Tech Updates

Andres Sarmiento
  • 0.0（0）
  • 技術ニュース

Tech Updates is your quick-hit source for the latest in enterprise technology—all in 10 minutes or less. From cybersecurity and network connectivity to data center innovation, cloud advancements, and the rise of AI, we cover the updates that matter. Each episode delivers vendor announcements, industry trends, and agnostic insights to keep you informed and ahead of the curve. Whether you’re a tech professional or just tech-curious, this podcast is designed to fit into your busy schedule and fuel your knowledge.

  1. 6日前

    Wi-Fi 7 Explained — MLO, 6 GHz & the AI-Ready Branch Hype Check (2026)

    Wi-Fi 7 promises 46 gigabits per second. Your access point is plugged into a 1-gig switch port. Guess which number wins. The radio is real and genuinely good — the rest needs a closer look. Let's separate the upgrade from the hype. What you'll hear: • The big three — Multi-Link Operation (MLO), 320 MHz channels, 4K-QAM — and why MLO is the only truly new idea • The latency truth — 46 Gbps is a lab fantasy; real-world is 6–15 Gbps/AP (Cisco lab: +47%). The win is reliability, not raw speed • The 6 GHz reality — the US opened it in 2020 (not 2026), the EU only opened half, so full-width Wi-Fi 7 is a US/UK/Korea story • Adoption — ~37% of enterprise APs shipped in Q1 2026, and Wi-Fi 8 is already teased for ~2028 • The "AI-ready branch" — a great dashboard with an approval button, not a self-driving network • What Wi-Fi 7 does NOT fix — backhaul, cabling cost, client density, device fleet • Network+ N10-009 — bands, channels, and the generation map Sources: Wi-Fi Alliance · Cisco (MLO lab) · Dell'Oro Group · FCC 6 GHz orders · CompTIA Network+ N10-009. — Andrés Sarmiento #WiFi7 #networking #NetworkPlus #MLO #6GHz #TechUpdates

    Wi-Fi 7 Explained — MLO, 6 GHz & the AI-Ready Branch Hype Check (2026)

  2. 7月14日

    Securing AI Agents — MCP, Agentjacking & the New Attack Surface (2026)

    In June 2026, researchers took over AI coding agents — Claude Code, Cursor, Codex — with no phishing, no malware, and a public credential developers paste into their own apps. It worked 85% of the time. The vendor's response? "Technically not defensible. We're not fixing it." Welcome to the new attack surface nobody secured. What you'll hear: • What MCP (Model Context Protocol) is — "USB-C for AI" — and why it became an unreviewed internet-facing doorway • The hygiene problem — Knostic verified exposed MCP servers; 100% had no authentication; 8,000+ reported by early 2026 • Agentjacking — how a public Sentry DSN let attackers poison the logs an agent reads (85% success, 2,300+ orgs) • The pattern — prompt injection (OWASP's #1 AI risk), indirect injection, and last year's Black Hat zero-click CRM exfiltration • The readiness gap — 83% of orgs deploying agentic AI, only 29% ready to secure it • Four moves to secure agents — least privilege, sandboxing + human-in-the-loop, MCP gateways, agent creds as non-human identities Sources: Tenet Security (Agentjacking) · Knostic · Cisco State of AI Security 2026 · OWASP Top 10 for LLMs · Zenity Labs (Black Hat 2025). — Andrés Sarmiento #AIsecurity #MCP #agentjacking #promptinjection #cybersecurity #TechUpdates

    Securing AI Agents — MCP, Agentjacking & the New Attack Surface (2026)

  3. 7月13日

    Passkeys Explained — How They Kill Phishing, Vishing & Password Theft

    Every breach in our last episode died the same way it started — with a password. So this week: the fix that's finally winning. On World Passkey Day this May, the FIDO Alliance counted 5 billion passkeys in use. The password isn't dead yet — but we finally have the thing that kills it. What you'll hear: • How a passkey works — public/private keypair, private key never leaves your device, origin-bound signatures • Why passkeys defeat the 2026 attack playbook — phishing, credential stuffing, MFA fatigue, and the help-desk reset scam (CISA advisory AA23-320A names FIDO as the fix) • The numbers — 98% vs 32% sign-in success, ~1M passkeys/day, Gartner's 2027 call • Synced vs device-bound passkeys — and why device-bound = NIST AAL3 • The honest half — account recovery, device loss, and the real 2026 frontier • Network+/Security+ relevance — phishing-resistant MFA, by the book Sources: FIDO Alliance (World Passkey Day 2026) · Microsoft Security · CISA/FBI advisory AA23-320A · NIST SP 800-63B. — Andrés Sarmiento #passkeys #cybersecurity #passwordless #FIDO2 #SecurityPlus #TechUpdates

    Passkeys Explained — How They Kill Phishing, Vishing & Password Theft

  4. 6月24日

    The Worst Breaches of 2026 (So Far) — And the 5 Mistakes Behind Them

    Six months into 2026 and the breach scoreboard is brutal: 22 million Aflac records, 30 million students locked out during finals, the FBI's own surveillance system breached, four banks knocked offline in an afternoon. But almost none of it was clever. No genius zero-days. Just a phone call, a stolen token, and an open door. This is the 2026 Breach Hall of Shame — we name names, correct the hype, and show you the five failures connecting all of it. What you'll hear: • The vishing wave — Aflac, Carnival, Canvas, Charter — how Scattered Spider & ShinyHunters just called the help desk • Two corrections: OnlyFans was NOT breached (recycled old data), and Charter was ~4.9M, not the 40M claimed • The nation-state lane — Salt Typhoon in the FBI's network, Russia-linked sabotage in Europe, Volt Typhoon pre-positioned in US utilities • The supply-chain wave — poisoned dev tools stealing API keys, OAuth grants, and CI/CD secrets • The common thread: social engineering, missing MFA, non-human identities, exposed services, flat networks • A 4-move Monday playbook to defend the new perimeter Sources: TechCrunch "worst hacks of 2026 so far" (June 7) · CISA/NSA/FBI assessments · public breach disclosures. Nation-state attributions are linked/suspected, not court-proven. — Andrés Sarmiento #cybersecurity #databreach #infosec #SecurityPlus #identitysecurity #TechUpdates

    The Worst Breaches of 2026 (So Far) — And the 5 Mistakes Behind Them

  5. 6月17日

    Post-Quantum Cryptography Explained — Harvest Now, Decrypt Later (2026)

    Right now, somewhere, an adversary is copying your encrypted VPN traffic. They can't read it today. They're saving it — for the day a quantum computer can crack it open. It's called "harvest now, decrypt later," and in 2026 it stopped being a thought experiment. This episode breaks down the post-quantum migration for people who actually run networks. What you'll hear: • The three NIST post-quantum standards (ML-KEM for key exchange, ML-DSA + SLH-DSA for signatures), finalized August 2024 • What "harvest now, decrypt later" means and why 5+ year data is already exposed • The expert-odds jump — 34% to 49% in one year — that a code-breaking quantum computer arrives within a decade • Cisco's real ship dates: Quantum Ready Assessments (July), IOS XE PQC for SD-WAN (August), default quantum-safe secure boot, majority of portfolio by December • Where it maps to Network+: IPsec VPNs, TLS handshakes, PKI, certificates, SD-WAN • Hype vs. the honest take — why migrating is worth it even if "Q-Day" never comes • A 4-step Monday playbook Sources: NIST FIPS 203/204/205 · Global Risk Institute Quantum Threat Timeline Report 2025 · Google quantum research (March 2026) · Cisco Live 2026 · NSA CNSA 2.0 / White House NSM-10 / EU PQC roadmap. — Andrés Sarmiento #postquantum #cryptography #cybersecurity #networking #NetworkPlus #TechUpdates

    Post-Quantum Cryptography Explained — Harvest Now, Decrypt Later (2026)

  6. 6月10日

    Cisco Live 2026 Explained — Cloud Control, AgenticOps, Post-Mythos Security

    450%. That's how much more network traffic an AI agent generates than a human doing the same task. Cisco measured it, put it on the big screen at Cisco Live 2026, and then rebuilt its entire company around it. Last week in Las Vegas, Cisco made its biggest platform bet in two decades: every product — Catalyst, Meraki, Nexus, security, collaboration, Splunk — managed from one place, Cisco Cloud Control. This episode tears down what's real, what's vapor, and what it means for your network. What you'll hear: • Cloud Control — what it actually unifies, the AI runbooks, autonomous remediation, and the Codex natural-language agent builder • Cisco IQ, the sleeper hit — 2,036 customers onboarded vs. 800 expected, 88% support-case routing, the end of the 35-minute data-collection phase • The math: 450% more traffic per agent · AI traffic tripling in 3 years · tokenomics ($200/week per AI employee → $400M/year at 40,000) • Post-Mythos security — Live Protect rebootless mitigation, Nexus 9K smart switches with L4 firewalls in the data plane, the agentic SOC discarding 92% of alerts • Vendor English, translated — AgenticOps, "trillions of agents," and which claims are shipping vs. decorative • The Monday playbook — four things to actually do this week The products are real. The math is scary. The dashboard promise? Ask us again at Cisco Live 2027. Sources: Cisco Live 2026 keynotes (Robbins, Patel, Centoni — Las Vegas, June 2026) · Cisco Newsroom keynote TL;DR · SiliconANGLE five takeaways · Computer Weekly post-Mythos analysis · Anthropic Claude Mythos / Project Glasswing disclosures (April 2026). — Andrés Sarmiento #CiscoLive #networking #AgenticOps #CloudControl #cybersecurity #TechUpdates

    Cisco Live 2026 Explained — Cloud Control, AgenticOps, Post-Mythos Security

  7. 5月21日

    Non-Human Identity Security Explained — The 45:1 NHI Crisis in 2026

    45 to 1. In the average enterprise, for every human user there are 45 machine identities. Every API key. Every service account. Every agent token. Every secret in every config file. Your IAM platform probably tracks about 2% of them. That's where the breaches are coming from now — Snowflake, GitHub PATs, Azure IMDS. This episode unpacks the NHI crisis, the vendor landscape, and the three control patterns that actually work this quarter. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 📚 WHAT YOU'LL LEARN ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ✅ What counts as a non-human identity (it's more than service accounts) ✅ The 45:1 ratio — and why it's 200:1 in agentic shops ✅ Why "service account" is doing too much work (meet Dave) ✅ How Snowflake, GitHub PAT theft, and Azure IMDS all trace to NHIs ✅ Why your PAM solution doesn't cover any of this ✅ The NHI vendor landscape — Astrix, Oasis, Clutch, Teleport, Natoma ✅ The 3 control patterns that work (inventory, rotate, scope down) ✅ Why agents make this 10× worse by 2027 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ⏱ CHAPTERS ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 0:00 Intro — the 45:1 ratio 0:49 What is an NHI? (it's not just service accounts) 2:05 Dave is your problem 2:48 The breach file — Snowflake, GitHub PAT, Azure IMDS 4:20 Why PAM doesn't cover this 5:24 The NHI vendor landscape (still a 2-year-old category) 6:30 The 3 control patterns that work 7:46 Agents are NHIs — the 500:1 future ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🎯 THE MEMORABLE LINES ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ • "A service account was created by Dave in 2017, has god-mode permissions, no rotation policy, is used by 42 systems nobody audited, and Dave left in 2020." • "Snowflake did what Snowflake was told to do. The instructions were 'trust this credential.' Guess what didn't have MFA." • "We are about to go from 45-to-1 to 500-to-1." • "Stop hardcoding secrets in your Git repos. Every scanner finds them in the first five minutes." ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🛠 THE 3 FREE CONTROL PATTERNS ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ • Inventory — you can't secure what you can't see • Rotate — replace long-lived creds with short-lived alternatives • Scope down — every NHI has more perms than it needs ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 📡 TECH UPDATES · THE PODCAST ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🔗 techupdates.it-learn.io Previous → EP20 · Typhoon Season, One Year Later End of the EP17–21 arc. Thanks for listening. #TechUpdates #NHI #NonHumanIdentity #IAM #Snowflake #GitHub #PAM #Astrix #Oasis #Teleport #IdentitySecurity #CyberSecurity

    Non-Human Identity Security Explained — The 45:1 NHI Crisis in 2026

  8. 5月20日

    Special · S04: The OT/ICS Defender — Why Volt Typhoon Should Worry You

    $140K. When you mess up, the lights go out for real. Final episode of TechUpdates Special Series. The most consequential security job almost nobody talks about — defending the systems that keep the country running. Power grids. Water utilities. Petrochemical plants. Pipelines. What you'll hear: • What OT/ICS defenders actually do — segmentation, SCADA patching, PLC defense, plant-engineer coordination • Comp reality — why OT pays 40–60% less than cloud security at the same companies, and the "purpose tax" • The real stakes: Ukraine 2015 grid attack · Triton 2017 (Saudi Arabia) · Oldsmar 2021 · Aliquippa 2023 · Volt Typhoon pre-positioning across U.S. critical infrastructure • A real day — substations at 6 AM, vendors that still ship Windows 7 SCADA, plant managers explaining why your last predecessor retired in 2015 • The two paths in — plant engineer to security, or IT security to OT — and why CISSP doesn't help but GICSP does • LinkedIn's "critical infrastructure defender" vs. the actual day (30% travel to plants, 20% talking plant engineers into caring) When you mess up here, there's a body count. When you do it right, nobody notices the lights stayed on. That's the whole job description. And it matters more every year as adversaries pre-position inside the operational networks of utilities they intend to disrupt on a date of their choosing. Sources: CISA joint advisory on Volt Typhoon (early 2024) · Ukrainian power grid attack (Dec 2015) · Triton/TRISIS analysis (Saudi Arabia, 2017) · Oldsmar water treatment incident (Florida, 2021) · Aliquippa Municipal Water Authority compromise (Pennsylvania, 2023, attributed to CyberAv3ngers). That wraps the Special Series. Pick the role that fits you. The field is wide. — Andrés Sarmiento #OTSecurity #ICSSecurity #CriticalInfrastructure #VoltTyphoon #cybersecurity #TechUpdates

    Special · S04: The OT/ICS Defender — Why Volt Typhoon Should Worry You
すべて見る（31）

番組について

Tech Updates is your quick-hit source for the latest in enterprise technology—all in 10 minutes or less. From cybersecurity and network connectivity to data center innovation, cloud advancements, and the rise of AI, we cover the updates that matter. Each episode delivers vendor announcements, industry trends, and agnostic insights to keep you informed and ahead of the curve. Whether you’re a tech professional or just tech-curious, this podcast is designed to fit into your busy schedule and fuel your knowledge.

情報

  • クリエイター
    Andres Sarmiento
  • 配信期間
    25年 - 26年
  • エピソード
    31
  • 制限指定
    不適切な内容を含まない
  • Copyright
    © Andres Sarmiento
  • 番組のWebサイト
    Tech Updates