Podcasts about sd wan

A Pentagon breach exposes data on millions. ShinyHunters goes dark. MI5 warns universities about Chinese espionage. AI agents find creative ways around their guardrails. A fake Zoom installer delivers macOS malware. Cisco patches an actively exploited SD-WAN flaw. OpenAI disrupts a “distillation attack.” Cyber Command confronts operator burnout. Treasury targets alleged ATM jackpotters. Our guest is Etay Maor, Vice President of Threat Intelligence at Cato Networks, with a reminder that your network isn't a recycling bin. Prophecy as a service. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today we are joined by Etay Maor, Vice President of Threat Intelligence at Cato Networks, sharing his views on how your network isn't a recycling bin. Selected Reading Hackers stole millions of US military personnel records during months-long data breach (TechCrunch) ShinyHunters website goes offline after FBI deadline expires (Reuters) MI5 Warns Over 100 Academics Helped China's Espionage Plans (Infosecurity Magazine) Rogue Agents Investigation (Asymmetric Security) CloudSyncD: macOS backdoor hidden in a fake Zoom installer (Jamf) Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability (SecurityWeek) Irony alert: OpenAI whines that Chinese model stole its special IP that it stole from everybody else (The Register) After reports on suicide deaths, Pentagon puts Cyber Command on notice (The Record) Treasury Blacklists Most-Wanted ATM Malware Developer and His Network (SecurityWeek) Chatbots as oracles: How AI is giving new life to the ancient practice of seeking answers from inscrutable sources (The Conversation) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

“AI is no longer just a chatbot. It is becoming a proactive coworker.” In this Technology Reseller News podcast, Hardik Ajmera, Vice President of Product Management at Extreme Networks, discusses the general availability of Extreme Agent One Coworker, a context-aware AI agent designed specifically for enterprise networking. Extreme Networks provides secure connectivity across enterprise environments, including wired and wireless networking, SD-WAN, campus, branch and data center infrastructure. Ajmera says the key limitation of generic AI in networking is context. A general AI model can explain networking concepts or suggest troubleshooting steps, but it does not automatically understand a customer's topology, historical trends, policies, operating procedures or live network conditions. Extreme Agent One is designed to add that context. Built into Extreme Platform One, the AI continuously monitors the network, analyzes current and historical data and can proactively surface important issues before an engineer asks for help. “If it sees a severity-one issue, it does the legwork first,” Ajmera says. “It gathers the data, understands the impact and comes back with recommended steps.” The system can also help with troubleshooting, configuration guidance, knowledge-base access, evidence collection and support-case creation. For network teams, that means moving from reactive management toward a more proactive operating model. Ajmera says governance remains central to that transition. Extreme Agent One provides visibility into what data it used, how it reasoned through a problem and why it is recommending a particular action. Customers can also determine how much authority they want to give the AI. “Humans are still in control,” Ajmera says. “The key is that customers need a choice.” Extreme sees repetitive, time-consuming tasks such as issue analysis, troubleshooting and case creation as natural early candidates for AI automation, with more autonomous network operations developing over time as customers build trust. Extreme Agent One Coworker became generally available worldwide on August 31 and is available through Extreme Platform One. Visit ExtremeNetworks.com to learn more  

Send us Fan MailSpace internet is no longer a science project, and the gap between “cool demo” and “usable enterprise transport” is closing fast. We sit down with Tom Kunath from Cisco to unpack what's actually happening behind the hype: low Earth orbit constellations that hand off satellites every few seconds, improving latency that can land in the tens of milliseconds, and the messy networking realities that show up as loss, jitter, and unexpected performance drops.We walk through the multi-orbit picture in plain terms: why GEO is stable but slow, why MEO sits in the middle, and why LEO is the current spotlight for enterprise applications. From there, we get practical about SD-WAN over satellite. Tom shares what his testing revealed about early instability, how ground stations and oversubscription influence user experience, and what kinds of SLAs are realistic today when you design for roughly 1% loss and variable conditions like rain fade and obstructions.The most eye-opening part is the TCP story. Even when bandwidth looks great on a quick speed test, classic congestion control can crater sustained throughput as soon as loss appears. We dig into how SD-WAN features like TCP optimization/proxy, forward error correction, and packet duplication can turn “quirky broadband in space” into a link you can actually route over with confidence. We also cover security approaches from treating satellite like the public internet with IPsec overlays, to private L2VPN style services, and the next wave of “gatewayless” satellite networks that aim to keep traffic off the ground entirely.If you're designing resilient branch connectivity, connecting remote sites, or planning for non-terrestrial networking and direct-to-device 5G, this conversation will sharpen your mental model fast. Subscribe, share this with a network engineer who's skeptical about satellite, and leave a review with the biggest question you still have about LEO and SD-WAN.Connect with Our Guest: https://www.linkedin.com/in/tom-kunath1679/Cisco Starlink CVD:https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/Cisco_SDWAN_Starlink_LEO_Satellite_CVD.htmlCheck out the Monthly Cloud Networking Newshttps://docs.google.com/document/d/1fkBWCGwXDUX9OfZ9_MvSVup8tJJzJeqrauaE6VPT2b0/Visit our website and subscribe: https://www.cables2clouds.com/Follow us on BlueSky: https://bsky.app/profile/cables2clouds.comFollow us on YouTube: https://www.youtube.com/@cables2clouds/Follow us on TikTok: https://www.tiktok.com/@cables2cloudsMerch Store: https://store.cables2clouds.com/Join the Discord Study group: https://artofneteng.com/iaatj

On this episode, we talk on-premise SD-WAN management, IPS Optimization, Policy Auditor, and some AI News.On-Premises SD-WAN Management TechTalkAI Network Firewall TechTalkSimplify Admin Operations with R82.20 TechTalk (register link)IPS Custom Policy Best PracticesPolicy Auditor is now GAA GITHUB MISCONFIGURATION LET KIMI K3 CHEAT A CYBERSECURITY BENCHMARKThe AI governance confidence gap: Why trust in AI is running ahead of the capacity to govern it

