. Companies already sit on more vulnerabilities than they can manage, so more findings do not fundamentally change the picture, and the catchy panic mostly drives engagement.Security invariants beat patching one bug at a time. An invariant is an infrastructure guarantee enforced without ongoing human judgment, which makes entire classes of vulnerabilities irrelevant instead of chasing each one.Egress control is the canonical example. If a production service can only reach a few known domains, most vulnerabilities never get to fetch a second-stage payload, so the exploit chain stalls.The log4j story shows why it matters. As head of security at Stripe, egress control meant the malicious download could not execute, so the team had room to patch calmly instead of fighting an emergency.Remediation, not discovery, is the harder problem. The quality bar of not breaking working code in production is what keeps fixing slow, and AI has not solved that yet even as it makes finding cheap.AI coding tools ignore the security abstractions you build. When Niels asked Claude to add an endpoint to a carefully structured project, it bypassed his abstractions and wrote raw code, which is why frameworks need to be secure by default.The harness is the moat. A finite state machine that decomposes vulnerability finding into stages, each with a fresh context and a tight prompt, gets reliable results from weaker models that otherwise lose the plot.It is the incentives, not the technology. Companies do just enough security to avoid looking negligent, so without accountability shifting through something like Europe's NIS2, better tooling alone will not change outcomes.Open source maintainers need to be empowered. They often cannot afford the latest models or the tokens to run them, yet everyone builds on their free work, so helping them fix vulnerabilities has the broadest payoff in the ecosystem.

Send us Fan MailJoin hosts Alex Sarlin and Ben Kornell as they discuss the growing backlash against AI and screen time in schools, the launch of a federal education tax credit, promising new evidence for AI-powered remediation, workforce disruption from AI, and the future of higher education with Noah Pickus of Duke University.✨ Episode Highlights:[00:03:40] AFT shifts its position on AI and screen time in schools[00:07:25] i-Ready faces growing parent backlash despite strong adoption and efficacy data[00:13:36] New federal Education Freedom Tax Credit could accelerate school choice and supplemental learning[00:17:46] Education savings accounts create new opportunities for edtech business models[00:20:09] New research highlights AI's potential to help students catch up academically[00:23:16] Guided practice emerges as a promising framework for AI-powered learning[00:24:56] Survey finds 99% of executives expect AI-driven workforce reductions within two years[00:31:29] Anthropic's rapid growth reshapes the competitive landscape for generative AIPlus, special guests:[00:35:39] Noah Pickus, Head of Global Strategy and Partnerships and Senior Advisor to the Provost at Duke University, on the Future Universities Alliance and reimagining higher education globally

What if the thing making you sick has been hiding inside your walls the entire time - and every inspector who walked through missed it? In this episode of Integrative Cancer Solutions, Dr. K sits down with Brian Karr, mold investigator and founder of We Inspect, to break down why conventional mold inspections miss up to 90% of real problems, why air sampling is the wrong test for the job, and how a simple at-home dust test can tell you whether your home is actively driving what's happening in your body. Brian walks through the warning signs most people rationalize away, the two household patterns that almost always point to mold, and how his exposure mapping system helps people prioritize remediation without gutting their entire home. For anyone navigating a serious health condition, this conversation could be the missing piece nobody thought to look for. Key Takeaways: 0:00 Introduction  1:02 How a burst pipe and brain fog turned Brian into a mold investigator 6:42 Why symptoms look different in every person in the same house  8:22 Two household patterns that almost always signal a mold problem 12:35 Feeling better on vacation is not a coincidence  15:43 Dry mold is more dangerous than actively growing mold  17:55 Why a proper inspection takes 6 to 8 hours not 30 minutes  22:40 Air sampling misses problems 78% of the time  28:18 The at-home dust test and how it connects your labs to your home 33:59 How to prioritize remediation without tearing everything out  40:16 What you can clean versus what has to go Schedule a Free 15-Min Cancer/Lyme Consultation at The Karlfeldt Center: 208-338-8902 Resources: We Inspect - https://www.yesweinspect.com Medical Disclaimer: This content is for educational purposes only and is not intended to diagnose, treat, cure, or replace professional medical advice. Always consult your physician or qualified healthcare provider regarding any medical condition or treatment decisions. ____________________________________RESOURCES FROM DR. KARLFELDT:

In this episode of the Pipeliners Podcast, Russel Treat speaks with Alois Multerer of Primus Line about reinforced thermoplastic liner technology and its role in pipeline rehabilitation. The conversation explores how Kevlar-reinforced composite liners are installed, where trenchless remediation technologies are most effective, and the ongoing industry challenges around inspection, integrity management, and long-term operational confidence in non-metallic pipeline systems. Visit PipelinePodcastNetwork.com for a full episode transcript, as well as detailed show notes with relevant links and insider term definitions.

