Cybersecurity Growth

One Click, One Rogue Agent: Agent Forger, the EY Help Desk Breach & How to Work Black Hat/DEF CON
Shawn Valle and Garrett Gross return on Cybersecurity Growth to discuss three topics: Agent Forger, where a crafted phishing link to a ChatGPT URL could silently deploy an attacker-controlled AI agent that inherits a user’s enterprise integrations (email, calendar, cloud storage) and enables data exfiltration and persistence, prompting leaders to inventory AI agents and their authorized access; an Ernst & Young breach tied to Shiny Hunters, where a help desk/ITSM platform exposed sensitive client tax data, highlighting how ticketing systems can become “shadow data lakes” and the need to reassess third-party risk and data handling; and guidance for security leaders attending Hacker Summer Camp (BSides LV, Black Hat, DEF CON), including planning meetups, defining ROI, doing post-conference briefings, and basic OPSEC like avoiding open Wi‑Fi and clearing remembered networks.
00:00 Cold Open & Welcome
02:00 Topic 1 — AgentForger
08:40 Topic 2 — EY Breach
17:27 Topic 3 — Hacker Summer Camp
40:37 Rapid Takeaways & Close
-----------------------------------------------------------------------------------
🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services
🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webca...
👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/
👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/
--------------------------------------------------------------------------------
CYBERSECURITY GROWTH SOCIALS
Website: https://cybersecuritygrowth.com
TikTok: https://www.tiktok.com/@cybersecgrowth
Facebook: https://www.facebook.com/100066411043800/
LinkedIn: https://www.linkedin.com/company/cybersecurity-growth
OUR BRAND NEW CHANNEL!!! SPARTAN VALLEY TECH https://www.youtube.com/channel/UCOLz3swLS_C74RdtpMStORA
--------------------------------------------------------------------------------
SHAWN'S MUSIC SOCIALS
Website: https://musicbysv.com/
Spartan Valley (Shawn's artist site): https://spartanvalley.band/
Octavate (Shawn's other music project): https://www.octavate.band/
Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu
Instagram: https://www.instagram.com/musicbysv_
https://www.instagram.com/spartanvalleysv/
https://www.instagram.com/octavate.band/
TikTok: https://www.tiktok.com/@musicbysv_
https://www.tiktok.com/@octavate
Facebook: https://www.facebook.com/ShawnValleMusic
https://www.facebook.com/SpartanValley
LinkedIn: https://www.linkedin.com/in/musicbysv/
X: https://x.com/SpartanValleySV
https://x.com/MusicBySV
YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg
https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg
https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg

Patch now, govern faster. This week Shawn Valle and Garrett Gross break down three stories every security leader needs on their radar: the SharePoint zero-days under active attack (and CISA's 72-hour patch mandate), the Craneware breach that put 2,000 hospitals in the blast radius of a single vendor, and Gartner's warning that AI agents are hitting production 8x faster than governance can keep up — with $234B at risk.
Cybersecurity Growth is a show for aspiring and existing cybersecurity leaders, hosted by Shawn Valle and Garrett Gross.
⏱️ CHAPTERS 0:00 Cold open + welcome 2:30 A word from Cybersecurity Growth 3:30 SharePoint zero-days: CISA says patch in 3 days 11:00 Craneware breach: one vendor, 2,000 hospitals of blast radius 18:30 Gartner: AI agents outpacing governance 8-to-1, $234B at risk 26:00 Rapid takeaways you can use Monday morning
🔗 STORIES WE COVERED
CISA urges immediate SharePoint patching: https://www.securityweek.com/cisa-urges-immediate-patching-of-exploited-sharepoint-vulnerabilities/
CISA SharePoint hardening alert: https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations
Craneware breach (TechCrunch): https://techcrunch.com/2026/07/20/hackers-stole-significant-amount-of-data-from-tech-firm-relied-on-by-thousands-of-us-hospitals-and-pharmacies/
Gartner: agentic AI puts $234B at risk (CIO): https://www.cio.com/article/4192242/agentic-ai-puts-234b-in-enterprise-saas-spending-at-risk-gartner-says.html
Gartner on tiered AI agent governance: https://www.gartner.com/en/newsroom/press-releases/2026-05-26-gartner-says-applying-uniform-governance-across-ai-agents-will-lead-to-enterprise-ai-agent-failure

