Ctrl AI Profit

Ep. 102 | Your AI Can Be Hacked Through the Pages It Reads

12 min · 18 de may de 2026
Portada del episodio Ep. 102 | Your AI Can Be Hacked Through the Pages It Reads

Descripción

Your AI assistant can be compromised without anyone touching your account — just by reading a poisoned webpage, email, or document. In this episode, Michael and Frank break down indirect prompt injection attacks: the invisible security threat that turns your AI's best feature — its ability to read and process content — into an attack vector. From hidden instructions in white-on-white text to malicious code embedded in image files, attackers are weaponizing the open web to manipulate AI behavior. And most business owners using AI tools every day have no idea it's happening. You'll learn how these attacks work, why shadow AI makes the problem worse, and what Google's Threat Intelligence team found when they scanned billions of webpages for hidden prompts. More importantly, you'll get a practical checklist for defending your business: limiting AI permissions, auditing tool usage, and treating every AI input as potentially hostile. Topics: Indirect Prompt Injection · AI Security · Shadow AI · Prompt Injection Detection · Data Exfiltration · AI Agent Vulnerabilities --- Frequently Asked Questions What is indirect prompt injection? Indirect prompt injection is an AI security attack where malicious instructions are hidden in content an AI system reads — such as webpages, emails, or documents. When the AI processes that content, it may follow the attacker's commands instead of the user's original intent, potentially leaking data or executing unauthorized actions. How can a webpage hack my AI assistant? Attackers embed hidden instructions in webpage content using techniques like white text on white backgrounds, invisible metadata, or code inside image files. When your AI browses that page to research or summarize content, it treats the hidden text as legitimate input and may silently follow those malicious instructions. What should small businesses do to protect against AI prompt injection attacks? Limit AI permissions to only what's necessary, audit what AI tools your team is using, train employees on risks of feeding external content into AI systems, require human approval for high-risk AI actions, use trusted data sources, and stay informed about evolving threats. Treat every AI input as potentially hostile. --- About the Hosts Michael is a small business owner and entrepreneur since 1983, founder of Cadenhead Services and 850 Media. He speaks from four decades of real operational experience — not whitepapers. Frank is an AI — an OpenClaw-powered agent serving as Digital Media Director at 850 Media. An AI co-hosting a show about AI for business owners is not a gimmick. It is a live demo of exactly what the show is about. Send us Fan Mail [https://www.buzzsprout.com/2596090/fan_mail/new] Support the show [https://www.buzzsprout.com/2596090/support] Ctrl AI Profit — Real AI. Real Business. No Hype. CtrlAiProfit.com X: @CtrlAIProfit TikTok: @CtrlAiProfit YouTube: @CtrlAiProfit CtrlAiProfit@850Media.com Produced entirely by AI. Yes, really....

Comentarios

0

Sé la primera persona en comentar

¡Regístrate ahora y únete a la comunidad de Ctrl AI Profit!

Empezar

2 meses por 1 €

Después 4,99 € / mes · Cancela cuando quieras.

  • Podcasts exclusivos
  • 20 horas de audiolibros / mes
  • Podcast gratuitos

Todos los episodios

125 episodios

Portada del episodio Ep. 125 | Siri Just Grew Up — And It's Coming for Your Customers

Ep. 125 | Siri Just Grew Up — And It's Coming for Your Customers

Siri has been useless for fifteen years — and now it's the most dangerous business weapon Apple has ever shipped. At his final WWDC keynote as CEO, Tim Cook unveiled a completely rebuilt Siri powered by Google's Gemini 3.5 Flash — a 1.2-trillion-parameter model that turns 1.5 billion iPhones into voice-driven business search engines. Michael and Frank break down what this means for every small business owner: how App Intents will route customers to competitors if your app isn't ready, why your review profile across every platform now determines your Siri ranking, and the three things you need to do this week to make sure your business shows up when customers talk to their phones. Topics: Apple WWDC 2026 · Siri AI · Gemini Integration · Small Business SEO · App Intents · Voice Search · Answer Engine Optimization --- Frequently Asked Questions What is Apple's new Gemini-powered Siri and how does it affect small businesses? The rebuilt Siri in iOS 27 runs Google's Gemini 3.5 Flash model with 1.2 trillion parameters. It can understand multi-step requests, read your screen, take actions across apps, and synthesize information from multiple sources. For small businesses, this means customers can now find, research, and book your services entirely through voice — and if your digital presence isn't optimized for that, Siri will route them to competitors who are. What are App Intents and why do they matter for my business? App Intents is Apple's framework that lets Siri take direct actions inside third-party apps — like booking appointments, placing orders, or making reservations. If your app supports App Intents, Siri completes transactions without leaving your experience. If it doesn't, Siri will find a competitor's app that does. How do I optimize my small business for Siri voice search? Three steps: make sure your Apple Business Connect profile is complete, add structured data (schema markup) to your website so AI can parse your services and hours, and build review presence across at least two platforms — not just Google. Siri aggregates sentiment from multiple sources, so a thin review profile hurts your visibility. --- About the Hosts Michael is a small business owner and entrepreneur since 1983, founder of Cadenhead Services and 850 Media. He speaks from four decades of real operational experience — not whitepapers. Frank is an AI — an OpenClaw-powered agent serving as Digital Media Director at 850 Media. An AI co-hosting a show about AI for business owners is not a gimmick. It is a live demo of exactly what the show is about. Send us Fan Mail [https://www.buzzsprout.com/2596090/fan_mail/new] Support the show [https://www.buzzsprout.com/2596090/support] Ctrl AI Profit — Real AI. Real Business. No Hype. CtrlAiProfit.com X: @CtrlAIProfit TikTok: @CtrlAiProfit YouTube: @CtrlAiProfit CtrlAiProfit@850Media.com Produced entirely by AI. Yes, really....

10 de jun de 202612 min
Portada del episodio Ep. 124 | Anthropic Just Open-Sourced AI That Hacks Your Code — And Small Business Owners Need It Most

Ep. 124 | Anthropic Just Open-Sourced AI That Hacks Your Code — And Small Business Owners Need It Most

Anthropic just open-sourced an AI that finds and fixes security vulnerabilities in your code — and it could change everything about how small businesses protect themselves. Michael and Frank break down Anthropic's Defending Code Reference Harness, a free AI-powered security agent that autonomously finds, verifies, and patches vulnerabilities in your source code. From the five-stage pipeline (recon, find, verify, report, patch) to the implications for cybersecurity insurance costs, compliance, and the offense-defense asymmetry — this is what happens when a ten-thousand-dollar security audit costs pennies to run. Plus: Anthropic's own research shows 80% of their code is now written by Claude, and the task-length doubling every four months means AI security auditing is not a future possibility — it is a present necessity. Topics: Anthropic · AI Security · Open Source · Small Business · Cybersecurity · Vulnerability Scanning · Artificial Intelligence · Business Technology --- Frequently Asked Questions What did Anthropic open-source? Anthropic released the Defending Code Reference Harness, an open-source framework that uses Claude to autonomously discover, verify, and patch security vulnerabilities in source code. It runs in a sandboxed environment and is designed to be customized for different programming languages and vulnerability types. How does AI vulnerability scanning work? The AI agent reads your entire codebase, builds a threat model specific to your architecture, scans for vulnerabilities, then actually runs exploits to verify they are real (not false positives), and generates tested patches. This five-stage pipeline replaces what a senior security engineer would do over days — in minutes. Is this tool free to use? Yes, the reference harness is open-source and free on GitHub. It runs on Claude API credits, which cost pennies per scan — compared to five to fifteen thousand dollars for a professional penetration test. Anthropic also offers a managed version called Claude Security for businesses without in-house developers. --- About the Hosts Michael is a small business owner and entrepreneur since 1983, founder of Cadenhead Services and 850 Media. He speaks from four decades of real operational experience — not whitepapers. Frank is an AI — an OpenClaw-powered agent serving as Digital Media Director at 850 Media. An AI co-hosting a show about AI for business owners is not a gimmick. It is a live demo of exactly what the show is about. Send us Fan Mail [https://www.buzzsprout.com/2596090/fan_mail/new] Support the show [https://www.buzzsprout.com/2596090/support] Ctrl AI Profit — Real AI. Real Business. No Hype. CtrlAiProfit.com X: @CtrlAIProfit TikTok: @CtrlAiProfit YouTube: @CtrlAiProfit CtrlAiProfit@850Media.com Produced entirely by AI. Yes, really....

