Geek-Guy.com

Tag: it’s

Why AI can’t match human creative work

It’s hard for people to tell the difference between AI-generated advertising and writing. So why do they respond better to the human-made stuff? AI vs. Mad Men Ipsos, along with faculty members from Syracuse University’s S.I. Newhouse School of Public Communications, just published a unique advertising study. They took 20 real ads from major brands,…

IBM and Red Hat want to become the ‘security clearinghouse’ for open source applications in the enterprise

Open source code is everywhere in the enterprise; it’s estimated that upwards of 90% of Fortune 500 companies have it in their software supply chains. But open source code is notoriously rife with vulnerabilities, and identifying and patching those bugs can be an endless battle for security teams. IBM and Red Hat are betting that…

GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories

GitHub on Tuesday said it’s investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP listed the platform’s source code and internal organizations for sale on a cybercrime forum. “While we currently have no evidence of impact to customer information stored outside of GitHub’s internal repositories (such as our customers’…

Weekly Update 504

It’s a hot topic, the old “pay or don’t pay” for hackers not to leak your data. Since recording this a few days ago, we’ve had Grafana go with the “no pay” approach, and I’ve seen a raft of commentary around other companies reaching “agreements”, which is a much politer way of saying “we paid…

What 45 Days of Watching Your Own Tools Will Tell You About Your Real Attack Surface

In Your Biggest Security Risk Isn’t Malware — It’s What You Already Trust, we made a simple argument: the most dangerous activity inside most organizations no longer looks like an attack. It looks like administration. PowerShell, WMIC, netsh, Certutil, MSBuild — the same trusted utilities your IT team uses every day are also the preferred…

Weekly Update 503

Well, it’s the day before the Instructure “pay or leak” deadline (at least by my Aussie watch), and the company remains removed from the ShinyHunters website. In its place sits a press statement that amounts to “we’re not making any statements”. So did they pay? And if so, what lofty figure would an incident of…

One Click, Total Shutdown: The “Patient Zero” Webinar on Killing Stealth Breaches

The hardest part of cybersecurity isn’t the technology, it’s the people. Every major breach you’ve read about lately usually starts the same way: one employee, one clever email, and one “Patient Zero” infection. In 2026, hackers are using AI to make these “first clicks” nearly impossible to spot. If a single laptop gets compromised on…

Weekly Update 502

It’s a fascinating display of leverage: the ShinyHunters folks, with very limited resources and experience (their demographic will be teenagers to their early 20s), consistently gaining access to the data of massive brands. Not through technical ingenuity alone (although I’m sure there’s a portion of that), but primarily through good ol’ social engineering. That’s coming…

The fake IT worker problem CISOs can’t ignore

Hiring fake IT workers has been a growing problem in recent years — but it’s often a problem very few want to admit to. From Fortune 500 companies down to smaller organizations, remote hiring practices have been exploited to grant trusted access to individuals who are not who they claim to be creating an insider…

Security posture improvement in the AI era

It’s only been a few weeks since Anthropic announced the Claude Mythos Preview model and launched Project Glasswing with AWS and other leading organizations. This has generated a lot of discussion about the future of cybersecurity and what the ever-increasing capabilities of foundation models mean to organizations. As AWS CISO Amy Herzog pointed out in…

Weekly Update 500

Looking back at this milestone video, it’s the audience question towards the end I liked most: “are you happy”? Charlotte and I have chosen a path that’s non-traditional, intense and at times, pretty stressful. There’s no clear delineation of when work starts and ends, no holidays where we don’t work, nor weekends, birthdays or Christmases.…

World ID expands its ‘proof of human’ vision for the AI era

Identity management is a critical concern for any enterprise, and it’s becoming ever more complex and convoluted with the advent of AI agents. World ID is taking a unique (and to some, controversial) approach to this challenge by building a ‘digital proof of human’ ecosystem for the internet. Today, at its “Lift Off” event, the…

ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-Year-Old Excel RCE and 15 More Stories

You know that feeling when you open your feed on a Thursday morning and it’s just… a lot? Yeah. This week delivered. We’ve got hackers getting creative in ways that are almost impressive if you ignore the whole “crime” part, ancient vulnerabilities somehow still ruining people’s days, and enough supply chain drama to fill a season of television…

AI Memory Shortage Disrupts MSP Pricing and Channel Deals

The global memory shortage is no longer just about finding chips; it’s about finding partners you can trust. What began as a straightforward supply-and-demand crunch has morphed into something messier for managed service providers and IT resellers. Vendors are rewriting the rules of engagement mid-game, eliminating long-standing partner protections and reserving the right to change…

Armis State of Cyberwarfare Report: AI-Powered Cyber Attacks Accelerate Worldwide

Cyberwarfare has entered a new phase — and it’s moving faster than many organizations can defend against.  The 2026 State of Cyberwarfare report from Armis warns that AI-driven attacks, geopolitical tensions, and expanding digital dependencies are converging to create a constant, high-pressure threat environment for enterprises worldwide. “Modern businesses find themselves in the crosshairs of…

Medtech giant Stryker says it’s back up after Iranian cyberattack

Medtech company Stryker says it’s back to being “fully operational,” three weeks after it became the most prominent victim to date of Iranian hackers, who said they attacked the Michigan-based company in retaliation over the conflict with the United States and Israel. A March 11 wiper attack from the pro-Palestinian, Iranian government-connected group Handala damaged…

Android Developer Verification Rollout Begins Ahead of September Enforcement

Google on Monday said it’s officially rolling out Android developer verification to all developers to combat the problem of bad actors distributing harmful apps while “hiding behind anonymity.” The development comes ahead of a planned verification mandate that goes into effect in Brazil, Indonesia, Singapore, and Thailand this September, before it expands globally next year.…

Free Antivirus Software Face-Off: Which One Protects Best?

Free antivirus software isn’t what it used to be. It’s better. In 2025, some of the most respected names in cybersecurity are offering powerful tools at no cost. If you’re looking for solid protection without opening your wallet, you’re in the right place. I tested and reviewed the top free antivirus products available today, focusing…

Across party lines and industry, the verdict is the same: CISA is in trouble

“Decimated.”  “Amateur hour.” “Pretty much fallen apart.” “It’s really hard to find something positive to say right now.” It’s been a little more than one year into the second Trump administration, and there’s a large consensus, if not total unanimity, among those who have worked with and for the Cybersecurity and Infrastructure Security Agency: It…

A Practical Guide to Microsoft Copilot for MSPs

If you’re an MSP considering adding Microsoft Copilot to your portfolio in 2026, it’s worth being deliberate about how you package and position it for clients. For many organizations, pitching AI as a novel “productivity booster” is no longer enough.  Customers increasingly expect the conversation to shift from experimentation to execution, anchored in defined use…

Sonnet 4.6 Explained: Anthropic’s New Mid-Tier Model Is Here

Claude Sonnet 4.6 dropped today, and the headline isn’t just “it’s better.” It’s that developers with early access preferred it over Anthropic’s own top-tier Opus model 59% of the time. That’s the cheaper model beating the expensive one. First up, the tl;dr If you only have two minutes, here’s what you need to know. Sonnet…

How Apple built hypertension notifications for Apple Watch

February is Heart Month, so it’s appropriate to speak with the team that built the recently introduced hypertension notifications system for watchOS 26 and Apple Watch.  I spoke with Apple’s Steve Waydo, director for health sensing, and Dr. Rajiv Kumar, physician-researcher, who offered a glimpse into the science and decisions behind their lengthy project to give smartwatch users…

Over 60 Software Vendors Issue Security Fixes Across OS, Cloud, and Network Platforms

It’s Patch Tuesday, which means a number of software vendors have released patches for various security vulnerabilities impacting their products and services. Microsoft issued fixes for 59 flaws, including six actively exploited zero-days in various Windows components that could be abused to bypass security features, escalate privileges, and trigger a denial-of-service (DoS) condition. Elsewhere

CISO Spotlight: Craig Riddell on Curiosity, Translation, and Why API Security is the New Business Imperative

It’s an unusually cold winter morning in Houston, and Craig Riddell is settling into his new role as Wallarm’s Global Field CISO. It’s a position that suits him down to the ground, blending technical depth, empathy, business acumen, and, what Craig believes, the most underrated skill in cybersecurity: curiosity.  Like so many of us, Craig…

Telstra’s Spectrum Warning: The Real Cost of Policy Trade-Offs

When Telstra talks about “cost trade-offs,” it’s not idle commentary. It’s a signal to regulators, policymakers – and consumers. The telco’s latest comments around spectrum licence obligations, administered by the Australian Communications and Media Authority (ACMA), have reignited a familiar debate: how do you balance public interest requirements with the commercial realities of building and…

Telstra’s Spectrum Warning: The Real Cost of Policy Trade-Offs

When Telstra talks about “cost trade-offs,” it’s not idle commentary. It’s a signal to regulators, policymakers – and consumers. The telco’s latest comments around spectrum licence obligations, administered by the Australian Communications and Media Authority (ACMA), have reignited a familiar debate: how do you balance public interest requirements with the commercial realities of building and…

The MSP Guide to Building an AI Strategy for SMBs in 2026

AI is no longer an experimental add-on for managed service providers. In 2026, it’s becoming a baseline expectation for small and midsize businesses looking to scale, improve efficiency, and stay competitive. For MSPs, that shift creates a clear opportunity, and a growing challenge. Many providers understand AI’s potential but still struggle to turn it into…

The MSP Guide to Building an AI Strategy for SMBs in 2026

AI is no longer an experimental add-on for managed service providers. In 2026, it’s becoming a baseline expectation for small and midsize businesses looking to scale, improve efficiency, and stay competitive. For MSPs, that shift creates a clear opportunity, and a growing challenge. Many providers understand AI’s potential but still struggle to turn it into…

The MSP Guide to Building an AI Strategy for SMBs in 2026

AI is no longer an experimental add-on for managed service providers. In 2026, it’s becoming a baseline expectation for small and midsize businesses looking to scale, improve efficiency, and stay competitive. For MSPs, that shift creates a clear opportunity, and a growing challenge. Many providers understand AI’s potential but still struggle to turn it into…

OpenClaw Integrates VirusTotal Scanning to Detect Malicious ClawHub Skills

OpenClaw (formerly Moltbot and Clawdbot) has announced that it’s partnering with Google-owned VirusTotal to scan skills that are being uploaded to ClawHub, its skill marketplace, as part of broader efforts to bolster the security of the agentic ecosystem. “All skills published to ClawHub are now scanned using VirusTotal’s threat intelligence, including their new Code Insight…

After years of warnings, Microsoft is finally pulling the plug on EWS

It’s for real this time: After nearly 20 years, there will soon be no more Exchange Web Services (EWS) in Microsoft Exchange Online. The API will be disabled by default on October 1, 2026, and will be completely shut down on April 1, 2027, with “no exceptions.” Organizations must have switched to Microsoft Graph by…

2025 in Review: A Year of Smarter, Context-Aware API Security

As the year draws to a close, it’s worth pausing to look back on what has been an extraordinary year for Wallarm and, more importantly, for the businesses we protect.  If 2024 was about laying the groundwork (tracking API sessions to understand behavioral attacks), then 2025 was the year we built upon that foundation, turning…

2025 in Review: A Year of Smarter, Context-Aware API Security

As the year draws to a close, it’s worth pausing to look back on what has been an extraordinary year for Wallarm and, more importantly, for the businesses we protect.  If 2024 was about laying the groundwork (tracking API sessions to understand behavioral attacks), then 2025 was the year we built upon that foundation, turning…