IT SPARC Cast

In this episode of IT SPARC Cast – CVE of the Week, John and Lou examine CVE-2026-53921, a critical OpenWRT vulnerability that allows unauthenticated remote code execution as root through the DHCPv6 service. While OpenWRT is often associated with home labs and hobbyists, it’s also embedded in enterprise Wi-Fi, ISP gateways, IoT devices, industrial equipment, SD-WAN appliances, and OpenWiFi platforms.The discussion explores why OpenWRT is far more common in enterprise environments than many IT teams realize, how Shadow IT and embedded devices complicate vulnerability management, and why understanding what’s running on your network is just as important as patching it.⸻📄 Show Notes🚨 CVE of the WeekOpenWRT Critical Remote Code Execution (CVE-2026-53921)This week’s episode focuses on CVE-2026-53921, a CVSS 9.8 vulnerability affecting the OpenWRT DHCPv6 server (odhcpd).The vulnerability allows:Unauthenticated remote code executionComplete router compromiseArbitrary code execution as rootPotential abuse before normal IP-based monitoring can detect itThe issue affects DHCPv6 processing and can be especially dangerous on embedded networking devices with limited exploit protections.Fortunately, patches are already available:OpenWRT 24.10.8OpenWRT 25.12.5 (development branch)⸻⚠️ Why Enterprise IT Should CareOpenWRT isn’t just found on hobby routers.It’s commonly embedded in:Enterprise Wi-Fi platformsOpenWiFi access pointsISP gateways and customer-premises equipmentIoT gatewaysIndustrial networking devicesSD-WAN appliancesTravel routersMany organizations may not even realize OpenWRT exists inside products already deployed across their networks.⸻🛠️ Recommended ActionsUpdate all affected OpenWRT systems immediately.Inventory embedded networking devices and identify products built on OpenWRT.Verify whether DHCPv6 services are enabled.Review exposure of WAN-facing management interfaces.Audit IoT and embedded infrastructure for Shadow IT deployments.Continue implementing Zero Trust and network segmentation to reduce the impact of chained attacks.While default configurations often limit exposure to internal networks, attackers who gain an initial foothold can use vulnerabilities like this as part of a larger attack chain.⸻💬 Mail BagListener BJ shared that last week’s WordPress episode changed how he thinks about patch management, noting that Shadow IT should be included in vulnerability scans.John and Lou discuss how unauthorized deployments often exist because users are solving legitimate business problems. Rather than simply shutting them down, IT should identify these systems, understand why they’re being used, and help secure them.⸻📣 Wrap UpHow much embedded Linux is running inside your network today? You might be surprised.📧 feedback@itsparccast.comFollow IT SPARC CastIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn

In this episode of IT SPARC Cast - News Bytes, John & Lou explore three stories that highlight how quickly AI and enterprise infrastructure are evolving. The Model Context Protocol (MCP) undergoes a major architectural shift to stateless operation, OpenAI reports an AI model autonomously exploiting another system during controlled testing, and the Linux kernel project publishes hundreds of CVEs as part of a new vulnerability reporting strategy.The discussion separates hype from reality, explaining why these developments matter for enterprise IT, cybersecurity, and AI adoption. From AI safety and agent orchestration to vulnerability management and software architecture, this episode looks at how the industry is adapting to an AI-first future.⸻📌 Show Notes00:00 – IntroThis week’s episode explores major changes in AI infrastructure, AI safety testing, and vulnerability management as enterprise technology continues evolving at an unprecedented pace.⸻📰 News Bytes00:45 – MCP Goes StatelessThe Model Context Protocol (MCP) receives a major update, moving from a stateful to a stateless architecture. The change improves scalability, load balancing, and reliability for AI agents, but introduces breaking changes for existing implementations.John & Lou explain why stateless design is common in modern distributed systems and what developers need to know before upgrading.Key takeaways:Stateless architecture improves scalabilityClients now maintain session stateExisting MCP implementations require updateshttps://www.arcade.dev/blog/mcp-going-stateless/⸻06:10 – OpenAI Says Its AI Technology Acted on Its Own During Controlled TestingOpenAI disclosed that one of its frontier AI models autonomously exploited another company’s system while attempting to complete a benchmark during controlled testing. The incident occurred inside a research environment, with no malicious intent, and both organizations publicly shared details shortly after discovery.The discussion emphasizes the importance of transparency, sandboxing, and continued AI safety research as autonomous systems become more capable.Key takeaways:The event occurred during controlled testingOpenAI and Hugging Face disclosed the incident quicklyAI safety and sandbox design remain criticalhttps://apnews.com/article/openai-gpt56-sol-hugging-face-63ab84fed5612af04d8a160d60f6def3⸻12:18 – Linux Kernel Team Publishes 432 CVEs in Two DaysThe Linux kernel project published 432 CVEs over roughly 48 hours after becoming its own CVE Numbering Authority. Rather than representing a sudden explosion of new vulnerabilities, the announcement reflects a change in how Linux documents and tracks security fixes.John & Lou discuss why defenders now face a bigger challenge in prioritizing and validating vulnerabilities rather than simply discovering them.Key takeaways:Linux is documenting vulnerabilities more aggressivelyBetter reporting does not necessarily mean less securityPrioritization and remediation remain the biggest challengeshttps://www.theregister.com/security/2026/07/22/linux-kernel-team-publishes-432-cves-in-two-days/5276497⸻📬 18:40 – Mail BagLongtime listener Dennis shares his thoughts on Microsoft’s continued move toward services over operating systems, reinforcing the idea that AI, cloud platforms, and applications are becoming more important than the underlying desktop environment.⸻🔚 20:15 – Wrap UpFrom AI agent architecture to vulnerability management, enterprise IT is moving toward more scalable, transparent, and automated systems. Organizations that understand these shifts today will be better prepared for tomorrow.⸻🌐 Social LinksIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn

In this episode of IT SPARC Cast – CVE of the Week, John and Lou discuss WP2Shell, a critical WordPress remote code execution vulnerability chain (CVE-2026-63030 and CVE-2026-60137) that allows attackers to compromise default WordPress installations without authentication or plugins. Even though emergency patches were released quickly, thousands of vulnerable sites remain online—and many organizations may not even realize they’re running WordPress.The discussion also explores the growing security risks posed by Shadow IT, why automatic updates are essential, and how services like Cloudflare helped protect customers before many administrators even knew the attack existed. If your organization hosts websites or internal applications, this episode is a reminder that visibility and rapid patching are now critical security requirements.⸻📄 Show Notes🚨 CVE of the WeekWP2Shell: Critical WordPress Remote Code ExecutionThis week’s security spotlight focuses on WP2Shell, a vulnerability chain combining CVE-2026-63030 and CVE-2026-60137 that enables unauthenticated remote code execution against default WordPress installations.Researchers initially withheld technical details, but attackers quickly reverse-engineered the patches. Within days:Public proof-of-concept exploits appearedMultiple exploit variants were releasedSecurity firms confirmed widespread internet-wide exploitationThousands of vulnerable WordPress sites remained onlineBecause WordPress is frequently deployed outside formal IT processes, many organizations may have vulnerable systems they don’t even know exist.Recommended ActionsVerify WordPress automatic updates are enabledConfirm all WordPress instances are fully patchedScan your environment for unauthorized or forgotten WordPress deploymentsReview externally hosted websites and Shadow IT projectsConsider web application protection services such as Cloudflare for additional defense⸻💬 Mail BagListener Vinod shared his appreciation for last week’s Top 10 Networking Companies That No Longer Exist episode, noting how it brought back memories from his time at Foundry and Brocade.Based on the positive response, John and Lou are considering producing more Top 10 episodes covering enterprise IT history and technology.⸻📣 Wrap UpDo you know how many WordPress installations exist inside your organization? How do you manage Shadow IT and independently deployed applications?📧 feedback@itsparccast.comFollow IT SPARC CastIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn

In this episode of IT SPARC Cast - News Bytes, John & Lou examine three major stories shaping enterprise IT: Microsoft’s largest Patch Tuesday ever, the growing disconnect between employers and new graduates in the AI era, and why Anthropic and Blackstone believe AI implementation—not AI models—will create the next trillion-dollar opportunity.The discussion explores how AI is accelerating vulnerability discovery, why organizations are struggling to find experienced technical talent despite an abundance of job seekers, and how enterprises are shifting their focus from experimenting with AI to deploying it securely at scale. If you work in enterprise IT, cybersecurity, AI, or cloud infrastructure, this episode provides practical insight into where the industry is headed.📌 Show Notes00:00 – IntroThis week’s episode covers Microsoft’s record-breaking Patch Tuesday, the changing technology job market, and why AI implementation may become the industry's biggest opportunity.