SQL injection in the database engine. Cross-site scripting. In 2026...? 

Ryan and Mat break down how these attacks work, what to watch for, and why these "classic" vulnerability classes refuse to stay dead.                

Also covered: 80 Edge and Chromium fixes released this month, and a recurring reminder about Secure Boot certificates you can't afford to ignore this year.

This episode originally aired November 19, 2024

They cover what it does, why it matters, and how it's designed to cut meantime to remediation for IT teams. The integration surfaces real-time endpoint data directly inside Zendesk tickets. It also gives admins one-click actions like device restarts, patch deployment, and policy execution. Beyond reactive fixes, it flags automation gaps so fewer tickets get created in the first place. Plus, hear how the Splashtop remote desktop integration ties it all together when hands-on troubleshooting is needed. Whether you're running a lean IT team or managing thousands of endpoints, this one's worth a listen.

Along the way, he reflects on his career journey from marketing to IT leadership and reveals some personal spring cleaning confessions. Tune in for expert advice and a fresh perspective to help you refresh your IT environment this season.

This podcast originally aired April 24, 2025

First up: a Push Message Routing Service memory leak (CVE-2026-24282, CVSS 5.5) that lets attackers scrape session tokens and private keys from heap memory. Then, a pair of GDI bugs (CVE-2026-25181 and CVE-2026-25190) that chain together to defeat ASLR and deliver remote code execution with near-perfect reliability. Henry covers a Windows Accessibility Infrastructure flaw (CVE-2026-24291) hiding in a service most teams never think to harden, plus an SMB authentication bypass (CVE-2026-24294) that echoes EternalBlue and WannaCry.

What you'll learn:

- How attackers chain medium-severity bugs into full compromise paths

- Why the Push Message Routing Service is a target-rich environment for credential theft

- How a two-stage GDI exploit defeats ASLR with near-100% reliability

- Why accessibility services are blind spots on your hardening checklists

- What SMB's history with EternalBlue and WannaCry means for this month's auth bypass

Patch your systems. Audit your service accounts. Don't skip the mediums.

This episode originally aired March 6, 2025

Jeremy also pulls back the curtain on what he does day to day on the Automox Professional Services team: reviewing IT admins' environments, evaluating patching schedules, and working collaboratively to fine-tune configurations. Rather than coming in as the all-knowing expert, he explains why the best results come from treating every engagement as a shared experience, where both sides learn from each other.

Whether you're early in your IT career or a seasoned admin, this episode is a reminder that growth starts with a question.

Topics covered:

- Why the all-knowing IT pro doesn't exist

- How curiosity drives career growth in IT

- What an Automox environment review looks like

- Tailoring patching best practices to different industries

- Finding room for improvement even when things work

We cover:

• Why NIST's National Vulnerability Database has a growing backlog and what's causing it
• How incomplete vulnerability data creates blind spots in your patch management program
• Automox's new partnership with VulnCheck to deliver real-time vulnerability intelligence
• What KEV (Known Exploitable Vulnerabilities) data is and why your leadership team cares about it
• Expanding from fewer than 10 third-party apps to 70% coverage across 500+ supported applications
• The rollout plan from third-party apps to macOS, Windows, and Linux

Whether you're running a mature vulnerability management program or just getting started, this episode lays out how the vulnerability data landscape is shifting and what you can do to stay ahead of real-world threats.

This episode originally aired January 16, 2025

Both vulnerabilities rely on user interaction to succeed, and phishing is getting harder to spot. Ryan and Seth discuss how AI is lowering the barrier to entry for attackers, making convincing phishing emails easier to generate and enabling single actors to operate like full teams.

What you'll learn:

• How attackers use VPN disruption as a distraction for larger attacks

• Why SmartScreen bypasses are a serious initial access vector

• Which endpoints to prioritize for patching

• How AI is changing the threat model for social engineering

Patch your systems. Train your users. Stay ahead.

