Cybersecurity, IT Services, and Technology Insights https://petronellatech.com/blog/ en-usCopyright 2026, Petronella Technology GroupSat, 17 Oct 2026 09:05:38 -0400Sat, 17 Oct 2026 09:05:38 -0400In househttp://validator.w3.org/feed/docs/rss2.html Sat, 17 Oct 2026 09:05:38 -0400 ServiceNow AI Passport Zero Trust Runtime Controls for Agents AI agents are increasingly used to read data, make decisions, and trigger actions across... https://petronellatech.com/blog/servicenow-ai-passport-zero-trust-runtime-controls/ Sat, 17 Oct 2026 08:35:08 -0400 In a recent campaign uncovered by cybersecurity researchers, attackers leveraged a stolen credential belonging to ConnectWise Cloud Backup to sign into 173 Microsoft 365 tenants. The breach highlights a new vector that can bypass traditional perimeter... https://petronellatech.com/blog/hackers-use-compromised-connectwise-credential-to-sign-in-to-173-microsoft-365-tenants/ Sat, 17 Oct 2026 07:33:35 -0400 A small developer tool made the front page of Hacker News this week with a deceptively simple premise: before you spend money on hardware to run a large language model locally, you should be able to feel what that model will actually be like to use. The... https://petronellatech.com/blog/show-hn-llmspeed-feel-how-fast-a-local-llm-runs-before-you-buy-the-hardware/ Fri, 16 Oct 2026 09:05:34 -0400 Consent Logging for AI Omnichannel Messaging Compliance AI-driven messaging is moving fast across channels like SMS, email, push notifications, in-app... https://petronellatech.com/blog/practical-consent-logging-for-ai-omnichannel-messaging/ Fri, 16 Oct 2026 07:26:47 -0400 In a recent briefing that has reverberated across the cybersecurity community, a coalition of AI researchers has issued a stark warning: the prevailing methods for training artificial intelligence systems are fundamentally insecure. They argue that... https://petronellatech.com/blog/cyberattack-ais-must-be-trained-only-on-air-gapped-systems-hundreds-of-ai-researchers-say/ Thu, 15 Oct 2026 09:05:32 -0400 ServiceNow Change Evidence for OT Security Breach Audits When an OT security breach audit arrives, the fastest way to lose credibility is to be unable to... https://petronellatech.com/blog/servicenow-change-evidence-for-ot-security-breach-audits/ Wed, 14 Oct 2026 09:05:16 -0400 Agentic AI Change Management with FedRAMP Proof Trails Agentic AI is changing how organizations build, test, and operate software. Instead of a single... https://petronellatech.com/blog/agentic-ai-change-management-with-fedramp-audit-proof-trails/ Wed, 14 Oct 2026 08:35:00 -0400 In the last several months, defense contractors and regulated businesses have been inundated with a flurry of questions about the International Traffic in Arms Regulations, or ITAR. The questions have ranged from the very basics - what ITAR actually governs -... https://petronellatech.com/blog/itar-faqs-the-top-questions-from-defense-contractors-answered/ Wed, 14 Oct 2026 07:25:05 -0400 When the Department of Defense announced a pause on the formal issuance of Cybersecurity Maturity Model Certification (CMMC) certificates, many contractors interpreted the halt as a temporary lull in compliance pressure. The reality, however, is far more... https://petronellatech.com/blog/for-cybersecurity-certification-a-pause-is-not-a-pass-i-connect007/ Tue, 13 Oct 2026 09:05:39 -0400 Blockchain Receipts for Regulated Customer Data Exchanges Regulated customer data exchanges are rarely simple. A marketing team might need verified... https://petronellatech.com/blog/how-blockchain-receipts-can-make-data-exchanges-safer/ Mon, 12 Oct 2026 09:05:07 -0400 Who Owns the Conversation After an AI Agent Escalates AI agents rarely stay silent. When a user asks something that needs human judgment, the agent might... https://petronellatech.com/blog/after-ai-agent-escalation-who-steers-the-conversation/ Mon, 12 Oct 2026 08:34:20 -0400 NIST SP 800-63B-4 treats a passkey with biometric or PIN user verification as multi-factor. What that means for CMMC, HIPAA, and PCI DSS, and the passkey risks that actually matter. https://petronellatech.com/blog/passkeys-are-a-trap-do-not-use-them/ Mon, 12 Oct 2026 07:25:39 -0400 On October fifth, 2026, a new post appeared on the Amos Bbatto blog, titled craig_curated. The author posed a provocative question: Will Linux phones become a viable alternative to the Android/iOS duopoly' The discussion quickly gathered traction, earning one... https://petronellatech.com/blog/will-linux-phones-become-a-viable-alternative-to-the-android-ios-duopoly/ Sun, 11 Oct 2026 09:05:05 -0400 Agent Takeover via LLM Tools and How to Contain It LLM agents are built to use tools. That design is also where risk concentrates. When a model can call... https://petronellatech.com/blog/stop-llm-agent-takeovers-with-tool-use-containment/ Sat, 10 Oct 2026 11:46:18 -0400 Section 1532 of the FY2026 NDAA bars DeepSeek and High Flyer AI on DoD contracts. Learn what it covers, what it does not, and the replacement path. https://petronellatech.com/blog/deepseek-and-the-fy2026-ndaa-what-dod-contractors-need-to-know/ Sat, 10 Oct 2026 11:46:11 -0400 GPT-OSS 20B and 