Synopsis Épisode spécial : Patrick et Steve reçoivent Jean-Luc Trussart et Jean-François Poulin, deux des artisans de Sociable, la coopérative de solidarité qui construit une plateforme communautaire pour le Québec. Jean-Luc enseigne l'UX, l'UI et les médias interactifs au collégial, dirige la firme de formation en ligne Vecteurs et Leviers et a co-signé un livre sur l'usage intelligent de l'IA pour apprendre. Jean-François, lui, cumule trente ans de numérique et près de vingt ans d'UX, entre l'Apéro UX et sa chronique dans Mon Carnet. Les deux sont bénévoles sur le projet — comme tout le monde autour de la table. Sociable, c'est un projet né dans la foulée du Panier bleu, mais construit à l'envers des gros projets numériques québécois : coop sans but lucratif, open source, grassroots, sans levée de fonds et sans échéancier imposé. L'équipe explique la vision — un réseau où on peut valider que les comptes sont de vraies personnes, où l'utilisateur garde le contrôle de ses données, où les médias et les PME n'ont plus à se mettre à genoux devant Meta pour être vus. Et surtout, une plateforme pensée pour le territoire du Québec plutôt que pour la langue française seulement : anglais, espagnol, arabe, langues autochtones. La conversation dérive vite vers le fond du problème. Nos écoles sont sur Classroom, nos villes et nos gouvernements sur Teams : si Microsoft plante demain matin, les trois paliers arrêtent de fonctionner. Steve rappelle qu'on parle beaucoup de souveraineté des données sans jamais nommer qui opère l'infrastructure derrière. Patrick raconte l'échec de trouver un processeur de paiement canadien pour une plateforme de sécurité, et lance l'idée qu'il faut recréer un Visa canadien. L'équipe revient aussi sur le lobby Microsoft à la Ville de Montréal, sur les appels d'offres au plus bas soumissionnaire, et sur le vrai débat autour de l'âge minimum sur les réseaux sociaux — frapper Facebook plutôt que les jeunes. Gros bloc sur l'IA et le développement : le flot design → code qui a permis de coder en une semaine ce qui traînait depuis six mois, la fin de Figma pour le prototypage, le passage de programmeur à architecte, le hackathon Soignons la tech où des médecins ont bâti leurs propres interfaces, la gestion des permissions des agents, et une astuce concrète — demander à l'IA le script Python qu'elle génère en arrière-plan et le rendre déterministe, plutôt que de brûler des dizaines de milliers de dollars en jetons d'API. Puis les questions de fond de Sociable : définir un algorithme qui n'en est pas un, concevoir l'hygiène numérique sans surveiller les gens, chiffrer le clavardage de bout en bout tout en gardant un fil public. On termine avec les nouvelles : les infrastructures essentielles frappées par les groupes Cyber Av3ngers et Handala, et Desjardins qui s'en va héberger des données financières chez un fournisseur américain — alors que des nuages canadiens existent et que personne ne les connaît. Crew Patrick Mathieu — Cofondateur de Hackfest.ca et fondateur de Hexius Steve Waterhouse — Conférencier, consultant en cybersécurité, vétéran et chroniqueur Nos invités Jean-Luc Trussart — enseignant en intégration multimédia, cofondateur de Vecteurs et Leviers et bénévole chez Sociable Jean-François Poulin — architecte UX, chroniqueur UX à Mon Carnet et bénévole chez Sociable Liens et ressources Sociable Sociable — coopérative de solidarité Sociable, un nouveau média social coopératif pour redonner une place publique aux francophones (Mon Carnet) Un réseau social québécois pour redonner une voix aux citoyens (Les Affaires) Jean-Luc Trussart Vecteurs et Leviers — conception de formation en ligne « L'IA, ton alliée pour apprendre » — le livre Jean-François Poulin Apéro UX Mon Carnet, le balado de Bruno Guglielminetti jfpoulin.com Soignons la tech — l'initiative du Collège québécois des médecins de famille Lovable Magic Patterns Patrick Claude Code Claude Design Simnet — infonuagique canadienne Projets de transformation numérique du gouvernement du Québec : des changements de gouvernance et d'encadrement s'imposent (Autorité des marchés publics) News de sécurité Steve Infrastructures essentielles et secteur de l'eau Reportage TVA Rimouski sur l'incident de St-Noël (31 juillet 2026) Hacks on U.S. Water Supply Follow Years of Warnings and Neglect (New York Times) ICS/OT Water Sector Cyberattacks Reportedly Hit at Least 12 States (SecurityWeek) New Jersey, Alabama Join States Targeted in Water Cyberattacks (SecurityWeek) Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities (The Hacker News) The water sector just got its wake-up call. Again. (CyberScoop) How volunteer cyber experts are helping protect rural water systems (Cybersecurity Dive) Water utilities group partners with DEF CON offshoot for Water Watch Center (The Record) Poland uncovers second heat plant cyberattack that went hidden for months (The Record) Attackers crossed from IT to OT through a private APN in Poland (Security Affairs) North Carolina Ports confirms cyberattack disrupting operations (BleepingComputer) China ship spotted lurking over US-Taiwan undersea cable (Newsweek) Rançongiciels U.S., South Korean agencies caution to be on lookout for Gunra ransomware gang (CyberScoop) CISA Advisory AA26-222A — #StopRansomware: Gunra Ransomware Gunra Ransomware Exploits Fortinet VPN Flaws to Bypass MFA and Steal Enterprise Data (Cyber Security News) Vulnérabilités et correctifs Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs (The Hacker News) Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC (SecurityWeek) Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius (Dark Reading) Apple Issues Single But Important Security Fix For Mac Screen Sharing (Forbes) Google Chrome 151 Update: Bounty Hunters Discover 12 New Security Bugs (Forbes) IA, santé et vie privée Hugging Face hack marks start of dangerous AI cyber era (CNBC) Experts say healthcare faces cybersecurity crisis: « These are patient safety issues » (Cybersecurity Dive) How to Find Out If There Are Flock Cameras Near You (CNET) Souveraineté des données (sujet proposé par Jacques) Cartes de crédit Desjardins : les données seront hébergées aux États-Unis (Journal de Montréal) Shamelessplug Sociable — on cherche des contributeurs Joindre le Discord securite.fm Hackfest — Québec, inscriptions ouvertes Crédits Montage audio par Hackfest Communication Locaux virtuels par Streamyard

Send us Fan MailEnterprise Networking Digital Transformation Channel GrowthThe Future of Enterprise Networking and Digital Transformation with Blaise BradyIn this episode, Blaise Brady shares his decades of experience in network modernization, the evolution of enterprise architectures, and the transformative impact of AI on network design. Discover how organizations can better prepare for the next decade of rapid digital change.Main Topics:The evolution from legacy networks to SD WAN and AI-driven architecturesKey shifts and future predictions in enterprise networkingThe role of wireless technology in edge and mobile connectivityStrategic advice for channel partners to unlock new revenue streamsPractical solutions from Graphiant addressing MPLS, VPNs, and cloud connectivityThe importance of focusing on value-driven conversations and customer educationPredictions for retiring traditional networking solutions in favor of innovative, scalable solutionsTimestamps:00:00 - Welcome and introduction with Blaise Brady, a leader in enterprise networking 01:02 - The rapid evolution of enterprise connecting technologies in the cloud and AI era 04:13 - Key historical shifts in enterprise network architectures, SD WAN's race to the market 05:51 - Comparing SD WAN to legacy solutions and the age of “dinosaur” technologies 07:09 - Current state of the technology industry and the importance of channel growth 10:00 - Trends CIOs should focus on: from hardware to software-defined and operational expenses 16:34 - Impact of AI on network architecture, workloads, and automation 20:28 - The escalating demand for throughput and security driven by AI and big data 22:16 - Wireless technology's role in edge and mobile enterprise connectivity 23:28 - Curiosity and openness in adopting new network strategies and edge connectivity 24:24 - Strategic advice for partners: shifting from circuit slinging to blue ocean opportunities 26:49 - Displacement of traditional MPLS and VPN solutions by innovative networking models 28:32 - What problems Graphiant addresses and ideal customer profiles 35:59 - Predictions for enterprise networking over the next five years, including the retirement of MPLS 36:36 - The best career advice: ask for what you want and embrace evolution 37:38 - Final thoughts: focusing on value and success in network strategiesResources & LinksGraphiant - Network as a ServiceConnect with Blaise Brady:LinkedInRemember: Focus on delivering value through your solutions and conversations, and success will follow. Thanks for listening to The Wireless Way! Support the showCheck out my website https://thewirelessway.net/ use the contact button to send request and feedback. 

Comment garantir la continuité des soins lorsque la moindre interruption de service peut avoir un impact direct sur les patients ? Dans cet épisode, Quan-tuê Cassaro, Group CTO Corporate chez emeis, revient sur la transformation IT engagée par le groupe pour moderniser son système d'information tout en sécurisant ses opérations au quotidien.Elle partage les défis rencontrés au départ, entre infrastructures vieillissantes et environnements hétérogènes à l'international, et explique comment ses équipes, accompagnées par Capgemini, ont mené de front standardisation, modernisation et continuité de service. Au fil de l'échange, elle montre comment cette transformation technologique se traduit concrètement sur le terrain, au bénéfice des soignants et des patients. Enfin, elle évoque les prochaines étapes de cette évolution, entre digitalisation des parcours, automatisation des processus et intégration progressive de l'intelligence artificielle.

Send us Fan MailTwo competitors deciding to stop fighting and build together always raises one question: what changes for the customers the next morning. We start with the BT and Verizon International joint venture and dig into what a shared global network footprint could mean across SD-WAN, MPLS, Ethernet and cloud connectivity, including the uncomfortable parts like orchestration changes, duplicated POPs and the possibility of forced migrations. If you run global sites, this is the kind of deal that can quietly reshape your WAN roadmap.Then we shift to the money and physics behind the cloud: Virginia's new per kilowatt-hour data center electricity tax. It sounds small until you apply it to hyperscale consumption, and the inclusion of self-generated power closes an obvious workaround. We talk through why Northern Virginia's data center corridor matters, how policy spreads state to state, and why the “they'll just pass the cost on” argument is less theory than a pricing strategy you eventually see in your cloud bill.From there, it's security and governance: the White House post-quantum cryptography executive order and the accelerating reality of quantum risk, including “harvest now, decrypt later.” We connect PQC deadlines to refresh cycles, vendor readiness, and the practical work of migrating both infrastructure and applications. We also hit identity head-on with Cisco's plan to bring identity lifecycle security into Splunk's agentic SOC, because non-human identities and AI agents are changing what least privilege even means.We close with the growing pattern of government intervention in frontier AI models and what it does to businesses building on specific model capabilities. If you found this useful, subscribe, share the show with a friend and leave a review so more people can find it.Check out the Monthly Cloud Networking Newshttps://docs.google.com/document/d/1fkBWCGwXDUX9OfZ9_MvSVup8tJJzJeqrauaE6VPT2b0/Visit our website and subscribe: https://www.cables2clouds.com/Follow us on BlueSky: https://bsky.app/profile/cables2clouds.comFollow us on YouTube: https://www.youtube.com/@cables2clouds/Follow us on TikTok: https://www.tiktok.com/@cables2cloudsMerch Store: https://store.cables2clouds.com/Join the Discord Study group: https://artofneteng.com/iaatj

RabbitRun and Crexendo Expand Recurring Revenue Opportunities for Channel Partners, Podcast , RabbitRun offers an integrated platform that brings together Always-On Internet, enterprise-class SD-WAN, cybersecurity, voice survivability, POTS replacement and business continuity. The goal is to help businesses remain connected and operational when internet connections, networks or other critical infrastructure fail @ Doug Green “There's a tremendous opportunity for partners to deliver more value, improve customer retention and create new recurring revenue streams.” RabbitRun has joined the Crexendo Ecosystem Vendor Partner Program, giving Crexendo, NetSapiens and channel partners new ways to deliver resilient connectivity, business continuity and managed network services to their customers. In this Technology Reseller News podcast, RabbitRun Founder and CTO Pat Saavedra discusses the partnership and the opportunity it creates for MSPs, service providers and telecom resellers. RabbitRun offers an integrated platform that brings together Always-On Internet, enterprise-class SD-WAN, cybersecurity, voice survivability, POTS replacement and business continuity. The goal is to help businesses remain connected and operational when internet connections, networks or other critical infrastructure fail. For channel partners, Saavedra says the opportunity extends well beyond simply selling another connectivity product. Partners can use RabbitRun to address real customer concerns surrounding uptime, security and operational resilience while creating new sources of recurring managed-services revenue. As more business applications move to the cloud, internet connectivity has become essential infrastructure. A failed connection can interrupt voice services, payment processing, customer support, remote access and other core operations. RabbitRun is designed to identify network problems and move traffic to an available connection, helping businesses continue operating with minimal disruption. The platform also gives partners greater visibility into customer networks, allowing them to identify performance issues, manage connectivity and provide ongoing support. That creates a more proactive relationship in which the partner is helping protect the customer's business rather than simply responding after something goes wrong. The conversation also explores the growing importance of voice survivability. Businesses may have backup internet connections but still discover that their voice systems fail during an outage. RabbitRun helps partners address that gap by protecting both data and voice communications as part of a broader continuity strategy. POTS replacement represents another opportunity. As traditional analog lines become more expensive and difficult to maintain, businesses need alternatives for services such as alarms, elevators, fax machines and emergency communications. RabbitRun enables partners to incorporate those requirements into a modern managed connectivity offering. By joining the Crexendo Ecosystem Vendor Partner Program, RabbitRun becomes more accessible to a large community of service providers already delivering communications through Crexendo and the NetSapiens platform. Saavedra says this gives partners an opportunity to expand the value of their existing customer relationships. Rather than competing only on voice seats or connectivity pricing, they can provide a broader solution built around reliability, security and business continuity. For MSPs and communications providers, the message is straightforward: protecting the customer's ability to remain connected can become both an essential service and a meaningful recurring revenue opportunity. Learn more about RabbitRun and its participation in the Crexendo Ecosystem Vendor Partner Program.

Referências do EpisódioTURING DAY 2026 | 6ª EDIÇÃO - DIA 25/06Zero-Day Exploitation of Vulnerability (CVE-2026-20245) in Cisco Catalyst SD-WAN ManagerCVE-2026-20245 - Cisco Catalyst SD-WAN Controller, Catalyst SD-WAN Manager, and Catalyst SD-WAN Validator Authenticated Privilege Escalation VulnerabilityCVE-2026-20127 - Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityCVE-2026-20182 - Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityBackdoor.Mistic: New Backdoor May be Linked to Ransomware Access BrokerStrikeShark: investigating a new campaign delivering Cobalt Strike through SharkLoaderESET takes part in Operation Endgame to disrupt Amadey and StealcStealC and Amadey: Breaking down infostealers and the cybercrime services that deliver themStealC You Later: Proofpoint and IBM X-Force Support Operation Endgame DisruptionsAmadey and StealC: Malware-as-a-Service UnavailableRoteiro e apresentação: Carlos CabralEdição de áudio: Paulo Arruzzo Narração de encerramento: Bianca Garcia

Evil MSI Background: BASE64 Statistical Analysis https://isc.sans.edu/diary/Evil%20MSI%20Background%3A%20BASE64%20Statistical%20Analysis/33072 Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ TSME/SME not activating on Ryzen 7 9700X https://github.com/AMDESE/AMDSEV/issues/292 Deep-Research Agents Can Be Poisoned via User-Generated Content https://arxiv.org/pdf/2605.24245 My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich

Discover how Anthropic's secretive red team and the MITRE ATT&CK framework are mapping the chilling rise of malicious AI use, revealing cyber threats that now move faster than defenders can respond. Was a U.S. law firm right to pay a $20 million ransom. Could Cisco have yet another SD-WAN 0-day in the wild. Why is it so difficult to author secure PHP code. Teens use "WeedHack" to spy and attack each other. Researchers create the first AI-enabled Internet worm. Google Chrome pops-up "Shop with confidence." What... The discovered and irresponsibly disclosed HTTP/2 Bomb. What Anthropic learns from their past year of Claude abuse: It's bad Show Notes - https://www.grc.com/sn/SN-1082-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: threatlocker.com for Security Now outsystems.com/twit guardsquare.com doppel.com cyberhoot.com/securitynow and use code SECURITYNOW

Discover how Anthropic's secretive red team and the MITRE ATT&CK framework are mapping the chilling rise of malicious AI use, revealing cyber threats that now move faster than defenders can respond. Was a U.S. law firm right to pay a $20 million ransom. Could Cisco have yet another SD-WAN 0-day in the wild. Why is it so difficult to author secure PHP code. Teens use "WeedHack" to spy and attack each other. Researchers create the first AI-enabled Internet worm. Google Chrome pops-up "Shop with confidence." What... The discovered and irresponsibly disclosed HTTP/2 Bomb. What Anthropic learns from their past year of Claude abuse: It's bad Show Notes - https://www.grc.com/sn/SN-1082-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: threatlocker.com for Security Now outsystems.com/twit guardsquare.com doppel.com cyberhoot.com/securitynow

Discover how Anthropic's secretive red team and the MITRE ATT&CK framework are mapping the chilling rise of malicious AI use, revealing cyber threats that now move faster than defenders can respond. Was a U.S. law firm right to pay a $20 million ransom. Could Cisco have yet another SD-WAN 0-day in the wild. Why is it so difficult to author secure PHP code. Teens use "WeedHack" to spy and attack each other. Researchers create the first AI-enabled Internet worm. Google Chrome pops-up "Shop with confidence." What... The discovered and irresponsibly disclosed HTTP/2 Bomb. What Anthropic learns from their past year of Claude abuse: It's bad Show Notes - https://www.grc.com/sn/SN-1082-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: threatlocker.com for Security Now outsystems.com/twit guardsquare.com doppel.com cyberhoot.com/securitynow

Discover how Anthropic's secretive red team and the MITRE ATT&CK framework are mapping the chilling rise of malicious AI use, revealing cyber threats that now move faster than defenders can respond. Was a U.S. law firm right to pay a $20 million ransom. Could Cisco have yet another SD-WAN 0-day in the wild. Why is it so difficult to author secure PHP code. Teens use "WeedHack" to spy and attack each other. Researchers create the first AI-enabled Internet worm. Google Chrome pops-up "Shop with confidence." What... The discovered and irresponsibly disclosed HTTP/2 Bomb. What Anthropic learns from their past year of Claude abuse: It's bad Show Notes - https://www.grc.com/sn/SN-1082-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: threatlocker.com for Security Now outsystems.com/twit guardsquare.com doppel.com cyberhoot.com/securitynow

Discover how Anthropic's secretive red team and the MITRE ATT&CK framework are mapping the chilling rise of malicious AI use, revealing cyber threats that now move faster than defenders can respond. Was a U.S. law firm right to pay a $20 million ransom. Could Cisco have yet another SD-WAN 0-day in the wild. Why is it so difficult to author secure PHP code. Teens use "WeedHack" to spy and attack each other. Researchers create the first AI-enabled Internet worm. Google Chrome pops-up "Shop with confidence." What... The discovered and irresponsibly disclosed HTTP/2 Bomb. What Anthropic learns from their past year of Claude abuse: It's bad Show Notes - https://www.grc.com/sn/SN-1082-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: threatlocker.com for Security Now outsystems.com/twit guardsquare.com doppel.com cyberhoot.com/securitynow

Discover how Anthropic's secretive red team and the MITRE ATT&CK framework are mapping the chilling rise of malicious AI use, revealing cyber threats that now move faster than defenders can respond. Was a U.S. law firm right to pay a $20 million ransom. Could Cisco have yet another SD-WAN 0-day in the wild. Why is it so difficult to author secure PHP code. Teens use "WeedHack" to spy and attack each other. Researchers create the first AI-enabled Internet worm. Google Chrome pops-up "Shop with confidence." What... The discovered and irresponsibly disclosed HTTP/2 Bomb. What Anthropic learns from their past year of Claude abuse: It's bad Show Notes - https://www.grc.com/sn/SN-1082-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: threatlocker.com for Security Now outsystems.com/twit guardsquare.com doppel.com cyberhoot.com/securitynow

Discover how Anthropic's secretive red team and the MITRE ATT&CK framework are mapping the chilling rise of malicious AI use, revealing cyber threats that now move faster than defenders can respond. Was a U.S. law firm right to pay a $20 million ransom. Could Cisco have yet another SD-WAN 0-day in the wild. Why is it so difficult to author secure PHP code. Teens use "WeedHack" to spy and attack each other. Researchers create the first AI-enabled Internet worm. Google Chrome pops-up "Shop with confidence." What... The discovered and irresponsibly disclosed HTTP/2 Bomb. What Anthropic learns from their past year of Claude abuse: It's bad Show Notes - https://www.grc.com/sn/SN-1082-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: threatlocker.com for Security Now outsystems.com/twit guardsquare.com doppel.com cyberhoot.com/securitynow

Discover how Anthropic's secretive red team and the MITRE ATT&CK framework are mapping the chilling rise of malicious AI use, revealing cyber threats that now move faster than defenders can respond. Was a U.S. law firm right to pay a $20 million ransom. Could Cisco have yet another SD-WAN 0-day in the wild. Why is it so difficult to author secure PHP code. Teens use "WeedHack" to spy and attack each other. Researchers create the first AI-enabled Internet worm. Google Chrome pops-up "Shop with confidence." What... The discovered and irresponsibly disclosed HTTP/2 Bomb. What Anthropic learns from their past year of Claude abuse: It's bad Show Notes - https://www.grc.com/sn/SN-1082-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: threatlocker.com for Security Now outsystems.com/twit guardsquare.com doppel.com cyberhoot.com/securitynow

Discover how Anthropic's secretive red team and the MITRE ATT&CK framework are mapping the chilling rise of malicious AI use, revealing cyber threats that now move faster than defenders can respond. Was a U.S. law firm right to pay a $20 million ransom. Could Cisco have yet another SD-WAN 0-day in the wild. Why is it so difficult to author secure PHP code. Teens use "WeedHack" to spy and attack each other. Researchers create the first AI-enabled Internet worm. Google Chrome pops-up "Shop with confidence." What... The discovered and irresponsibly disclosed HTTP/2 Bomb. What Anthropic learns from their past year of Claude abuse: It's bad Show Notes - https://www.grc.com/sn/SN-1082-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: threatlocker.com for Security Now outsystems.com/twit guardsquare.com doppel.com cyberhoot.com/securitynow

Online prüfen, im Laden abholen, vor Ort beraten: Kundinnen und Kunden erwarten heute nahtlose Erlebnisse. Wie Deichmann seine Filialen weiterentwickelt und welche Rolle die Infrastruktur von Telefónica dabei spielt.

RubyGems adds dependency-cooldowns to counter supply chain attacks, AT&T and IBM are accused of hiding foreign hacks, Cisco warns of a new SD-WAN zero-day, and Google layoffs hit security teams. Show notes Risky Bulletin: RubyGems adds dependency cooldowns to counter supply chain attacks

GEODIS Brings an End-User View of Cisco Infrastructure Modernization to Cisco Live, Podcast, GEODIS shares how Cisco IQ, Cisco Services and SD-WAN are helping a global logistics company move from reactive IT to proactive lifecycle management By Doug Green “I'm just a guy in IT that's using an extraordinary product that I feel deserves the attention that it's getting.” In this Cisco Live podcast, I spoke with Scott Malone, Vice President of IT Infrastructure for GEODIS, about how a global supply chain and logistics company is using Cisco technology to strengthen visibility, resilience and operational control across a complex enterprise environment. GEODIS is an end-to-end supply chain company supporting freight forwarding, contract logistics, distribution, express delivery and road transport. For a company operating across multiple lines of business and global markets, infrastructure reliability is not just an IT concern. It is part of the company's ability to serve customers and keep logistics operations moving. Malone brought a valuable end-user perspective to the conversation. Speaking shortly after presenting on stage at Cisco Live, he described GEODIS as a company working to modernize critical IT infrastructure while giving teams better tools to understand, manage and secure the environment. A central theme of the discussion was the shift from reactive maintenance to proactive lifecycle management. Through Cisco IQ, GEODIS has gained greater visibility into infrastructure health, vulnerabilities and areas requiring attention. That insight helps the IT team prioritize work, focus resources and move faster on remediation. Malone also discussed how GEODIS is working with Cisco Services and Cisco SD-WAN to build a more resilient architecture. The company's goal is to support high availability across a distributed footprint while continuing to modernize remote access and LAN core infrastructure. For Technology Reseller News readers, the GEODIS story offers a clear look at what enterprise IT buyers value in today's environment: visibility, security, uptime, lifecycle intelligence and trusted support. The conversation also shows how Cisco's broader portfolio can help large organizations move beyond point solutions toward a more proactive operating model. As logistics, data, applications and customer expectations become increasingly dependent on always-available networks, GEODIS provides a practical example of how infrastructure modernization is becoming a business requirement. Learn more at: https://www.geodis.com/

Take a Network Break! In this week’s Red Alert we suggest an audit of your Azure environment after Microsoft says it patched four critical vulnerabilities. On the news front, Nvidia has brought the Multipath Reliable Connection (MCR) protocol to the Open Compute Project, AT&T rolls out quantum-resistant SD-WAN services, and HPE introduces new Wi-Fi automation... Read more »

Take a Network Break! In this week’s Red Alert we suggest an audit of your Azure environment after Microsoft says it patched four critical vulnerabilities. On the news front, Nvidia has brought the Multipath Reliable Connection (MCR) protocol to the Open Compute Project, AT&T rolls out quantum-resistant SD-WAN services, and HPE introduces new Wi-Fi automation... Read more »

Take a Network Break! In this week’s Red Alert we suggest an audit of your Azure environment after Microsoft says it patched four critical vulnerabilities. On the news front, Nvidia has brought the Multipath Reliable Connection (MCR) protocol to the Open Compute Project, AT&T rolls out quantum-resistant SD-WAN services, and HPE introduces new Wi-Fi automation... Read more »

Tearing apart website fraud to see how it works. (@sans_edu) https://isc.sans.edu/diary/%5BGUEST%20DIARY%5D%20Tearing%20apart%20website%20fraud%20to%20see%20how%20it%20works./32958 Simple bypass of the link preview function in Outlook Junk folder https://isc.sans.edu/diary/Simple%20bypass%20of%20the%20link%20preview%20function%20in%20Outlook%20Junk%20folder/32990 NGINX Vulnerability https://depthfirst.com/nginx-rift Cisco SDWan 0-Day https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW

פרק מספר 514 של רברס עם פלטפורמה - Attack Analytics. בפרק זה רן ואורי מארחים את ד"ר גיא וייזל, Tech Evangelist בחברת Cato Networks, לשיחה מרתקת על האופן שבו בינה מלאכותית משנה את חוקי המשחק בעולם הסייבר. דיברנו על מודלי AI מתקדמים, כיצד הם מאיצים מתקפות של האקרים אך גם משפרים את יכולות ההגנה, ואיך פרוטוקולים עתיקים יכולים להוות נקודת תורפה מסוכנת לתשתיות פיזיות. [00:00] ל"ג בעומר, כנס רברסים ופתיחת הפרק חג שמח! מקליטים על הדרך למדורה של רבי שמעון. עדכונים לגבי כנס רברסים 2026: אנחנו כבר עובדים במרץ ומגייסים ספונסרים לכנס הקהילתי. אם הארגון שלכם מעוניין לתמוך, מוזמנים לשלוח לנו מייל ל-team@reversim.com (או כל וריאציה אחרת שעובדת לכם). קול קורא (CFP) להגשת הרצאות לכנס ייפתח ממש בקרוב. [01:05] הכירו את ד"ר גיא וייזל ואת חברת Cato Networks גיא משמש כ-Tech Evangelist ב-Cato Networks, תפקיד היושב בתפר שבין קבוצות ה-R&D והמוצר לבין עולם השיווק, החדשנות, ועבודת השטח בעולמות הסייבר וה-AI. קצת על קייטו נטוורקס: החברה, המונה כ-1,800 עובדים (עם מרכז פיתוח גדול בתל אביב), חלוצה בקטגוריית ה-SASE (Secure Access Service Edge). הפלטפורמה מספקת איחוד של רשת ואבטחה כשירות בענן - מעין "כיפת ברזל" לסניפים ומשתמשים של ארגונים ברחבי העולם. במקום להסתמך על ריבוי מוצרי נקודה (Point Solutions), הארגון מקבל תמונה מלאה וקונטקסט רחב על הכל תחת פלטפורמה אחת (הכוללת SD-WAN, DLP, CASB, Zero Trust ועוד). [06:07] עידן ה-"Mytus Moment" והשפעת ה-AI על מתקפות סייבר רן מזכיר מודל מיתולוגי ומתקדם ממשפחת Claude של Anthropic שמסוגל לאתר ולנצל פרצות אבטחה ביעילות מפחידה. גיא מתאר את המצב כ-"The Mytus Moment" – סמן לתעשייה על כניסתם של מודלים מתקדמים (מבית אנתרופיק, OpenAI ואחרים) שמייצרים קפיצת מדרגה בעולם התקיפה (ראו גם: Cato joins OpenAI's Trusted Access for Cyber TAC). מה בעצם משתנה בפועל? מתודולוגיות התקיפה עצמן (Reconnaissance, Lateral Movement) נותרו דומות, אך ה-Scale והמהירות צמחו משמעותית. ה-AI מצמצם את זמן התגובה מגילוי ה-Zero-day ועד לניצול בפועל – משבועות וחודשים לשעות או דקות. במקום סריקות גנריות (כמו של Script Kiddies), סוכני AI יודעים כעת לתפור וקטורי תקיפה מותאמים אישית למטרה ספציפית, ולשרשר חולשות (Vulnerability Chaining) כדי להתקדם ברשת בצורה עצמאית וחכמה. [16:04] כשה-Agents חובשים כובע לבן: איך משנים את תפיסת ההגנה בדיוק כפי שתוקפים נעזרים ב-AI, ארגוני הסייבר חייבים לאמץ Agents הגנתיים כדי להתמודד עם קצב האיומים החדש. מעבר ממנגנונים מבוססי חתימות (Signatures) לזיהוי אנומליות ופעילות דינאמית מבוססת קונטקסט מלא של המשתמש והרשת. שינוי דרמטי במדדי ההצלחה (SLA) של צוותי אבטחה: המיקוד עובר מ-Time to Patch (זמן תיקון החולשה). להתמקדות ב-Time to Protect (זמן ההגנה הרציפה בסביבת הריצה). יש חשיבות גוברת ל-Shift Right (הגנה על ה-Production בזמן אמת) ולא רק ל-Shift Left. מלכודות לסוכני AI: מחקר של קייטו חשף את WebPromptTrap – פרצת Indirect Prompt Injection חדשה שמדגימה כיצד תוקפים יכולים לחטוף סוכני AI דרך תוכן זדוני המוטמע באתרים. [18:04] מתקפות על תשתיות פיזיות: הבעיה עם פרוטוקול Modbus Modbus הוא פרוטוקול תקשורת ותיק (משנת 1979) המשמש לבקרי תעשייה (PLC ו-SCADA), המפעילים תשתיות פיזיות כמו סכרים, מערכות אנרגיה סולארית, משאבות וצנטריפוגות. הפרוטוקול נעדר אבטחה בסיסית או הצפנה, ולמרות זאת, בשל תהליכי מודרניזציה או טעויות אנוש, הוא נחשף לעיתים ישירות לאינטרנט. מחקר של קייטו שבוצע לאורך 3 חודשים חשף שרכיבי Modbus ב-70 מדינות (ביניהן ארה"ב, צרפת ויפן) נמצאים תחת מתקפות אמיתיות. אילו סוגי מתקפות נצפו על ידי המערכות? איסוף מידע (Reconnaissance). מתקפות מניעת שירות (DoS) שנועדו למנוע מהמפעילים לשלוט בבקר. זיהוי סוג המערכת (Fingerprinting). ניסיונות אקטיביים של כתיבה ל-Registers (זיהו מתקפות מתשתית סינית) במטרה לשנות פיזית פעולות של חיישנים ומנועים. שילוב של יכולות ה-Agentic AI – שיודעות לזהות בקר פתוח ולשגר אקספלויט תוך שניות – יחד עם המצב הגיאופוליטי המתוח, הופכים את האיום על תשתיות לאומיות לממשי ומהיר יותר מאי פעם. האזנה נעימה!