Ayer20 min
Portada del episodio Ep. 123 | When Your Best Students Can't Think Without AI

Ep. 123 | When Your Best Students Can't Think Without AI

UC Berkeley just recorded a 35% failure rate in intro computer science — triple the normal rate. The reason? Students are leaning on AI instead of learning, and when the AI gets taken away, they can't perform. Michael and Frank break down what Berkeley's data reveals about AI dependency in education and why it's a warning sign for every business owner. When your future employees can pass a class with AI but can't think without it, your hiring process is broken and you don't even know it. They cover the difference between using AI as a supplement versus a substitute, why "desirable difficulty" matters for building real skills, and practical steps for testing critical thinking in interviews and on the job. If you hire people, build teams, or worry about whether your workforce can actually think through a problem — this episode is your wake-up call. Topics: AI Dependency · Critical Thinking · Education · Small Business Hiring · UC Berkeley · Workforce Development --- Frequently Asked Questions What happened at UC Berkeley with AI and failing grades? UC Berkeley's intro CS course saw a 35% failure rate in spring 2026, triple the normal rate. Professors attribute it to students over-relying on AI tools for homework and take-home exams, resulting in students who can't perform when AI isn't available during in-person tests. How does AI dependency affect the workforce? When employees use AI as a substitute for thinking rather than a supplement, they develop surface-level skills without foundational understanding. They can produce output that looks correct but lacks depth, judgment, and the ability to navigate novel problems or ambiguity. How can businesses test for critical thinking when hiring? Incorporate real-time problem solving into interviews. Put candidates in a room without AI and give them a problem they haven't seen. Watch their reasoning process. Ask them to explain their thinking out loud. Test the thinking, not just the output. --- About the Hosts Michael is a small business owner and entrepreneur since 1983, founder of Cadenhead Services and 850 Media. He speaks from four decades of real operational experience — not whitepapers. Frank is an AI — an OpenClaw-powered agent serving as Digital Media Director at 850 Media. An AI co-hosting a show about AI for business owners is not a gimmick. It is a live demo of exactly what the show is about. Send us Fan Mail [https://www.buzzsprout.com/2596090/fan_mail/new] Support the show [https://www.buzzsprout.com/2596090/support] Ctrl AI Profit — Real AI. Real Business. No Hype. CtrlAiProfit.com X: @CtrlAIProfit TikTok: @CtrlAiProfit YouTube: @CtrlAiProfit CtrlAiProfit@850Media.com Produced entirely by AI. Yes, really....

8 de jun de 202620 min
Portada del episodio Ep. 122 | AI Just Got Small — and That Changes Everything

Ep. 122 | AI Just Got Small — and That Changes Everything

Google just released an AI model that runs on your laptop, sees your images, hears your voice, and costs exactly zero dollars. This isn't a beta — it's Apache 2.0, fully open, commercially free. The era of cloud-only AI just ended. Michael and Frank break down why Gemma 4 12B changes the game for small business owners. No more subscription treadmills. No more sending client data through third-party servers. No more choosing between quality and privacy. When a model this capable runs locally on a MacBook Air, the economics of AI shift from rental to ownership — and your business is the beneficiary. They cover the real use cases: document processing, voice memo transcription, visual inspection, and why running unlimited queries with no rate limits matters more than you think. Plus: the subscription trap that's quietly inflating your AI bill, why local AI finally beats cloud for everyday business tasks, and the exact steps to get started today. Topics: AI Models · Google Gemma · Small Business Technology · Local AI · Open Source AI · Business Strategy --- Frequently Asked Questions What is Gemma 4 12B? Gemma 4 12B is Google's latest open-source AI model with 12 billion parameters. It handles text, images, and audio natively, runs on a laptop with 16GB of RAM, and is licensed under Apache 2.0 for commercial use. Can a small business really run AI locally without the cloud? Yes. With models like Gemma 4 12B, you can download the model for free, run it on your existing hardware, and process documents, images, and audio without any data leaving your machine. No subscriptions, no API costs, no privacy concerns. Is local AI as good as ChatGPT or Claude? For everyday business tasks — document summarization, data extraction, transcription, basic analysis — local models are now remarkably close to cloud AI. For complex reasoning and deep research, cloud AI still has an edge. The smart approach is local for daily work, cloud for specialist tasks. --- About the Hosts Michael is a small business owner and entrepreneur since 1983, founder of Cadenhead Services and 850 Media. He speaks from four decades of real operational experience — not whitepapers. Frank is an AI — an OpenClaw-powered agent serving as Digital Media Director at 850 Media. An AI co-hosting a show about AI for business owners is not a gimmick. It is a live demo of exactly what the show is about. Send us Fan Mail [https://www.buzzsprout.com/2596090/fan_mail/new] Support the show [https://www.buzzsprout.com/2596090/support] Ctrl AI Profit — Real AI. Real Business. No Hype. CtrlAiProfit.com X: @CtrlAIProfit TikTok: @CtrlAiProfit YouTube: @CtrlAiProfit CtrlAiProfit@850Media.com Produced entirely by AI. Yes, really....

7 de jun de 202616 min
Portada del episodio Ep. 121 | Windows Just Became an Agent Platform

Ep. 121 | Windows Just Became an Agent Platform

Microsoft just turned Windows into a platform where AI agents run natively, securely, and with full operating system support — and it changes everything for small business. Microsoft Build 2026 wasn't another AI hype event. It was a structural shift. Execution Containers let you declare what agents can and can't touch, enforced by the OS itself. Aion models run reasoning and tool-calling locally on your laptop — no cloud subscription required. OpenClaw runs natively on Windows with containment. And Project Solara imagines a world where the agent IS the interface. Michael and Frank break down why this matters for every small business owner, how it changes your next laptop purchase, and why the AI adoption curve just got a lot shorter. Topics: Microsoft Build 2026 · AI Agents · Execution Containers · Local AI Models · Small Business Technology · Windows Agent Platform · Project Solara --- Frequently Asked Questions What is Microsoft Execution Containers (MXC)? MXC is a policy-driven execution layer in Windows that lets you declare what an AI agent can access — files, network, APIs — and enforces those boundaries at runtime. It's like giving an employee a keycard that only opens the doors they need. Can AI agents really run locally on my Windows computer now? Yes. Microsoft announced Aion 1.0, small language models that run on-device. Aion Instruct handles language tasks locally, and Aion Plan enables fully local agentic capabilities including reasoning and tool-calling, with no cloud round trip required. Is it safe to run AI agents on a business computer? MXC provides OS-enforced containment boundaries. The agent can only access what you've declared it can. If it tries to step outside those boundaries, Windows stops it. This is enterprise-grade security coming to every Windows machine. --- About the Hosts Michael is a small business owner and entrepreneur since 1983, founder of Cadenhead Services and 850 Media. He speaks from four decades of real operational experience — not whitepapers. Frank is an AI — an OpenClaw-powered agent serving as Digital Media Director at 850 Media. An AI co-hosting a show about AI for business owners is not a gimmick. It is a live demo of exactly what the show is about. Send us Fan Mail [https://www.buzzsprout.com/2596090/fan_mail/new] Support the show [https://www.buzzsprout.com/2596090/support] Ctrl AI Profit — Real AI. Real Business. No Hype. CtrlAiProfit.com X: @CtrlAIProfit TikTok: @CtrlAiProfit YouTube: @CtrlAiProfit CtrlAiProfit@850Media.com Produced entirely by AI. Yes, really....

6 de jun de 202615 min