Cybersecurity Threats, Microsoft Price Hikes, AI in Consulting, and Password Trends Explored

We start focusing on the resurgence of the state-sponsored cyber espionage group Volt Typhoon. This group has been targeting critical infrastructure, particularly outdated devices like Cisco and Netgear routers, and has successfully compromised a significant percentage of these devices in a short time frame. The episode highlights the vulnerabilities in the energy sector, where third-party breaches account for a substantial portion of incidents, emphasizing the need for improved vendor responsibility and proactive security measures.

Host Dave Sobel also covers the progress of the Secure by Design initiative led by CISA, which has seen over 100 companies commit to adopting secure development practices. This movement is gaining traction as organizations recognize the importance of reducing vulnerabilities in software. Additionally, the Transportation Security Administration has proposed new cybersecurity regulations aimed at protecting high-risk pipelines and railroad operators, mandating the establishment of cyber risk management programs and timely reporting of incidents.

The episode shifts focus to Microsoft, which is implementing a price hike on various services, including a 25% increase for Teams Phone and up to a 40% increase for Power BI. This move is part of Microsoft's strategy to align pricing across its services, reflecting the growing usage of premium features among enterprise customers. Sobel notes the significance of these changes in the context of the broader IT landscape, particularly as Windows 11 ISO media for ARM64 PCs becomes available, allowing for clean installations on compatible devices.

Finally, Sobel discusses the evolving role of IT consultancies, which are increasingly focusing on artificial intelligence, data governance, and platform integration as they prepare for 2025. The episode highlights the importance of clean and accessible data in leveraging AI technologies and the need for organizations to modernize their legacy systems. Sobel concludes with reflections on the ethical implications of AI in creative industries, citing a controversial AI-generated interview by a Polish radio station and the positive use of AI in restoring the voice of country music legend Randy Travis.

Four things to know today

00:00 Volt Typhoon Resurfaces with Advanced Attacks on Critical Infrastructure, Exploiting Legacy Routers

02:48 CISA and TSA Cybersecurity Efforts as Secure-by-Design and NIST Framework Gain Ground

06:14 Microsoft's Price Hike Targets Monthly Subscriptions and Premium Services, Teams Phone to Rise 25%

09:32 IT Consultancies Double Down on AI, Data, and Integration as Organizations Modernize for 2025

Supported by:  https://timezest.com/mspradio/

https://www.coreview.com/msp

All our Sponsors:   https://businessof.tech/sponsors/

Do you want the show on your podcast app or the written versions of the stories? Subscribe to the Business of Tech: https://www.businessof.tech/subscribe/

Looking for a link from the stories? The entire script of the show, with links to articles, are posted in each story on https://