Listen to this episode

Clashing Titans of Tech and the Rising Tide of Hacking

0:0041:51

Recorded December 2023. Regulations, deadlines, requirements and products discussed in this episode reflect that date and may have changed since. For where things stand today, see our current compliance guidance or ask us.

The episode in brief

What this episode covers

Craig and guest Blake Rea open with headlines: the FBI disrupting the Black Cat ransomware group and releasing a free decryption tool, an Xfinity breach affecting over 35 million people, an attack on Iran's gas stations, and a fired IT manager who deleted school Apple ID accounts. They discuss Apple's decision, at the time of recording, to pause some Apple Watch sales amid a patent dispute with Massimo, and Craig argues patent holders need cash reserves to defend their intellectual property.

Blake raises a Tesla autopilot recall, prompting Craig to review the Netflix film Leave the World Behind, which he found disappointing. The pair wander into inflation, media distrust, and political frustration before returning to security: a client declining a 2024 pen test, teenagers using Flipper Zero tools to crash iPhones, Corporate Transparency Act requirements for business owners at the time of recording, and Neuralink human trials, which Craig calls risky. Craig closes by arguing that training and drills must be mandatory as CMMC mandates and SOC report demands grow.

Worth remembering

Key takeaways

  1. Craig shares headlines that the FBI disrupted the Black Cat ransomware group and released a free decryption tool, letting victims avoid paying ransoms.
    “Basically, what that means is if you've got an infected with that ransomware strain, you can then inoculate with that decryption tool without paying the ransom.”
  2. Craig argues security training, tests and drills should be mandatory parts of corporate culture and sanction policies, not optional activities left to individual choice.
    “In my opinion, these tests, these trainings, these drills, they're not optional. If you want to have that mindset, you really shouldn't be using the technology in the first place.”
  3. Craig contends that technology alone is never enough, because as long as humans operate systems, psychology and training remain essential to keeping hackers out.
    “As long as humans exist, there's going to be the psychology and the training that's needed to operate that tool or that ecosystem.”
  4. Discussing the Apple Watch patent dispute, Craig argues patent holders need cash reserves and legal resources, since defending intellectual property in court can bankrupt smaller companies.
    “if you are a patent holder or you have some type of intellectual property that you're trying to protect, you have to have reserves. You have to have cash reserves to be able to defend your patents and your rights.”
  5. Craig argues that, at the time of recording, CMMC is starting to become law because too many people were checking boxes, and companies will demand evidence.
    “These companies are going to demand evidence. So it's not just going to be you checking a box, saying, oh yeah, we did that, yeah, sure, we did.”
  6. Craig explains that Petronella Technology Group studies hacker tools like the Flipper Zero, used by teenagers to crash nearby iPhones, to find gaps and protect clients.
    “You know, white hat hackers trying to see and learn how they work and do research and development to learn the gaps and and how to protect our clients.”
  7. Craig argues brain implant trials like Neuralink raise serious security risks, since companies that cannot manage compliance today could expose users to hackers controlling implants.
    “most companies can't even get their cyber and compliance right. How could you trust a company to get that right? And then what if a hacker God forbid gets control of that?”

The summary and takeaways were drafted with AI from the transcript below. Each takeaway is shown with the passage it comes from.

From the show notes

About this episode

Join Blake Rea and Craig Petronella as we unwrap the latest tech and cybersecurity developments faster than you can tear through holiday gift wrapping. From the FBI's tactical strike against the Black Cat ransomware group to the Xfinity data breach leaving millions on edge, we cover it all. We also weigh the consequences of vengeful IT maneuvers in educational institutions and the David versus Goliath battle in intellectual property that saw Apple Watches being pulled off shelves. It's a conversation that's as enlightening as it is essential, with a dash of holiday spirit.

We then switch scenes to the cinematic world, contrasting a technology-deprived dystopia with Julia Roberts' triumphant return to the silver screen. The ebb and flow of Netflix's pricing model and its effect on our watch lists come under scrutiny. Meanwhile, the narrative takes a turn into the real-world plot of escalating living expenses versus stagnant wages, setting the stage for a critique of media trustworthiness as elections loom. It's a candid discussion on the intersection of culture, entertainment, and economic realities that's as gripping as any thriller.

Our final act takes a deep look into the exploits of teenage hackers and the tech industry's scramble to keep up. With Apple on their toes, we explore the Corporate Transparency Act's impact on business privacy, the cutting-edge strides in biometrics, and Elon Musk's bold Neuralink venturing into human trials. We wrap up by championing the indispensability of cybersecurity training, discussing compliance responsibilities, and advocating for a proactive, trustless approach to our ever-connected lives. Prepare to emerge more informed and vigilant in the digital age after tuning in to this compelling discourse.

Full text

Episode transcript

Select any timestamp to play from that moment. This transcript was generated automatically from the audio and may contain errors, including in speaker names. The audio is the record.

Encrypted Ambition

Never miss an episode

New conversations on cybersecurity, compliance and AI for business leaders. Follow the show, or talk to Petronella Technology Group about what you heard.