Business of Tech: Daily 10-Minute IT Services Insights

Pentagon Mandates CMMC Compliance, AI-Powered Ransomware Emerges, and Apple's Security Upgrades

Sep 10, 2025

Ask episode

Chapters

Transcript

Episode notes

The Pentagon has officially mandated the Cybersecurity Maturity Model Certification (CMMC) for defense contracts, transitioning from a policy framework to enforceable requirements. This regulation, set to take effect on November 10, 2025, requires contractors to meet specific cybersecurity benchmarks based on the sensitivity of the information they handle. With three certification levels, the CMMC aims to ensure that defense-focused providers adhere to stringent cybersecurity standards. This shift presents both opportunities and challenges for managed service providers (MSPs), as some small and medium-sized businesses may opt out of defense contracts due to compliance costs.

In a significant development, researchers from New York University have demonstrated the feasibility of AI-powered ransomware, dubbed Ransomware 3.0. This proof-of-concept malware utilizes advanced large-language models to create targeted attacks, making it more difficult to detect and defend against. The incident underscores the growing trend of cybercriminals leveraging AI tools, raising concerns about the potential for real-world applications of such technology. Meanwhile, Microsoft has made multi-factor authentication (MFA) mandatory for Azure portal sign-ins, aiming to enhance cybersecurity and reduce account compromise risks.

The podcast also highlights KnowBefore's new white paper on human risk management in cybersecurity, emphasizing a people-centric approach to bolster security culture. Additionally, Secret Double Octopus has launched a program to help MSPs eliminate passwords entirely, moving beyond traditional MFA solutions. Ignite has introduced AI agents tailored for the architecture, engineering, and construction sectors, streamlining documentation tasks and reducing project risks. Sentinel-1's acquisition of Observo AI aims to enhance security operations by improving data management capabilities.

Apple recently unveiled updates to its operating systems and new hardware, including the iPhone 17, which features significant security enhancements like Memory Integrity Enforcement. The company is shifting to a year-based version numbering system for its OS updates, aiming for consistency across its ecosystem. While Apple introduced exciting new features, concerns linger about its AI capabilities compared to competitors like Google and Samsung. The podcast concludes by emphasizing the importance of security improvements and the potential support challenges that IT leaders may face as clients compare Apple devices with Android alternatives.

Four things to know today

00:00 Pentagon Locks In CMMC Enforcement: Defense Contractors Must Certify or Exit by 2025

03:00 From AI-Powered Attacks to Forced MFA: Security Baselines Are Moving, and Providers Must Keep Up

05:29 From Training to Passwordless to Vertical AI: Vendor Announcements Underscore Shift to Client-Focused Outcomes

08:18 Apple’s 2025 Launch Balances Security and Hardware Innovation While Downplaying AI

This is the Business of Tech.

Supported by: https://scalepad.com/dave/

https://cometbackup.com/?utm_source=mspradio&utm_medium=podcast&utm_campaign=sponsorship