Tech Updates Podcast Por Andres Sarmiento arte de portada

Tech Updates

Tech Updates

De: Andres Sarmiento
Escúchala gratis

Tech Updates is your quick-hit source for the latest in enterprise technology—all in 10 minutes or less. From cybersecurity and network connectivity to data center innovation, cloud advancements, and the rise of AI, we cover the updates that matter. Each episode delivers vendor announcements, industry trends, and agnostic insights to keep you informed and ahead of the curve. Whether you’re a tech professional or just tech-curious, this podcast is designed to fit into your busy schedule and fuel your knowledge.

Andres Sarmiento
Política y Gobierno
Episodios
  • RSAC 2026 Recap: Agentic AI, the Death of the SIEM, and 22-Second Breakouts
    Apr 17 2026

    In 2022, the median time between initial access and the secondary threat hand-off was 8 hours. At RSAC 2026, Mandiant put the new number on the main stage: 22 seconds. That one stat explains everything that got announced in San Francisco this year.

    This episode of Tech Updates is a full RSAC 2026 recap — the product flood, the agentic AI pivot, and the six predictions every CISO and senior engineer should be tracking over the next 12 months.

    ⏱ CHAPTERS

    0:00 — Intro

    0:03 — Cold open: the 22-second attacker hand-off

    0:31 — Segment 1: Agentic AI, for real this time

    2:20 — Agent Identity & Runtime Control

    3:35 — Agentic SOC & the Death of the SIEM

    5:09 — AI-Generated Code Security

    5:43 — Post-Quantum, Quietly

    6:36 — Palo Alto's Full Stack

    6:55 — The Cryptographers' Panel

    8:10 — Six Predictions for the Next 12 Months

    10:45 — The honest takeaway

    🔑 VENDORS & PRODUCTS COVERED

    • Cisco DefenseClaw · Duo IAM for agents

    • Microsoft Entra ID + Foundry guardrails

    • Teleport Beams (per-agent Firecracker micro-VMs)

    • 1Password Unified Access (Anthropic, Cursor, GitHub, Perplexity, Vercel)

    • Astrix Security · shadow agent coverage

    • Databricks Lakewatch — agentic SIEM

    • Google Cloud Triage & Investigation Agent

    • Accenture + Anthropic Cyber.AI

    • CrowdStrike Charlotte AI AgentWorks

    • SentinelOne Prompt AI Agent Security

    • Secure Code Warrior Trust Agent: AI

    • Black Duck Signal

    • ZeroTier Quantum (hybrid PQC transport)

    • Palo Alto Prisma AIRS 3.0 · Agentic SASE · Prisma Browser for Business

    • pQCee crypto-agile CNG

    • SandboxAQ AQtive Guard

    • Acalvio 360 Deception

    🎤 KEY QUOTES

    "With chatbots you worry about getting the wrong answer. With agents you worry about taking the wrong action." — Jeetu Patel, Cisco

    "AI will kill the SIEM in 2026." — Ali Ghodsi, Databricks CEO (CNBC)

    "The cryptographic algorithms have really held up over the last 25 years. You can't say that about a lot of areas within cybersecurity." — Paul Kocher, 25th Cryptographers' Panel

    "We're spending more on cybersecurity than ever before, but the breaches keep happening. Something is fundamentally broken about how we've approached this problem." — Karl Van den Bergh, Illumio

    🎯 SIX PREDICTIONS FOR THE NEXT 12 MONTHS

    1. Non-human identity becomes the primary identity problem

    2. MCP is now part of the attack surface — treat it like an API gateway

    3. The SOC gets automated, or it gets outrun

    4. Prompt injection is the new SQL injection

    5. Post-quantum is closer than you think (CNSA 2.0 deadlines are real)

    6. Active defense and deception are coming back

    📚 SOURCES

    Mandiant M-Trends 2026 · RSAC 2026 official press releases · SecurityWeek daily roundups · Help Net Security · Futuriom · Google Cloud blog · Lumu Technologies recap · Biometric Update · Govtech Lohrmann column · Hive Pro disclosure of Operation Olalampo + Rust-based Char backdoor

    🎧 LISTEN & SUBSCRIBE

    Spotify · Apple Podcasts · YouTube

    techupdates.it-learn.io

    New episode every week.

    #RSAC2026 #AgenticAI #Cybersecurity #SIEM #ZeroTrust #PostQuantum #InfoSec #CISO #MCP #PromptInjection #AIAgents #RSAConference

    Más Menos
    12 m
  • Malware: Viruses, Ransomware, Botnets & How to Fight Back
    Apr 10 2026

    Malware isn't just "a virus." It's a whole ecosystem of tools designed to damage, steal, spy, and extort — and in 2026 it's more dangerous than ever. This episode is your complete field guide.

    WHAT IS MALWARE?

    Malware (malicious software) is any program intentionally designed to harm a system, steal data, or gain unauthorized access. It's not accidental — it's engineered.

    THE 5 MAJOR TYPES

    Viruses & Worms

    Viruses attach to clean files and spread when a user runs them. Worms self-replicate without any user interaction — ILOVEYOU (2000) infected 50 million machines in 10 days.

