#131 - AI Cyberattacks - Who Owns Your MSP's Security Risk? | BMK VISION ROUNDTABLE

All right, so I've got, you know, last time we spoke, we were talking about, you know, my hesitation to push people too hard into their, you know, exploration of Clod and connecting it to their tools and, you know, how excited I am for people to do it.

But then, you know, they're getting a little hesitant about the security and whatnot.

So I've got now a second MSP that's taking a different approach from the first MSP.

Now, what's interesting is second MSP is headed by, you know, somebody that's, you know, well into their sixties, if not 70 years old and really smart and technological and all the things.

And over the last 48 hours, He's doing some amazing stuff with Claude, got it connected to his ConnectWise, and he's just doing amazing things, kind of racing ahead of MSP1, headed by a sub-40-year-old who's, you know, being really cautious security-wise.

So I'm really excited to be working with both of them, of course, but MSP2, we're firing, man.

We're making stuff.

He's making dashboards for himself.

He's learning all sorts of insights.

He made a valuation calculator for himself.

Amazing, right? But just two different kind of companies.

Now, you, as we sit here today, scare the crap out of me on some security breach that's happening here on, what is it, Wednesday the 21st.

Maybe tie it in.

Just give me a briefing.

What is this security thing that everyone's freaking out about?

Yeah, I think there's a... zero-day security exploit the most prominent one is this php to shell exploit that essentially allows an attacker to connect to a server running php and just take over that server and everything on it and then do whatever with it um it's very unclear what what the issues are um in its entirety right now because it's like, you know, been maybe 20 hours or so.

But the bigger picture is about 70% of the web runs on PHP.

That's kind of like been the base kind of code base for the last, I don't know, maybe all the 2010s.

When we think about, you know, what we built all our websites on, WordPress was kind of like the go-to and that's PHP.

amongst other Linux space servers.

So yeah, so there's two critical bugs that came out and you know, the internet moves so fast, they released the notice that this was an issue without really releasing the fixes.

So, you know, the internet went crazy.

And really, I think what people are figuring out is this is most likely being exploited through various open weight um, AI models, um, and different agents.

Um, so to be able to go and exploit things as much easier these days, um, with, with this firepower

that you have behind you.