🎓 LEVEL UP YOUR LEADERSHIP The Cybersecurity Growth platform is live — self-paced courses like "The First 100 Days of a CISO," program-building templates, and a community of global cyber leaders. Courses count toward CPEs (CISSP and more). Free trials at https://CybersecurityGrowth.com
📬 CONNECT
Subscribe on YouTube + hit the bell
Listen on your favorite podcast app
Shorts on TikTok
Live every other week on Twitch + YouTube

New episodes every 2 weeks. Thanks for growing with us.
#Cybersecurity #CISO #Leadership #AISecurity #SharePoint #ThirdPartyRisk #AIGovernance #CyberLeadership
SHOW NOTES
Patch Now, Govern Faster
SharePoint under fire (3:30). Four SharePoint CVEs are being actively exploited, including an unauthenticated RCE, and CISA gave federal agencies just 3 days to patch. Attackers are chaining bugs to steal IIS machine keys and persist — meaning patching alone won't evict them; key rotation is required. We debate the real leadership call: emergency weekend change window vs. normal change control, and whether on-prem SharePoint should exist in your environment at all in 2026.
The vendor blast radius problem (11:00). Craneware — billing software behind ~2,000 US hospitals and ~10,000 clinics and pharmacies — confirmed attackers exfiltrated a significant volume of data. Same week, Hugging Face disclosed a malicious-dataset attack that stole credentials off its infrastructure. Two supply-chain intrusions in one news cycle is a pattern. We dig into what a real vendor-breach playbook looks like, and how much disclosure — and how fast — you should demand from critical vendors.
The AI agent governance gap (18:30). Gartner says AI agents are entering production 7–8x faster than orgs are building governance, with $234B in enterprise software spend at risk by 2030 and 40%+ of agentic AI projects predicted to be canceled by 2027. Their contrarian take: uniform governance across all agents guarantees failure — tier it by autonomy and risk. The real question is organizational, not technical: who owns agent identity and authorization at your company?
Monday-morning takeaways (26:00). Ask your team: do we run on-prem SharePoint anywhere, and which critical vendors have breach-notification SLAs in their contracts? Then start an AI agent inventory — even a spreadsheet of what agents exist, what they can touch, and who approved them puts you ahead of most orgs.
Hosted by Shawn Valle (Founder & Chief Strategist, Cybersecurity Growth) and Garrett Gross. Learn more at https://CybersecurityGrowth.com

From IC to Leader 🎙
Leadership in cybersecurity isn’t just about a title — although sometimes the title forces the issue. Whether you’re an IC, a manager, or a director, there’s a real shift that has to happen when you move from doing security to leading security.
In this episode, Garrett and Shawn dig into the core differences, including the transition from:
SecOps worker → SecOps leader
AppSec worker → AppSec leader
GRC worker → GRC leader
Manager → Executive leader (VP, CISO, SVP)

We talk about what really changes:
Doing it yourself → delegating effectively
Delivering results → setting strategy and holding teams accountable
Celebrating your own wins → celebrating your team’s wins
Being the technical expert → translating security into executive language (revenue, growth, customer trust)

If you’re thinking about what the next step looks like in your career — or you’re already in a role where leadership is expected — this conversation is for you.
Show timeline:
00:00 ...coming up
00:20 introduction & agenda
02:30 progressing in career
03:55 core differences between an IC and a leader
05:30 doing the work or delegating
07:20 you don't have to be a people manager
08:55 when people management isn't right for you
11:40 transitioning to people manger
14:50 is people management a calling?
17:50 delegating and celebrating
20:40 delivering key results and managing strategic objectives
22:50 climbing the corporate ladder
24:10 the real job of the c-level team, including the CISO
33:50 final thoughts and wrap-up
37:44 b-roll and bloopers
Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts
Live on members.cybersecuritygrowth.com bi-weekly, Fridays at 2:30 PM ET, 11:30 AM PT, 6:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services
🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webca...
👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/
👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/
--------------------------------------------------------------------------------
CYBERSECURITY GROWTH SOCIALS
Website: https://cybersecuritygrowth.com
TikTok: https://www.tiktok.com/@cybersecgrowth
Facebook: https://www.facebook.com/100066411043800/
LinkedIn: https://www.linkedin.com/company/cybersecurity-growth
--------------------------------------------------------------------------------
SHAWN'S MUSIC SOCIALS
Website: https://musicbysv.com/
Spartan Valley (Shawn's artist site): https://spartanvalley.band/
Octavate (Shawn's other music project): https://www.octavate.band/
Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu
Instagram: https://www.instagram.com/musicbysv_
https://www.instagram.com/spartanvalleysv/
https://www.instagram.com/octavate.band/
TikTok: https://www.tiktok.com/@musicbysv_
https://www.tiktok.com/@octavate
Facebook: https://www.facebook.com/ShawnValleMusic
https://www.facebook.com/SpartanValley
LinkedIn: https://www.linkedin.com/in/musicbysv/
X: https://x.com/SpartanValleySV
https://x.com/MusicBySV
YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg
https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg
https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg

Welcome to Cybersecurity Growth.
A show for aspiring and existing cybersecurity leaders.
00:00 ...coming up
00:45 introduction & agenda
01:36 sponsorship - Cybersecurity Growth Membership E-Learning & Community
03:15 hot topic - Cybersecurity Jobs: What the Hell Is Going On?
03:36 470K U.S. openings
04:46 Global shortfall of ~3–4 million cybersecurity jobs
10:20 Reddit discussions
12:26 Misaligned candidate expectations
17:34 Outsourcing & offshoring
19:10 AI! AI! AI! AI! AI! AI!
28:00 Talent supply
31:20 Heading for a recession?
38:53 Actionable Advice & Strategies
43:18 sponsorship - Cybersecurity Growth Merch Store
43:46 That’s a Wrap
Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts
Live on members.cybersecuritygrowth.com bi-weekly, Fridays at 2:30 PM ET, 11:30 AM PT, 6:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services
🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webca...
👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/
👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/
--------------------------------------------------------------------------------
CYBERSECURITY GROWTH SOCIALS
Website: https://cybersecuritygrowth.com
TikTok: https://www.tiktok.com/@cybersecgrowth
Facebook: https://www.facebook.com/100066411043800/
LinkedIn: https://www.linkedin.com/company/cybersecurity-growth
--------------------------------------------------------------------------------
SHAWN'S MUSIC SOCIALS
Website: https://musicbysv.com/
Spartan Valley (Shawn's artist site): https://spartanvalley.band/
Octavate (Shawn's other music project): https://www.octavate.band/
Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu
Instagram: https://www.instagram.com/musicbysv_
https://www.instagram.com/spartanvalleysv/
https://www.instagram.com/octavate.band/
TikTok: https://www.tiktok.com/@musicbysv_
https://www.tiktok.com/@octavate
Facebook: https://www.facebook.com/ShawnValleMusic
https://www.facebook.com/SpartanValley
LinkedIn: https://www.linkedin.com/in/musicbysv/
X: https://x.com/SpartanValleySV
https://x.com/MusicBySV
YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg
https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg
https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.
Insights, Trends & Straight Talk from the Expo Floor & Events around town.
00:00 ...coming up
00:22 introduction & agenda
03:03 who are you wearing?
06:28 sponsorship - Cybersecurity Growth Membership E-Learning & Community
08:08 hot topic - RSA Conference 2025 Recap
08:50 The history, what it is, etc
10:45 Innovator Sandbox
14:00 Hot Themes & Industry Buzz
14:20 AI Everywhere
19:13 Sessions & Keynotes
21:50 Parties & Events
22:43 Booth Culture & Vendor Standouts
27:37 sponsorship - Cybersecurity Growth Merch Store
28:41 Recap
32:25 Upcoming Shows
33:29 That’s a Wrap
Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts
Live on members.cybersecuritygrowth.com bi-weekly, Fridays at 2:30 PM ET, 11:30 AM PT, 6:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services
🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webca...
👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/
👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/
--------------------------------------------------------------------------------
CYBERSECURITY GROWTH SOCIALS
Website: https://cybersecuritygrowth.com
Tik Tok: https://www.tiktok.com/@cybersecgrowth
Facebook: https://www.facebook.com/100066411043800/
Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS
Website: https://musicbysv.com/
Spartan Valley (Shawn's artist site): https://spartanvalley.band/
Octavate (Shawn's other music project): https://www.octavate.band/
Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu
Instagram: https://www.instagram.com/musicbysv_
https://www.instagram.com/spartanvalleysv/
https://www.instagram.com/octavate.band/
Tik Tok: https://www.tiktok.com/@musicbysv_
https://www.tiktok.com/@octavate
Facebook: https://www.facebook.com/ShawnValleMusic
https://www.facebook.com/SpartanValley
Linkedin: https://www.linkedin.com/in/musicbysv/
Twitter: https://x.com/SpartanValleySV
https://x.com/MusicBySV
YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg
https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg
https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg