The inability of an entity to withstand the adverse effects of a hostile or uncertain environment
POPULARITY
Categories
Cybersecurity and Compliance with Craig Petronella - CMMC, NIST, DFARS, HIPAA, GDPR, ISO27001
Read the full article: https://petronella.ai/blog/zero-click-vulnerabilities-in-salesforce-agentforce-expose-wider-ai-agent-risk/A conversation about "Zero‑Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk" from the Petronella Technology Group, Inc. blog.Subscribe to Encrypted Ambition and hear every episode: https://petronellatech.com/podcasts/Questions about AI, cybersecurity, or compliance for your business? Call Petronella Technology Group, Inc. at 919-348-4912.
The AI investment story is evolving beyond today's market leaders. Economist Matthew Rodger and Portfolio Manager in our Active Equities team Ewan Bowerbank discuss whether open-weight models could change where value accrues, the growing importance of energy and infrastructure, and how geopolitics and regulation could shape AI's next phase.They explore what this means for investors, including the case for diversification across the AI ecosystem, managing valuation risk and identifying potential beneficiaries beyond technology.This podcast was recorded on 21 September 2026.All data is sourced from Bloomberg as of 21 September 2026 unless otherwise stated. For professional investors only. Capital at risk. Securities mentioned for illustrative purposes only.Assumptions, opinions, and estimates are provided for illustrative purposes only. There is no guarantee that any forecast will come to pass.It should be noted that diversification is no guarantee against a loss in a declining market.
Interview with Rob Sadowsky from Cohesity Global Cyber Resilience Report: Cyber Recovery Plans Weren't Designed for this Moment Cyber recovery plans weren't designed for this moment. Most were built around assumptions that made sense when they were written: incidents could be understood, dependencies mapped, recovery could follow a predictable sequence, and decision-makers would have enough information to act. In practice, major cyber incidents unravel those assumptions. AI and autonomous agents are creating new paths to compromise, while cloud and SaaS expansion increases the systems, services, and dependencies involved in recovery. Vulnerabilities are discovered and weaponized faster than ever, and AI is accelerating that cycle. As incidents unfold, scope expands, dependencies appear only when they break, and recovery plans no longer match reality. With assumptions under greater strain, confidence is beginning to erode. This year, the percentage of survey respondents reporting complete confidence in their cyber resilience strategy fell. To understand how recovery unfolds today, Cohesity commissioned Vanson Bourne to survey 3,200 IT and security decision-makers at organizations with 1,000 or more employees across 11 countries. This report examines where recovery becomes more difficult than expected, the obstacles organizations encounter, how they define and test a Minimum Viable Company (MVC), and how AI is reshaping cyber threats and cyber resilience. https://www.cohesity.com/dm/global-cyber-resilience-report/ This segment is sponsored by Cohesity. Visit https://securityweekly.com/cohesity to learn more about them! Topic: When should we use AI for writing and when should we avoid it? I've had an essay in draft form for a month now, trying to get my feelings across on why AI writing drives me so crazy. I struggled to put it into words. Fortunately, Charity Majors figured out how to put it into words and I think she nailed not just how I feel about AI, but the reasons why I feel so strongly about it. She uses a scale to help explain this, with "personal" at one end and "functional" at the other. https://charity.wtf/p/confessions-of-an-unrepentant-slop When I ask AI to create a company profile for me, 10 minutes before I meet with them, I don't need poetry - just facts. But when I read something that is supposedly someone's opinions and analysis on a topic, and it's clearly 100% AI-generated, I angrily dismiss it. I love that this writeup isn't just an "I hate slop" rant - it actually quantifies why a personal touch matters and how to gauge when it is necessary and when outsourcing the task to AI is totally fine. In both cases, Charity notes that quality matters. My most recent complaints come from cases where things are not only clearly written by AI, but where quality went out the window and they're unrecognizable as a human-readable language. And yes, I brought an example: https://dispatch.cybersecurityhq.com/p/escalation-voided-on-construct-failure-timing-condition-placed-under-review Weekly Enterprise News Finally, in the enterprise security news, We check the vibes, funding, and acquisitions Tenable now has Mythos built-in??? We check in on how vulnerability remediation is going Microsoft is creating a code of conduct for AI OpenAI just got called to the principal's office Booz Allen created new cybersecurity AI benchmarks 50% of CISOs see Mythos as a sign to resign??? Ayman read the latest Anthropic AI misuse report MIT explains the 12 possible AI outcomes (very ominous) a 9-year old decided to promote his YouTube account… with his dad's corporate card All that and more, on this episode of Enterprise Security Weekly. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-477
Interview with Rob Sadowsky from Cohesity Global Cyber Resilience Report: Cyber Recovery Plans Weren't Designed for this Moment Cyber recovery plans weren't designed for this moment. Most were built around assumptions that made sense when they were written: incidents could be understood, dependencies mapped, recovery could follow a predictable sequence, and decision-makers would have enough information to act. In practice, major cyber incidents unravel those assumptions. AI and autonomous agents are creating new paths to compromise, while cloud and SaaS expansion increases the systems, services, and dependencies involved in recovery. Vulnerabilities are discovered and weaponized faster than ever, and AI is accelerating that cycle. As incidents unfold, scope expands, dependencies appear only when they break, and recovery plans no longer match reality. With assumptions under greater strain, confidence is beginning to erode. This year, the percentage of survey respondents reporting complete confidence in their cyber resilience strategy fell. To understand how recovery unfolds today, Cohesity commissioned Vanson Bourne to survey 3,200 IT and security decision-makers at organizations with 1,000 or more employees across 11 countries. This report examines where recovery becomes more difficult than expected, the obstacles organizations encounter, how they define and test a Minimum Viable Company (MVC), and how AI is reshaping cyber threats and cyber resilience. https://www.cohesity.com/dm/global-cyber-resilience-report/ This segment is sponsored by Cohesity. Visit https://securityweekly.com/cohesity to learn more about them! Topic: When should we use AI for writing and when should we avoid it? I've had an essay in draft form for a month now, trying to get my feelings across on why AI writing drives me so crazy. I struggled to put it into words. Fortunately, Charity Majors figured out how to put it into words and I think she nailed not just how I feel about AI, but the reasons why I feel so strongly about it. She uses a scale to help explain this, with "personal" at one end and "functional" at the other. https://charity.wtf/p/confessions-of-an-unrepentant-slop When I ask AI to create a company profile for me, 10 minutes before I meet with them, I don't need poetry - just facts. But when I read something that is supposedly someone's opinions and analysis on a topic, and it's clearly 100% AI-generated, I angrily dismiss it. I love that this writeup isn't just an "I hate slop" rant - it actually quantifies why a personal touch matters and how to gauge when it is necessary and when outsourcing the task to AI is totally fine. In both cases, Charity notes that quality matters. My most recent complaints come from cases where things are not only clearly written by AI, but where quality went out the window and they're unrecognizable as a human-readable language. And yes, I brought an example: https://dispatch.cybersecurityhq.com/p/escalation-voided-on-construct-failure-timing-condition-placed-under-review Weekly Enterprise News Finally, in the enterprise security news, We check the vibes, funding, and acquisitions Tenable now has Mythos built-in??? We check in on how vulnerability remediation is going Microsoft is creating a code of conduct for AI OpenAI just got called to the principal's office Booz Allen created new cybersecurity AI benchmarks 50% of CISOs see Mythos as a sign to resign??? Ayman read the latest Anthropic AI misuse report MIT explains the 12 possible AI outcomes (very ominous) a 9-year old decided to promote his YouTube account… with his dad's corporate card All that and more, on this episode of Enterprise Security Weekly. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-477
Interview with Rob Sadowski from Cohesity Global Cyber Resilience Report: Cyber Recovery Plans Weren't Designed for this Moment Cyber recovery plans weren't designed for this moment. Most were built around assumptions that made sense when they were written: incidents could be understood, dependencies mapped, recovery could follow a predictable sequence, and decision-makers would have enough information to act. In practice, major cyber incidents unravel those assumptions. AI and autonomous agents are creating new paths to compromise, while cloud and SaaS expansion increases the systems, services, and dependencies involved in recovery. Vulnerabilities are discovered and weaponized faster than ever, and AI is accelerating that cycle. As incidents unfold, scope expands, dependencies appear only when they break, and recovery plans no longer match reality. With assumptions under greater strain, confidence is beginning to erode. This year, the percentage of survey respondents reporting complete confidence in their cyber resilience strategy fell. To understand how recovery unfolds today, Cohesity commissioned Vanson Bourne to survey 3,200 IT and security decision-makers at organizations with 1,000 or more employees across 11 countries. This report examines where recovery becomes more difficult than expected, the obstacles organizations encounter, how they define and test a Minimum Viable Company (MVC), and how AI is reshaping cyber threats and cyber resilience. https://www.cohesity.com/dm/global-cyber-resilience-report/ This segment is sponsored by Cohesity. Visit https://securityweekly.com/cohesity to learn more about them! Topic: When should we use AI for writing and when should we avoid it? I've had an essay in draft form for a month now, trying to get my feelings across on why AI writing drives me so crazy. I struggled to put it into words. Fortunately, Charity Majors figured out how to put it into words and I think she nailed not just how I feel about AI, but the reasons why I feel so strongly about it. She uses a scale to help explain this, with "personal" at one end and "functional" at the other. https://charity.wtf/p/confessions-of-an-unrepentant-slop When I ask AI to create a company profile for me, 10 minutes before I meet with them, I don't need poetry - just facts. But when I read something that is supposedly someone's opinions and analysis on a topic, and it's clearly 100% AI-generated, I angrily dismiss it. I love that this writeup isn't just an "I hate slop" rant - it actually quantifies why a personal touch matters and how to gauge when it is necessary and when outsourcing the task to AI is totally fine. In both cases, Charity notes that quality matters. My most recent complaints come from cases where things are not only clearly written by AI, but where quality went out the window and they're unrecognizable as a human-readable language. And yes, I brought an example: https://dispatch.cybersecurityhq.com/p/escalation-voided-on-construct-failure-timing-condition-placed-under-review Weekly Enterprise News Finally, in the enterprise security news, We check the vibes, funding, and acquisitions Tenable now has Mythos built-in??? We check in on how vulnerability remediation is going Microsoft is creating a code of conduct for AI OpenAI just got called to the principal's office Booz Allen created new cybersecurity AI benchmarks 50% of CISOs see Mythos as a sign to resign??? Ayman read the latest Anthropic AI misuse report MIT explains the 12 possible AI outcomes (very ominous) a 9-year old decided to promote his YouTube account… with his dad's corporate card All that and more, on this episode of Enterprise Security Weekly. Show Notes: https://securityweekly.com/esw-477
Interview with Rob Sadowski from Cohesity Global Cyber Resilience Report: Cyber Recovery Plans Weren't Designed for this Moment Cyber recovery plans weren't designed for this moment. Most were built around assumptions that made sense when they were written: incidents could be understood, dependencies mapped, recovery could follow a predictable sequence, and decision-makers would have enough information to act. In practice, major cyber incidents unravel those assumptions. AI and autonomous agents are creating new paths to compromise, while cloud and SaaS expansion increases the systems, services, and dependencies involved in recovery. Vulnerabilities are discovered and weaponized faster than ever, and AI is accelerating that cycle. As incidents unfold, scope expands, dependencies appear only when they break, and recovery plans no longer match reality. With assumptions under greater strain, confidence is beginning to erode. This year, the percentage of survey respondents reporting complete confidence in their cyber resilience strategy fell. To understand how recovery unfolds today, Cohesity commissioned Vanson Bourne to survey 3,200 IT and security decision-makers at organizations with 1,000 or more employees across 11 countries. This report examines where recovery becomes more difficult than expected, the obstacles organizations encounter, how they define and test a Minimum Viable Company (MVC), and how AI is reshaping cyber threats and cyber resilience. https://www.cohesity.com/dm/global-cyber-resilience-report/ This segment is sponsored by Cohesity. Visit https://securityweekly.com/cohesity to learn more about them! Topic: When should we use AI for writing and when should we avoid it? I've had an essay in draft form for a month now, trying to get my feelings across on why AI writing drives me so crazy. I struggled to put it into words. Fortunately, Charity Majors figured out how to put it into words and I think she nailed not just how I feel about AI, but the reasons why I feel so strongly about it. She uses a scale to help explain this, with "personal" at one end and "functional" at the other. https://charity.wtf/p/confessions-of-an-unrepentant-slop When I ask AI to create a company profile for me, 10 minutes before I meet with them, I don't need poetry - just facts. But when I read something that is supposedly someone's opinions and analysis on a topic, and it's clearly 100% AI-generated, I angrily dismiss it. I love that this writeup isn't just an "I hate slop" rant - it actually quantifies why a personal touch matters and how to gauge when it is necessary and when outsourcing the task to AI is totally fine. In both cases, Charity notes that quality matters. My most recent complaints come from cases where things are not only clearly written by AI, but where quality went out the window and they're unrecognizable as a human-readable language. And yes, I brought an example: https://dispatch.cybersecurityhq.com/p/escalation-voided-on-construct-failure-timing-condition-placed-under-review Weekly Enterprise News Finally, in the enterprise security news, We check the vibes, funding, and acquisitions Tenable now has Mythos built-in??? We check in on how vulnerability remediation is going Microsoft is creating a code of conduct for AI OpenAI just got called to the principal's office Booz Allen created new cybersecurity AI benchmarks 50% of CISOs see Mythos as a sign to resign??? Ayman read the latest Anthropic AI misuse report MIT explains the 12 possible AI outcomes (very ominous) a 9-year old decided to promote his YouTube account… with his dad's corporate card All that and more, on this episode of Enterprise Security Weekly. Show Notes: https://securityweekly.com/esw-477
PSL EPL and LA LIGA Fixtures and Results Zimbabwe vs Sierra Leon Dynamos vs Herentials: Should have the Ref shown red cards to both players Zimbabwe Netball wins in Kenya against Botswana. Were Chelsea & Arsenals Vulnerabilities Exposed by Brentford and Brighton ? The biggest and most entertaining sports show in Zimbabwe. Join Mudiwa Manyau, Siphiwe Hlope and producer Jo as they take you through all the top sports stories.
Jordan Buscarini joins the show to discuss the 2026 season winding down, and the Los Angeles Dodgers facing a crucial stretch of games that could make or break their chances at a third consecutive World Series title. This episode of the podcast delves into the team's vulnerabilities, particularly in their starting pitching, and how it might impact their playoff run. See omnystudio.com/listener for privacy information.
Cisco patches a maximum-severity vulnerability in its Identity Services Engine. Court documents describe AI as “an astonishing theft of unprecedented proportions.” Researchers chain vulnerabilities to take over employee ChatGPT accounts. Microsoft and Check Point patch vulnerabilities. Manufacturing remains ransomware's favorite target. Hackers compromise a Japanese image-sharing service. The Settra ransomware group leverages remote management software. An Australian think-tank warns of Chinese AI-enabled surveillance in Venezuela. Maria Varmazis joins me for a look back at ten years of critical infrastructure exploits. Everything you wanted to know about AI but were afraid to prompt. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Dave Bittner and Maria Varmazis reflect on the past decade of critical infrastructure attacks, looking at major incidents like the Ukraine power grid attack and Colonial Pipeline and the lessons they've taught the industry about resilience and preparedness. If you enjoyed this conversation, be sure to tune in this Sunday for a special edition of the show, where Dave and Maria continue the conversation. Selected Reading Cisco drops another exploited zero-day, this time a perfect 10 (The Register) ‘Doom Loop': OpenAI and Microsoft Admits LLMs Are Destroying the Web and Built on Theft (404 Media) AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code (SecurityWeek) Microsoft Patches 18 Vulnerabilities in AI, Cloud Products (SecurityWeek) New Check Point flaw lets hackers execute code with root privileges (Bleeping Computer) Manufacturing Accounts for 22% of all Ransomware Victims (Infosecurity Magazine) 23 Million User Records Compromised in Gyazo Data Breach (SecurityWeek) Ready, Settra, Go: New Settra Ransomware Variant Deploys MeshAgent RMM (Huntress) USA's Venezuela takeover comes with bonus exposure to Chinese AI surveillance tech (The Register) Will A.I. Kill Us? Can It Hack My Bank Account? Your A.I. Questions Answered (New York Times) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
SANS Internet Stormcenter Daily Network/Cyber Security and Information Security Stormcast
LausivLoader analysis, or how to pass data between malware stages https://isc.sans.edu/diary/LausivLoader%20analysis%2C%20or%20how%20to%20pass%20data%20between%20malware%20stages/33348 Issabel Framework Hard-coded JWT Key RCE CVE-2026-89026 https://www.vulncheck.com/advisories/issabel-pbx-hard-coded-jwt-key-rce-via-pbxapi-manager-originate Using Cyber Decoys to Strengthen Detection and Response https://www.cisa.gov/sites/default/files/2026-09/using-cyber-decoys-to-strengthen-detection-and-response_508c.pdf CISA to Sunset Weekly Vulnerability Bulletin on September 28, 2026 https://content.govdelivery.com/accounts/USDHSCISA/bulletins/42b055b Unbound Vulnerability https://nlnetlabs.nl/projects/unbound/security-advisories/ My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich
In this week's episode, Blood editor Dr. Laurie Sehn interviews Drs. Mariateresa Fulciniti and Angelo D'Alessandro on their latest articles published in Blood. Dr. Fulciniti, of the Dana Farber Cancer Institute, discusses the development of "PKMYT1 is a targetable vulnerability in del(17p) high-risk multiple myeloma" starting from the question, "Is 17P loss simply a prognostic marker, or does it create specific vulnerabilities that we can therapeutically exploit?" Then, Dr. D'Alessandro, of the University of Colorado, discusses "The red blood cell proteome and interactome identify a Band 3–BLVRB axis regulating hypoxic metabolic adaptation." His team began by asking, "What's in a red blood cell? How many proteins are there, and how can we confidently claim that these now several 1000s of proteins in opposite excess are indeed proteins within red blood cells are not coming from contaminants?" Both studies describe how deep molecular profiling can uncover specific, potentially targetable biological dependencies or interaction axes that may enable more precise, mechanism‑based therapeutic strategies.
Interview with Snehal Antani Snehal Antani, CEO and co-founder of Horizon3 joins us to talk about how automated validation can help with exposure management. As vulnerability counts spike, security teams are looking for a way to prioritize. Automated penetration testing offers a way to quickly separate exploitable vulnerabilities from the rest. This segment is sponsored by Horizon3. Visit https://securityweekly.com/horizon3 to learn more about them! Topic Segment - SmartTVs and Privacy For this week's topic segment, we explore privacy and TVs. LG has been in the news for allegedly collecting data from its customers, but the facts are unclear. We share our recent experiences and dive into some of the primary concerns and theories about what's going on here. If you want to opt out of some of your TV's data collection, Consumer Reports has a collection of instructions for a variety of TV platforms. Weekly Enterprise News Finally, in the enterprise security news, We check the vibes We check finding and acquisitions Nightmare Eclipse or Good Night of Sleep Eclipse? Update on Anthropic's Glasswing project How long would it take for a mobile phone worm to spread? Don't expose SSH to the public Internet Massive amounts of cryptocurrency continue to get stolen Did you actually read your third party's SOC 2? Your boss may be reading your AI chat history All that and more, on this episode of Enterprise Security Weekly. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-476
Interview with Snehal Antani Snehal Antani, CEO and co-founder of Horizon3 joins us to talk about how automated validation can help with exposure management. As vulnerability counts spike, security teams are looking for a way to prioritize. Automated penetration testing offers a way to quickly separate exploitable vulnerabilities from the rest. This segment is sponsored by Horizon3. Visit https://securityweekly.com/horizon3 to learn more about them! Topic Segment - SmartTVs and Privacy For this week's topic segment, we explore privacy and TVs. LG has been in the news for allegedly collecting data from its customers, but the facts are unclear. We share our recent experiences and dive into some of the primary concerns and theories about what's going on here. If you want to opt out of some of your TV's data collection, Consumer Reports has a collection of instructions for a variety of TV platforms. Weekly Enterprise News Finally, in the enterprise security news, We check the vibes We check finding and acquisitions Nightmare Eclipse or Good Night of Sleep Eclipse? Update on Anthropic's Glasswing project How long would it take for a mobile phone worm to spread? Don't expose SSH to the public Internet Massive amounts of cryptocurrency continue to get stolen Did you actually read your third party's SOC 2? Your boss may be reading your AI chat history All that and more, on this episode of Enterprise Security Weekly. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-476
Interview with Snehal Antani Snehal Antani, CEO and co-founder of Horizon3 joins us to talk about how automated validation can help with exposure management. As vulnerability counts spike, security teams are looking for a way to prioritize. Automated penetration testing offers a way to quickly separate exploitable vulnerabilities from the rest. This segment is sponsored by Horizon3. Visit https://securityweekly.com/horizon3 to learn more about them! Topic Segment - SmartTVs and Privacy For this week's topic segment, we explore privacy and TVs. LG has been in the news for allegedly collecting data from its customers, but the facts are unclear. We share our recent experiences and dive into some of the primary concerns and theories about what's going on here. If you want to opt out of some of your TV's data collection, Consumer Reports has a collection of instructions for a variety of TV platforms. Weekly Enterprise News Finally, in the enterprise security news, We check the vibes We check finding and acquisitions Nightmare Eclipse or Good Night of Sleep Eclipse? Update on Anthropic's Glasswing project How long would it take for a mobile phone worm to spread? Don't expose SSH to the public Internet Massive amounts of cryptocurrency continue to get stolen Did you actually read your third party's SOC 2? Your boss may be reading your AI chat history All that and more, on this episode of Enterprise Security Weekly. Show Notes: https://securityweekly.com/esw-476
Interview with Snehal Antani Snehal Antani, CEO and co-founder of Horizon3 joins us to talk about how automated validation can help with exposure management. As vulnerability counts spike, security teams are looking for a way to prioritize. Automated penetration testing offers a way to quickly separate exploitable vulnerabilities from the rest. This segment is sponsored by Horizon3. Visit https://securityweekly.com/horizon3 to learn more about them! Topic Segment - SmartTVs and Privacy For this week's topic segment, we explore privacy and TVs. LG has been in the news for allegedly collecting data from its customers, but the facts are unclear. We share our recent experiences and dive into some of the primary concerns and theories about what's going on here. If you want to opt out of some of your TV's data collection, Consumer Reports has a collection of instructions for a variety of TV platforms. Weekly Enterprise News Finally, in the enterprise security news, We check the vibes We check finding and acquisitions Nightmare Eclipse or Good Night of Sleep Eclipse? Update on Anthropic's Glasswing project How long would it take for a mobile phone worm to spread? Don't expose SSH to the public Internet Massive amounts of cryptocurrency continue to get stolen Did you actually read your third party's SOC 2? Your boss may be reading your AI chat history All that and more, on this episode of Enterprise Security Weekly. Show Notes: https://securityweekly.com/esw-476
If you've spent ten years patching servers and segmenting VLANs, you've already done a meaningful chunk of what CompTIA Security+ tests. So the useful question isn't "should I get it" — it's what the exam actually adds to what you already have.This is the honest breakdown: which third of the exam is vocabulary for work you've already done, which third is adjacent to your job framed differently, and which third is where experienced candidates quietly lose points. Plus a study plan calibrated to experience instead of to beginners, and four cases where the honest answer is to skip the certification entirely.We don't sell a certification, so there's no reason here to push you toward one.TIMESTAMPS00:00 Ninety minutes, ninety questions00:37 Why the standard advice doesn't fit you01:25 What Security+ actually does (and doesn't)03:25 General Security Concepts — 12%04:29 Threats, Vulnerabilities, Mitigations — 22%05:08 Security Architecture — 18%05:35 Security Operations — 28% (your biggest gap)06:25 Program Management and Oversight — 20%07:02 Should you wait for the next version?07:57 A study plan built for experience09:22 When the honest answer is "skip it"10:37 The BLS number, read correctly11:20 What the exam can't teach you12:44 Where to go nextFULL WRITTEN BREAKDOWNExam mechanics, renewal costs, and the domain-by-domain detail:https://blueteam-academy.com/blog/security-plus-worth-it-experienced-it-pros/KEEP IT SAFE NEWSLETTEROne practical defensive decision broken down each week, written for people still working full-time in IT:https://www2.blueteam-academy.com/keep-it-safe-signupFROM IT TO CYBERSECURITYOur program starts with the environment you already run, not with an exam objectives list — Inventory, Threats, Controls, Scale:https://www2.blueteam-academy.com/from-it-to-cybersecurity/SOURCESExam version, domain weights, DoD 8140 mapping, retirement dates — CompTIA Security+ certification page, accessed September 2026.21% projected growth 2025–2035, ~14,100 annual openings, $129,180 median annual wage (May 2025) — U.S. Bureau of Labor Statistics, Occupational Outlook Handbook, updated August 2026.Exam pricing and version timing change. Verify against CompTIA before you book.Blue Team Academy helps experienced IT professionals move into defensive cybersecurity without starting over.
Air Date: 9/9/2026 Today we look at the strategies being deployed by the Trump administration and their enablers to undermine the midterm elections and what it actually takes to fight back. The lawyers fighting in court against the efforts to destroy our democracy are clear-eyed that you cannot litigate your way to a free election. The most durable defense is a turnout margin too large to plausibly contest, and organizers are building toward it now. Full Show Notes Transcript Be part of the show! Leave a voice message, message us on Signal at the handle bestoftheleft.01, or email Jay@BestOfTheLeft.com BestOfTheLeft.com/Support (Members Get Bonus Shows + No Ads!) Use our links to shop Bookshop.org and Libro.fm for a non-evil book and audiobook purchasing experience! Join our Discord community! TOP TAKES KP 1: President Trump Is Trying to Change How Elections Are Run. Where Do Things Stand - Consider This - Air Date 8-28-26 KP 2: Trump's Strategy to Rig the Midterms + Jake Lang's Christian Nationalist Spectacle Part 1 - Straight White American Jesus - Air Date 8-25-26 KP 3: Protecting the Midterms—at the Grassroots and in the Courts Part 1 - Start Making Sense - Air Date 8-19-26 KP 4: Is SCOTUS Letting Trump Meddle in the Midterms Part 1 - Strict Scrutiny - Air Date 8-31-26 KP 5: Will Dems Risk Being Called 'Election Deniers' If They Need to Challenge Midterms - The BradCast - Air Date 8-27-26 KP 6: Will Data Centers Cost Republicans the Midterms - Runaway Country with Alex Wagner - Air Date 8-27-26 KP 7: Protecting the Midterms—at the Grassroots and in the Courts Part 2 - Start Making Sense - Air Date 8-19-26 (00:54:01) NOTE FROM THE EDITOR On Burnout and ADHD My commentaries on YouTube - Share them! DEEPER DIVES (01:00:47) SECTION A: THREAT AND BACKFIRE A1: What Happens if Trump Tries to Mess with the Midterms - The NPR Politics Podcast - Air Date 8-28-26 A2: Trump's Strategy to Rig the Midterms + Jake Lang's Christian Nationalist Spectacle Part 2 - Straight White American Jesus - Air Date 8-25-26 A3: Trump Accidentally Wrecks GOP Midterm Message in Dumbest Self-Own Ever - THE DAILY BLAST - Air Date 8-28-26 (01:32:06) SECTION B: CRACKS AND CONSTRAINTS B1: Trump Election Scheme Suddenly Blocked in Late Night Order Part 1 - Legal AF - Air Date 8-29-26 B2: Is SCOTUS Letting Trump Meddle in the Midterms Part 2 - Strict Scrutiny - Air Date 8-31-26 B3: Alarming Voting System Vulnerabilities Persist, with Guest Susan Greenhalgh, Election Security Expert Part 1 - The BradCast - Air Date 8-10-26 B4: Trump Election Scheme Suddenly Blocked in Late Night Order Part 2 - Legal AF - Air Date 8-29-26 B5: Alarming Voting System Vulnerabilities Persist, with Guest Susan Greenhalgh, Election Security Expert Part 2 - The BradCast - Air Date 8-10-26 (02:14:39) SECTION C: RESISTANCE AND RESPONSE C1: Distraction Drugs For America; A Crucial Voting Strategy For Before November Part 1 - The Politicrat - Air Date 9-2-26 C2: Powerful, Brave, and Free with Tamika Middleton Part 1 - The Anti-Authoritarian Podcast - Air Date 9-2-26 C3: Distraction Drugs For America; A Crucial Voting Strategy For Before November Part 2 - The Politicrat - Air Date 9-2-26 C4: Powerful, Brave, and Free with Tamika Middleton Part 2 - The Anti-Authoritarian Podcast - Air Date 9-2-26 Produced by Jay! Tomlinson Visit us at BestOfTheLeft.com Listen Anywhere! BestOfTheLeft.com/Listen Follow BotL: Bluesky | Mastodon | Threads | X Like at Facebook.com/BestOfTheLeft Contact me directly at Jay@BestOfTheLeft.com
Patch Tuesday is a doozy. The Feds warn China-based AI companies are distilling U.S. AI models. A new ClickFix campaign goes straight for the browser. Smart TVs get nosy. Hackers gift themselves a $47 million bug bounty. An Ohio man gets 15 years in federal prison for cyberstalking and sextortion. Andy Hornegold, Chief Security Technologist from Intruder, discusses what makes up a reliable AI pentests and the benefits and risks that come with AI-enabled security. Putting AI at the head of the class. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today we are joined by Andy Hornegold, Chief Security Technologist from Intruder, discussing what makes up a reliable AI pentests and the benefits and risks that come with AI-enabled security. Selected Reading Microsoft Patch Tuesday Fixes 966 Vulnerabilities, Including 2 Exploited 0-Days (Hackread) Ivanti Patches Critical Flaws Across Enterprise Security Products (SecurityWeek) Chrome 153 Patches Seventh Zero-Day of 2026 (SecurityWeek) Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day (SecurityWeek) ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws (SecurityWeek) CISA, NSA and FBI Warn Chinese AI Firms Are Targeting U.S. AI Models at Industrial Scale (HSToday) Europe's push for space sovereignty. (N2K Networks) History for European spaceflight: Isar Aerospace reaches orbit and deploys payloads on second flight (Isar Aerospace) ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2 (Talos Intelligence) LG TVs caught spying even when offline or on standby (The Verge) 'White hat' hackers take $47 million bounty after $320 million crypto theft (The Record) Man gets 15 years for extorting women with AI-generated porn videos (Bleeping Computer) Alpha School's AI teaching model is expanding. Does it work? (Scientific American) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Josh chats with Jaya Baloo from AISLE about their vulnerability scanner. If you follow open source vulnerabilities AISLE is a name you've seen popping up recently. They have a vulnerability scanner that is outperforming most of the existing scanners like Mythos. Jaya gives us some insight into how this all works and why they're different. We also learn about some scary new attacks that can be conducted on LLM models. Jaya was a ton of fun and filled with insights. The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2026/2026-09-jaya-aisle
Welcome to the Identity Theft Resource Center's “Weekly Breach Breakdown,” supported by Sentilink. I'm James E. Lee, the ITRC's president, filling in for Tim Walden, who's enjoying well-deserved time away to spend with his wife and new baby. This is our podcast for Friday, Sept. 4, 2026. Today, we have three stories that don't look related at first glance. Trust me. They are. Follow on LinkedIn: linkedin.com/company/idtheftcenter/ Follow on Instagram: instagram.com/idtheftcenter/ Follow on Facebook: facebook.com/IDTheftResourceCenter/ Follow on X: twitter.com/IDTheftCenter Follow on TikTok: www.tiktok.com/@idtheftcenter_ Follow on YouTube: www.youtube.com/@IDTheftCenter
John and Monica discuss Pacific Islands Forum Foreign Ministers Meeting, elections, and other regional developments.
Cory Johnson discusses Palo Alto Networks (PANW) ahead of the cybersecurity firm's earnings. He examines the company's partnership with Anthropic and how it highlighted numerous and unseen risks across the software space. When it comes to the earnings report, Cory tells investors to pay attention to how Palo Alto will expand its free cash flow and its platform. ======== Schwab Network ========Empowering every investor and trader, every market day. Subscribe to the Market Minute newsletter - https://schwabnetwork.com/subscribeDownload the iOS app - https://apps.apple.com/us/app/schwab-...Download the Amazon Fire Tv App - https://www.amazon.com/TD-Ameritrade-...Watch on Sling - https://watch.sling.com/1/asset/19192...Watch on Vizio - https://www.vizio.com/en/watchfreeplu...Watch on DistroTV - https://www.distro.tv/live/schwab-net...Follow us on X – / schwabnetwork Follow us on Facebook – / schwabnetwork Follow us on LinkedIn - / schwab-network About Schwab Network - https://schwabnetwork.com/about
SANS Internet Stormcenter Daily Network/Cyber Security and Information Security Stormcast
Some Malicious PE Stats https://isc.sans.edu/diary/Some%20Malicious%20PE%20Stats/33292 PaperCut Releases Two Preliminary Patches for Exploited Vulnerability https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/ DLink Vulnerabliities https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10513 Watchguard Patches https://psirt.watchguard.com My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich
RDP security best practices come down to one rule most admins break on day one: that protocol has no business facing the internet. Dr. Mike Saylor and Prasanna Malaiyandi join me to break down why RDP earned the nickname Ransomware Deployment Protocol, who's out there scanning for your open port right now, and what to actually do about it.Here's the part that gets me. Every Windows box ships with this thing turned on. You didn't ask for it. Nobody handed you a manual. It's just there, running, waiting. Mike calls it a dollar store hammer — still a tool, still gets the job done, just not the one you'd pick if anybody gave you a budget. I call it a hack-me sign taped to your back.We get into how initial access brokers work, and it's less sophisticated than you'd hope. Somebody runs a Shodan query, gets a list of every exposed RDP service on the planet with IP addresses and device types, cross-references it against leaked credentials, packages the whole thing up, and sells it. Mike says the recon that used to take days now takes about 30 seconds with the AI tools floating around the dark net.Then there's the credentials-don't-even-matter problem. Default RDP traffic isn't encrypted internally. Mike walks through a routing table poisoning job where his team captured an admin's keystrokes going to a server. No login required. Just be in the middle.The back half is all fixes. Block the protocol and the port, not one or the other, because attackers will happily move to a different port. Check 3389 before you kill it — your database might be sitting on it. Enforce network level authentication. Put a VPN or a zero trust product in front, and Mike points out enterprise-grade stuff runs about six bucks a user now, so the "no budget" excuse is thinner than it used to be. Bastion hosts. Group policy. Monitoring at the endpoint, network, and firewall layers, with a governance layer on top so you know what's allowed before something breaks at 2am.Prasanna plays devil's advocate the whole way through and swears he isn't pro-RDP. Mike wears three hats and can't pick one. I have exactly one opinion and I'm not moving off it.CHAPTERS:00:00 Windows ships with a back door01:26 Welcome and my Facebook Marketplace weekend03:18 Why RDP means Ransomware Deployment Protocol04:46 What RDP actually does05:51 Blue hat, red hat: Mike's split opinion06:11 Does RDP deserve its bad reputation?08:10 On by default, and you can't fully kill it09:30 The back door nobody locks11:52 Does the cloud secure RDP for you?14:12 Who scans for exposed RDP, and how Shodan works17:10 Initial access brokers explained18:36 Vulnerabilities that skip credentials entirely19:08 Unencrypted traffic and stolen keystrokes20:38 The never-on-the-internet rule20:59 The network survival stack: VPN and zero trust23:22 Block the port and the service24:17 Stopping lateral movement once they're inside25:25 Network level authentication27:50 Port 3389: check before you block it29:44 Bastion hosts30:26 Monitoring, auditing, and governance31:19 Blue, red, and purple hats
ServiceNow warns of three maximum severity security vulnerabilities PaperCut zero-day exploited in attacks Healthcare giant McKesson discloses breach Get the full show notes here: https://cisoseries.com/cybersecurity-news-servicenow-vulnerabilities-warning-papercut-zero-day-mckesson-healthcare-breach/ Huge thanks to our episode sponsor, KnowBe4 Your employees have always been the target, but the threats they face are evolving. AI empowers cybercriminals to clone a coworker's voice, fake a video call with your CEO, or personalize a phishing email using details scraped from your own website. KnowBe4's AI-native Security Awareness Training (SAT) fights back with 12 autonomous defense agents that allow you to deliver personalized, relevant, and engaging training that adapts as fast as the threats your people face every day. More than 70,000 organizations trust KnowBe4 worldwide. Find out why at KnowBe4.com.
Adversaries' use of AI to find new cyber vulnerabilities or increase the speed of their attacks means agencies have to do more to get out from under their legacy technology debt. This summer, the Cybersecurity and Infrastructure Security Agency issued a new binding operational directive laying out how agencies should prioritize high-risk vulnerabilities for more immediate action, while deferring lower-risk vulnerabilities. Chris Butera is the acting deputy executive assistant director for cybersecurity at CISA. He talked about the directive and the challenge with Federal News Network's Jason Miller.See Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.
Today we are talking about Security, Vulnerabilities, and how to avoid exposure with guest Dave Welch. We'll also cover Security Scanner as our module of the week. For show notes visit: https://www.talkingDrupal.com/567 Topics What Are CVEs CVE Lifecycle and Disclosure AI Era Security Challenges What CVE Program Excludes Patch Fast Reality Global Security Signals CVE Timing Judgment KEV Flags Explained CVE Updates Link Rot Who Decides CVE Sneaky Patch Dangers ADP Program Fixes Small Team Triage Vulnerability Tsunami AI Autonomous Security Future Legal Pressure Budgets Resources Psalm PHP Static Analysis Tool SARIF format PHP ecosystem Council of roots How AI Broke Open Source Security: End-of-Life Software Is the Most Exposed CVE podcast Vulncon PSIRT Guests David Welch - github: dwelch2344 dwelch2344 Hosts Nic Laflin - nLighteneddevelopment.com nicxvan John Picozzi - epam.com johnpicozzi JD Flynn - dorficus MOTW Correspondent Martin Anderson-Clutz - mandclu.com mandclu Brief description: Have you ever wanted a fast way to catch the security mistakes that slip into custom Drupal code — especially the code your AI assistant just wrote — before it ships? There's a module for that. Module name/project name: Security Scanner Brief history How old: created in July 2026 by Mayank Gupta (mayankguptadotcom) of Acquia Versions available: 1.0.0, which works with Drupal 10.3 and 11 Maintainership Actively maintained — created and shipped its first stable this summer, with steady development right through late July Security coverage Test coverage — and it's strong: unit and kernel tests, including a regression corpus built from real Drupal core advisories Documentation? In-depth README with a full check table and CI recipes, plus a CHANGELOG Number of open issues: 1 issue, not a bug Usage stats: 2 sites (it's brand new) Module features and usage Provide a Drush command, has no UI — you point drush security:scan at a module or any path, it reads the code statically, and prints a prioritized, OWASP-mapped list of things to review It's built for the age of AI-written code — the checks target the classes AI assistants keep reintroducing: routes with no access check, #markup and |raw XSS, missing CSRF tokens, unserialize() on untrusted data, hardcoded secrets Then there's an optional deep pass: with the Psalm static analysis scanning engine installed, it'll trace untrusted input across functions and files to catch cross-function issues. And it's honest about state — the report always says whether that deep pass ran, was skipped, or failed, so a failure never gets mistaken for a clean scan One nice detail under the hood: a tokenizer-backed "code map" that knows whether a match is real code, a comment, or a string — so it won't flag the word "unserialize" sitting in a doc comment. That kills the single biggest source of false positives The checks are regression-tested against real Drupal advisories (Drupalgeddon, Drupalgeddon2, the 2019 unserialize bug, etc) so a pattern that caused an actual CVE can't quietly come back in your custom code Output comes in three flavors: a readable table, JSON for CI and AI agents, and SARIF — which means findings show up as annotations right on your GitHub or GitLab merge-request diff instead of buried in a job log For adopting it on an existing codebase there's a baseline file — you fingerprint the findings you've reviewed, with a required reason on each, and they stop failing the build but never go invisible; every run still counts them It exits non-zero on error-level findings, so it drops straight into CI or a pre-commit hook And it's extensible — checks are Drupal plugins with a #[SecurityCheck] attribute, so any module can add its own or alter the ones that ship Big caveat, and the module says this itself: a finding means "review this," not "this is broken." Static analysis has false positives, and a clean scan doesn't prove the code is secure — access-control logic especially still needs human review I first heard about this module over beverages at Drupalcamp Asheville, so I know that this module was largely vibe-coded, after having an AI agent ingest every single Drupal security team CVE. So I like to think of this module as security pattern recognition tool, but of course it does even more
As companies push artificial intelligence into every corner of software and hardware, everyday consumers and IT teams are starting to feel the impact on their budgets and security. In this episode of the Tech Field Day News Rundown, Tom Hollingsworth and Alastair Cooke examine Meta's reported $200 monthly AI agent platform Hatch, Cerebras' massive CS-4 wafer-scale system, and high-stakes acquisition rumors surrounding Hugging Face. The hosts also break down how skyrocketing demand for AI data centers is fueling both local political battles and global memory shortages that drive up device prices across the industry. Finally, they cover emerging security risks, from AI-accelerated web application scanning to modern audio browser fingerprinting.This and more on Tech Field Day News Rundown with Tom Hollingsworth and Alastair Cooke. Time Stamps: 0:00 - Cold Open0:33 - Welcome to the Tech Field Day News Rundown1:19 - Meta Reportedly Plans Premium Hatch AI Agent to Monetize Its AI Push4:36 - Barracuda Networks Finds am Average of 20 Vulnerabilities per Web App7:41 - Trump Backs AI Data Centers as Political Opposition Grows10:56 - AliExpress Caught Using Inaudible Audio to Fingerprint Browser Visitors14:12 - Cerebras Unveils CS-4 AI System With 750 PetaFLOPs for Faster Inference17:38 - Hugging Face Reportedly Weighs $13B Acquisition Offers20:47 - NVIDIA, Apple and Amazon Raise Prices as AI Memory Shortage Fuels ‘AI-flation'29:13 - The Weeks Ahead: Upcoming Tech Field Day Events32:59 - Thanks for Watching the Tech Field Day News RundownFollow our hosts Tom Hollingsworth, Alastair Cooke, and Stephen Foskett. Follow Tech Field Day on LinkedIn, on X/Twitter, on Bluesky, and on Mastodon.
In this episode, we're diving into the critical world of freight cyber security with my guests from the NMFTA, Joe Ohr and Ben Wilkins! Joe and Ben share the upcoming NMFTA Cybersecurity Conference happening in Long Beach from September 29th through October 1st, which is an invaluable event for anyone serious about protecting their business. Cargo theft in the transportation industry is becoming incredibly sophisticated, with bad actors executing targeted hits on high-value technology shipments that push the average value of stolen freight to over half a million dollars per incident. We break down exactly how these cyber criminals are breaching our systems through social engineering, unauthorized access, and exploiting new hires, emphasizing why we must share both our wins and our losses to harden our defenses across the board. Tune in to get the actionable insights you need to secure your supply chain, combat cyber crime, and keep your customers' freight moving safely! To register for the 2026 NMFTA Cybersecurity Conference, visit https://cyber.nmfta.org/cybersecurity-conference/register!
Investigative journalist and O’Keefe Media Group founder James O’Keefe joins Tudor Dixon to reveal what his undercover investigations uncovered about vulnerabilities in America’s election system. O’Keefe takes Tudor inside his recent investigations in Michigan, Minnesota, Alaska, and California, including allegations involving non-citizen voting, voter ID requirements, absentee ballots, ballot harvesting, and Minnesota’s controversial voter “vouching” system. O’Keefe also discusses his investigation in Alaska involving Sen. Lisa Murkowski’s brother, the calls for his prosecution following his undercover reporting, and why he says his team carefully avoided illegally casting or obtaining ballots while documenting potential weaknesses in election safeguards. The conversation also turns to California, where O’Keefe says his reporting uncovered people paying homeless individuals to forge signatures on petitions and register to vote—an investigation he says ultimately resulted in an FBI arrest. Tudor and O’Keefe discuss the SAVE Act, election integrity, voter ID, censorship, the role of investigative journalism, and why O’Keefe believes exposing election vulnerabilities on camera is more powerful than simply telling Americans they exist. See omnystudio.com/listener for privacy information.
Episode DescriptionThe storm passes. The rain stops. The winds die down. And sometimes, that is when the real emergency begins.Electricity is the backbone of nearly every system modern communities depend upon. Communications, water and wastewater systems, hospitals, fuel distribution, traffic control, grocery stores, banking, transportation, emergency operations, and even our ability to receive warnings depend in some way on reliable power.In this episode of the Emergency Management Network Podcast, we examine the vulnerability of the American electrical grid following major storms and extreme weather events. The problem is bigger than a few downed power lines. Hurricanes, tornadoes, derechos, ice storms, flooding, wildfires, and extreme temperatures can damage generation, transmission, substations, and local distribution systems simultaneously.More importantly, we explore what happens next.What does a 24-hour outage mean for a community? What changes at 72 hours? What happens when backup generators begin running low on fuel, cellular sites lose power, medically vulnerable residents need assistance, grocery stores cannot refrigerate food, traffic signals stop working, and public safety agencies are operating on emergency power?For emergency managers, the electrical grid isn't simply another piece of critical infrastructure. It is the infrastructure upon which much of the rest of our response system depends.We discuss where the vulnerabilities exist, why severe storms continue to expose them, and what emergency managers should be doing now to prepare for prolonged and cascading power failures.The question isn't simply whether the lights will come back on.The question is: What can your community continue to do until they do?Show NotesThis episode explores the intersection between extreme weather, electrical-grid reliability, critical infrastructure, and emergency management.We examine how severe storms can damage transmission and distribution infrastructure and why the consequences extend far beyond homes losing electricity. Major outages can quickly become cascading incidents affecting communications, healthcare, transportation, water systems, fuel supplies, businesses, food distribution, and government operations.Topics include:* Why severe weather remains one of the greatest threats to electrical reliability* The difference between generation, transmission, and distribution failures* How damaged substations, transmission lines, poles, transformers, and vegetation can complicate restoration* Why undergrounding electrical lines can help in some circumstances but is not a universal solution* The growing importance of microgrids, distributed generation, battery storage, and backup power* Generator dependence and the challenge of maintaining fuel supplies during prolonged outages* Telecommunications and cellular-system vulnerabilities when commercial power fails* The consequences of simultaneous power and communications failures* Impacts on hospitals, skilled nursing facilities, pharmacies, dialysis centers, and medically dependent populations* Water and wastewater system dependencies on electricity* Traffic signals, transportation networks, fuel stations, and supply-chain disruptions* The role of utilities inside the Emergency Operations Center* Identifying critical facilities and prioritizing restoration* Community Lifelines and cascading infrastructure failures* Planning for outages lasting 24, 48, 72 hours—or longer* Why continuity planning must assume that commercial electricity may not be immediately available after a major disasterThe Emergency Management QuestionEmergency managers cannot rebuild the nation's electrical grid, but we can understand our dependencies on it.Every jurisdiction should be asking:What stops working when the power goes out?Then:What stops working when it stays out for three days?Those two questions can reveal vulnerabilities that may never appear in a traditional hazard assessment.Electrical resilience isn't simply a utility problem. It is a community resilience problem. This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit emnetwork.substack.com/subscribe
Carrie is a creative serial entrepreneur with a backstory that involves Orlando (working with Disney Cruise Lines, Hard Rock Cafe, Universal Studios, and the U.S Military), Los Angeles, and returning home to Rochester to start a family and found her business (Vertical Insite).Carrie also had a moment in her life where she hit a humbling low brought on by a life threatening medical diagnosis. She used that opportunity to learn more about herself and ask herself some tough questions through Human Design Readings and "The Gene Keys".Finally, Pauly will be vulnerable and answer some tough questions about himself.Mentioned in this episode:Connections PodcastConnections with Evan Dawson - Subscribe wherever you get your podcasts or at https://www.wxxinews.org/show/connectionsConnectionsIt's A LotCheck out It's A Lot on Lunchador! https://feeds.captivate.fm/itsalot/ Joe Bean RoastersVisit joebeanroasters.com to get fresh roasted specialty coffee either by the bag or with a Perpetual Joy subscription!
Independent investigative journalism, broadcasting, trouble-making and muckraking with Brad Friedman of BradBlog.com
Cloud storage costs, security threats, and AI infrastructure are creating new challenges for IT teams. This week on the Tech Field Day News Rundown, Tom Hollingsworth and Alastair Cooke discuss Lucidity expanding cloud optimization to Azure object storage, Microsoft patching nearly 400 vulnerabilities, and a major VMware vCenter attack campaign. They also look at NVIDIA's potential $105 billion commitment to OpenAI's Ohio data center, Google moving its A2A protocol under the Agentic AI Foundation, rising cyberattacks against law firms, and the cautionary Nine PBS cloud storage disaster.This and more on the Tech Field Day News Rundown with Tom Hollingsworth and Alastair Cooke. Time Stamps: 0:00 - Cold Open0:29 - Welcome to the Tech Field Day News Rundown 1:17 - Lucidity Expands Cloud Storage Optimization4:03 - Microsoft's Massive Patch Update Puts Pressure on IT Teams7:12 - NVIDIA Backs Massive OpenAI Ohio Data Center10:24 - China-Nexus Actor Exploits Critical VMware vCenter Flaw13:38 - Google Moves A2A Under Agentic AI Foundation16:21 - Law Firms Face Growing Ransomware and Vishing Threats19:44 - Nine PBS Fights to Save 70 Years of TV History Locked in Cloud Storage Dispute28:28 - The Weeks Ahead: Upcoming Tech Field Day Events32:43 - Thanks for Watching the Tech Field Day News RundownFollow our hosts Tom Hollingsworth, Alastair Cooke, and Stephen Foskett. Follow Tech Field Day on LinkedIn, on X/Twitter, on Bluesky, and on Mastodon.
The episode reveals a structural shift toward permission-based operational models, where access and capability are not determined by technical proficiency alone but by explicit, revocable permissions from state or corporate authorities. This model is illustrated by the recent U.S. federal initiative authorizing select private cybersecurity firms to conduct offensive operations against foreign criminal organizations—an approach that mirrors the historical "letter of marque" by granting a new legal status rather than developing new technologies. Parallel dynamics are visible in the IT service provider space, with vendors such as Microsoft moving to strictly time-bound, role-scoped delegated admin permissions that can be revoked or altered unilaterally. The most consequential development is the August 12 presidential memorandum authorizing private U.S. companies, under contract with the Department of Justice or Homeland Security, to perform cyber surveillance and effect operations against specified foreign criminal targets. Firms must pass technical, security, and personnel vetting, declare outside contracts, and post a $1 million bond forfeitable upon non-compliance. Every action requires written dual approval by program directors. Importantly, the legal basis relies not on statutory change but on an executive memorandum that grants a temporary agency status to participants, a mechanism untested in court and revocable with any change in administration. Related developments reinforce the thesis of permission-based dependency. Microsoft's overhaul of its partner governance—removing perpetual global admin rights in favor of time-limited, role-based permissions—has made MSPs' delivery capabilities contingent on timely recognition and acceptance of new terms set by Microsoft. Amid this, operational pressure is rising as AI-driven vulnerability finding systems, like those used by Microsoft and cataloged in the NIST National Vulnerability Database, are producing flaw volumes that outpace existing tracking infrastructure. Together, these shifts make permissions and vendor terms—not technical gaps—the central variable in the sustainability of service lines. For MSPs and IT leaders, the practical implications are clear: operational continuity is increasingly determined by upstream permissions and the specificity of contractual terms rather than local technical controls. Vendor dependence has expanded beyond product functionality to include granular, revocable access rights shaped by external schedules and policies. Effective risk management now requires tracking the origin, mechanism, and expiration of every operational permission, establishing owner accountability, and proactively reviewing vendor and governmental agreements. Organizations failing to systematize this will face unplanned service interruptions and remediation costs dictated by external authorities. 00:00 The Bond and the Vetting 04:31 Congress Grants Those 07:47 Whose Permission Are You On? 11:05 Why Do We Care? Supported by: ScalePad Proofpoint
Sean Murphy, Field CISO for North America at F5, spent the week behind the scenes at Black Hat USA 2026, in the corridors and at dinner with the CISOs and cybersecurity minded people who fill the halls. Marco Ciappelli caught him at the close of it and asked what the industry learned this year. The answer arrived as three words. Vulnerabilities, and the flattening of the curve between vulnerability, exposure, and exploit. Visibility, because a team cannot defend what it does not know it has. Velocity, which carries the other two. Sean Murphy calls the acceleration a physics problem rather than a technology problem, given the forces and friction now moving through security work. Moore's law is out the window in his framing, and advancement arrives week by week. For a CISO writing a roadmap and defending an investment case for the next six to 18 months, the plan keeps pivoting underneath them. AI shifted just as fast. What was recently understood as hyperscaler sized, built for the largest organizations, is now generative and agentic AI running at the enterprise level, in production rather than in a pilot. That leaves a population question. Agents are identities, non-human identities with permissions and responsibilities, and Sean Murphy points out they are proliferating alongside the human identities already under governance. He also offers a reframe on agents that slip past misconfigured guardrails and go crawling for LLMs and repositories. That is an agent doing exactly what it was told to do, relentlessly, until it succeeds. The work ahead is guardrails and governance over all of that visibility. This is a Brand Briefing. A Brand Briefing is an on-location conversation recorded on site at Black Hat USA 2026, putting a spotlight on the guest and their company and pairing it with the editorial reach of ITSPmagazine. Learn more: https://www.studioc60.com/performance/#briefing GUEST Sean Murphy, Field CISO for North America at F5 On LinkedIn: https://www.linkedin.com/in/seanmurphy092009/ RESOURCES Black Hat USA 2026 event coverage: https://www.itspmagazine.com/black-hat-usa-2026-cybersecurity-event-coverage-in-las-vegas Learn more about F5: https://www.f5.com Are you interested in telling your story? ▶︎ Full Length Brand Story: https://www.studioc60.com/content-creation#full ▶︎ Brand Spotlight Story: https://www.studioc60.com/content-creation#spotlight ▶︎ Brand Highlight Story: https://www.studioc60.com/content-creation#highlight ▶︎ Get your own Brand Briefing at an upcoming event: https://www.studioc60.com/buy-brand-briefings KEYWORDS Sean Murphy, F5, Marco Ciappelli, brand briefing, brand story, brand marketing, marketing podcast, Black Hat USA 2026, field CISO, agentic AI, non-human identity, AI governance, guardrails, vulnerability management, security visibility, security roadmap, identity and access management, enterprise AI adoption Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.
────────────────────────────────────────[00:00:50]Interest on the Debt Now Exceeds the Defense Budget — Money for Bombs and Flock, Nothing for Roads or SailorsUSS Lincoln sailors jumping ship; 30-year bond yields at highest since 2001 because nobody wants to buy them.────────────────────────────────────────[00:04:58]Elizabeth Warren and Republicans Both Want to Eliminate the Debt Ceiling — Its Only Function Is to Warn of DisasterBipartisan consensus to remove the last warning indicator; its only function is to warn we're approaching a crisis — they don't want you to know.────────────────────────────────────────[00:10:23]Doug Casey: Buy Gold and Silver Anonymously for Cash — Every Other Market Is Distorted by GovernmentReal bond yield massively negative; Bitcoin down 47%; gold up 34%; hold until the world emerges from the Greater Depression and WWIII Trump was put in place to accelerate.────────────────────────────────────────[00:11:58]Cybersecurity Expert Found 60 Vulnerabilities in Flock — Including Real-Time GPS Tracking of All Police CarsCould view or modify footage, install malware, track every police vehicle; Flock CEO called the researchers terrorist activists.────────────────────────────────────────[00:12:08]Woman Spent Seven Months in Legal Hell After Flock Wrongly Tagged Her Car in a Fatal Hit and RunNo physical evidence; Flock matched make and model in the area; eight months fighting charges; how many similar cases were never defeated?────────────────────────────────────────[00:19:08]Fusion Centers Labeling Anti-Flock Activists a National Security Threat — Same Script as January 6th, Sides FlippedDOJ memos say peaceful advocacy created an environment for violence; Florida fusion center flagged activists writing the Fourth will be a day of independence from surveillance.────────────────────────────────────────[00:21:22]Flock CEO Called D-Flock a Terrorist Organization — Apologized, But the Feds Kept the Same ScriptDOJ, DHS, and FBI circulated identical memos; privateers doing the dirty work so government can claim it isn't responsible.────────────────────────────────────────[01:04:17]Leek: Every Generation of Eminent Professors Has Thought It Arrived at Final Knowledge — Proved Wrong 10 Years LaterThey called COVID novel but said we know everything about it; they wrote the novel and knew the ending; Dark Winter had scripted it.────────────────────────────────────────[01:05:37]John Leek: A Mind Virus Is Spreading When the Dissident Is Immediately Silenced Without DebateAuthority figure presented as having final knowledge; science declared settled; annihilate the heterodox doctor publicly and every other is deterred.────────────────────────────────────────[01:09:05]Vicious Public Destruction of Peter McCullough Was Designed to Deter Every Other Credentialed DoctorFire him, sue him, strip certifications, annihilate his professorship; this is what happens when you question; classic tyrant intimidation. ──────────────────────────────────────── Money should have intrinsic value AND transactional privacy: Go to https://davidknight.gold/ for great deals on physical gold/silver For 10% off Gerald Celente's prescient Trends Journal, go to https://trendsjournal.com/ and enter the code “KNIGHT” For high quality made in America products go to HomeSteadProducts.shop and use promo code “Knight” for 10% off your purchases Find out more about the show and where you can watch it at TheDavidKnightShow.com If you would like to support the show and our family please consider subscribing monthly here: SubscribeStar https://www.subscribestar.com/the-david-knight-show Or you can send a donation throughMail: David Knight POB 994 Kodak, TN 37764Zelle: @DavidKnightShow@protonmail.comCash App at: $davidknightshowBTC to: bc1qkuec29hkuye4xse9unh7nptvu3y9qmv24vanh7Become a supporter of this podcast: https://www.spreaker.com/podcast/the-david-knight-show--2653468/support.
────────────────────────────────────────[00:00:50]Interest on the Debt Now Exceeds the Defense Budget — Money for Bombs and Flock, Nothing for Roads or SailorsUSS Lincoln sailors jumping ship; 30-year bond yields at highest since 2001 because nobody wants to buy them.────────────────────────────────────────[00:04:58]Elizabeth Warren and Republicans Both Want to Eliminate the Debt Ceiling — Its Only Function Is to Warn of DisasterBipartisan consensus to remove the last warning indicator; its only function is to warn we're approaching a crisis — they don't want you to know.────────────────────────────────────────[00:10:23]Doug Casey: Buy Gold and Silver Anonymously for Cash — Every Other Market Is Distorted by GovernmentReal bond yield massively negative; Bitcoin down 47%; gold up 34%; hold until the world emerges from the Greater Depression and WWIII Trump was put in place to accelerate.────────────────────────────────────────[00:11:58]Cybersecurity Expert Found 60 Vulnerabilities in Flock — Including Real-Time GPS Tracking of All Police CarsCould view or modify footage, install malware, track every police vehicle; Flock CEO called the researchers terrorist activists.────────────────────────────────────────[00:12:08]Woman Spent Seven Months in Legal Hell After Flock Wrongly Tagged Her Car in a Fatal Hit and RunNo physical evidence; Flock matched make and model in the area; eight months fighting charges; how many similar cases were never defeated?────────────────────────────────────────[00:19:08]Fusion Centers Labeling Anti-Flock Activists a National Security Threat — Same Script as January 6th, Sides FlippedDOJ memos say peaceful advocacy created an environment for violence; Florida fusion center flagged activists writing the Fourth will be a day of independence from surveillance.────────────────────────────────────────[00:21:22]Flock CEO Called D-Flock a Terrorist Organization — Apologized, But the Feds Kept the Same ScriptDOJ, DHS, and FBI circulated identical memos; privateers doing the dirty work so government can claim it isn't responsible.────────────────────────────────────────[01:04:17]Leek: Every Generation of Eminent Professors Has Thought It Arrived at Final Knowledge — Proved Wrong 10 Years LaterThey called COVID novel but said we know everything about it; they wrote the novel and knew the ending; Dark Winter had scripted it.────────────────────────────────────────[01:05:37]John Leek: A Mind Virus Is Spreading When the Dissident Is Immediately Silenced Without DebateAuthority figure presented as having final knowledge; science declared settled; annihilate the heterodox doctor publicly and every other is deterred.────────────────────────────────────────[01:09:05]Vicious Public Destruction of Peter McCullough Was Designed to Deter Every Other Credentialed DoctorFire him, sue him, strip certifications, annihilate his professorship; this is what happens when you question; classic tyrant intimidation. ──────────────────────────────────────── Money should have intrinsic value AND transactional privacy: Go to https://davidknight.gold/ for great deals on physical gold/silver For 10% off Gerald Celente's prescient Trends Journal, go to https://trendsjournal.com/ and enter the code “KNIGHT” For high quality made in America products go to HomeSteadProducts.shop and use promo code “Knight” for 10% off your purchases Find out more about the show and where you can watch it at TheDavidKnightShow.com If you would like to support the show and our family please consider subscribing monthly here: SubscribeStar https://www.subscribestar.com/the-david-knight-show Or you can send a donation throughMail: David Knight POB 994 Kodak, TN 37764Zelle: @DavidKnightShow@protonmail.comCash App at: $davidknightshowBTC to: bc1qkuec29hkuye4xse9unh7nptvu3y9qmv24vanh7Become a supporter of this podcast: https://www.spreaker.com/podcast/the-real-david-knight-show--5282736/support.
Cybersecurity has always been a moving target, but lately the target seems to have strapped on roller skates, grabbed an AI assistant, and headed straight for the nearest hotel Wi-Fi. Vulnerabilities are being patched at record rates, attackers are finding clever new ways to steal credentials, and AI agents can now take action with surprisingly little supervision. In this episode, we look at what happens when threats evolve faster than the plans designed to handle them, and why having security tools isn't the same as knowing they're actually protecting you. The real question isn't whether technology will keep changing. It's whether your security practices can keep up. More info at HelpMeWithHIPAA.com/573
SANS Internet Stormcenter Daily Network/Cyber Security and Information Security Stormcast
Microsoft Patch Tuesday https://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%20August%202026/33236 Zoom Vulnerablities CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415 https://a.security/blog/asecurity-zoomsday Mozilla Revokes GPG Key https://blog.mozilla.org/security/2026/08/10/updated-gpg-key-for-signing-firefox-and-thunderbird-releases/ Rogue Inflight Wifi https://www.bleepingcomputer.com/news/security/delta-probes-wi-fi-deauth-attack-on-flight-carrying-def-con-attendees/ My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich
SANS Internet Stormcenter Daily Network/Cyber Security and Information Security Stormcast
Scans for Solana (Surfpool?) Endpoints https://isc.sans.edu/diary/Scans%20for%20Solana%20%28Surfpool%3F%29%20Endpoints/33230 Why AI-generated vulnerability patches still require expert human review https://1password.com/blog/why-ai-generated-patches-still-require-human-review?_sp=15ec2845-9e6c-4d15-8ac5-fe9bc1fe4c08.1786396502013 Gunra Ransomware https://www.cisa.gov/sites/default/files/2026-08/aa26-222a-stopransomware-gunra-ransomware_508c.pdf Neo4J/GraphQL Vulnerability CVE-2026-5423 https://github.com/neo4j/graphql/security/advisories/GHSA-fcpg-3fw5-vc65 My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich
Independent investigative journalism, broadcasting, trouble-making and muckraking with Brad Friedman of BradBlog.com
'BradCast' 8/10/2026: Alarming voting system vulnerabilities persist by Progressive Voices
Researchers find that only a quarter of AI-generated patches are fully successful. Ransomware attacks exploit critical N-able flaw. Atlassian fixes critical flaw in Rovo AI. LexisNexis disables some services following suspicious activity. US Senate confirms Adam Cassady as cyber ambassador. Meta ordered to pay an additional $567 million in child safety case. Water sector cyberattacks expand to new states. We got your Monday Business Briefing. On our Industry Voices, Dave Bittner sits down with Mujtaba Hamid, EVP, Product and Strategy at Booz Allen Hamilton at Black Hat discussing AI Speed Cyber Defense. And scammers set sail on The Odyssey. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Today on our Industry Voices, Dave Bittner sat down with Mujtaba Hamid, EVP, Product and Strategy at Booz Allen Hamilton at Black Hat USA, discussing AI Speed Cyber Defense. If you enjoyed this conversation, be sure to check out the full interview here. Selected Reading More than half of AI-generated patches are broken (CyberScoop) China-linked hackers turning popular cybersecurity tool into ransomware launchpad, Microsoft warns (The Record) Critical One-Click Vulnerability in Atlassian's Rovo AI Exposed Enterprise Data (SecurityWeek) LexisNexis shuts down services after suspicious activity on servers (BleepingComputer) US cyber ambassador nominee Cassady confirmed in Senate (The Record) Meta Ordered to Pay $567 Million in New Mexico Child Safety Case (New York Times) New Jersey, Alabama Join States Targeted in Water Cyberattacks (Securityweek) Business Breakdown (N2K) ‘Watch The Odyssey for free online': scam targets film fans with fake streaming sites (The Guardian) Share your feedback. What do you think about CyberWire Daily? Please take a few minutes to share your thoughts with us by completing our brief listener survey. Thank you for helping us continue to improve our show. Want to hear your company in the show? N2K CyberWire helps you reach the industry's most influential leaders and operators, while building visibility, authority, and connectivity across the cybersecurity community. Learn more at sponsor.thecyberwire.com. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc.
