Author Archive

Google Has Traced A Case Of Hacking Back To AI….. Which Is Not A Shock To Me

Posted in Commentary with tags on May 12, 2026 by itnerd

A reader pointed me to this Google Threat Intelligence Group blog post that details a case of hacking that uses AI to pull this hack off.

From the blog post:

Since our February 2026 report on AI-related threat activity, Google Threat Intelligence Group (GTIG) has continued to track a maturing transition from nascent AI-enabled operations to the industrial-scale application of generative models within adversarial workflows. This report, based on insights derived from Mandiant incident response engagements, Gemini, and GTIG’s proactive research, highlights the dual nature of the current threat environment where AI serves as both a sophisticated engine for adversary operations and a high-value target for attacks.

So is anyone actually shocked by this? I am not. It was only a matter of time before AI was used to be part of an attack chain. And I fully expect more of this in the future.

New data from Employment Hero shows Canadian SMB Wages Continue to Outpace Inflation

Posted in Commentary with tags on May 12, 2026 by itnerd

Statistics Canada’s latest Labour Force Survey shows Canada’s labour market remains cautious amid ongoing economic uncertainty, with national employment largely unchanged in April. But beneath the surface, small businesses are telling a more nuanced story.

New data from Employment Hero shows SMB wages rose 4.2% year-over-year in April, continuing to outpace inflation (2.4%) even as overall SMB employment declined -0.9% nationally.

The findings come from Employment Hero’s newly launched first-party data engine, a monthly snapshot of labour market activity across nearly 3,000 Canadian SMBs, designed to complement broader labour reporting with a real-time view of how smaller businesses are responding to changing economic conditions.

While hiring remains soft overall, consumer-facing industries are proving more resilient ahead of the busy summer season.

Employment across retail, hospitality and tourism rose 3.8% year-over-year, while wages in the sector climbed 10.6%, the strongest wage growth recorded across all industries.

With patios reopening, festivals approaching, and Environment and Climate Change Canada forecasting one of the hottest years on record globally, Employment Hero says many businesses tied to seasonal demand are continuing to hire despite broader economic caution.

Employment Hero’s data also suggests businesses are increasingly favouring flexibility, with casual employment rising 12.7% year-over-year, pointing to a growing reliance on more adaptable staffing models.

Regional snapshot: where SMBs are still hiring

While national hiring remains soft, several regions continue to outperform YoY:

  • Saskatchewan: Employment up 5.7% , wages up 5.7% (also saw recent MoM growth)
  • Alberta: Employment up 2.0%, wages up 5.4% (also saw recent MoM growth)
  • Nova Scotia: Employment up 4.7%
  • New Brunswick: Employment up 2.5%
  • Quebec: Employment up 3.8%
  • Ontario: Employment down –1.8%, though wages still rose 3.3%
  • British Columbia: Employment down 4.4%, while Vancouver wages climbed 5.5%

Messaging app leaks details of 1.2M profiles online including names and phone numbers

Posted in Commentary with tags on May 12, 2026 by itnerd

Cybernews researchers have found that Tokee, a video and text messaging app, has leaked the details of 1.2 million user profiles, which represents the vast majority of the app’s user base. The exposed data was stored in a MongoDB database, a popular service businesses use to store and process large volumes of data.

Here’s the data that was leaked:

  • User display names;
  • Phone numbers (stored as numeric values);
  • Profile avatars (hosted on Firebase Storage);
  • Device tokens used for push notifications;
  • User IDs;
  • Account creation and update timestamps;
  • “Last seen” activity indicators;
  • Account status flags (e.g., premium/non-premium);
  • The exposed database appears to have stored Tokee’s chat messages, but our researchers say the messages were encrypted. 

After the Cybernews team contacted the company and the responsible authorities, the exposed database was taken offline. 

Attackers could exploit the data to track and profile user activity and use leaked tokens for targeted phishing and spam campaigns, increasing cybersecurity risks for app users. 

For more information, here’s the full report:

https://cybernews.com/security/tokee-messaging-app-data-leak

Recast Names Intune and Configuration Manager Expert Shanmugam Senthil as Senior Director of Engineering

Posted in Commentary with tags on May 12, 2026 by itnerd

Recast today announced that Shanmugam Senthil has joined the company as Senior Director of Engineering and India Site Leader. Based in Bangalore, Senthil will help establish Recast’s India presence and strengthen the company’s engineering organization to support continued growth. His combination of Microsoft platform expertise and technology leadership experience gives Recast added depth as it evolves its capabilities to help customers manage and secure complex IT environments.