Link Up w/The Morning Sickness Digitally All Over:Instagram: @hms_98_official, @bosskupd, @bretvesely, @dickToledoX/Twitter: @HMSon98, @DickToledo, @bretveselyFacebook: @HMSKUPDYouTube: @hmspodcast9320, @98kupdRequest/Call in/Wakeup Song line:(IN AZ) 602.585.9800More HMS: holmbergpodcast.com, 98kupd.comEmail: dtoledo@98kupd.com, bvesely@98kupd.com, bbogen@98kupd.comSee Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Link Up w/The Morning Sickness Digitally All Over:Instagram: @hms_98_official, @bosskupd, @bretvesely, @dickToledoX/Twitter: @HMSon98, @DickToledo, @bretveselyFacebook: @HMSKUPDYouTube: @hmspodcast9320, @98kupdRequest/Call in/Wakeup Song line:(IN AZ) 602.585.9800More HMS: holmbergpodcast.com, 98kupd.comEmail: dtoledo@98kupd.com, bvesely@98kupd.com, bbogen@98kupd.comSee Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

In this episode, Milo revisits the animated series Captain Planet and the Planeteers, a cartoon he didn't watch, to find out if it was something he missed out on or if it is a bit too preachy, even for his liberal sensibilities. For More from the 80s and 90s visit Web: the80sand90s.com    Instagram: @The80sand90sCom  YouTube: The 80s and 90s Overlooked If you enjoy this episode, don't keep it a secret, tell a friend and/or share it on social media so others can experience it as well. Music used in this episode from Audiio.com This episode is proudly sponsored by How to Manage Your Manager: All The Credit Half The Work by Milo Denison Sources:  NOAA Damage Assessment, Remediation and Restoration Program. The Planeteer Community — official history page Atlanta History Center Wikipedia — Captain Planet and the Planeteers CNN.com (September 2019) — profile on Ted Turner's environmental legacy. TV Tropes — Trivia page for Captain Planet Los Angeles Times, September 1990 Captain Planet Foundation captainplanetfoundation.org Popverse (January 2025)

In episode 360, Steve talks about the red flags to watch for when it comes to mold remediation. Don't use a company that depends on spraying or fogging the home. Mold must be physically removed from the home. You need to get a scope of work (SOW) when you get bids for remediation. Lastly, don't always go with the cheapest company! We offer a great digital bundle on our website, THE MOLD 101 bundle. Copy and paste the link to purchase your bundle. This bundle will help you navigate through the basics when it comes to toxic mold in your home. https://www.cnccontractorservices.com/themold101bundle We appreciate all of you and hope you have a great week!

This week on our Deep Space episode, Maria speaks with ⁠⁠⁠TransAstra's CEO Joe Sercel about their recently demonstrated capture-bag technology aboard the ISS, drawing attention for its potential role in orbital debris cleanup. Debris removal is only the beginning. The real goal is far bigger: asteroid mining as future space infrastructure. Sercel walks us through how the same capture system designed to safely enclose debris could eventually be used to secure near-Earth asteroids—unlocking access to water, propellant, and raw materials that enable sustained operations beyond Earth orbit.. Learn more about ⁠⁠⁠TransAstra's work. Remember to leave us a 5-star rating and review in your favorite podcast app. Be sure to follow T-Minus on ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠LinkedIn⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Instagram⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here's our ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠media kit⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. Contact us at ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠space@n2k.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ to request more info. Want to join us for an interview? Please send your pitch to ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠space-editor@n2k.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ and include your name, affiliation, and topic proposal. T-Minus is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

The Chopping Block crew and guest Monet Supply break down the $200M Kelp DAO bridge exploit, finger-pointing between LayerZero, Kelp DAO, and Aave, the wild “reverse hack” Arbitrum bailout, and what it all means for DeFi lending protocol risk, L2 trust, and the future of socialized losses in crypto. Welcome to The Chopping Block — where crypto insiders Haseeb Qureshi, Tom Schmidt, Tarun Chitra, and Robert Leshner chop it up about the latest in crypto. This week, we're joined by Monet Supply, DeFi governance OG and current Spark brain, for a front-row seat to crypto's hack-of-the-week: the $200M “Kelp DAO—LayerZero—Aave” debacle. If you thought DeFi risk was just about liquidations, buckle up. The team untangles the hack mechanics, the musical chairs of collateral across bridges and lending markets, and—most importantly—the prime time blame game: is it LayerZero's fault for running a single-signer bridge, or did Kelp DAO or Aave drop the ball? We dive deep into the “socialized losses” mess facing Aave depositors (especially on L2s), unpack Arbitrum's extraordinary move to confiscate coins back from North Korea (yes, really), and debate whether rollups can—or should—aspire to Ethereum's censorship resistance. Finally, the squad discusses concrete remediation: rate limits, portfolio triage on risky collaterals, and the meta-game of DeFi crisis response. If you want the blunt, unfiltered, and occasionally spicy take on DeFi's latest chaos, let's get into it. Listen to the episode on Apple Podcasts, Spotify, Pods, Fountain, Podcast Addict, Pocket Casts, Amazon Music, or on your favorite podcast platform. Show highlights