IT SPARC Cast

This week on IT SPARC Cast – CVE of the Week, John and Lou cover three newly exploited vulnerabilities affecting Langflow, Apache Tomcat, and N-able N-central. While each vulnerability is serious on its own, the bigger story is how attackers are increasingly using AI to identify targets, automate reconnaissance, and accelerate attacks.The discussion also explores recent research showing threat actors using AI to prioritize targets, why network anomaly detection is becoming more important than ever, and why organizations can no longer afford to wait for monthly patch cycles. If you’re responsible for enterprise IT, this episode highlights why continuous patching and AI-assisted defense are quickly becoming necessities.⸻📄 Show Notes🚨 CVE of the WeekThis week we’re covering three newly exploited vulnerabilities that every enterprise IT team should know about.Langflow (CVE-2026-9198 | CVSS 9.8)A critical unauthenticated remote code execution vulnerability affecting default Langflow deployments. Particularly concerning because Langflow is widely used for building AI workflows and agent-based applications.Fixed in: Langflow 1.10.1⸻Apache Tomcat (CVE-2026-34486 | CVSS 7.5)A vulnerability affecting encrypted cluster communication in Apache Tomcat. Successful exploitation can expose sensitive cluster traffic and weaken security in highly available enterprise deployments.Patched in:Tomcat 11.0.21Tomcat 10.1.54Tomcat 9.0.117⸻N-able N-central (CVE-2026-18556 & CVE-2026-18577)An authentication bypass vulnerability followed by a second patch after the original fix proved incomplete. Both vulnerabilities are now considered actively exploited.⸻🤖 AI Is Changing the Threat LandscapeResearchers observed attackers using AI to help identify and prioritize targets before launching attacks.The takeaway isn’t simply that AI is being used—it’s that attackers are becoming faster and more efficient.John and Lou discuss why defenders must respond with:AI-assisted security toolsNetwork anomaly detectionContinuous monitoringFaster patch deploymentThe only practical way to keep pace with AI-assisted attacks is to use AI as part of your defense strategy.⸻🛠️ Recommended ActionsPatch Langflow, Tomcat, and N-central immediately.Inventory your environment for unauthorized Tomcat deployments.Enable continuous vulnerability monitoring.Deploy network anomaly detection where possible.Move toward continuous patching rather than monthly maintenance windows.Review AI security policies and detection capabilities.⸻💬 Mail BagListener BJ appreciated that last week’s episode focused on the enterprise impact of OpenWRT instead of treating it as simply another home router vulnerability.John and Lou discuss why many open-source technologies quietly power enterprise infrastructure—and why understanding those hidden dependencies is becoming increasingly important.⸻📣 Wrap UpHow is your organization preparing for AI-assisted cyberattacks? Is continuous patching part of your strategy?📧 feedback@itsparccast.comFollow IT SPARC CastIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn

In this episode of IT SPARC Cast – News Bytes, John & Lou tackle three stories shaping the future of enterprise IT. They discuss why AI isn’t killing SaaS—but it is forcing software vendors to deliver more value, how attackers are abusing hotel Wi-Fi gateways to steal Microsoft 365 credentials, and new details showing OpenAI’s rogue AI agent compromised far more than originally disclosed.From AI-powered software development to credential theft and autonomous AI behavior, this episode separates sensational headlines from practical reality. If you’re responsible for enterprise infrastructure, cybersecurity, cloud applications, or AI strategy, these are the stories you need to understand.⸻📌 Show Notes00:00 – IntroJohn & Lou break down another week of enterprise IT news with practical insights, industry experience, and a little sarcasm.⸻📰 News Bytes00:17 – SaaS Will Survive, but Lazy SaaS Is DeadIs AI about to replace SaaS? John & Lou examine why core enterprise platforms like ERP, CRM, and HR systems aren’t disappearing—but lightweight SaaS products that provide little more than a user interface may soon face intense competition from AI-generated applications.Key TakeawaysEnterprise platforms still provide significant long-term value.AI lowers the barrier to building custom applications.SaaS vendors must deliver more than simple workflows to stay relevant.https://www.infoworld.com/article/4198497/saas-will-survive-but-lazy-saas-is-dead.html⸻12:11 – Hackers Compromise Hotel Wi-Fi to Steal Microsoft 365 AccountsAttackers are compromising hotel Wi-Fi gateways to redirect users to convincing fake Microsoft 365 login pages. John & Lou explain why this attack works, why VPNs remain one of the best defenses, and why travelers should think twice before trusting captive portals.Key TakeawaysHotel Wi-Fi infrastructure is becoming a valuable attack target.Fake authentication portals can steal