IT SPARC Cast

In this episode of IT SPARC Cast – CVE of the Week , John and Lou discuss the first fully autonomous AI-driven ransomware attack ever documented. Researchers observed an AI agent independently executing an entire ransomware campaign—from credential harvesting and privilege escalation to encrypting production systems and adapting to failures in real time. They also examine a new wave of critical Un...

In this episode of IT SPARC Cast - News Bytes, John & Lou explore the next phase of enterprise AI, where long-term memory, agent development, and workforce strategy are becoming just as important as the models themselves. Microsoft introduces Memora to give AI agents persistent memory, Meta acknowledges that AI agent progress is taking longer than expected, and Ford rethinks its software hirin...

A newly demonstrated attack against the Model Context Protocol (MCP) shows how malicious tool descriptions can manipulate AI agents into leaking sensitive information—without exploiting a software vulnerability. In this episode of IT SPARC Cast – CVE of the Week, John and Lou explain MCP tool poisoning, why prompt injection is evolving, and what organizations deploying AI agents should do to prote...

In this episode of IT SPARC Cast - News Bytes, John & Lou explore how AI is driving the next wave of infrastructure investment. OpenAI launches Patch Planet to help secure critical open-source software, the U.S. announces major funding for new nuclear reactors to support growing energy demand, and OpenAI teams up with Broadcom to introduce its first custom AI inference chip. The discussion hig...

Three recently patched UniFi OS vulnerabilities are now being actively exploited, highlighting the growing importance of automatic patching and vulnerability management. In this episode of IT SPARC Cast – CVE of the Week, John and Lou explain how chaining CVEs can lead to full system compromise, why UniFi’s default auto-update policy likely protected many users, and why continuous patching may soo...

In this episode of IT SPARC Cast - News Bytes, John & Lou explore three major stories shaping enterprise IT. Jeff Bezos argues that AI will create labor shortages rather than eliminate jobs, Tesco begins one of the largest VMware migration projects ever announced, and Accenture doubles down on cybersecurity through a series of strategic investments and acquisitions. The discussion focuses on t...

Thousands of Fortinet FortiGate devices have been compromised—even in organizations that already applied security patches. In this episode of IT SPARC Cast – CVE of the Week, John and Lou explain how attackers maintained persistence after earlier breaches, why patching alone wasn’t enough, and what every organization running FortiGate firewalls must do immediately to verify they haven’t already be...

In this episode of IT SPARC Cast - News Bytes, John & Lou tackle a security-heavy week featuring a new Microsoft Defender zero-day, the largest Patch Tuesday release in Microsoft’s history, and a growing debate around how vulnerability disclosures should be handled in the AI era. As AI accelerates bug discovery, the industry is struggling to keep pace with validation, patching, and deployment....

A single-character coding mistake in the Linux kernel created a privilege escalation vulnerability that could allow attackers to gain root access, escape containers, and compromise systems. In this episode of IT SPARC Cast – CVE of the Week, John and Lou break down CVE-2026-23111, discuss why container escapes are so dangerous, and explore how AI-powered code analysis may become essential for find...

In this episode of IT SPARC Cast - News Bytes, John & Lou take a deep dive into a Microsoft-heavy week that touches nearly every corner of enterprise IT. From a growing controversy around vulnerability disclosure practices to Microsoft’s new AI-native device strategy and NVIDIA’s RTX Spark platform, the discussion explores how AI is reshaping operating systems, endpoints, and enterprise workfl...

An autonomous AI security tool has discovered a critical Redis remote code execution vulnerability that remained hidden for more than two years. In this episode of IT SPARC Cast – CVE of the Week, John and Lou discuss CVE-2026-23479, why Redis is such a critical part of modern cloud infrastructure, and how AI is fundamentally changing vulnerability discovery, patch management, and enterprise secur...

In this episode of IT SPARC Cast - News Bytes, John & Lou explore how AI is rapidly evolving from simple assistants into autonomous workers that require management, oversight, and governance. Google introduces an open-source Agent Executor framework designed to supervise AI agents in production environments, while smart glasses may finally be approaching the point where they become practical f...

A newly disclosed attack technique called “Underminr” allows malicious traffic to hide behind trusted CDN infrastructure, potentially bypassing DNS filtering, zero trust policies, and traditional security controls. In this episode of IT SPARC Cast – CVE of the Week, John and Lou explain how attackers abuse TLS routing and CDN tenant behavior to disguise command-and-control traffic as legitimate we...

In this episode of IT SPARC Cast - News Bytes, John & Lou break down the growing AI infrastructure arms race, Google’s push toward AI-generated mobile apps, and Cloudflare’s latest findings on frontier AI security models. As AI compute demand explodes, the conversation explores how power generation, cloud scaling, and automation are rapidly reshaping enterprise IT. They also dive into Google’s...

A newly disclosed Microsoft Exchange vulnerability is actively being exploited in the wild, and there’s still no permanent patch available. In this episode of IT SPARC Cast – CVE of the Week, John and Lou break down CVE-2026-42897, explain how attackers can exploit Outlook Web Access through malicious emails, and discuss why temporary mitigations may not be enough for organizations still running o...

In this episode of IT SPARC Cast - News Bytes, John & Lou break down the growing intersection of AI, cybersecurity, and enterprise infrastructure. OpenAI enters the AI security space with Daybreak, Google unveils a new AI-native laptop platform called Googlebook, and Cisco releases an open source tool designed to trace the origins of AI models. The discussion focuses on how AI is rapidly movin...

A dangerous Linux kernel privilege escalation exploit called “Dirty Frag” is putting enterprise systems, VPN infrastructure, and Linux-based devices at risk. In this episode of IT SPARC Cast – CVE of the Week, John and Lou break down CVE-2026-43284 and CVE-2026-43500, explain why exploit chaining makes this vulnerability especially dangerous, and discuss how AI-driven vulnerability discovery is ac...

In this episode of IT SPARC Cast - News Bytes, John & Lou break down a series of stories showing both the promise and chaos of AI-driven development. From Microsoft Edge storing passwords in plaintext memory to AI coding agents deleting production databases, the episode highlights how security and operational discipline still matter more than hype. They also tackle growing claims that AI will...

In this episode of IT SPARC Cast - News Bytes, John & Lou break down major shifts happening across AI, cloud, and enterprise IT. From massive infrastructure deals to emerging AI development strategies, the conversation focuses on what’s really driving the industry—not just the headlines. They explore Amazon’s deepening relationship with Anthropic, SpaceX’s move into AI-powered coding tools, Ap...

NIST is changing how it handles CVEs after a massive surge in vulnerability submissions—and it could reshape how enterprise IT teams manage risk. In this episode of IT SPARC Cast – CVE of the Week, John and Lou break down what this shift means, the risks of incomplete vulnerability data, and how AI-driven attacks are forcing a new security reality. ⸻ 📄 Show Notes 🚨 CVE of the Week (Special Editi...

Amazon is going all-in on AI—and taking aim at everyone in the process. In this episode of IT SPARC Cast – News Bytes, we break down: •Amazon’s massive AI infrastructure push and chip strategy •Microsoft turning Copilot into an autonomous agent •Netgear’s key win in the evolving router security landscape If you’re in enterprise IT, cloud, or security, this episode covers the real shifts happening...

A dangerous Adobe Acrobat zero-day vulnerability (CVE-2026-34621) is actively being exploited—allowing attackers to compromise systems simply by getting users to open a malicious PDF. In this episode of IT SPARC Cast – CVE of the Week, John and Lou break down how it works, why it’s so dangerous, and what enterprise IT teams must do immediately. ⸻ 📄 Show Notes 🚨 CVE of the Week: Adobe Acrobat Zer...

A critical Docker vulnerability (CVE-2026-34040) is putting container security at risk by allowing attackers to bypass authorization controls and potentially access host systems. In this episode of IT SPARC Cast – CVE of the Week, John and Lou break down the exploit, why it matters, and what enterprise IT teams must do immediately to mitigate risk. ⸻ 📄 Show Notes 🚨 CVE of the Week: Docker API Au...

In this episode of IT SPARC Cast – News Bytes, John Barger and Lou Schmidt break down the latest enterprise IT headlines with sharp insight and zero fluff. Are tech CEOs using AI as cover for layoffs? Are emergency patches from major vendors signaling deeper systemic risk? And what’s really behind OpenAI’s decision to shut down Sora? Plus, listener feedback sparks a deep dive into home router secu...

In this episode of IT SPARC Cast – CVE of the Week , John Barger and Lou Schmidt break down a massive supply chain attack targeting Axios , one of the most widely used JavaScript libraries in the world. Attackers compromised a maintainer account and injected malicious code into widely distributed versions, turning routine installs into a cross-platform Remote Access Trojan (RAT) deployment. This i...