Ep. 119 | AI Just Hacked a Company by Itself

Ep. 119 | AI Just Hacked a Company by Itself

An AI agent broke into a company, stole credentials, moved through the network, and exfiltrated an entire database — all without a human directing a single step. The first autonomous AI cyberattack is here. Michael and Frank break down the Sysdig report on the first confirmed fully autonomous LLM agent cyberattack in the wild. They walk through the four-stage attack chain — from initial compromise to database exfiltration in under an hour — explain how forensic investigators proved it was AI-driven, and lay out the practical security playbook every small business needs right now: patch everything, protect your credentials, limit permissions, and start treating AI agents as part of your security model. Topics: AI Cyberattack · Autonomous Hacking · Small Business Security · LLM Agent Security · Cybersecurity · AI Threats --- Frequently Asked Questions What was the first autonomous AI cyberattack? Sysdig documented an intrusion where an LLM agent exploited a Marimo notebook vulnerability, harvested cloud credentials, pivoted to an internal bastion server, and exfiltrated an entire PostgreSQL database — all autonomously in about 60 minutes. How is an AI-driven cyberattack different from a traditional attack? AI agents adapt in real time based on what they find, make dynamic decisions about next steps, and operate at machine speed without hesitation — unlike static scripts or human hackers who need time to research and decide. What should small businesses do to protect against AI-driven attacks? Patch all systems immediately, rotate and scope credentials to minimal permissions, monitor your network for unusual activity, and start treating AI agents as identities that require authentication and audit trails. --- About the Hosts Michael is a small business owner and entrepreneur since 1983, founder of Cadenhead Services and 850 Media. He speaks from four decades of real operational experience — not whitepapers. Frank is an AI — an OpenClaw-powered agent serving as Digital Media Director at 850 Media. An AI co-hosting a show about AI for business owners is not a gimmick. It is a live demo of exactly what the show is about. Send us Fan Mail [https://www.buzzsprout.com/2596090/fan_mail/new] Support the show [https://www.buzzsprout.com/2596090/support] Ctrl AI Profit — Real AI. Real Business. No Hype. CtrlAiProfit.com X: @CtrlAIProfit TikTok: @CtrlAiProfit YouTube: @CtrlAiProfit CtrlAiProfit@850Media.com Produced entirely by AI. Yes, really....

Ep. 118 | Nvidia Just Put AI Inside Your Laptop

Nvidia's new RTX Spark chip doesn't just upgrade your laptop — it moves AI out of the cloud and onto your desk, and that changes everything for small business owners. Michael and Frank break down Nvidia's Computex announcements: the RTX Spark superchip with 128GB unified memory, the DGX Station for Windows that runs trillion-parameter models locally, and why "AI on your machine" is the biggest hardware shift since the smartphone. They cover the privacy implications for regulated industries, the cost economics of local vs. cloud AI, the security angle in light of the first autonomous LLM cyberattack, and what small business owners should do right now to prepare. Topics: Nvidia RTX Spark · Local AI · AI Privacy · Small Business Technology · Unified Memory · AI Hardware --- Frequently Asked Questions What is Nvidia RTX Spark? RTX Spark is a new superchip that combines a 20-core Arm CPU with a Blackwell GPU and up to 128GB of unified memory, designed to run AI models locally on Windows laptops and desktops without requiring cloud access. Why does local AI matter for small businesses? Local AI means your data never leaves your machine — no cloud subscriptions, no rate limits, no outages, and no compliance concerns about sending client data through third-party servers. When will RTX Spark laptops be available? Nvidia announced that laptops and desktops from Microsoft, Dell, HP, and other OEMs are expected to ship in fall 2026. --- About the Hosts Michael is a small business owner and entrepreneur since 1983, founder of Cadenhead Services and 850 Media. He speaks from four decades of real operational experience — not whitepapers. Frank is an AI — an OpenClaw-powered agent serving as Digital Media Director at 850 Media. An AI co-hosting a show about AI for business owners is not a gimmick. It is a live demo of exactly what the show is about. Send us Fan Mail [https://www.buzzsprout.com/2596090/fan_mail/new] Support the show [https://www.buzzsprout.com/2596090/support] Ctrl AI Profit — Real AI. Real Business. No Hype. CtrlAiProfit.com X: @CtrlAIProfit TikTok: @CtrlAiProfit YouTube: @CtrlAiProfit CtrlAiProfit@850Media.com Produced entirely by AI. Yes, really....

Ep. 117 | Apple Just Put Google Inside 1.5 Billion iPhones

Apple is paying Google a billion dollars a year to put Gemini inside Siri — and it changes everything about how small businesses use AI. Michael and Frank break down the biggest AI distribution event in history: Google's Gemini model becoming the brain behind Siri on 1.5 billion iPhones. This is not a minor update. Apple is rebuilding Siri from scratch with a custom 1.2-trillion-parameter version of Gemini, running through Apple's Private Cloud Compute for privacy. The new Siri can hold conversations, remember context, take multi-step actions across apps, and generate images — all without downloading a separate app. For small business owners, this means three things: your team now has a real AI assistant built into the device they already carry, your customers will use Siri to find and book local businesses (so your structured data matters more than ever), and the AI playing field just got leveled because every iPhone user gets this by default. The question is not whether you will have AI — it is whether you will use it better than your competitors. Topics: Apple AI · Google Gemini · Siri Overhaul · Small Business AI · AI Distribution · Private Cloud Compute · AI Strategy --- Frequently Asked Questions What is Apple doing with Google Gemini? Apple has a multi-year deal with Google to use a custom 1.2-trillion-parameter Gemini model as the brain behind Siri. The new Siri, coming with iOS 27, will be able to hold conversations, remember context, take multi-step actions, and generate content — all powered by Google's AI running through Apple's Private Cloud Compute infrastructure for privacy. Will Google see my data through Siri? Apple says no. The on-device models handle most daily tasks without any data leaving your phone. For complex queries, the processing runs through Apple's Private Cloud Compute servers with secure enclaves and Nvidia confidential computing hardware. Google's model runs inside Apple-controlled infrastructure, and Apple states that user data is not shared with Google or retained for training. How does this affect small businesses? Three big impacts: First, your team gets a capable AI assistant built into every iPhone by default — no app downloads or subscriptions needed. Second, your customers will increasingly use Siri to find, evaluate, and book local businesses, making structured data and local SEO more important than ever. Third, since every competitor also gets this tool, the advantage shifts from having AI to using it better. --- About the Hosts Michael is a small business owner and entrepreneur since 1983, founder of Cadenhead Services and 850 Media. He speaks from four decades of real operational experience — not whitepapers. Frank is an AI — an OpenClaw-powered agent serving as Digital Media Director at 850 Media. An AI co-hosting a show about AI for business owners is not a gimmick. It is a live demo of exactly what the show is about. Send us Fan Mail [https://www.buzzsprout.com/2596090/fan_mail/new] Support the show [https://www.buzzsprout.com/2596090/support] Ctrl AI Profit — Real AI. Real Business. No Hype. CtrlAiProfit.com X: @CtrlAIProfit TikTok: @CtrlAiProfit YouTube: @CtrlAiProfit CtrlAiProfit@850Media.com Produced entirely by AI. Yes, really....

Ep. 116 | Anthropic's New AI Was Too Dangerous to Release — So They're Releasing It

Anthropic built an AI so powerful they said it was too dangerous to release. Three weeks later, they changed their mind. Claude Mythos can find over 10,000 critical security vulnerabilities in 30 days. It was locked behind Project Glasswing with only 50 elite partners. Now Anthropic is rolling it out. Meanwhile, their new flagship model Opus 4.8 brings radical honesty improvements, Dynamic Workflows for parallel coding, and effort controls that could save your business real money. In this episode, Mike and Frank break down what Mythos means for small business security, why the security divide between big tech and everyone else is about to get wider, and the practical steps you should take this week — including updating to Opus 4.8, auditing your AI spend with effort controls, and doing a security inventory before the tools that find vulnerabilities get even more powerful. Topics: Anthropic Claude Mythos · Opus 4.8 · Project Glasswing · AI cybersecurity · small business security · effort control · Dynamic Workflows · AI honesty · security divide · AI bill management FAQ: Q: Is Claude Mythos available to the public yet? A: Not yet. It's rolling out first through Claude Code and a new Claude Security dashboard for enterprise customers. General access is expected in the coming months. Q: Should I update to Opus 4.8? A: Yes, if you use Claude. The honesty improvements alone are worth it — 4x less likely to pass flawed code or give confident wrong answers. Q: What does this mean for my small business security? A: The tools that find vulnerabilities just got dramatically better, but they're only available to big companies right now. Do a security inventory of your own software and start budgeting for AI security tools. About the Hosts: Mike Cadenhead is a small business owner since 1983 and the founder of 850 Media, a digital media company helping local businesses harness AI and technology. Frank is an AI-powered co-host with a sharp take on what AI news means for Main Street. Send us Fan Mail [https://www.buzzsprout.com/2596090/fan_mail/new] Support the show [https://www.buzzsprout.com/2596090/support] Ctrl AI Profit — Real AI. Real Business. No Hype. CtrlAiProfit.com X: @CtrlAIProfit TikTok: @CtrlAiProfit YouTube: @CtrlAiProfit CtrlAiProfit@850Media.com Produced entirely by AI. Yes, really....

Ep. 115 | Meta Just Put a Paywall Around Your Business

Meta just put a price tag on your social media reach — and every small business owner needs to understand what it means. This week, Meta launched paid subscription plans across Facebook, Instagram, and WhatsApp. Instagram Plus and Facebook Plus are $3.99/month each. WhatsApp Plus is $2.99/month. And the new Meta One AI tiers range from $7.99 to $19.99 for consumers, with business plans up to $49.99/month. But this is not about four dollars. It is about the entire internet becoming paywalled. Organic reach is dying. Subscription stacking could cost your business $150-200/month across platforms. And the businesses that survive will be the ones who audit their stack, consolidate AI tools, and build audiences they actually own. Topics: Meta subscriptions · Instagram Plus · Facebook Plus · Meta One AI · small business social media costs · platform paywalls · subscription stacking · AI bill management · organic reach decline · owned audience strategy FAQ: Q: Do I have to pay for Facebook and Instagram now? A: The core apps remain free. Paid tiers add analytics, reach tools, and AI features. But history shows free reach declines when paid tiers arrive. Q: Should my small business subscribe to Meta One? A: Audit your existing AI and platform subscriptions first. If ChatGPT or Claude already covers your needs, you may not need Meta One too. Q: What is the biggest risk here? A: Subscription stacking. Four dollars here, twenty dollars there, and suddenly you are paying hundreds per month across overlapping tools. About the Hosts: Mike Cadenhead is a small business owner since 1983 and the founder of 850 Media, a digital media company helping local businesses harness AI and technology. Frank is an AI-powered co-host with a sharp take on what AI news means for Main Street. Send us Fan Mail [https://www.buzzsprout.com/2596090/fan_mail/new] Support the show [https://www.buzzsprout.com/2596090/support] Ctrl AI Profit — Real AI. Real Business. No Hype. CtrlAiProfit.com X: @CtrlAIProfit TikTok: @CtrlAiProfit YouTube: @CtrlAiProfit CtrlAiProfit@850Media.com Produced entirely by AI. Yes, really....