Cisco VP of Product Management for SD-WAN and SASE, Hugo Vliegen, explains how AI is changing enterprise network requirements around latency, security, sovereignty, and automation. As AI traffic becomes more distributed and operationally critical, how will providers deliver assured experiences instead of basic connectivity? In this Executives at the Edge episode, host Pascal Menezes explores... Read More The post Beyond Best Effort: Networking for AI Operations appeared first on Mplify Alliance.

Greg LaBrie, Vice President of Technology Solutions at Worldcom Exchange Inc. (WEI), joined Technology Reseller News Publisher Doug Green to discuss how AI and next-generation connectivity—anchored by WEI Connect and Starlink—are reshaping enterprise networking. WEI, a long-standing value-added reseller founded in 1989, has evolved into a provider of integrated IT and connectivity solutions. With WEI Connect, the company is bringing enterprise-grade structure, visibility, and support to emerging technologies like Starlink, transforming them into fully managed, business-ready services. LaBrie described AI in telecom as the foundation for self-healing, autonomous networks driven by telemetry and real-time decision-making. “For us, AI means having networks that are self-healing and autonomous—collecting data, making decisions, and keeping users connected without them even knowing it's happening,” he said. Starlink plays a central role in this vision, using AI to dynamically select satellites and ground connections to maintain performance. WEI enhances this capability by aggregating data through APIs, applying predictive analytics, and integrating SD-WAN intelligence to determine the best available connection—whether satellite, fiber, or 5G—on a per-application basis. The result is an outcome-based network where connectivity is seamless and resilient. Users experience uninterrupted service—even during live sessions—as traffic is automatically routed across the optimal path. This approach not only improves uptime but also enables new use cases, including real-time telemetry collection in remote or hard-to-reach environments. Looking ahead, WEI sees continued advances in AI-driven automation, with increasing amounts of data enabling more predictive and autonomous network management. As enterprise reliance on connectivity grows, LaBrie emphasized that organizations will benefit from fewer outages, improved performance, and simplified support through partners that unify multiple technologies into a single, managed experience. Learn more: https://www.wei.com/

This week on Hacking News, we're covering five stories that all share one theme: the things we trust most are the things being targeted. Cisco disclosed two CVSS 10.0 vulnerabilities in their Secure Firewall Management Center — the centralized brain that manages entire firewall fleets — giving unauthenticated attackers root access. Pakistan-linked APT36 has turned AI coding tools into a malware assembly line, flooding Indian government networks with disposable "vibeware" variants in a strategy Bitdefender calls "Distributed Denial of Detection." Google dropped the largest Android security update in almost eight years — 129 vulnerabilities — including a Qualcomm zero-day already under targeted exploitation across 234 chipsets. A China-linked threat cluster called UAT-9244 is burrowing into South American telecom infrastructure with three brand-new malware families spanning Windows, Linux, and edge devices. And LexisNexis confirmed a cloud breach after a threat actor exploited an unpatched React app and found the database password was... Lexis1234. ⏱️ Timestamps 0:00 — Cold Open: What do you call a hackable firewall manager? 1:21 — Welcome & CTA 2:01 — Story 1: Cisco Secure FMC — Two CVSS 10.0 Vulnerabilities (CVE-2026-20079 & CVE-2026-20131) 5:33 — Story 2: APT36 "Vibeware" — AI-Generated Malware at Industrial Scale 9:13 — Story 3: Google Android March 2026 — 129 Patches + Qualcomm Zero-Day (CVE-2026-21385) 12:34 — Story 4: UAT-9244 / FamousSparrow — China-Linked APT Hits South American Telecoms 16:26 — Story 5: LexisNexis Cloud Breach — React2Shell, Weak Passwords, Gov Data 20:14 — Recap & Key Takeaways 22:40 — Outro

Spending on SASE, which combines SD-WAN and cloud-delivered security, is forecast to nearly triple over the next few years, according to Dell’Oro Group. Today on Packet Protector we talk with that forecast’s author about what’s driving that spending. We also explore how SASE vendors are differentiating, architectural considerations for SASE deployments, pros and cons of... Read more »

Spending on SASE, which combines SD-WAN and cloud-delivered security, is forecast to nearly triple over the next few years, according to Dell’Oro Group. Today on Packet Protector we talk with that forecast’s author about what’s driving that spending. We also explore how SASE vendors are differentiating, architectural considerations for SASE deployments, pros and cons of... Read more »

AI's next phase is arriving fast—and it's reshaping everything from cloud performance to cybersecurity. This week, Amazon Web Services and Cerebras unveiled a new approach to dramatically accelerate AI inference by pairing specialized chips through Amazon Bedrock, while Dell, Nutanix, and CrowdStrike rolled out infrastructure and security innovations at GTC 2026 to support the rapid rise of agentic AI across enterprise environments. At the same time, Zscaler expanded data sovereignty controls to meet tightening global regulations, and Cisco rushed to patch a critical CVSS 10.0 SD-WAN vulnerability that could grant attackers full administrative access. Underscoring it all, Nvidia's Jensen Huang projected a staggering $1 trillion in demand for next-gen AI systems by 2027—making one thing clear: the race to power, secure, and scale AI is only just getting started. This and more on the Tech Field Day News Rundown with Tom Hollingsworth and guest host Dave Graham of MLCommons. Time Stamps: 0:00 - Cold Open0:28 - Welcome to the Tech Field Day News Rundown1:13 - AWS and Cerebras Partner to Accelerate AI Inference in the Cloud2:37 - Critical Cisco SD-WAN Authentication Bypass Vulnerability5:38 - Dell Expands AI Infrastructure Portfolio at NVIDIA GTC7:40 - CrowdStrike and NVIDIA Expand AI Security Alliance11:15 - Nutanix Expands AI Platform to Securely Run Enterprise AI Agents13:59 - Zscaler Expands Data Sovereignty Controls for Global Compliance18:26 - NVIDIA CEO Sees $1 Trillion in Orders for Blackwell and Vera Rubin Through 202728:38 - The Weeks Ahead: Upcoming Tech Field Day Events30:29 - Thanks for Watching the Tech Field Day News RundownTune in every Wednesday for the IT news of the week with a variable degree of snarkyness. Guest Host: ⁠Dave Graham, Head of Marketing at MLCommonsFollow our hosts ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Tom Hollingsworth⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Alastair Cooke⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, and ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Stephen Foskett⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠. Follow Tech Field Day ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠on LinkedIn⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, on ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠X/Twitter⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, on ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Bluesky⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠, and on ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Mastodon⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠.

Two perfect CVSS 10.0 scores in one news cycle. A state-sponsored actor living inside Cisco's SD-WAN platform since 2023. A brand-new lateral movement technique called "Ghost NICs" that leaves no forensic trace. An AI chatbot jailbroken to steal 195 million government records. A North Korean hacking group bridging air-gapped networks with USB drives and an embedded Ruby runtime. And a phishing platform so sophisticated it makes your multi-factor authentication functionally useless. This is Hacking News Episode 64 from Exploit Brokers by Forgebound Research. Five stories, multiple nation-state actors, and some genuinely novel attack techniques. Let's get into it.