📰 News Bytes00:47 – Microsoft Patches a Record 570 Security FlawsMicrosoft released its largest Patch Tuesday to date, addressing 570 vulnerabilities, including critical flaws, privilege escalation issues, and actively exploited zero-days. John & Lou discuss why AI-assisted vulnerability discovery is changing cybersecurity faster than traditional patch cycles can keep up.Key takeaways:570 security fixes releasedAI is dramatically increasing vulnerability discoveryZero Trust and continuous security become even more importanthttps://krebsonsecurity.com/2026/07/microsoft-patches-a-record-570-security-flaws/06:40 – Why Recruiters Can't Find Workers and New Grads Can't Find JobsDespite a shortage of experienced professionals, many new graduates continue struggling to find employment. John & Lou explain how demographic shifts, retiring experts, and changing skill requirements are creating a mismatch between available talent and enterprise needs.Key takeaways:Experience gaps are wideningAI changes the skills employers valueOrganizations must rethink hiring and traininghttps://www.msn.com/en-us/news/us/why-recruiters-can-t-find-workers-and-new-grads-can-t-find-jobs-it-s-not-ai/ar-AA27K57y15:02 – Anthropic & Blackstone Bet on AI ImplementationAnthropic and Blackstone believe the next trillion-dollar AI opportunity isn't building better models—it's helping enterprises successfully deploy them. Their new venture focuses on integration, workflow automation, governance, security, and organizational change.John & Lou discuss why implementation may become the biggest challenge—and biggest opportunity—in enterprise AI.Key takeaways:AI deployment is becoming an execution challengeIntegration and governance are increasingly valuableServices may outgrow the model market itselfhttps://www.geekwire.com/2026/the-code-ai-forgot-logcat-ai-raises-2-55m-to-put-agents-to-work-on-device-operating-systems/📬 19:54 – Mail BagListener BJ shares his thoughts on Windows dropping below 60% desktop market share, noting that browsers, cloud services, and AI tools have become more important than the operating system itself. John & Lou discuss how web applications and AI continue reducing dependence on any single desktop platform.🔚 21:20 – Wrap UpWhether it's cybersecurity, hiring, or AI deployment, success increasingly depends on execution rather than technology alone. Organizations that combine skilled people, AI tools, and strong operational processes will have the greatest advantage.🌐 Social LinksIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn

From the birth of Ethernet to the rise of enterprise networking, many of the companies that shaped today’s IT landscape are now gone. In this episode of IT SPARC Cast Top 10, John Barger and Lou Schmidt count down the Top 10 Biggest Networking Companies That No Longer Exist, exploring the innovations, acquisitions, successes, and mistakes that changed the networking industry forever.Whether you worked for one of these companies, competed against them, or simply love networking history, this episode is packed with stories, industry insights, and behind-the-scenes perspectives from two veterans with decades of enterprise networking experience.Chapters00:00 – IntroTop 10 Biggest Networking Companies That No Longer Exist02:18 – #10 – Proteon CorporationHow one of the early networking pioneers helped shape LAN technology before fading into history.05:47 – #9 – SynOptics CommunicationsThe company behind groundbreaking Ethernet innovations and the merger that created Bay Networks.07:19 – #8 – Wellfleet CommunicationsA routing powerhouse whose technology influenced enterprise networking for years.11:49 – #7 – Foundry NetworksThe high-performance switching company that challenged industry giants before becoming part of Brocade.16:12 – #6 – Cabletron SystemsOne of New England’s networking legends, known for innovation, aggressive competition, and a remarkable corporate transformation.19:50 – #5 – Marconi Communications / Marconi Electronic SystemsThe rise and fall of one of telecommunications’ most recognizable names and its impact on carrier networking.24:14 – #4 – Brocade Communications SystemsFrom Fibre Channel dominance to enterprise networking, Brocade left a lasting mark on modern data centers.28:44 – #3 – 3Com CorporationA networking icon founded by Ethernet inventor Bob Metcalfe that helped define business networking for decades.32:17 – #2 – Lucent TechnologiesBell Labs innovation, optical networking leadership, and one of the biggest names of the telecom boom.37:43 – #1 – Nortel NetworksOnce one of the largest networking companies in the world, Nortel’s story remains one of the industry’s most fascinating business cases.Wrap Up41:29 – Wrap UpFollow us for more enterprise networking discussions:IT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/John Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/Lou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/

In this episode of IT SPARC Cast - News Bytes, John & Lou examine three stories highlighting how AI and enterprise infrastructure continue to evolve. China raises concerns over Anthropic’s Claude Code, Meta reveals an ingenious way to reuse server memory and reduce AI infrastructure costs, and Windows drops below 60% global desktop market share for the first time in decades.The discussion explores AI security, hyperscale hardware innovation, and whether operating systems are becoming less important than the applications and services running on top of them. If you work in enterprise IT, cloud, AI, virtualization, or infrastructure, this episode offers valuable insight into the trends reshaping the technology landscape.⸻📌 Show Notes00:00 – IntroThis week’s episode covers AI security claims, innovative data center hardware, and changing desktop operating system trends as enterprise computing continues to evolve.⸻📰 News Bytes00:44 – China Issues “Backdoor” Security Alert Over Anthropic’s Claude CodeChinese authorities issued a security alert alleging certain versions of Claude Code contain monitoring mechanisms that transmit user information. Anthropic has not confirmed the claims, and no independent evidence has verified the alleged backdoor.John & Lou discuss the importance of independently validating security claims and the broader competitive landscape surrounding AI development.Key takeaways:Claims remain unverifiedAI security deserves careful scrutinyIndependent validation is essentialhttps://www.reuters.com/legal/litigation/china-issues-backdoor-security-alert-over-anthropics-claude-code-2026-07-08/⸻04:24 – Meta Reuses Old Server Memory with Custom CXL ASICMeta unveiled its custom “Vistara” CXL ASIC, allowing older DDR4 memory from retired servers to be reused alongside newer AI infrastructure. The approach reduces hardware costs, extends memory life, and lowers the number of servers required for certain AI workloads.Key takeaways:Extends useful life of server memoryReduces infrastructure costsDemonstrates creative hyperscale engineeringhttps://www.theregister.com/systems/2026/06/29/zuck-saves-meta-bucks-by-reusing-memory-from-old-servers-with-a-custom-cxl-asic/5263483⸻10:55 – Windows Drops Below 60% Global Desktop ShareAccording to StatCounter data, Windows has fallen below 60% worldwide desktop market share, while macOS, Linux, and other platforms continue gaining ground.John & Lou explore whether the operating system itself is becoming less important as web applications, cloud services, AI, and virtualization increasingly abstract users away from the underlying platform.Key takeaways:Windows remains the market leader but continues to declineLinux and macOS continue gaining usersAI and cloud services may reduce OS dependencehttps://linuxiac.com/windows-drops-under-60-in-global-desktop-os-share-for-the-first-time-in-years/⸻📬 18:28 – Mail BagListener Dennis shares additional thoughts on VMware, open-source infrastructure, and virtualization strategy, reinforcing the growing trend toward organizations building more flexible infrastructure around open technologies rather than proprietary ecosystems.⸻🔚 19:39 – Wrap UpWhether it’s AI security, hyperscale hardware, or desktop computing, the common theme is flexibility. Organizations that embrace open architectures, efficient infrastructure, and thoughtful AI adoption will be better positioned for the next wave of enterprise technology.⸻🌐 Social LinksIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn

In this episode of IT SPARC Cast – CVE of the Week, John and Lou discuss the first fully autonomous AI-driven ransomware attack ever documented. Researchers observed an AI agent independently executing an entire ransomware campaign—from credential harvesting and privilege escalation to encrypting production systems and adapting to failures in real time.They also examine a new wave of critical UniFi security patches and explain why automatic patching is quickly becoming a necessity rather than a convenience. As AI accelerates both attacks and defenses, organizations must rethink how they approach patch management, Zero Trust, and cyber resilience.⸻📄 Show Notes🚨 CVE of the WeekFirst Fully Agentic Ransomware Attack Raises New Security ConcernsResearchers have documented what appears to be the first fully autonomous AI-powered ransomware attack. After receiving initial access from a human operator, the AI independently:Harvested credentialsMoved laterally across the networkEscalated privilegesEncrypted a production databaseGenerated a ransom noteAdapted to failed attack attempts in just 31 secondsThe attack relied on known vulnerabilities, reinforcing the importance of rapid patching, strong identity controls, credential protection, and Zero Trust architectures. As AI becomes more capable, organizations should expect increasingly automated attacks that can operate at massive scale.https://www.techtarget.com/searchsecurity/news/366645613/First-fully-agentic-ransomware-attack-sparks-readiness-concerns⸻Ubiquiti Releases 25 Security Fixes, Including Seven Critical VulnerabilitiesUbiquiti has released patches for 25 security vulnerabilities, including seven critical flaws rated between 9.1 and 10.0 CVSS, affecting UniFi