Drawing from his own journey into the IT space, Jeremy unpacks practical strategies for improving compliance, prioritizing threats, and empowering IT teams to play offense, not just defense. Whether you're an IT pro or just endpoint-curious, this episode will give you fresh perspective on managing smarter, not harder.

This episode originally aired May 1, 2025.

You will also get a first look at Charles’s upcoming podcast on the Automox network, where he plans to bring honest, practical stories from the post sale world without the extra polish. Then Maddie puts Charles through a customer experience themed would you rather game, covering big company wide issues versus lots of small problems, leading with smooth operations versus always jumping in to help, and choosing steady improvements versus bold changes.

If you are curious about how trust, accountability, and listening drive better outcomes for customers and teams, this episode is for you.

In this Autonomous IT live show, Automox CEO Justin Talerico shares candid perspectives on the real state of IT as the industry heads into 2026 — where things are breaking down, why burnout is becoming an operational risk, and what actually needs to change.

Topics include:
-- Why many IT careers begin with curiosity and stall under constant operational pressure
-- The operational risk created by manual work and hero-based infrastructure
-- Why automation initiatives fail and why the root cause is rarely the tooling
-- How IT leaders can rebuild trust in automation and autonomy
-- What IT leaders will look back on and question about endpoint management in 2025

The discussion concludes with a rapid-fire game:
AI vs Human vs Hybrid, deciding where IT work belongs in 2026.

This is not a product pitch.
It is not a trend report.
It is an honest conversation about how IT actually works today and how it needs to evolve.

From crafting high-quality prompts to auditing and hardening code using large language models like Claude and ChatGPT, Landon and Henry share real-world insights, practical strategies, and lessons learned from implementing AI in secure development workflows.

They also explore:

• Why context is king when prompting AI
• Security implications of AI-generated code
• Tips for optimizing token usage and context windows
• How Automox engineers are experimenting safely with AI

Whether you're a developer, security professional, or IT leader, this episode offers actionable advice and forward-thinking perspectives on integrating AI into your workflow.

This episode originally aired July 29, 2025. 

In this episode of Secure IT, host Jason Kikta is joined by Mark Cooper, CEO and founder of PKI Solutions, to unpack why PKI is so critical to identity, authentication, and trust, and what happens when it fails.

They explore how certificates enable passwordless authentication, secure TLS connections, IoT devices, endpoints, and enterprise systems, while also examining why misconfigured or poorly monitored PKI environments often become an attacker's fastest path to privilege escalation. From certificate expirations and operational outages to real-world breach scenarios and pen test failures, this conversation maps the full PKI risk spectrum.

Jason and Mark also challenge a common assumption in cybersecurity: that recovery equals resilience. Instead, they argue that true resilience means staying secure and operational, even during misconfiguration, failure, or attack.

Whether you're new to PKI or responsible for running it, this episode will change how you think about identity infrastructure, resilience, and trust.

Topics covered:

- What PKI is and why most organizations already depend on it
- Certificates, passwordless authentication, and digital identity
- How PKI misconfigurations enable high-impact attacks
- Why recovery is the weakest form of resilience
- The hidden operational and security risks of foundational systems

They discuss why remote access is still essential even when automation handles most of the work, the cost of switching between tools during urgent issues, and how Splashtop’s 20 years of experience drives reliability and security. Steph also shares early access results, including average connection times under 10 seconds and a 95% success rate.

First up: a ticking time bomb. Microsoft's 2011 Secure Boot certificates expire in June and October 2026, making this your top patching priority for the year. If your BIOS and OS aren't both updated, you're leaving the door wide open for rootkit attacks. Start auditing your hardware now. You have six months.

Next up: a Windows Installer Elevation of Privilege Vulnerability that exploits a time-of-check to time-of-use (TOCTOU) race condition. Think of it like swapping wristbands after the bouncer checks you at the door.

Finally, an actively exploited flaw in Desktop Window Manager that can leak sensitive information and even break out of sandboxes.

Patch your systems. Patch your BIOS. See you next month.

In this episode, Automox Solutions Consultant Jeremy Maldonado shares his New Year's resolution: reduce burnout by automating the manual work that drains IT teams. From device enrollment and patching policies to tracking down failures without babysitting your machines, Jeremy walks through practical ways to reclaim your time and mental energy.

You'll learn:
  - How to automate device setup the moment it comes online
  - Best practice policy templates you can use out of the gate
  - Scheduling patches around Patch Tuesday without touching your policies
  - Using policy results reports and analytics to troubleshoot smarter
  - Why "babysitting" patch day is a sign something needs to change

Whether you're new to Automox or looking to refine your workflow, this episode is a reminder: your time matters, and automation should give it back to you.

This 2.5-hour megacut compiles every Autonomous IT live show in 2025 – your companion for long shifts, quiet NOCs, and keeping one eye on the dashboard.

Grab your coffee, and ring in the new year with conversations on patch management, endpoint security, automation strategies, and the real talk that only happens when IT pros get together live.

Thanks for spending part of your year with us.

Here's to 2026.

We'll be back with new episodes next week. 

What’s inside:

• All 12 Patch [FIX] Tuesday episodes from January through December 2025
• macOS and Apple security updates
• Zero-days, CVEs, and actively exploited vulnerabilities
• Candid discussions on Hyper-V escapes, SSH hijacking chains, React RCE, and more

Whether you’re catching up on a year of patches or need something smarter than carols for a long holiday drive or late-night remediation – this compilation has you covered.

This episode connects decades of server evolution into a clear, accessible story, focusing on the people, technologies, and ideas that shaped modern computing. From IBM’s System/360 and minicomputers, to Unix and Linux, virtualization, cloud platforms like AWS and Azure, and container orchestration with Docker and Kubernetes, this episode explains how servers became the foundation of today’s digital world.

Topics covered include:
 • Server history and early computing systems
 • IBM mainframes and enterprise computing
 • Minicomputers and distributed computing
 • Unix, Linux, and open-source software
 • Virtualization and data center efficiency
 • Cloud computing and hyperscale infrastructure
 • Docker, Kubernetes, and cloud-native architecture
 • AI workloads, GPUs, and modern server hardware

Landon also highlights key figures in computing history, including Grace Hopper, Ken Olsen, Linus Torvalds, Dave Cutler, Diane Greene, and Jeff Bezos, and explains how their work still influences IT operations today.

This episode is part of our December Best Of series, featuring some of our favorite moments and episodes from the past year.

Originally aired March 20, 2025.

From early career breakthroughs to lessons learned through repetition, these moments reveal the human side of IT work while delivering practical takeaways on automation, visibility, consistency, patching, and day-to-day problem solving.

You’ll hear how IT leaders built confidence, shaped better processes, and navigated increasingly complex environments. These clips capture the ideas that resonated most – and the perspectives shaping the future of modern endpoint management.

In this 2025 highlights compilation, you’ll learn:

• How IT pros approach automation and workflow consistency
• Real stories behind early career growth and hard-earned lessons
• What builds confidence in high-pressure IT environments
• Practical tactics for patching, visibility, and operational excellence
• Trends driving modern endpoint management in 2025

If you’re an IT admin, security professional, or technology leader looking for real-world insights – this episode brings together the moments that mattered most.

You’ll hear why light patch months aren’t always low-risk, how bundled dependencies can expose you even if you don’t “use” React, and why log pipelines remain a prime target for attackers looking to hide their tracks. The team also covers seasonal phishing trends and what to expect as skeleton crews head into the holidays.

In this episode, Peter and Steph break down one of the most anticipated updates coming to Automox in early 2026 — the new partnership with Splashtop. You’ll hear why Automox is moving from Automox Assist to an integrated Splashtop experience, what this means for remote control on macOS and Windows, and how existing customers will transition to Resolve by Splashtop.

The conversation covers real-world insights from Microsoft Ignite, upcoming feature improvements, what’s included in Automate Enterprise, and how advanced Splashtop capabilities will be available as an add-on. You’ll also get a quick preview of what’s planned for future releases and how customer feedback continues to influence development.