A 30-year technology industry veteran, Senthil has built and led engineering teams at Microsoft, Yahoo!, Samsung, and Sun Microsystems. During his decade at Microsoft, he led engineering teams responsible for evolving core endpoint management capabilities within Intune and ConfigMgr. That experience aligns closely with Recast’s mission and product direction as organizations look for more effective ways to manage, secure, and optimize endpoints across hybrid and cloud environments.

In his new role, Senthil will help shape the structure, culture, and daily operations in India. He will also collaborate closely with Recast’s global engineering and product teams to expand the company’s capabilities in support of its long-term product strategy.

Cybercriminals Are Already Targeting the 2026 FIFA World Cup according to Flashpoint

Posted in Commentary with tags on May 12, 2026 by itnerd

With the 2026 FIFA World Cup set to become the largest sporting event in history, cybercriminals are already preparing to exploit the massive global attention surrounding the tournament.

Flashpoint’s latest blog breaks down the emerging threat landscape tied to the World Cup, including how threat actors are expected to leverage phishing campaigns, counterfeit ticket scams, fake hospitality offers, credential theft, and social engineering attacks targeting fans, brands, and event infrastructure. The report also examines the broader risks facing organizers, sponsors, transportation systems, and connected venues as the tournament approaches.

Given the scale of the event across the U.S., Canada, and Mexico, security leaders are facing a uniquely complex attack surface that blends physical and cyber risk.

You can read the blog post here: Navigating the Threat Landscape of the 2026 FIFA World Cup | Flashpoint

Desjardins and Nieuport Aviation Partner to Elevate the Domestic Lounge Experience at Billy Bishop Toronto City Airport

Posted in Commentary with tags , on May 12, 2026 by itnerd

Today, Desjardins Group and Nieuport Aviation announced a new multi-year partnership that elevates the passenger experience through thoughtful enhancements of the domestic lounge at Billy Bishop Toronto City Airport.

Available for passengers travelling within Canada, the space reinforces a shared vision between Desjardins and Nieuport Aviation: to create environments that enable connection for work, rest and travel while elevating the experience for passengers.

The new amenities in the domestic lounge blend comfort, functionality, and modern design. Key features include future private office pods to support focused work or calls, wireless chargers integrated into lounge tables, greenery to create a calm and overall welcoming atmosphere.

A partnership rooted in shared values

Rooted in its cooperative model, Desjardins brings a strong people‑centred and values‑driven approach to this partnership—focused on accessibility, sustainability, innovation, and meaningful impact in the communities it serves. The refreshed lounge embodies Desjardins’ belief that collaboration can help reimagine everyday spaces in more inclusive, human and purposeful ways, beyond the boundaries of traditional business environments.

Nieuport Aviation, terminal partner at Billy Bishop Airport, is similarly guided by a commitment to creating value through thoughtful infrastructure and meaningful partnerships. As the steward of a space defined by movement and connection, Nieuport has focused in recent years on initiatives that enhance the traveler experience, ranging from expanded and diversified concessions to improved amenities, the introduction of the U.S. preclearance facility, and the elevated atmosphere created through its partnership with Desjardins.

Features of the redesigned domestic lounge include:

  • Workstation pods designed to support passenger privacy and productivity
  • Wireless chargers integrated into lounge tables, enabling convenience and effortless connectivity
  • Greenery and natural design elements to enhance ambiance and comfort
  • Occasional activations designed to elevate the passenger experience. 

Serving a diverse mix of business and leisure travelers, the domestic lounge at Billy Bishop Toronto City Airport remains a key element in the overall passenger journey. Through this partnership, Desjardins and Nieuport Aviation are spearheading an elevated standard for airport spaces that support modern travel while remaining inclusive, functional and welcoming.

The enhanced lounge is now open to passengers, marking the beginning of a multi-year collaboration focused on continuous improvement, shared growth and meaningful connection.

Hisense Brings Soccer Innovation to Life as Supporting Partner of FIFA Museum Exhibition at Science World 

Posted in Commentary with tags on May 12, 2026 by itnerd

Expanding on its role as the exclusive Video Assistant Referee (VAR) provider for the FIFA World Cup 2026™, Hisense is excited to be a supporting partner of Soccer and Technology from the FIFA Museum, presented by the Province of British Columbia, at Science World in Vancouver during World Cup festivities.

The exhibition, making its North American premiere in Vancouver during World Cup festivities, showcases the game-changing technology and science behind “the beautiful game” — including the state-of-the-art RGB MiniLED Hisense televisions that will be viewed by FIFA officials in the FIFA World Cup 2026 Video Operating Room.

FIFA’s VAR system demands extremely high standards for display performance, including ultra-high resolution, natural and real colour accuracy and real-time responsiveness. Hisense’s advanced RGB MiniLED technology delivers ultra-high colour gamut and precise colour reproduction, enabling clear and authentic restoration of live match footage for video assistant referees.

The system, including Hisense’s elevated display technology, will be showcased as part of the Soccer and Technology from the FIFA Museum exhibit, including the UX Series — a 100-inch RGB MiniLED TV.

Soccer & Technology from the FIFA Museum will open to the public at Science World on May 15th as Vancouver prepares to welcome the world to the FIFA World Cup 2026™. From the pitch to the broadcast booth, Soccer & Technology from the FIFA Museum offers a deep dive into soccer’s evolving ecosystem. Guests will explore five core sections: Broadcasting and Media, Intelligent Data, Refereeing and Fair Play, Staging the Game and the Innovation Lab, exploring how evolving technology shapes the innovation, preparation, action, enjoyment and analysis of soccer games.

The North American premiere of the exhibition at Science World runs until September 7th, highlighting Vancouver’s role as a global centre for culture and innovation.

Vapi raises $50M Series B as it reaches 1 billion calls

Posted in Commentary with tags on May 12, 2026 by itnerd

Today, voice AI startup Vapi announced a $50 million funding round to make all calls extraordinary.  When a customer calls a business, they aren’t looking for another channel. They’re looking for an outcome. But most phone experiences still run on rigid phone trees, scripts, and deterministic systems that can’t listen, adapt, or resolve issues the way a human can. Voice is where intent is highest and expectations are clearest. Vapi, the leading platform for deploying configurable voice agents at scale, was built to make that channel extraordinary. 

Following a 10x in enterprise ARR growth, the Series B round was led by Peak XV with participation by M12, Microsoft’s Venture Fund, Kleiner Perkins, Bessemer Venture Partners, and earlier investors, bringing total funding to $72 million.

Nearly $3 trillion in global sales are projected to be at risk in 2026 due to bad customer experiences. And despite years of investment in chatbots, automation, and self-service portals, customer satisfaction scores haven’t increased. Since 2022, they’ve actually dropped by 2%, and haven’t meaningfully moved since 2017. The problem isn’t that businesses aren’t trying. It’s that the systems behind most customer interactions were never designed to listen, adapt, or meet people where they are. Vapi believes the fastest way to earn trust and resolve issues has always been a real conversation. Voice AI can finally make those conversations happen at scale.

Enterprise customers include Amazon Ring, Kavak, ServiceTitan, New York Life, and Intuit. Amazon Ring uses Vapi to handle inbound customer inquiries about smart home security devices.

Vapi is an enterprise voice AI platform for building, deploying, and managing voice agents that deliver the outcomes businesses want at the scale their customers need. The platform is designed to take teams from working prototype to production-scale deployment in days instead of months. Vapi’s platform is optimized for low latency, with the flexibility to swap models and providers, and an API that removes the need to understand telephony internals. Vapi’s mission is to make it easy for any business to build the kind of human interface that lets customers get the help they need.

The platform powers voice AI for businesses that need to handle calls at scale – supporting everything from inbound customer service and outbound collections to candidate screening, sales coaching through simulated dialogue, and autonomous IVR navigation. Customers use Vapi to replace or augment contact centers, automate high-volume qualification workflows, and navigate complex third-party payer systems without human involvement. The company has found its strongest traction in financial services, healthcare, insurance, automotive, and workforce management.

Co-founders Jordan Dearsley and Nikhil Gupta met at the University of Waterloo and spent years building products together, including a Y Combinator-backed calendar app that reached profitability. Vapi started almost by accident. In mid-2023, Dearsley built a voice-based AI therapist for his daily walks, chaining models together and optimizing for latency until he had a working phone-based system. The therapy product didn’t take off, but the infrastructure did. Vapi launched publicly on Product Hunt in March 2024.

Today, the company reports more than 1 million developers, over 2.7 million unique agents created, and over 1 billion calls made. 

Vapi sees the next phase of voice AI being defined by governance and predictability. As agents take on higher-stakes workflows, enterprise operators need tighter uptime guarantees, predictable latency under load, and call-level monitoring that treats every conversation as a production workload. That is where the company is focused: deeper reliability, stronger guardrails that keep agents within defined boundaries, and clear escalation paths when a situation calls for a human. The goal is to make it easy for any business to deploy voice agents that deliver measurable outcomes at scale, so that getting help feels as natural as having a real conversation.

If Your Router Was Reset To Factory Defaults, You Need To Replace It NOW

Posted in Commentary with tags , , on May 12, 2026 by itnerd

Fun fact. Or maybe it’s not so fun. The Russians have been exploiting security vulnerabilities for years in home ad small office routers. In the process the Russians can use these routers to execute attacks at will. Thus the The FBI and NSA took the really unusual step of getting a court order in order to find and remotely reset these routers to kick the Russians out of these routers. Though there’s a catch to that which I will get to in a moment. From CNET:

Federal agencies, including the FBI and NSA, disclosed on April 7 that a unit of Russia’s military intelligence directorate, the GRU group known as APT28 or Fancy Bear, has been systematically compromising home and small office routers since at least 2024, using the access to intercept credentials, authentication tokens and sensitive communications. The agency took the unusual step of remotely resetting thousands of affected US devices under a court order, but officials are warning that without action from individual router owners, the problem is far from solved.

Here’s the catch. The routers in question aren’t getting security updates as well. So it is entirely likely that the Russians can simply come back and set up shop again if you leave the router in operation. Thus if your router gets reset remotely, it needs to be replaced. Immediately. As in now. Today.

If you’re wondering which routers are targeted, CNET can help you with that:

The UK’s National Cyber Security Centre includes a number of TP-Link routers specifically targeted by the hackers.

But I would not consider that list to be complete. Which is why you should replace your router if it factory reset remotely. Consider this a today problem.

Polygraf AI Appoints Cybersecurity Executive Darren Lee to Board of Directors

Posted in Commentary with tags on May 12, 2026 by itnerd

Polygraf AI today announced the appointment of Darren Lee to its Board of Directors. Lee brings decades of enterprise cybersecurity leadership experience, including senior executive roles at Proofpoint, where he helped scale global threat protection, identity defense, and compliance security platforms used by regulated organizations worldwide.

Lee’s appointment comes as Polygraf AI continues its rapid growth following major industry recognition, including being named “Most Innovative AI Usage Control for Security and Compliance” at the Global InfoSec Awards during RSA Conference 2026, and securing a core U.S. patent for its Content Source Detection AI technology.

During his 14-year tenure at Proofpoint, Lee served in multiple executive leadership roles, most recently as Executive Vice President and General Manager of the Threat Protection Business. In that role, he led global teams building and scaling technologies across email security, identity protection, human risk management, threat intelligence, and digital compliance. His leadership directly shaped enterprise security platforms deployed globally across financial services, healthcare, government agencies, and other highly regulated sectors.

Polygraf AI delivers preemptive, on-premise enforcement of data protection and compliance controls through its proprietary compute-lite AI Behavioral Control Plane, enabling organizations to detect and prevent sensitive data exposure across AI tools, enterprise workflows, and user environments. Its edge-AI architecture uses proprietary Small Language Models (SLMs) that run entirely on local hardware with as little as 1.3 GHz CPU and 40MB of RAM, eliminating the need to send data externally. This minimal energy footprint cuts operational & infrastructure costs by removing reliance on expensive cloud GPUs, while delivering a more sustainable alternative to carbon-intensive Large Language Models (LLMs).

The company’s recently launched Desktop Overlay extends these capabilities directly to desktop endpoints with zero integration requirements, providing real-time guidance that prevents data leakage before it occurs.

Lee’s addition to the Board strengthens Polygraf AI’s strategic leadership at a time when enterprises are accelerating AI adoption across mission-critical operations. His deep background in enterprise cybersecurity product development, governance technologies, and large-scale SaaS security platforms aligns closely with Polygraf AI’s focus on enabling safe and auditable AI deployment across regulated industries.