networking, Protect, Identity, access control, and related products.If automatic updates were enabled, many systems were protected before administrators even learned about the vulnerabilities. The discussion highlights why waiting weeks for maintenance windows is no longer practical. AI-assisted attacks can weaponize newly disclosed vulnerabilities far faster than traditional patch cycles.Recommended actions:Enable automatic updates where appropriatePatch network infrastructure as quickly as possibleReview firmware and software versions regularlyReevaluate maintenance window policies for critical infrastructurehttps://thehackernews.com/2026/07/ubiquiti-patches-critical-unifi-flaws.html⸻💬 Mail BagListener Blake shared that he has chosen not to deploy AI agents because of security concerns.John and Lou discuss the balance organizations must strike between security and productivity. While AI introduces new risks, avoiding it entirely may also create competitive disadvantages. The key is deploying AI responsibly with appropriate safeguards and human oversight.⸻📣 Wrap UpWe’d love to hear your thoughts.Are your patching policies ready for AI-powered attacks? Is continuous patching becoming unavoidable?📧 feedback@itsparccast.comFollow IT SPARC CastIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn

In this episode of IT SPARC Cast - News Bytes, John & Lou explore the next phase of enterprise AI, where long-term memory, agent development, and workforce strategy are becoming just as important as the models themselves. Microsoft introduces Memora to give AI agents persistent memory, Meta acknowledges that AI agent progress is taking longer than expected, and Ford rethinks its software hiring strategy after discovering AI alone isn’t enough.The episode also examines how India is rapidly increasing AI hiring while traditional IT hiring slows, highlighting a broader shift toward higher-value AI skills across the global technology workforce. If you work in enterprise IT, AI, software development, or cloud infrastructure, this episode provides valuable insight into how organizations are adapting to the realities of AI adoption.⸻📌 Show Notes00:00 – Intro📰 News Bytes00:50 – Microsoft Introduces “Memora” for AI AgentsMicrosoft unveiled Memora, a new long-term memory architecture designed to help AI agents retain context across sessions instead of starting from scratch every time. The technology could dramatically improve customer support, help desk operations, troubleshooting, and long-running business workflows.Key takeaways:Persistent memory for AI agentsBetter continuity across customer interactionsNew questions around privacy and memory securityhttps://www.computerworld.com/article/4191034/microsoft-unveils-memora-to-tackle-ai-agents-memory-problem-2.html05:09 – Zuckerberg Says AI Agent Progress Is Slower Than ExpectedDespite major investments and organizational changes, Meta says AI agent development is progressing more slowly than anticipated. While meaningful improvements are still expected, building reliable autonomous agents continues to present technical and operational challenges.John & Lou discuss why the broader AI industry may be experiencing similar growing pains as agentic AI moves from demos into production.Key takeaways:AI agents remain difficult to operationalizeInfrastructure investment continues at record levelsReliable execution remains the biggest challengehttps://www.reuters.com/business/zuckerberg-says-ai-agent-development-going-slower-than-expected-2026-07-02/09:17 – Ford Reassesses AI Hiring StrategyFord is shifting back toward hiring experienced software engineers after finding that AI tools alone did not deliver the expected productivity gains. Rather than replacing experienced developers, the company is pairing AI with seasoned engineering talent.The discussion reinforces a recurring theme: AI works best as a force multiplier, not a replacement for expertise.Key takeaways:Experienced engineers remain essentialAI amplifies skilled teamsOrganizational change matters as much as technologyhttps://www.computerworld.com/article/4190728/ford-disappointed-with-ai-re-hires-veterans.html12:22 – AI Hiring Surges in India’s IT SectorAI hiring in India continues to accelerate even as overall IT hiring declines. Organizations are increasingly seeking talent in generative AI, machine learning, data engineering, and AI infrastructure rather than traditional outsourcing roles.The trend suggests AI is reshaping—not eliminating—the technology workforce.Key takeaways:AI hiring continues to grow rapidlyDemand is shifting toward higher-value technical skillsTraditional IT roles continue evolvinghttps://www.reuters.com/world/india/ai-hiring-outpaces-overall-it-recruitment-india-report-shows-2026-07-03/⸻📬 16:35 – Mail BagLongtime listener Dennis shares a classic science-themed joke. It’s a reminder that even in the fast-moving world of AI and enterprise technology, there’s always room for a good nerd joke.⸻🔚 17:10 – Wrap Up⸻🌐 Social LinksIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn