{"version":1,"type":"rich","provider_name":"Libsyn","provider_url":"https:\/\/www.libsyn.com","height":90,"width":600,"title":"ShinyHunters Got FBI Records. Craig\u2019s Question Is Which Contractor Was Holding Them.","description":"A listener asked Matt to ask Craig about the theft of FBI data, and Craig started with who holds it. Much of what the federal government keeps \u2014 background-check records, applications to the FBI, even the designs of weapons made by defense contractors \u2014 sits with third parties. The group behind this one is called ShinyHunters; its reported leader was arrested by Dutch police the day before the show. Craig\u2019s point was the gap between the government and its vendors: last week every federal agency was required to patch ScreenConnect, a remote-support tool with a serious vulnerability. \u201cWell, the government did all of that work, but how about its contractors? How about regular businesses?\u201d Then the identity problem. States now require age verification for certain websites, so people hold their driver\u2019s license or passport up to the camera next to their face. Craig said more than 100 million of those records have now been stolen. A password can be changed. An email address can be changed. \u201cBut iris scans at the airport? Are you kidding me? You can\u2019t pop out your eyeball. You\u2019re not Tom Cruise.\u201d Also in this segment: CMMC, the cybersecurity framework for defense contractors built on NIST standards, and Craig\u2019s view that its Level 2 requirements are effectively no longer enforced The tech-company agreement signed at the White House on AI, which Craig compared to the governor\u2019s \u201csidestep\u201d in The Best Little Whorehouse in Texas Researchers in China who got an AI to design bioweapons and explain how to use them, and why Craig says the risk is people giving instructions, not AI acting on its own NVIDIA\u2019s open-source OpenShell, which puts gates on what an AI agent can reach About 800 Microsoft patches last month, which Craig tied to attackers using AI The opener: \u201cFeeling very techy. How about you?\u201d Newsletter and Insider Session announcements: CraigPeterson.com ","author_name":"Craig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity","author_url":"https:\/\/cptt.libsyn.com\/podcast","html":"