<?xml version="1.0" encoding="utf-8"?>
<oembed>
  <version>1</version>
  <type>rich</type>
  <provider_name>Libsyn</provider_name>
  <provider_url>https://www.libsyn.com</provider_url>
  <height>90</height>
  <width>600</width>
  <title>ShinyHunters Got FBI Records. Craig’s Question Is Which Contractor Was Holding Them.</title>
  <description>A listener asked Matt to ask Craig about the theft of FBI data, and Craig started with who holds it. Much of what the federal government keeps — background-check records, applications to the FBI, even the designs of weapons made by defense contractors — sits with third parties. The group behind this one is called ShinyHunters; its reported leader was arrested by Dutch police the day before the show. Craig’s point was the gap between the government and its vendors: last week every federal agency was required to patch ScreenConnect, a remote-support tool with a serious vulnerability. “Well, the government did all of that work, but how about its contractors? How about regular businesses?” Then the identity problem. States now require age verification for certain websites, so people hold their driver’s license or passport up to the camera next to their face. Craig said more than 100 million of those records have now been stolen. A password can be changed. An email address can be changed. “But iris scans at the airport? Are you kidding me? You can’t pop out your eyeball. You’re not Tom Cruise.” Also in this segment:  CMMC, the cybersecurity framework for defense contractors built on NIST standards, and Craig’s view that its Level 2 requirements are effectively no longer enforced The tech-company agreement signed at the White House on AI, which Craig compared to the governor’s “sidestep” in The Best Little Whorehouse in Texas Researchers in China who got an AI to design bioweapons and explain how to use them, and why Craig says the risk is people giving instructions, not AI acting on its own NVIDIA’s open-source OpenShell, which puts gates on what an AI agent can reach About 800 Microsoft patches last month, which Craig tied to attackers using AI The opener: “Feeling very techy. How about you?”  Newsletter and Insider Session announcements: CraigPeterson.com </description>
  <author_name>Craig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity</author_name>
  <author_url>https://cptt.libsyn.com/podcast</author_url>
  <html>&lt;iframe title="Libsyn Player" style="border: none" src="//html5-player.libsyn.com/embed/episode/id/43201108/height/90/theme/custom/thumbnail/yes/direction/forward/render-playlist/no/custom-color/88AA3C/" height="90" width="600" scrolling="no"  allowfullscreen webkitallowfullscreen mozallowfullscreen oallowfullscreen msallowfullscreen&gt;&lt;/iframe&gt;</html>
  <thumbnail_url>https://assets.libsyn.com/secure/item/43201108</thumbnail_url>
</oembed>