(Presented by Thinkst Canary: Most Companies find out way too late that they've been breached. Thinkst Canary changes this. Deploy Canaries and Canarytokens in minutes and then forget about them. Attackers tip their hand by touching 'em giving you the one alert, when it matters. With zero admin overhead and almost no false-positives, Canaries are deployed (and loved) on all 7 continents.) Three Buddy Problem - Episode 87: We wake up to news of U.S./Israel military action against Iran and the expected fallout, including Tehran's cyber capabilities and proxy risks. Plus: Anthropic's clash with the Pentagon over AI use in warfare, market shockwaves from AI-driven security tools, mass layoffs tied to automation, Trenchant exec sentencing and sanctions in the exploit trade, and fresh questions around Cisco's SD-WAN breach and supply-chain trust. Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Cisco SD-WAN Bug Actively Exploited, MCP Azure Takeover Demo, CarGurus Data Leak, and Secret Service Scam Recovery Host Jim Love covers four cybersecurity stories: CSA warns a critical Cisco Catalyst SD-WAN controller vulnerability (CVE-2026-20127) has been exploited since 2023, enabling authentication bypass and rogue peering sessions, and orders U.S. federal agencies to inventory systems, collect logs and forensic artifacts, hunt for compromise, and apply Cisco's fixes by 5:00 PM ET on February 27, 2026, with no workarounds. At RSA, researchers show how flaws in Model Context Protocol (MCP)—a key integration layer for agentic AI—could lead to remote code execution and even Azure tenant takeover, highlighting rising enterprise risk. ShinyHunters reportedly published 12.4 million stolen CarGurus records, raising phishing and fraud concerns tied to vehicle shopping and financing context. Finally, an Ontario tech support scam victim recovers funds through coordinated work by Ontario Provincial Police and the U.S. Secret Service, which traced and froze the money in time. Cybersecurity Today  would like to thank Meter for their support in bringing you this podcast. Meter delivers a complete networking stack, wired, wireless and cellular in one integrated solution that's built for performance and scale.  You can find them at Meter.com/cst LINKS Cisco Advisory Cisco Security Advisory – CVE-2026-20127 Authentication bypass vulnerability in Cisco Catalyst SD-WAN https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk CISA Supplemental Hunt and Hardening Guidance (Cisco SD-WAN Systems) https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems Threat Hunt Guide (Technical PDF) Cisco SD-WAN Threat Hunt Guide (jointly referenced in federal guidance) https://media.defense.gov/2026/Feb/25/2003880299/-1/-1/0/CISCO_SD-WAN_THREAT_HUNT_GUIDE.PDF 00:00 Sponsor Message 00:19 Cisco SD-WAN Under Attack 02:48 MCP Azure Takeover Demo 05:28 CarGurus Data Dump 07:16 Secret Service Scam Recovery 09:24 Closing Sponsor Thanks

  Has MPLS really "died" because of SD-WAN services? Scott Robohon joins Tom and Russ to talk about the past and future of MPLS.

This week Lindsey rejoins Dennis to talk about the attacks targeting a zero day in Cisco's Catalyst SD-WAN Controller (2:17), Google's disruption of a China-linked cyber espionage campaign targeting telecom infrastructure (6:30), and the new cyber developments on everyone's favorite tech show, The Pitt (13:13)!

The CLAIR Model: A Synthesized Conceptual Framework for Mapping Critical Infrastructure Interdependencies [Guest Diary] https://isc.sans.edu/diary/The+CLAIR+Model+A+Synthesized+Conceptual+Framework+for+Mapping+Critical+Infrastructure+Interdependencies+Guest+Diary/32748 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CVE-2026-20127 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk https://blog.talosintelligence.com/uat-8616-sd-wan/ Abusing Cortex XDR Live https://labs.infoguard.ch/posts/abusing_cortex_xdr_live_response_as_c2/ OpenSSL Vulnerability CVE-2025-15467 https://seclists.org/oss-sec/2026/q1/220

In this video David speaks to Peter Bailey (SVP and GM of Cisco's Security business). AI agents are moving fast inside enterprises, and CISOs are hitting the brakes for one reason: the attack surface is expanding at machine speed. In this interview, we break down how agentic AI changes security, why MCP servers and agent tool access create new risks, and what a zero trust approach looks like when the “user” is a non-deterministic agent. We cover real-world problems like shadow MCP servers, agents touching sensitive systems and PII, and why traditional perimeter controls and firewalls are not enough when traffic is encrypted and actions happen too quickly downstream. You'll also hear what Cisco is doing across the AI lifecycle: AI Defense for model scanning, provenance and guardrails, plus new protections focused on agent identity, dynamic authorization, behavior monitoring, and revocation. On the networking side, we discuss how SD-WAN and secure access (SASE) can add visibility and policy control for AI usage, including prioritizing latency-sensitive AI traffic while still enforcing security. If you're a security engineer, network engineer, or CISO trying to move from AI hype to safe deployment, this video gives you a practical mental model and the controls to start building now. Big thank you to ‪@Cisco‬ for sponsoring this video and for sponsoring my trip to Cisco Live Amesterdam. // Peter Baily' SOCIALS // LinkedIn: / peterhbailey Guest Bio: https://newsroom.cisco.com/c/r/newsro... // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 0:00 - Coming Up 0:30 - Introduction 01:15 - CISOs Problems with AI 02:35 - Real Issues with AI Agents 04:29 - Growth of the Attack Surface 05:34 - Concern of Poisoned AI and MCP 08:09 - What is the Kill-chain 10:16 - AI with Built-in Security 11:56 - Best Practises for AI Security 14:08 - Cisco Innovations for AI 16:48 - Cisco's Red Team for own AI 18:27 - Secure AI in Public Places 20:09 - Should You get into Cyber Security 21:26 - Advice To Your Younger Self 22:29 - Outro Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #cisco #ciscoemea #ciscolive

Legacy networks are a classic form of technology debt: they work, but they quietly limit agility, drive unnecessary cost and constrain innovation.  In this 10-minute episode of Staying Connected, TC2's Keith Cook joins Tony Mangino to talk through how enterprises are shedding that debt by moving to an Internet-first WAN—and how to do it with a clear plan rather than a disruptive leap.  We cover how enterprise buyers should think about connectivity mix, supplier selection, SD-WAN strategy, and security design—all before going to market.  If you would like to learn more about our experience in this space, please visit our Technology Consulting & Strategy Development Services and Strategic Sourcing webpages. 

Send us a textThe year felt like it stretched on forever, and in that extra space the networking world reshaped itself. We traded weekly cadence for deeper focus, shipped an AWS Advanced Networking book that the community embraced, and then watched the landscape pivot as vendors consolidated, clouds connected to each other, and AI hype met the hard edges of security and reliability.We dig into the acquisition wave with clear eyes: Arista picking up VeloCloud from Broadcom and what that means for SD‑WAN customers; HPE's Juniper deal clearing regulatory review and the open questions around Mist and portfolio strategy; and why Broadcom–VMware didn't trigger instant mass migrations, even as budgets and CSP support shifted. Then we chart the most surprising turn—AWS and Google offering a cross‑cloud link that's not a one‑off database play, but a general connective fabric. If pricing trends toward pipe capacity rather than per‑GB egress, multi‑cloud networking stops being a niche product pitch and becomes an operator reality. We even explore the idea of a Cloud Exchange Point, where automation snaps providers together at scale.AI was everywhere and still uneven. We call out real wins—friendlier automation workflows and eBPF‑powered visibility via Cisco's Isovalent acquisition—while laying out the unsolved work: agentic AI with least privilege, auditable actions, and enforceable data boundaries. Until those controls are standard, enterprises will limit autonomy and keep AI close to expert hands. Against the constant layoff drumbeat, we offer direct advice: build skills across cloud interconnects, Kubernetes networking, and eBPF telemetry; document outcomes in the language of cost and risk; and lean into community for opportunities and perspective.If you want a no‑nonsense guide to what changed, what actually matters, and how to prepare for a faster 2026, this one's for you. Subscribe, share with a teammate who needs signal over noise, and drop your take: which shift will shape your architecture next year?Purchase Chris and Tim's book on AWS Cloud Networking: https://www.amazon.com/Certified-Advanced-Networking-Certification-certification/dp/1835080839/ Check out the Monthly Cloud Networking Newshttps://docs.google.com/document/d/1fkBWCGwXDUX9OfZ9_MvSVup8tJJzJeqrauaE6VPT2b0/Visit our website and subscribe: https://www.cables2clouds.com/Follow us on BlueSky: https://bsky.app/profile/cables2clouds.comFollow us on YouTube: https://www.youtube.com/@cables2clouds/Follow us on TikTok: https://www.tiktok.com/@cables2cloudsMerch Store: https://store.cables2clouds.com/Join the Discord Study group: https://artofneteng.com/iaatj

AI is reshaping the world of networking and security—and Cisco Champions are diving in. In this episode, our experts explore how artificial intelligence is transforming network management, efficiency, and security operations. From SD-WAN optimization and bandwidth considerations to digital twins and secure routers, the conversation unpacks the real-world opportunities and challenges of integrating AI into modern networks. Plus, we tackle the balance between automation and the ongoing need to develop engineering skills in the AI era. Resources Visit our webpage to learn more about our SD-WAN and Security solutions: https://www.cisco.com/site/us/en/solutions/networking/sdwan/index.html Cisco guest VP of Product Management, Cisco SD-WAN Champion guests Gert-Jan de Boer, Networking Archeologist, aaZoo Network Solutions Donald Robb, Principal Network Architect, Walt Disney Company Marco Krauss, IT Senior Consultant Network Automation, Computacenta Dan Kelcher, Sr. Network Engineer, Hollstadt Consulting

“Nobody can be an expert in everything — so you surround yourself with the right partners,” says Chris Young, CEO of Smartel. “That's how you deliver real value, reduce costs, and earn long-term trust.” In this latest episode of the TELCLOUD POTS and Shots Podcast Series, Doug Green, Publisher of Technology Reseller News, is joined by Jake Jacoby, CEO of TELCLOUD, and special guest Chris Young, CEO of Smartel, for a compelling look at how collaboration, data-driven decision-making, and unified connectivity strategies are transforming the POTS replacement landscape. Young introduces Smartel as a 23-year veteran in mobile solutions and wireless expense management, known for simplifying large, complex wireless ecosystems. Their approach centers on centralized management, data ingestion tools, standardized policies, and a responsive customer service model, all aimed at lowering costs and streamlining operations for enterprises nationwide. Jacoby explains why Smartel is an ideal partner for TELCLOUD's POTS replacement vision. As organizations confront escalating copper costs, service shutdowns, and outdated infrastructure, Smartel's audits often reveal both unused POTS lines and mission-critical lines at risk. By pairing Smartel's visibility with TELCLOUD's life-safety-grade replacement platform, the two companies deliver cost savings, continuity, and a long-term service model built to last decades. The discussion widens to the larger industry transformation. With the copper sunset accelerating and AI reshaping telecom workflows, both executives describe POTS replacement as a gateway opportunity — the immediate need that opens the door to broader conversations about edge connectivity, SD-WAN, IoT, backup strategy, and comprehensive modernization. As Young notes, “POTS is our biggest door-opener right now — everyone needs it, and it leads to deeper relationships almost every time.” Jacoby adds that while POTS is hot today, the service is required for the next 20 years, creating dependable recurring revenue for partners who can guide customers through the transition. Both stress that customers ultimately want simplicity, reliability, and cost control — and partnerships like TELCLOUD + Smartel are built to deliver exactly that. And true to the Shots tradition, the episode closes with a tasting of Don Julio Ceniza, an exceptionally rare Extra Añejo aged in charred oak barrels. Smooth, smoky, and difficult to find, Jacoby describes it as one of his personal favorites — and surprises both Doug and Chris by sending each of them a bottle to enjoy off-camera. The perfect pairing for a discussion about premium craftsmanship and long-term value. The POTS and Shots series continues to blend industry insight with cultural storytelling, helping MSPs and partners navigate the telecom transition while taking a tour of the world's greatest tequilas. For more information, visit telcloud.com or call 844-900-2270. Learn more about Smartel at www.smartelinc.com.

Send us a textNetworks can sometimes feel like a maze of licenses, tunnels, and 2 a.m. pager alerts. We sit down with Graphiant CEO Ali Shaikh to unpack how Network as a Service makes connectivity on-demand, consumption-based, and finally as flexible as the cloud it serves. From the SD-WAN wave to the pandemic reset, Ali explains why the old build-and-forget model couldn't keep pace with multi-cloud, remote work, and fast-moving partnerships—and how a stateless, metadata-driven fabric changes the game.We explore two clear buyer paths. Pragmatic teams want turnkey connectivity that lowers cloud egress costs, reduces NAT and transit complexity, and keeps operations calm. Futuristic teams need dynamic, auditable data exchanges for AI workloads, research projects, and payments ecosystems—publisher-subscriber connectivity that negotiates policy and stands up in days, not quarters. In both cases, the network becomes evergreen, with new capabilities landing in the service rather than hidden behind feature licenses. Pay for what you move, not for buttons you can't press.Security shifts from signatures to assurance. In an AI-fueled threat landscape, we focus on what should move, where it may travel, and who can subscribe—then we detect anomalies and lock down exfiltration. Ali digs into continuous audit trails, sovereignty-aware routing, and why pushing complexity to the edges keeps the core lean and reliable. Expect candid talk on cloud cost traps, how to cut NAT sprawl, and the reason a hollow core with metadata labels beats hop-by-hop state.If you're ready to trade SKU spreadsheets for clear outcomes—and want a network that can spin up for a week and tear down without drama—this conversation will reset how you think about connectivity. Subscribe, share with a teammate who owns the cloud bill, and drop a review to tell us where ephemeral networking would save you the most.Connect with our guest:https://www.linkedin.com/in/alifshaikh/https://www.graphiant.comPurchase Chris and Tim's book on AWS Cloud Networking: https://www.amazon.com/Certified-Advanced-Networking-Certification-certification/dp/1835080839/ Check out the Monthly Cloud Networking Newshttps://docs.google.com/document/d/1fkBWCGwXDUX9OfZ9_MvSVup8tJJzJeqrauaE6VPT2b0/Visit our website and subscribe: https://www.cables2clouds.com/Follow us on BlueSky: https://bsky.app/profile/cables2clouds.comFollow us on YouTube: https://www.youtube.com/@cables2clouds/Follow us on TikTok: https://www.tiktok.com/@cables2cloudsMerch Store: https://store.cables2clouds.com/Join the Discord Study group: https://artofneteng.com/iaatj

The architecture and tech stack of a Secure Access Service Edge (SASE) solution will influence how the service performs, the robustness of its security controls, and the complexity of its operations. Sponsor Fortinet joins Heavy Networking to make the case that a unified offering, which integrates SD-WAN and SSE from a single vendor, provides a... Read more »

The architecture and tech stack of a Secure Access Service Edge (SASE) solution will influence how the service performs, the robustness of its security controls, and the complexity of its operations. Sponsor Fortinet joins Heavy Networking to make the case that a unified offering, which integrates SD-WAN and SSE from a single vendor, provides a... Read more »

The architecture and tech stack of a Secure Access Service Edge (SASE) solution will influence how the service performs, the robustness of its security controls, and the complexity of its operations. Sponsor Fortinet joins Heavy Networking to make the case that a unified offering, which integrates SD-WAN and SSE from a single vendor, provides a... Read more »

Send us a text