Crestvale Newsroom

Send us Fan Mail A supply chain attack targeting developer tools forced Microsoft to remove dozens of GitHub repositories, highlighting a shift in where real risk now sits. This episode breaks down how attackers are moving closer to credentials through trusted workflows, and why AI development environments are becoming a high value target. For security and IT leaders, the implication is direct. De...

Send us Fan Mail AI access is no longer just a product feature. It is becoming controlled infrastructure. In this episode, we break down how U.S. export controls forced Anthropic to shut down major models globally, and what that signals for any team relying on third-party AI. The shift has real consequences. Security workflows can stop overnight. Vendor risk now includes geopolitical decisions. An...

Send us Fan Mail CISA just enforced a seventy two hour patch deadline for actively exploited infrastructure, and that single move signals a broader shift in how fast security teams are expected to operate. This episode breaks down what that means in practice, from Ivanti Sentry exposure to the growing expectation that internet-facing systems must be treated as compromised almost immediately. It al...

Send us Fan Mail A record fine against Coupang signals a shift in global privacy enforcement, with regulators willing to apply maximum penalties across borders after insider-driven breaches. For security and IT leaders, this changes how breach risk is modeled. Insider access is now a primary threat vector, and global enforcement is no longer theoretical. At the same time, Shadow AI and developer-t...

Send us Fan Mail A ServiceNow vulnerability exposed how quickly SaaS platforms can become part of your attack surface, while new federal guidance is shrinking vulnerability response windows to just three days. This episode breaks down what the ServiceNow incident means in practice, why CISA's seventy two hour remediation expectation is a major shift, and how AI agents are quietly expanding id...

Send us Fan Mail Frontier AI access is starting to look like a gated system, and the price is visibility. Anthropic's latest model release makes thirty day data retention a requirement, signaling a broader shift in how advanced AI will be governed and consumed. For security and IT leaders, this is not just a policy change. It directly affects how AI can be used in sensitive workflows, what da...

Send us Fan Mail Today's episode focuses on two failures that point to the same root issue: identity controls breaking under outdated assumptions. A Check Point VPN flaw shows how legacy configurations like IKEv1 can silently become open doors, while Meta's AI-powered recovery flow demonstrates how automation can bypass core verification entirely. For security and IT leaders, the takeawa...

Send us Fan Mail A new supply chain attack shows that simply opening a code repository can now execute malware inside common developer tools. At the same time, AI search is beginning to surface fraudulent websites, and outages in upstream models are breaking features inside everyday SaaS platforms. For firm leaders, this is a shift in where risk lives. It is no longer just at the network edge. It...

Send us Fan Mail AI tools are forcing a new tradeoff between capability and control. OpenAI's Lockdown Mode makes that explicit by limiting what ChatGPT can access during sensitive work, rather than trying to eliminate risk entirely. For professional service firms, this shifts AI from a productivity tool into a governance decision. Leaders now need clear policies for when full capability is a...

Send us Fan Mail Physical access is becoming the new attack vector for professional service firms. Today's episode looks at the rise of ransomware groups showing up in person at law offices, bypassing traditional cybersecurity defenses entirely. For firm leaders, this shifts the problem from technical controls to operational discipline. Identity verification, front desk protocols, and staff a...

Send us Fan Mail AI security just became an operational requirement, not a policy discussion. New federal direction is pushing vulnerability management and rapid patching into enforceable territory, with implications that extend well beyond large tech companies. For professional service firms, this shift will show up in client demands, audits, and engagement terms. The ability to prove disciplined...

Send us Fan Mail Automation is moving from assistance to execution inside accounting firms. Ramp's new Stack platform signals a shift where AI agents can run the monthly close end to end, with auditability built in. That changes how work gets done and how firms price it. For firm leaders, this is not just another tool. It challenges the labor model behind core revenue. At the same time, risks...

Send us Fan Mail AI is moving faster than the systems designed to control it. Today's episode focuses on how governance, verification, and security are becoming the real constraints as firms adopt AI inside sensitive environments. Workday's new Agent Passport signals a shift from building AI to proving it is safe. At the same time, Cisco and Anthropic are accelerating the pace of vulnera...

Send us Fan Mail A CPA firm just launched a platform it built for itself, and it highlights a deeper shift in how professional service firms are expected to operate. This episode breaks down Atlura and why scheduling, not features, is becoming the center of firm performance. For firm leaders, the message is direct. Disconnected systems are no longer just inefficient. They are a competitive risk. A...

Send us Fan Mail Cyber policy, AI cost, and cryptography are all shifting at the same time, and the direction is clear. Governments are moving toward active intervention, AI pricing is normalizing, and post-quantum readiness is becoming an operational requirement. For professional service firms, this is not abstract. Faster government response means higher expectations for your own security postur...

Send us Fan Mail AI costs are becoming variable, security risks are becoming immediate, and governance is becoming mandatory. This episode breaks down GitHub Copilot's shift to usage-based pricing and what it signals for every AI tool your firm is adopting. For founders and firm leaders, this is about control. Costs that used to be predictable are now tied to behavior. At the same time, a liv...

Send us Fan Mail A single internal AI misuse just triggered a federal disclosure, and it is redefining what counts as a reportable incident. This episode breaks down how "shadow AI" moved from a policy concern to a governance and regulatory risk overnight. For firm leaders, the implications are immediate. AI usage is now part of your security perimeter, even when no systems fail and no a...

Send us Fan Mail Kirkland and Ellis is committing five hundred million dollars to build its own AI platform, signaling a shift from using external tools to owning the systems that deliver legal work. This move ties directly to value based pricing and long term control over how services are produced and sold. For firm leaders, the implication is clear. Proprietary workflows and institutional knowle...

Send us Fan Mail Cisco is moving away from periodic patching and into continuous exposure management, a shift driven by AI attackers moving at machine speed. This episode breaks down what that change means for firms that still rely on slow security rhythms and why the old model no longer holds up. For founders and firm leaders, the message is clear. Exposure now grows at the speed of your slowest...

Send us Fan Mail Frontier AI has crossed an important threshold, and national security experts now want boards to treat the most advanced models as assets that require serious protection. This episode breaks down the policy shift and what it means for professional service firms adopting AI across client work, operations, and security. For leaders, the implications are direct. Advanced models now c...

Send us Fan Mail Today's episode focuses on the growing tension inside firms as AI coding tools scale faster than budgets can support. Microsoft and Uber are both pulling back after runaway usage pushed costs far beyond expectations. Their shift is an early signal for professional service firms evaluating how to control consumption before it becomes an uncontrolled expense. This matters becau...

Send us Fan Mail A hidden compromise in PHP localization packages shows how a small dependency can undermine an entire build pipeline. Attackers rewrote trusted tags and turned routine updates into credential theft paths, hitting cloud keys, developer tokens, and browser logins. For firms that rely on Composer or automated CI workflows, this is a real exposure moment. This episode breaks down why...

Send us Fan Mail California's new rules for AI use in hiring raise the risk floor for every employer operating in the state. This episode explains what is changing, why the exposure has already begun, and what firm leaders need to put in place before staff AI use turns into a compliance problem. We also break down the rise of the system of intelligence, the shift inside modern finance tools,...

Send us Fan Mail New York's financial regulator has issued a sharp warning that frontier AI has compressed the cyber threat timeline from years to months. This episode breaks down what the shift means for firms that handle sensitive client data and why board‑level attention is no longer optional. We explain why this matters for founders and firm leaders, especially as AI driven exploitation b...

Send us Fan Mail Tenable's new OPEN platform takes aim at the core problem inside many security programs: fragmented data that slows down action. By unifying exposure details across tools, it offers firms a cleaner path to deliver higher-value remediation without forcing clients to rebuild their stack. This matters for founders and managing partners because client expectations are shifting fa...