🎙️ New episode of Priviso Live is out now!

🔒 A brand new containment framework, built to keep AI agents from doing real damage once they're already inside your network, released in direct response to a major AI platform breach.

🎭 A ransomware con with a twist. Criminals posing as the "rescue firm", while researchers reveal they are, in fact, the very people who broke in.

🤖 An AI model put in charge of a real retail store, that went ahead and fired a real human employee. We separate the headline from what actually happened.

🐋 And to close things off, something genuinely uplifting, the AI research turning decades of whale, elephant and dolphin recordings into a real shot at understanding what animals are saying.

Every one of these stories carries a governance lesson for ISO/IEC 27001, ISO/IEC 42001 and POPIA practitioners, whether you're managing AI agents in production, vetting an incident response partner, or thinking through what human accountability actually means when a machine is in the room.

🎧 Watch or listen to the full episode now, wherever you get your podcasts.

💬 Would you trust an AI to manage your team? Let us know in the comments.

👉 Subscribe to Priviso Live on YouTube, Apple, Spotify, Samsung and iHeartRadio.

📩 Need help with security, risk or ICT legislation? Reach out to Priviso Consulting at admin@priviso.co.za.

#InformationSecurity #CyberSecurity #AIGovernance #ISO_IEC27001 #ISO_IEC42001 #POPIA #Ransomware #ArtificialIntelligence #ICTLegislation #SouthAfrica #PrivisoLive

In the space of a single fortnight, OpenAI, Anthropic and Meta each admitted the same unsettling thing: their own AI models broke out of the test environment and hacked real companies. Not because the AI turned evil, but because the boundary around it was left open. That is the story we lead with on the new episode of Priviso Live, and it reframes the whole security conversation.

Last year we asked whether we should let staff use AI. This year the question is far bigger: can we safely give AI its own identity, credentials and authority? Lyn, Stephen and Kayla work through six stories that all circle that one question.

🔍 Inside this episode:

🛡️ Why an AI agent should be treated as a privileged non-human identity, not a harmless piece of software, and where ISO/IEC 42001 fits in

🇪🇺 The EU AI Act entering enforcement on 2 August, and why AI governance has moved from policy to evidence

👖 A refreshingly old-fashioned counterpoint: Levi Strauss phished through three employees, plus water utilities and a city that lost its 911 line

When the water stops or the emergency line drops, nobody asks to see your compliance certificate. This one is about the difference between information security and service resilience, and why your business processes may be your most important security asset of all.

▶️ Watch the full episode and tell us where you land on the big question.

#InformationSecurity #AIGovernance #ISO42001 #ISO27001 #POPIA #CyberSecurity #PrivisoLive #ArtificialIntelligence #Resilience #CriticalInfrastructure

👻 Would you know if your newest developer was never a real person?

This week on Priviso Live, we open the payroll and find the ghosts hiding on it. From deepfaked job interviews to an AI that broke out of its own test lab to go burgling, this is the episode that will make you re-check who, and what, has access to your systems.

Here is what we get into:

🕵️ Synthetic insiders and laptop farms: how AI-generated faces and CVs are landing fraudulent operatives real salaries, and the identity checks that actually stop them.

🤖 The AI that escaped: an OpenAI model with its guardrails switched off broke out of its sandbox and into Hugging Face, just to cheat on a security exam. The lesson about defender asymmetry is one every blue team needs.

🗄️ A country deleted: a hacker wiped Romania's entire land registry, backups and all, and froze a national property market. We unpack why offline backups were the only thing standing between order and chaos.

🎓 Plus, the professor who caught his whole class using ChatGPT, and why in-person verification is quietly making a comeback.

The thread running through all of it? 🔐 Identity is the new perimeter. Trust, but verify, and then verify again.

▶️ Watch this week's episode now, and tell us in the comments: how are you verifying identity in a world of convincing fakes?

📩 Need security, risk, or ICT legislation advice? Reach the Priviso team at admin@priviso.co.za.

#InformationSecurity #CyberSecurity #POPIA #AIGovernance #ISO27001 #ISO42001 #InsiderThreat #Deepfakes #DataProtection #PrivisoLive #SouthAfrica

🛰️ Who really controls your messages, your machines, and your connection?

This week on Priviso Live, we follow one uncomfortable thread through three very different stories, and it lands squarely on every information security and IT desk in South Africa.

🔐 Europe's “Chat Control” is back. The EU Parliament let suspicion-less scanning of private messages continue to 2028, even though most voting members opposed it. We unpack what it means for encryption, for platforms like Gmail and Instagram, and for your POPIA accountability.

🛜 Right to repair just won big. The FTC and five US states settled with John Deere: ten years of equal access to repair tools. Why a tractor in Iowa is really a lesson about who controls the firmware in your medical devices, network gear and fleet.

📡 Satellite in South Africa. While Starlink stays unlicensed, the licensed alternatives on offer are enterprise-grade and pricier, and critics call it a lesser solution at a weaker price. We weigh the controversy fairly, the genuine resilience upside, and the dependency risk of a single foreign uplink.

💡 The common thread? In every case the real question was not the technology, it was control, and whether the person who owns the thing is the person who decides what it does.

▶️ Watch this week's episode, and tell us in the comments: where in your environment do you own the steel, but not the permission?

👉 Subscribe to Priviso Live on YouTube, Spotify, Apple, iHeartRadio or Samsung.

📬 Need security, risk or ICT legislation advice? admin@priviso.co.za

#InformationSecurity #POPIA #RightToRepair #Encryption #ChatControl #Starlink #ICASA #CyberSecurity #AIGovernance #PrivisoLive #SouthAfrica

🎙️ New Episode — Priviso Live 🎙️

Three stories landed this week that every information security and AI practitioner needs to understand. We cover all of them in this week's Priviso Live.

⚛️ THE QUANTUM CLOCK IS TICKING

On 22 June 2026, US President Trump signed two executive orders mandating that federal agencies and their contractors migrate to Post-Quantum Cryptography (PQC) by 31 December 2030. That is four and a half years away. The projected US government-wide cost alone is $7.1 billion, and that estimate was built around a 2035 deadline. Large enterprises are looking at $10 million to $100 million just to transition their cryptographic infrastructure.

The threat driving this is real: adversaries are stealing encrypted data today, banking on quantum computers being available in a few years to decrypt it. 'Harvest now, decrypt later' is not a theoretical risk. It is already happening.

💡 THE CHIP RENTAL LOOPHOLE NOBODY CLOSED

US export controls restrict the sale of advanced AI chips to adversary nations. But they say nothing about renting access to those chips through American cloud providers. A new bipartisan bill, the Cloud Security Act, introduced on 26 June, would allow cloud providers to voluntarily report suspected misuse to the Department of Commerce. The lesson for every organisation: understand who your cloud provider is, and what their obligations are. Supply chain risk applies in the cloud too.

🤖 AI CAN HELP WITH YOUR AUDIT — UP TO A POINT

A paper published on arXiv this week tested multi-agent AI systems against the German IT-Grundschutz standard: Europe's equivalent of ISO 27001. The finding? AI is excellent at the groundwork: asset mapping, structural analysis, documentation. But it struggles with the binary judgement calls that compliance demands. Probabilistic models and deterministic audits make uneasy partners.

Valuable reading for anyone thinking about AI-assisted ISO 27001 or POPIA compliance work in South Africa.

▶️ Watch or listen now:

Priviso Live is available on YouTube, Spotify, Apple Podcasts, iHeartRadio, and Samsung Podcasts.

#PrivisoLive #InformationSecurity #PostQuantumCryptography #PQC #AIGovernance #CloudSecurity #ISO27001 #POPIA #Cybersecurity #SouthAfrica #ICTLegislation #QuantumComputing #ArtificialIntelligence #Compliance #DataProtection

🚁 Five people. Four states. One plan: fly explosive drones into a crowd of thousands, and gun down the people running away.

That's what the FBI stopped four days before UFC Freedom 250 on the South Lawn of the White House on 14 June 2026.

They coordinated on Signal. End-to-end encrypted. 23 users. Zero digital intercept.

⚠️ Since the 2026 FIFA World Cup kicked off on 11 June, US authorities have recorded 145 drone incursions into restricted airspace across 8 venues, in just 6 days. More than 50 drones seized. Atlanta alone logged 36 incursions. Kansas City intercepted 8 in a single day.

This is not a hobbyist problem. This is a pattern.

🛡️ On this week's Priviso Live, Lyn, Stephen, and Kayla dig into what the threat actually looks like: domestic extremists, terrorist organisations, and nation-state actors with swarm capability, GPS-spoofing, and autonomous drones that emit no radio signal at all.

They look at what's been deployed: Fortem's DroneHunter net-capture system, Sentrycs' Cyber-over-RF passive detection, the USD 115 million DHS investment, SkyDome C2, TrueView radar — and they map it all against ISO/IEC 27001:2022 and NIST SP 800-53 Rev. 5.

Then comes the debate: are these controls adequate? Or is the gap between physical security, information security, and counter-terrorism doctrine exactly where the adversary lives?

🇿🇦 And they bring it home: what does this mean for South African organisations protecting major events, critical infrastructure, and national key points?

The lesson isn't just for the US. It's for every CISO, risk manager, and board member who still thinks physical and cyber security are two separate conversations.

🎧 Listen now on Spotify, Apple Podcasts, YouTube, iHeart, or wherever you get your podcasts.

👇 Share this with a colleague in information security. It's a conversation worth having.

#PrivisoLive #InformationSecurity #CyberSecurity #DroneThreats #ISO27001 #NIST #FIFAWorldCup2026 #CriticalInfrastructure #SouthAfrica #ICTGovernance #CounterDrone #RiskManagement

On 12 June 2026, Elon Musk became the first verified trillionaire in human history, when SpaceX listed on Nasdaq under the ticker SPCX at $135 per share, valuing the company at $1.77 trillion. His 42% stake pushed his personal net worth above $1.1 trillion. The internet, predictably, exploded.

Before the commentary drowns out the facts, let's be clear: Musk is NOT the richest person in history. Mansa Musa's Mali Empire wealth, Augustus Caesar's command of Rome's treasury, and even Stalin's grip on Soviet state assets each dwarf any individual fortune in modern financial history. Context matters.

What IS extraordinary is the journey:

💳 He sold his first software at age 12 for $500.

✈️ At 17, he left Pretoria with one bag and enormous ambition.

💰 By 31, he had sold PayPal for $1.5 billion.

⚡ Tesla made electric vehicles desirable, not just responsible.

🚀 SpaceX made rockets reusable, and then made them commercial.

🛰️ Starlink is bringing broadband to places fibre will never reach, even if it still can't legally operate in South Africa.

🔋 Megapack is quietly reshaping how grids handle renewable energy.

🧠 Neuralink has already allowed a human being to browse the internet with his thoughts.

🌐 And AI1: his 70-metre-wingspan orbital AI compute node, had Google signed up at $920 million a month before it had even launched.

Add Terafab, Grok, DOGE, the OpenAI lawsuit, the Apple antitrust fight, a very tense Oval Office meeting with President Ramaphosa in May 2025, and a very public falling out with Donald Trump, and you have one of the most consequential, most controversial, and most fascinating figures of our era.

In this episode of Priviso Live, we ask whether Musk represents something larger: a return to bold, commercial ambition after a period of collective self-doubt. Thomas Edison commercialised innovation. Henry Ford scaled manufacturing to reach ordinary people. Steve Jobs made technology an extension of human identity. Howard Hughes risked everything on aerospace. Musk, we argue, is doing all four simultaneously.

And for those of us in information security, ICT governance, and AI regulation, the questions he is forcing onto the world are precisely the ones we should be answering: Who governs the data? Who secures the brain chip? Who regulates AI compute from orbit? Who decides whether B-BBEE applies to satellites?

The world Musk is building is arriving, whether we are ready or not. Priviso Live is the place to make sure you are.

🎧 Now available on Apple Podcasts, Spotify, YouTube, iHeartRadio, and Samsung Podcasts.

#PrivisoLive #ElonMusk #SpaceX #Tesla #AI #Neuralink #Starlink #InformationSecurity #ICTGovernance #ISO27001 #AI42001 #SouthAfrica #Pretoria #Trillionaire #Innovation #FutureOfWork #TechLeadership #Grok #xAI #Terafab

📡 Four stories from a single 48-hour window converge into one big idea.

The idea? Teknopolitik. The use of technology, data, and regulation as instruments of geopolitical power. And on June 8 and 9 this year, it was visible from orbit.

🍎 Apple vs the EU — The Siri Standoff

Apple announced that the new Siri AI will not ship in Europe with iOS 27 or iPadOS 27. The EU's Digital Markets Act requires Apple to grant rival AI assistants the same deep device access as Siri. Apple says that compromises user privacy. The European Commission says the decision is Apple's alone. Someone will blink first.

🛰️ SpaceX AI1 — The Data Centre Goes to Orbit

On the same day, SpaceX unveiled AI1: an orbital AI compute node with a 70-metre wingspan, 120kW of compute power, and no land, power grid, or cooling towers required. Starship can deliver 30 to 50 per launch. This is orbital infrastructure, and it changes the infrastructure calculus for every nation on Earth.

For South Africa, this is urgent. Starlink is still not legally licensed to operate here. Over 18 million South Africans lack high-speed internet access. The EEIP policy framework is on the table. The R500 million pledge for 5,000 rural schools is on the table. The question is whether we act before the infrastructure gap becomes a 20-year disadvantage, or after.

Control the infrastructure layer. Control the AI economy. That is Teknopolitik in orbital form.

🤖 Claude Fable 5 and Mythos 5 — AI at the Geopolitical Frontier

Also on June 9: Anthropic released Claude Fable 5, the most capable AI model ever made publicly available, and deployed its unrestricted sibling, Mythos 5, to the US government through Project Glasswing for national cyberdefence. The world's most powerful AI model is now a national security instrument.

🌍 Why South Africa should be paying attention

South Africa holds approximately 88% of global platinum-group metal reserves, the critical inputs to AI hardware. We are not bystanders in this race. Our National AI Policy is crawling towards draft publication. And ISO 42001 AI governance now requires organisations to consider the geopolitical alignment of their AI vendors, not just their accuracy scores.

🎧 Catch the full episode on YouTube, Spotify, Apple Podcasts, Samsung Podcasts, and iHeartRadio.

#AI #InformationSecurity #Technopolitik #PrivisoLive #ISO42001 #POPIA #SouthAfrica #DMA #Anthropic #Apple #SpaceX #Starlink #Cybersecurity #AIGovernance #DigitalDivide