Stolen Logins, AI Agents, and $450K Regulatory Fines
About this episode
This episode discusses the intersection of cybersecurity threats, regulatory compliance, and the role of AI in business risk management.
What inside your business can act before a human verifies it? This week, we dive into the convergence of three major tech shifts: the modular infostealer economy, costly regulatory enforcement after ransomware, and the mainstream arrival of computer-using AI agents like Gemini 3.5 Flash. If you lead tech or cybersecurity for an SMB, this episode provides a localized execution plan to bridge the gap between risk awareness and actual protection. We cover: Cyber Threats: Why treating browsers, endpoints, and admin sessions as a single identity risk surface is critical to stopping credential theft. Compliance: How to build an evidence trail that satisfies regulators (like HHS OCR) before a ransomware incident occurs. AI Governance: Setting up "advise, draft, and act" lanes for AI to prevent unverified execution. Listen in for the 3 steps you need to take this week to secure your unverified workflows. This is a public episode. If you'd like to discuss this with other subscribers or get access to bonus episodes, visit substack.cpf-coaching.com/subscribe
More episodes of SMB Tech & Cyber Newsletter | CPF Coaching
- This Week's SMB Risk Signals: Router Hygiene, Genetic Data, and Agentic AI
- Can Your Security Tools, Cameras, and Agents Prove Their Work?
- SMB Cyber Risk: Securing the Control Plane and Agentic AI
- AI, Identity, and Breaking Into Cyber: CEO Jasson Casey’s Blueprint for Success
- The Glass House: Why 2026 is the Year We Must Audit Our "Agents" and "Avatars"
- 3 Urgent Cyber Threats Costing SMBs Millions (2025 Update)
Explore listener stats, chart rankings, contacts and more on the SMB Tech & Cyber Newsletter | CPF Coaching podcast page.