Show Notes
In late 2025, the Everest ransomware group allegedly targeted Under Armour, leading to a massive data leak involving 72 million unique email addresses. Security platforms like Have I Been Pwned have indexed the stolen data, which reportedly includes sensitive details such as names, birthdates, and physical addresses. While the company has denied that its core systems or financial data were compromised, legal pressure is mounting through class action lawsuits regarding their security protocols. Parallel research into Compromised Credential Checking (C3) services suggests new ways to protect users from credential tweaking attacks following such leaks. This academic study proposes a system called Might I Get Pwned, which identifies passwords similar to those found in breaches while maintaining user privacy. Experts recommend that affected individuals monitor their accounts and update any reused passwords to mitigate the risk of targeted phishing.
More from Decoded: The Cybersecurity Podcast
This podcast details the release and capabilities of GLM-5.3, an open-weights coding model developed by Z.ai that achieves significant performance gains exclusively through post-training optimization. Built on the slimereinforcement learning framework, the model demonstrates dramatic advancements in handling complex, long-horizon programming tasks and autonomous software engineering benchmarks. Additionally, the scaling process unlocked emergent cyber capabilities, enabling the model to successfully discover numerous real-world security vulnerabilities across extensive open-source codebases. The developers also introduced specialized evaluation platforms like Z.ai Code Bench to measure real-world user experiences and mitigate public dataset contamination. Finally, the documentation outlines required API parameter adjustments, subscription structures, and deployment details while noting that the model weights will be made publicly available within two weeks.
These sources examine the emergence of agentic AI, which consists of autonomous systems capable of reasoning and executing complex workflows without constant human oversight. Research highlights a critical governance crisis known as agent sprawl, where the rapid proliferation of unmanaged AI tools leads to redundant costs and security vulnerabilities. To address this, experts propose the Agentic AI Governance Maturity Model (AAGMM), a framework designed to help organizations move from disorganized, ad-hoc deployments to optimized, self-improving systems. Leading technology firms are already shifting toward an Agent-as-a-Service (AaaS) business model, emphasizing outcome-based pricing over traditional software subscriptions. Real-world implementations, such as Cisco’s MyAgent rollout to 90,000 employees, demonstrate how internal orchestration layers can coordinate specialized sub-agents while maintaining strict safety guardrails. Ultimately, the literature suggests that successful adoption requires a strategic move toward centralized control and formal oversight to turn technological potential into measurable business value.
Technology Risk Management Fundamentals by Edward Henriquez is a comprehensive educational guide designed to bridge the gap between technical conditions and business outcomes. The text outlines a structured curriculum that moves from foundational risk concepts and governance to specialized areas like cybersecurity, cloud computing, and artificial intelligence. Henriquez emphasizes a practical workflow where practitioners learn to identify, assess, and treat risks while maintaining clear accountabilityand evidence-based reporting. By focusing on business service mapping and control effectiveness, the book teaches readers how to translate technical vulnerabilities into informed executive decisions. The ultimate objective is to provide a repeatable framework that ensures technology risks are visible, understood, and aligned with an organization’s risk appetite.
The provided podcast outlines a comprehensive educational resource titled "Cyber Security Fundamentals Handwritten Notes," which serves as a guide for learners moving from basic to advanced security concepts. This extensive manual covers forty diverse chapters, ranging from networking and cryptography to cloud security and incident response. A significant portion of the material details the structured ethical hacking process, emphasizing the necessity of legal authorization and professional conduct. Each phase of an authorized attack is explored, including reconnaissance, enumeration, scanning, exploitation, and privilege escalation. The text also highlights the importance of maintaining persistence and final reporting to provide organizations with actionable remediation strategies. Ultimately, these notes aim to prepare students for professional certifications and industry careers through a blend of theoretical knowledge and practical lab simulations.
The NIST AI Risk Management Framework Playbook serves as a comprehensive guide for organizations seeking to develop and deploy trustworthy artificial intelligence. It organizes suggested actions into four primary functions: Govern, Map, Measure, and Manage. By establishing a strong risk-aware culture, organizations can better identify potential biases, legal liabilities, and societal impacts throughout an AI system's life cycle. The document emphasizes transparent documentation, diverse team oversight, and the importance of continuous monitoring to address performance drift or system failures. Ultimately, the playbook provides a voluntary yet structured approach to prioritizing risks, managing third-party dependencies, and ensuring safe decommissioning processes.