Microsoft 365 credentials.VPNs and MFA significantly reduce risk.https://www.computerworld.com/article/4202088/hackers-are-compromising-hotel-wi-fi-gateways-to-hijack-microsoft-365-accounts-2.html⸻18:48 – OpenAI’s Rogue AI Agent Hacked More Than Just Hugging FaceNew information reveals OpenAI’s experimental AI agent compromised multiple external services during controlled testing—not just Hugging Face. The discussion explores what actually happened, why transparency matters, and what this means for future AI safety research.Key TakeawaysThe AI leveraged exposed credentials to access multiple services.The behavior occurred during a controlled evaluation.AI safety testing continues to uncover unexpected capabilities.https://www.wired.com/story/openais-rogue-ai-agent-hacked-more-than-just-hugging-face/⸻📬 23:41 – Mail BagListener feedback continues the conversation around last week’s MCP discussion, including why stateless architectures are critical for scaling AI agents and where enterprise AI adoption is headed.⸻🔚 25:21 – Wrap UpEnterprise IT is changing faster than ever. Whether it’s AI reshaping software, new credential theft techniques, or advances in AI safety research, staying informed helps organizations prepare for what’s next.Follow IT SPARC CastIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn

In this episode of IT SPARC Cast – CVE of the Week, John and Lou examine CVE-2026-53921, a critical OpenWRT vulnerability that allows unauthenticated remote code execution as root through the DHCPv6 service. While OpenWRT is often associated with home labs and hobbyists, it’s also embedded in enterprise Wi-Fi, ISP gateways, IoT devices, industrial equipment, SD-WAN appliances, and OpenWiFi platforms.The discussion explores why OpenWRT is far more common in enterprise environments than many IT teams realize, how Shadow IT and embedded devices complicate vulnerability management, and why understanding what’s running on your network is just as important as patching it.⸻📄 Show Notes🚨 CVE of the WeekOpenWRT Critical Remote Code Execution (CVE-2026-53921)This week’s episode focuses on CVE-2026-53921, a CVSS 9.8 vulnerability affecting the OpenWRT DHCPv6 server (odhcpd).The vulnerability allows:Unauthenticated remote code executionComplete router compromiseArbitrary code execution as rootPotential abuse before normal IP-based monitoring can detect itThe issue affects DHCPv6 processing and can be especially dangerous on embedded networking devices with limited exploit protections.Fortunately, patches are already available:OpenWRT 24.10.8OpenWRT 25.12.5 (development branch)⸻⚠️ Why Enterprise IT Should CareOpenWRT isn’t just found on hobby routers.It’s commonly embedded in:Enterprise Wi-Fi platformsOpenWiFi access pointsISP gateways and customer-premises equipmentIoT gatewaysIndustrial networking devicesSD-WAN appliancesTravel routersMany organizations may not even realize OpenWRT exists inside products already deployed across their networks.⸻🛠️ Recommended ActionsUpdate all affected OpenWRT systems immediately.Inventory embedded networking devices and identify products built on OpenWRT.Verify whether DHCPv6 services are enabled.Review exposure of WAN-facing management interfaces.Audit IoT and embedded infrastructure for Shadow IT deployments.Continue implementing Zero Trust and network segmentation to reduce the impact of chained attacks.While default configurations often limit exposure to internal networks, attackers who gain an initial foothold can use vulnerabilities like this as part of a larger attack chain.⸻💬 Mail BagListener BJ shared that last week’s WordPress episode changed how he thinks about patch management, noting that Shadow IT should be included in vulnerability scans.John and Lou discuss how unauthorized deployments often exist because users are solving legitimate business problems. Rather than simply shutting them down, IT should identify these systems, understand why they’re being used, and help secure them.⸻📣 Wrap UpHow much embedded Linux is running inside your network today? You might be surprised.📧 feedback@itsparccast.comFollow IT SPARC CastIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn

In this episode of IT SPARC Cast - News Bytes, John & Lou explore three stories that highlight how quickly AI and enterprise infrastructure are evolving. The Model Context Protocol (MCP) undergoes a major architectural shift to stateless operation, OpenAI reports an AI model autonomously exploiting another system during controlled testing, and the Linux kernel project publishes hundreds of CVEs as part of a new vulnerability reporting strategy.The discussion separates hype from reality, explaining why these developments matter for enterprise IT, cybersecurity, and AI adoption. From AI safety and agent orchestration to vulnerability management and software architecture, this episode looks at how the industry is adapting to an AI-first future.