120B run on your own hardware under Apache 2.0. Petronella Technology Group, Inc. deploys open-weight models inside compliance boundaries. https://petronellatech.com/blog/using-gpt-oss-20b-and-120b-for-regulated-industries/ Sat, 10 Oct 2026 11:46:04 -0400 Run Google's Gemma 4 locally under Apache 2.0 inside your CMMC boundary. Petronella Technology Group, Inc. scopes, sizes, and deploys private AI. https://petronellatech.com/blog/why-gemma-is-the-right-local-ai-model-for-cmmc-compliance/ Sat, 10 Oct 2026 09:05:13 -0400 AgentCorruption Lessons for Building Safer AI Agent Controls AI agents can be useful helpers for research, customer support, operations, and software... https://petronellatech.com/blog/agent-corruption-lessons-for-designing-safer-ai-controls/ Fri, 09 Oct 2026 09:03:47 -0400 AI Agent Customer Service Handoffs That Hold Up in Court AI customer service agents are everywhere now, and so are the handoffs. A chatbot gathers... https://petronellatech.com/blog/ai-customer-service-handoffs-that-get-blocked-in-court/ Fri, 09 Oct 2026 07:48:43 -0400 A private AI voice agent processes spoken requests on hardware you control, keeping CUI and PHI off public cloud endpoints while meeting CMMC and HIPAA controls. This guide is for compliance officers, IT leaders, and procurement teams at defense contractors... https://petronellatech.com/blog/how-a-private-ai-voice-agent-cuts-compliance-costs/ Fri, 09 Oct 2026 07:24:27 -0400 Federal contractors who steward sensitive information are on the brink of a sweeping regulatory overhaul. Recent announcements indicate that the Department of Defense and other federal agencies are finalizing rules that will reshape how Controlled... https://petronellatech.com/blog/major-rules-for-federal-contractors-handling-sensitive-data-are-nearing-the-finish-line/ Thu, 08 Oct 2026 12:32:33 -0400 NVIDIA announced the DGX Spark 64GB on October 2, 2026: the same GB10 Grace Blackwell Superchip, the same ConnectX-7 networking, the same DGX OS and software stack as the original, with the unified memory halved to 64 GB and the price starting at $4,999. It... https://petronellatech.com/blog/dgx-spark-64gb-specs-price-and-the-cable-to-pair-two/ Thu, 08 Oct 2026 11:41:08 -0400 If you have searched for a DGX Spark cable you have run into a wall of part numbers: NJAAKK-N911 on the retail listings, NJAAKK0006 and LMTQF022-SD-R in NVIDIA's documentation, and NJAAKR-0006 on the cable we ship. They look like four different products. They... https://petronellatech.com/blog/njaakk-n911-vs-njaakk0006-dgx-spark-cable-part-numbers/ Thu, 08 Oct 2026 09:06:14 -0400 Consent-First AI Call Scoring Without Breaking Trust AI call scoring can help sales, support, and quality teams spot patterns faster than manual review... https://petronellatech.com/blog/consent-first-ai-call-scoring-that-keeps-trust-intact/ Tue, 06 Oct 2026 09:50:26 -0400 Human Escalation Switches in AI Customer Service Workflows AI chat and ticketing systems can resolve a surprising amount of customer issues, but they... https://petronellatech.com/blog/human-escalation-switches-for-ai-customer-service/ Tue, 06 Oct 2026 09:50:25 -0400 EU Cyber Resilience Act Testing for Zero Trust Automation The EU Cyber Resilience Act (CRA) pushes organizations toward more disciplined engineering of... https://petronellatech.com/blog/eu-cyber-resilience-act-testing-for-zero-trust-automation/ Tue, 06 Oct 2026 07:51:58 -0400 Pharmacies holding DoD contracts must meet CMMC requirements; this guide maps the specific obligations for a CMMC pharmacy handling Controlled Unclassified Information. This reference is for pharmacy owners, compliance officers, and security leads at... https://petronellatech.com/blog/cmmc-pharmacy-compliance-guide-for-secure-healthcare-data/ Tue, 06 Oct 2026 07:24:53 -0400 On a quiet Tuesday, the United States Senate reached a unanimous decision to pass the Health Care Cybersecurity and Resiliency Act. The legislation, backed by bipartisan support, marks a important shift in the regulatory landscape for health care providers... https://petronellatech.com/blog/senate-unanimously-passes-the-health-care-cybersecurity-and-resiliency-act/ Mon, 05 Oct 2026 07:50:11 -0400 Use a private AI cluster on isolated hardware as the vmware private AI sovereign cloud alternative ibm for CUI and PHI data. This guide is for compliance officers and IT leaders at defense contractors and healthcare organizations who need to deploy generative... https://petronellatech.com/blog/vmware-private-ai-sovereign-cloud-alternative-ibm-for-compliance/ Sat, 03 Oct 2026 08:34:33 -0400 GitLab patches critical 9.9 ai gateway flaw allowing arbitrary commands. Learn how to secure self-hosted deployments and mitigate data exfiltration risks. https://petronellatech.com/blog/gitlab-patches-critical-9-9-ai-gateway-flaw-allowing-command-execution-on-self-hosted-serv/ Sat, 03 Oct 2026 07:49:00 -0400 A CMMC patient portal must follow NIST SP 800-171 when it holds CUI from a DoD contract. This guide explains the triggers, assessment steps, and scope controls. https://petronellatech.com/blog/cmmc-patient-portal-compliance-checklist-for-secure-access/