Hi kids! Steve King and Johnnie Putman broadcast live from the WGN Skyline Studios on a breezy summer-in-Chicago Saturday night. Jessica Radloff, The New York Times Bestselling Author and host of the Official Big Bang Theory Podcast on HBO Max, joins Steve and Johnnie to talk about her new book YoungSheldon: The (Juicier-Than-Meemaw’s-Brisket) Inside Story […]
SANS Internet Stormcenter Daily Network/Cyber Security and Information Security Stormcast
Botnet Hunting for Vulnerabilities in Diagnostic Tools https://isc.sans.edu/diary/Botnet%20Hunting%20for%20Vulnerabilities%20in%20Diagnostic%20Tools/33214 Inside Greatness: Telegram-Distributed M365 AiTM PhaaS https://zerobec.com/blog/greatness-phaas-aitm-and-device-code-phishing A Deep Dive Into the Latest XCSSET Version https://unit42.paloaltonetworks.com/xcsset-v40-malware-analysis/ Strengthening NuGet Supply Chain Security: Reducing API Key Lifetime https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/ My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich
This week we went deep on debt—all $72 trillion of it—and made the case that the bond market is the real economy, that the Fed has already lost control of the entire curve, and that when the AI trade unwinds, the flood into Treasuries won’t save anyone the way the textbook says it should. Then we watched Japan demonstrate in real time what happens when you don’t have the exorbitant privilege of issuing the world’s reserve currency. A 40-year low for the yen, Japan spending $87 billion in two days trying to hold it together, and the U.S. quietly intervening not out of friendship, but because Japan’s dumping Treasuries would torch our bond market at the worst possible moment. Chapters Intro: 00:00:38 Quick Takes: 00:01:33 Max Notes: 00:07:34 Killer Left Take of the Week: 00:24:44 Chart of the Week: 00:27:02 Headlines: 00:30:56 Outro: 00:32:23 Resources Fox News: Carville vows to FLEE Dem Party over Hasan Piker: ‘Out of here’ Forbes Breaking News: Trump Gives Update On Talks With Iran Forbes Breaking News: Sparks Fly When RFK Jr. Is Pressed On Vaccines, Pandemic Prevention During CNN Interview NBC News: Trump: Jeanine Pirro ‘made a mistake’ dropping Reflecting Pool vandalism case The Thomas Crown Affair CNBC: AI investor Leopold Aschenbrenner forced to unwind all public stock positions after steep losses, sources say Federal Reserve Bank of New York: Household Debt and Credit Report (Q1 2026) Board of Governors of the Federal Reserve System: Financial Accounts of the United States - Z.1 FiscalData: What is the national debt? SIFMA: US Treasury Securities Statistics Fortune: U.S. national debt officially hits $39 trillion—adding approximately $5 billion a day since October Nippon: Japan Govt Worsens Debt-to-GDP Ratio Estimate for FY 2026 Financial Stability Board: Report on Vulnerabilities in Private Credit Board of Governors of the Federal Reserve System: Implementation Note issued June 17, 2026 U.S. Department of the Treasury: Daily Treasury Rates TFTC: Treasury Sells $139B in Polar-Opposite Auctions: 2Y Soars, 5Y Craters MS Now: ‘Don’t be surprised when this gets kind of ugly’: El-Sayed on hotly contested MI Senate primary Bloomberg Television: Trump Revives Hopes for Iran Deal, Oil Sinks | Insight with Haslinda Amin 8/03/2026 Bloomberg: Why Japan Is Propping Up the Yen With US Help Bloomberg: BOJ Data Point to $34 Billion Japan FX Intervention Friday MacroMicro: World - Major Economies’ Holdings of US Debt The Japan Times: Yen carry trade is a ‘ticking time bomb,’ warns BCA research Forever Wars: The Markets Matter For War—You Don’t The American Prospect: The AI Bailout Could Be Baked Into the AI Bubble Jacobin: Centrist Democrats Keep Making Awful Health Reform Proposals UNFTR Resources Video: On The Record 08-04-26 (The Yen Bailout, RFK Jr. Fail, and the $72 Trillion Debt.) Essay: The $72 Trillion Debt Problem. Video: Situational Awareness: How a 25-Year-Old’s Hedge Fund Exposed the Entire AI Bubble. -- If you like #UNFTR, please leave us a rating and review on Apple Podcasts and Spotify: unftr.com/rate and follow us on Facebook, Bluesky, and Instagram at @UNFTRpod. Visit us online at unftr.com. Become a member at unftr.com/memberships. Buy yourself some Unf*cking Coffee at shop.unftr.com. Visit our bookshop.org page at bookshop.org/shop/UNFTRpod to find the full UNFTR book list, and find book recommendations from our Unf*ckers at bookshop.org/lists/unf-cker-book-recommendations. Access the UNFTR Musicless feed by following the instructions at unftr.com/accessibilitySupport the show: https://www.unftr.com/membershipsSee omnystudio.com/listener for privacy information.
Stay informed on current events, visit www.NaturalNews.com - Interview with Michael Yon and Steve Murray (0:10) - Matt Bracken's Military Insights (3:19) - Iran's Military Capabilities and U.S. Vulnerabilities (6:48) - U.S. Military Strategy and Retreat (11:49) - Economic and Geopolitical Implications (31:17) - Fauci's Role in the COVID-19 Pandemic (34:22) - The Depopulation Agenda and Vaccine Dangers (55:22) - The Future of AI and Quantum Computing (58:21) - Oil Market Manipulation and Geopolitical Tensions (1:11:32) - China's Strategic Moves and Energy Independence (1:16:22) - Naval Lasers and Energy Generation (1:19:05) - Future of Warfare and Military Needs (1:22:46) - Advancements in Military Technology (1:26:40) - Economic and Strategic Implications (1:31:16) - Geopolitical Tensions and Strategic Moves (1:36:06) - Nuclear War and Global Consequences (1:42:21) - Economic and Social Impact of Conflict (2:03:11) - Turkey's Role and Future Scenarios (2:03:24) - Predictive Analysis and Historical Parallels (2:05:00) - Final Thoughts and Recommendations (2:09:58) Watch more independent videos at http://www.brighteon.com/channel/hrreport ▶️ Support our mission by shopping at the Health Ranger Store - https://www.healthrangerstore.com ▶️ Check out exclusive deals and special offers at https://rangerdeals.com ▶️ Sign up for our newsletter to stay informed: https://www.naturalnews.com/Readerregistration.html Watch more exclusive videos here:
In this episode I walk you through three real examples of what defense actually looks like — two from clients, one from my own life — and the single move underneath all three. You'll hear why the frozen-pizza night is never really about the pizza, how to stop freezing when "I should already know better" keeps you stuck, and the exact question I stopped asking myself so I'd quit pushing work to "tomorrow" forever. Here's the theme: the goal is never to try harder or be more disciplined. It's to find your specific vulnerability — the place things fall apart — and build a defensive strategy right there. And your defense won't look like mine, or like any of my clients'. That's the whole point. In this episode: Why the salad-vs-pizza guilt is the wrong conversation entirely How to escape the Goldilocks trap: the "should" too big to do, the "could" too small to count The backward-looking question quietly sabotaging your progress — and the one that protects it What it looks like to defend a vulnerability instead of white-knuckling through it → We're enrolling for the August cohort right now — and this is the final pay-what-you-can cohort ever. This is where you learn to run defense on your own patterns, with me. Doors close soon. Get in: elizabethbenton.com/defense Don't wait on this one. Pay-what-you-can is ending, and it's not coming back.
Friday, July 17, 2026 Same Shit, Different Year Moxie Moment: https://bsky.app/profile/jonathanslater.bsky.social/post/3mqs2v3ndi22q Subscribe to the MSW YouTube Channel - MSW Media - YouTube Dr. Allison Gill - The Breakdown | Allison Gill, Mueller, She Wrote (@muellershewrote.com) — Bluesky, MSW & The Daily Beans Podcast (@muellershewrote) - Instagram, MSW Media - YouTube Dana Goldberg - @dgcomedy.bsky.social on Bluesky, Dana Goldberg (@dgcomedy) - Instagram, Dana Goldberg - Facebook, DanaGoldberg.com More from MSW Media - Shows - MSW Media, Cleanup On Aisle 45 pod, The Breakdown | Allison Gill Beans Talk is the video companion to The Daily Beans with Allison Gill and Dana Goldberg. Subscribe now to stay informed and entertained! Reminder - you can see the pod pics if you become a Patron. The good news pics are at the bottom of the show notes of each Patreon episode! That's just one of the perks of subscribing! patreon.com/muellershewrote Listener Survey:http://survey.podtrac.com/start-survey.aspx?pubid=BffJOlI7qQcF&ver=shortFollow the Podcast on Apple:https://apple.co/3XNx7ckWant to support the show and get it ad-free and early?https://patreon.com/thedailybeanshttps://dailybeans.supercast.com/https://apple.co/3UKzKt0 Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.