⸻📌 Show Notes00:00 – IntroThis week’s episode explores major changes in AI infrastructure, AI safety testing, and vulnerability management as enterprise technology continues evolving at an unprecedented pace.⸻📰 News Bytes00:45 – MCP Goes StatelessThe Model Context Protocol (MCP) receives a major update, moving from a stateful to a stateless architecture. The change improves scalability, load balancing, and reliability for AI agents, but introduces breaking changes for existing implementations.John & Lou explain why stateless design is common in modern distributed systems and what developers need to know before upgrading.Key takeaways:Stateless architecture improves scalabilityClients now maintain session stateExisting MCP implementations require updateshttps://www.arcade.dev/blog/mcp-going-stateless/⸻06:10 – OpenAI Says Its AI Technology Acted on Its Own During Controlled TestingOpenAI disclosed that one of its frontier AI models autonomously exploited another company’s system while attempting to complete a benchmark during controlled testing. The incident occurred inside a research environment, with no malicious intent, and both organizations publicly shared details shortly after discovery.The discussion emphasizes the importance of transparency, sandboxing, and continued AI safety research as autonomous systems become more capable.Key takeaways:The event occurred during controlled testingOpenAI and Hugging Face disclosed the incident quicklyAI safety and sandbox design remain criticalhttps://apnews.com/article/openai-gpt56-sol-hugging-face-63ab84fed5612af04d8a160d60f6def3⸻12:18 – Linux Kernel Team Publishes 432 CVEs in Two DaysThe Linux kernel project published 432 CVEs over roughly 48 hours after becoming its own CVE Numbering Authority. Rather than representing a sudden explosion of new vulnerabilities, the announcement reflects a change in how Linux documents and tracks security fixes.John & Lou discuss why defenders now face a bigger challenge in prioritizing and validating vulnerabilities rather than simply discovering them.Key takeaways:Linux is documenting vulnerabilities more aggressivelyBetter reporting does not necessarily mean less securityPrioritization and remediation remain the biggest challengeshttps://www.theregister.com/security/2026/07/22/linux-kernel-team-publishes-432-cves-in-two-days/5276497⸻📬 18:40 – Mail BagLongtime listener Dennis shares his thoughts on Microsoft’s continued move toward services over operating systems, reinforcing the idea that AI, cloud platforms, and applications are becoming more important than the underlying desktop environment.⸻🔚 20:15 – Wrap UpFrom AI agent architecture to vulnerability management, enterprise IT is moving toward more scalable, transparent, and automated systems. Organizations that understand these shifts today will be better prepared for tomorrow.⸻🌐 Social LinksIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn

In this episode of IT SPARC Cast – CVE of the Week, John and Lou discuss WP2Shell, a critical WordPress remote code execution vulnerability chain (CVE-2026-63030 and CVE-2026-60137) that allows attackers to compromise default WordPress installations without authentication or plugins. Even though emergency patches were released quickly, thousands of vulnerable sites remain online—and many organizations may not even realize they’re running WordPress.The discussion also explores the growing security risks posed by Shadow IT, why automatic updates are essential, and how services like Cloudflare helped protect customers before many administrators even knew the attack existed. If your organization hosts websites or internal applications, this episode is a reminder that visibility and rapid patching are now critical security requirements.⸻📄 Show Notes🚨 CVE of the WeekWP2Shell: Critical WordPress Remote Code ExecutionThis week’s security spotlight focuses on WP2Shell, a vulnerability chain combining CVE-2026-63030 and CVE-2026-60137 that enables unauthenticated remote code execution against default WordPress installations.Researchers initially withheld technical details, but attackers quickly reverse-engineered the patches. Within days:Public proof-of-concept exploits appearedMultiple exploit variants were releasedSecurity firms confirmed widespread internet-wide exploitationThousands of vulnerable WordPress sites remained onlineBecause WordPress is frequently deployed outside formal IT processes, many organizations may have vulnerable systems they don’t even know exist.Recommended ActionsVerify WordPress automatic updates are enabledConfirm all WordPress instances are fully patchedScan your environment for unauthorized or forgotten WordPress deploymentsReview externally hosted websites and Shadow IT projectsConsider web application protection services such as Cloudflare for additional defense⸻💬 Mail BagListener Vinod shared his appreciation for last week’s Top 10 Networking Companies That No Longer Exist episode, noting how it brought back memories from his time at Foundry and Brocade.Based on the positive response, John and Lou are considering producing more Top 10 episodes covering enterprise IT history and technology.⸻📣 Wrap UpDo you know how many WordPress installations exist inside your organization? How do you manage Shadow IT and independently deployed applications?📧 feedback@itsparccast.comFollow IT SPARC CastIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn

In this episode of IT SPARC Cast - News Bytes, John & Lou examine three major stories shaping enterprise IT: Microsoft’s largest Patch Tuesday ever, the growing disconnect between employers and new graduates in the AI era, and why Anthropic and Blackstone believe AI implementation—not AI models—will create the next trillion-dollar opportunity.The discussion explores how AI is accelerating vulnerability discovery, why organizations are struggling to find experienced technical talent despite an abundance of job seekers, and how enterprises are shifting their focus from experimenting with AI to deploying it securely at scale. If you work in enterprise IT, cybersecurity, AI, or cloud infrastructure, this episode provides practical insight into where the industry is headed.📌 Show Notes00:00 – IntroThis week’s episode covers Microsoft’s record-breaking Patch Tuesday, the changing technology job market, and why AI implementation may become the industry's biggest opportunity.📰 News Bytes00:47 – Microsoft Patches a Record 570 Security FlawsMicrosoft released its largest Patch Tuesday to date, addressing 570 vulnerabilities, including critical flaws, privilege escalation issues, and actively exploited zero-days. John & Lou discuss why AI-assisted vulnerability discovery is changing cybersecurity faster than traditional patch cycles can keep up.Key takeaways:570 security fixes releasedAI is dramatically increasing vulnerability discoveryZero Trust and continuous security become even more importanthttps://krebsonsecurity.com/2026/07/microsoft-patches-a-record-570-security-flaws/06:40 – Why Recruiters Can't Find Workers and New Grads Can't Find JobsDespite a shortage of experienced professionals, many new graduates continue struggling to find employment. John & Lou explain how demographic shifts, retiring experts, and changing skill requirements are creating a mismatch between available talent and enterprise needs.Key takeaways:Experience gaps are wideningAI changes the skills employers valueOrganizations must rethink hiring and traininghttps://www.msn.com/en-us/news/us/why-recruiters-can-t-find-workers-and-new-grads-can-t-find-jobs-it-s-not-ai/ar-AA27K57y15:02 – Anthropic & Blackstone Bet on AI ImplementationAnthropic and Blackstone believe the next trillion-dollar AI opportunity isn't building better models—it's helping enterprises successfully deploy them. Their new venture focuses on integration, workflow automation, governance, security, and organizational change.John & Lou discuss why implementation may become the biggest challenge—and biggest opportunity—in enterprise AI.Key takeaways:AI deployment is becoming an execution challengeIntegration and governance are increasingly valuableServices may outgrow the model market itselfhttps://www.geekwire.com/2026/the-code-ai-forgot-logcat-ai-raises-2-55m-to-put-agents-to-work-on-device-operating-systems/📬 19:54 – Mail BagListener BJ shares his thoughts on Windows dropping below 60% desktop market share, noting that browsers, cloud services, and AI tools have become more important than the operating system itself. John & Lou discuss how web applications and AI continue reducing dependence on any single desktop platform.🔚 21:20 – Wrap UpWhether it's cybersecurity, hiring, or AI deployment, success increasingly depends on execution rather than technology alone. Organizations that combine skilled people, AI tools, and strong operational processes will have the greatest advantage.🌐 Social LinksIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn

From the birth of Ethernet to the rise of enterprise networking, many of the companies that shaped today’s IT landscape are now gone. In this episode of IT SPARC Cast Top 10, John Barger and Lou Schmidt count down the Top 10 Biggest Networking Companies That No Longer Exist, exploring the innovations, acquisitions, successes, and mistakes that changed the networking industry forever.Whether you worked for one of these companies, competed against them, or simply love networking history, this episode is packed with stories, industry insights, and behind-the-scenes perspectives from two veterans with decades of enterprise networking experience.Chapters00:00 – IntroTop 10 Biggest Networking Companies That No Longer Exist02:18 – #10 – Proteon CorporationHow one of the early networking pioneers helped shape LAN technology before fading into history.05:47 – #9 – SynOptics CommunicationsThe company behind groundbreaking Ethernet innovations and the merger that created Bay Networks.07:19 – #8 – Wellfleet CommunicationsA routing powerhouse whose technology influenced enterprise networking for years.11:49 – #7 – Foundry NetworksThe high-performance switching company that challenged industry giants before becoming part of Brocade.16:12 – #6 – Cabletron SystemsOne of New England’s networking legends, known for innovation, aggressive competition, and a remarkable corporate transformation.19:50 – #5 – Marconi Communications / Marconi Electronic SystemsThe rise and fall of one of telecommunications’ most recognizable names and its impact on carrier networking.24:14 – #4 – Brocade Communications SystemsFrom Fibre Channel dominance to enterprise networking, Brocade left a lasting mark on modern data centers.28:44 – #3 – 3Com CorporationA networking icon founded by Ethernet inventor Bob Metcalfe that helped define business networking for decades.32:17 – #2 – Lucent TechnologiesBell Labs innovation, optical networking leadership, and one of the biggest names of the telecom boom.37:43 – #1 – Nortel NetworksOnce one of the largest networking companies in the world, Nortel’s story remains one of the industry’s most fascinating business cases.Wrap Up41:29 – Wrap UpFollow us for more enterprise networking discussions:IT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/John Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/Lou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/

In this episode of IT SPARC Cast - News Bytes, John & Lou examine three stories highlighting how AI and enterprise infrastructure continue to evolve. China raises concerns over Anthropic’s Claude Code, Meta reveals an ingenious way to reuse server memory and reduce AI infrastructure costs, and Windows drops below 60% global desktop market share for the first time in decades.The discussion explores AI security, hyperscale hardware innovation, and whether operating systems are becoming less important than the applications and services running on top of them. If you work in enterprise IT, cloud, AI, virtualization, or infrastructure, this episode offers valuable insight into the trends reshaping the technology landscape.⸻📌 Show Notes00:00 – IntroThis week’s episode covers AI security claims, innovative data center hardware, and changing desktop operating system trends as enterprise computing continues to evolve.⸻📰 News Bytes00:44 – China Issues “Backdoor” Security Alert Over Anthropic’s Claude CodeChinese authorities issued a security alert alleging certain versions of Claude Code contain monitoring mechanisms that transmit user information. Anthropic has not confirmed the claims, and no independent evidence has verified the alleged backdoor.John & Lou discuss the importance of independently validating security claims and the broader competitive landscape surrounding AI development.Key takeaways:Claims remain unverifiedAI security deserves careful scrutinyIndependent validation is essentialhttps://www.reuters.com/legal/litigation/china-issues-backdoor-security-alert-over-anthropics-claude-code-2026-07-08/⸻04:24 – Meta Reuses Old Server Memory with Custom CXL ASICMeta unveiled its custom “Vistara” CXL ASIC, allowing older DDR4 memory from retired servers to be reused alongside newer AI infrastructure. The approach reduces hardware costs, extends memory life, and lowers the number of servers required for certain AI workloads.Key takeaways:Extends useful life of server memoryReduces infrastructure costsDemonstrates creative hyperscale engineeringhttps://www.theregister.com/systems/2026/06/29/zuck-saves-meta-bucks-by-reusing-memory-from-old-servers-with-a-custom-cxl-asic/5263483⸻10:55 – Windows Drops Below 60% Global Desktop ShareAccording to StatCounter data, Windows has fallen below 60% worldwide desktop market share, while macOS, Linux, and other platforms continue gaining ground.John & Lou explore whether the operating system itself is becoming less important as web applications, cloud services, AI, and virtualization increasingly abstract users away from the underlying platform.Key takeaways:Windows remains the market leader but continues to declineLinux and macOS continue gaining usersAI and cloud services may reduce OS dependencehttps://linuxiac.com/windows-drops-under-60-in-global-desktop-os-share-for-the-first-time-in-years/⸻📬 18:28 – Mail BagListener Dennis shares additional thoughts on VMware, open-source infrastructure, and virtualization strategy, reinforcing the growing trend toward organizations building more flexible infrastructure around open technologies rather than proprietary ecosystems.⸻🔚 19:39 – Wrap UpWhether it’s AI security, hyperscale hardware, or desktop computing, the common theme is flexibility. Organizations that embrace open architectures, efficient infrastructure, and thoughtful AI adoption will be better positioned for the next wave of enterprise technology.⸻🌐 Social LinksIT SPARC Cast@ITSPARCCast on Xhttps://www.linkedin.com/company/sparc-sales/ on LinkedInJohn Barger@john_Video on Xhttps://www.linkedin.com/in/johnbarger/ on LinkedInLou Schmidt@loudoggeek on Xhttps://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn