Own the Process: AI Skills, Free Range Agents, and Owning Your IP

The Real Talk: A Closer Look: Free Range Agents Eric Brown, CISSP and Nick Mellem have been testing Instinct, a text-based AI assistant that can order lunch for the office, brief you on traffic and meetings over your morning coffee, and store your passwords. That last part is where things get interesting. Eric’s advice is […]

The Fireman’s Paradox: Why Your Security Team Keeps Getting Rewarded for Failing You

The Real Talk: A Closer Look: Patch Tuesday and the Zero Day Economy Nick Mellem walks through why the second Tuesday of the month matters. Vulnerabilities get discovered, researchers report them for bug bounty money, and vendors race to patch before attackers catch on. Eric Brown, CISSP adds the higher stakes version. Nation states pay […]

Building the Future: AI Coding, Agentic Advisors and Custom Tools

The Real Talk: A Closer Look: The MCP Nobody Vetted Loren Horsager of Model Mind AI shared a story that should make every IT leader pause. When MCPs (the connectors that let AI tools talk to your business software) started showing up for QuickBooks, the first result in a Google search wasn’t Intuit’s official version. […]

Phishing at Scale: Watch the Playbook, Not Just the Websites

RMM phishing is not new. What makes this discovery notable is its scale: researchers connected hundreds of cases across 46 countries and found that the United States was the campaign’s leading target. At first glance, this looked like a phishing campaign built around fake Canadian tax documents. It was much bigger than that. Researchers at […]

The Air Gap Was Never Real: Inside the Minnesota Water Supply Hack

Subscribe to The Audit Brief, where we break down the latest episode of The Audit Podcast. Tune into the full episode to hear IT Audit Labs’ Director of Business Operations Kelly Venzke join the show for the first time, plus the crew’s takes on state fair food, Blackstone grills, and whether black coffee is actually […]

Lockpicking, Key Cloning, and Why Your Car Knows More Than You Think

The Real Talk: A Closer Look: The Crossover Nobody Planned Eric Osterberg, founder of Gray Duck Locks, joined Eric Brown, CISSP, Nick Mellem and Joshua Schmidt, to explain why lock picking and infosec pull from the same crowd. Both disciplines chase the same question: how imperfect can a system be before someone finds the gap. […]

AI Ransomware, Quantum Countdowns, and a Spa That Wants to Full-Body Scan You

The Real Talk: A Closer Look: Identity Is Still the Front Door Tabitha Senty, joining the crew for a live news episode, cut through the AI hype fast. AI makes attacks faster, not fundamentally different. Phishing is still the entry point, and if organizations aren’t locking down identity and access, it doesn’t matter whether the […]

Why “HaveIBeenPwned” Belongs in Your Security Program

“There’s a website called Have I Been Pwned, maintained by Troy Hunt. You can enter your email address and see if it’s been involved in a breach. If your email has been around for a while, it’s probably been breached. That’s not catastrophic. What matters is whether you reused passwords.” Eric Brown Most security teams […]