    Trojans & Ransomware

    Trojans disguise themselves as legitimate software. Ransomware encrypts your files and demands payment — Colonial Pipeline paid $4.4M in 2021. Double extortion is now standard: pay or we publish your data.

    Spyware & Keyloggers

    Spyware silently monitors your activity. Keyloggers capture every keystroke — passwords, credit cards, everything. Pegasus (NSO Group) targeted journalists and world leaders via a single missed call.

    Rootkits & Botnets

    Rootkits hide deep in the OS or firmware — the only guaranteed fix is a full OS wipe. Botnets turn your device into a zombie for DDoS attacks, spam, and crypto mining. Mirai (2016) infected IoT cameras and routers, then took offline Twitter, Netflix, Reddit, and Amazon.

    HOW MALWARE GETS IN

    - Phishing emails — #1 delivery method

    - Drive-by downloads — visit a compromised site, malware auto-downloads

    - Malvertising — malicious ads on legitimate websites

    - USB drops — infected drives left in public places

    - Unpatched vulnerabilities — no user interaction needed

    - Supply chain attacks — SolarWinds (2020) hit 18,000 organizations including US government agencies

    DEFENSE IN DEPTH — 7 LAYERS

    01. Patch everything — OS, apps, firmware

    02. Endpoint protection / EDR — behavioral detection catches what signatures miss

    03. Email filtering + sandboxing — detonate attachments before delivery

    04. Least privilege access — limits blast radius

    05. 3-2-1 Backups — 3 copies, 2 media types, 1 offsite, immutable

    06. Security awareness training — humans are the #1 attack surface

    07. Network segmentation / Zero Trust — never trust, always verify

    2024–2026 THREAT TRENDS

    - Ransomware-as-a-Service (RaaS): criminals rent malware like a SaaS subscription — no coding required

    - AI-powered malware: better phishing, polymorphic evasion that adapts to bypass defenses

    - IoT explosion: billions of unpatched smart devices are easy targets

    - Nation-state attacks: Stuxnet, Flame, Triton, Pegasus — government-grade malware in the wild

    - Average ransomware attack cost in 2024: $4.5 million (downtime, recovery, legal)

    - Reminder: paying the ransom does NOT guarantee you get your files back

    THE BOTTOM LINE

    Malware is intentional. Understanding how each type works is the first step to defending against it. No single tool protects you — layers do.

    New episode every week. Subscribe on Spotify, Apple Podcasts, or YouTube.

    techupdates.it-learn.io

    Más Menos
    15 m
  • Ransomware in 2026: It's Not About Encryption Anymore
    Mar 24 2026

    Tech Updates — Ransomware in 2026: Industrial Extortion and How to Fight Back

    Ransomware isn't just encryption anymore. In 2026, it's a full extortion operation — and it's getting more aggressive as fewer victims pay up.

    What's changed: Ransomware-as-a-Service has effectively lowered the barrier to entry for cybercrime, and in 2026 it's the dominant engine driving the threat landscape. Huntress Groups now layer encryption with data theft, DDoS attacks, and direct victim harassment. Many groups are skipping encryption entirely in 2026 — focusing purely on data exfiltration, which puts organizations under immediate legal and reputational pressure even if systems stay online. Level

    Three attack scenarios covered in this episode:

    • Credential-based intrusion — Stolen logins, no MFA, AD enumeration, Kerberoasting, domain takeover, backup destruction, then encryption
    • Hypervisor compromise — Unpatched ESXi vulnerabilities, VM datastore encryption, snapshot manipulation, bundled DDoS
    • AI-assisted data-only extortion — Deepfake phishing, silent exfiltration, no encryption, no early alerts

    Key defenses: Phishing-resistant MFA (FIDO2/passkeys) · Privileged Access Management · EDR/XDR with behavioral rules · Immutable/air-gapped backups (3-2-1-1-0 rule) · Network microsegmentation · Zero Trust Network Access · Aggressive patching prioritized by the CISA KEV catalog · Rapid EDR auto-quarantine on encryption indicators

    📎 Resources & Further Reading

    🔗 CISA StopRansomware Guide — https://www.cisa.gov/stopransomware 🔗 CISA Known Exploited Vulnerabilities (KEV) Catalog — https://www.cisa.gov/known-exploited-vulnerabilities-catalog 🔗 Verizon 2025 Data Breach Investigations Report — https://www.verizon.com/business/resources/reports/dbir/ 🔗 Ransomware Trends 2026 (Huntress) — https://www.huntress.com/ransomware-guide/ransomware-trends 🔗 Ransomware Statistics & Facts 2026 (TechTarget) — https://www.techtarget.com/searchsecurity/feature/Ransomware-trends-statistics-and-facts 🔗 Top 10 RaaS Operations 2026 (Cyber Sierra) — https://cybersierra.co/blog/top-ransomware-operations-2026/ 🔗 10 New Ransomware Groups of 2025 (Cyble) — https://cyble.com/knowledge-hub/10-new-ransomware-groups-of-2025-threat-trend-2026/

    Más Menos
    13 m
Todavía no hay opiniones