Peter closes with a reminder about the newly released 2026 State of Endpoint Management Report, a helpful resource for IT teams planning automation priorities for the year ahead.

A great episode for IT admins, security leaders, and anyone tracking improvements to remote control inside Automox.

This episode originally aired November 14, 2024 

Jason breaks down why teams are exhausted by tool sprawl, frustrated by unreliable platforms, and ready to reclaim time by eliminating manual, repetitive work. From the renewed demand for a unified operational view to the rising expectation that software simply works, this conversation explores the real-world pressures facing IT in 2025.

He also dives into the industry’s growing shift toward automation and agentic AI, including how MCP servers are expanding what’s possible for modern IT environments – and why progress, not perfection, remains the guiding principle for practitioners everywhere.

Whether you’re fighting tool fatigue, navigating evolving IT stacks, or exploring the next wave of AI-driven operations, this episode offers a grounded, practitioner-first perspective from one of the most influential events of the year.

Tune in for insights from the Ignite show floor and a candid look at the future of IT operations.

Before MCP, AI assistants struggled to interact with the tools, systems, and data IT teams rely on. With the rise of open-source MCP servers, models now have a standardized, permission-aware way to reach into infrastructure, pull context, and execute workflows safely.

Landon also sits down with Henry Smith, who helped build the Automox MCP server prototype. Together, they explore:

• What MCP servers actually do and the problems they solve
• Why the open-source model matters for IT teams
• How MCP provides a clean, consistent interface for tools and data
• Real-world applications like report generation, patch policy creation, and audit log analysis
• How Automox built its own MCP server using Fast MCP
• The future of AI-driven IT operations

If you're an IT admin, security engineer, or automation enthusiast, this episode provides a clear explanation and a practical look at MCP servers in action.

Links:
Automox MCP Blog: https://www.automox.com/blog/automox-mcp
Automox MCP Git Repo: https://github.com/AutomoxCommunity/automox-mcp

This episode originally aired September 19, 2024.

Joining Landon is Jason Kikta, Chief Technology Officer and Chief Information Security Officer at Automox, Marine Corps veteran, and former leader at U.S. Cyber Command. Together, they break down attacker motivations, how to recognize threat patterns, and why understanding your own network better than your adversaries is the key to effective defense.

Key Takeaways:

• The five stages of a vulnerability: introduction, discovery, disclosure, exploitation, and patching.
• Why Log4j became one of the most devastating vulnerabilities in modern history.
• How to identify attacker types and motivations.
• The mindset and methodology of effective defense.
• Why “good IT starts with good security.”

Whether you're a cybersecurity professional, IT leader, or just curious about how cyberattacks really work, this episode offers practical insights from the front lines of digital defense.

This episode originally aired on July 25, 2024.

They discuss why cloud-native automation is essential for staying ahead, how to close gaps between IT and security teams, and what happens when organizations react too slowly. Drawing on decades of experience in cybersecurity and threat intelligence, this conversation challenges you to rethink what it means to be fast enough to defend your environment.

This episode originally aired on June 13, 2024.

You’ll learn how Automox’s “no security tax” philosophy gives every customer access to enterprise-grade protection — without hidden costs or trade-offs. Henry also shares his journey from IT support to cybersecurity engineering, offering practical advice for anyone looking to grow a career in IT or security.

Tune in to hear how Automox approaches product security, fosters trust between engineering and security teams, and collaborates with industry peers to keep customers safe.

• Aligning IT investments with company-wide goals
• Avoiding the pitfalls of tool consolidation and vendor lock-in
• Tracking hard vs. soft savings the right way
• Communicating IT value to finance teams with clarity and impact
• Why executive alignment and continuous value proof are critical to keeping tools funded

A must-listen for IT and security leaders who want to secure budget, prove ROI, and build stronger relationships with finance.

This episode originally aired February 20, 2025

The duo dives deep into:

• A Unity Engine remote code execution flaw that impacts games, VR apps, and even training tools
• The Windows Hello bypass vulnerability that lets attackers inject their own biometric data to access local accounts
• A Microsoft Exchange Server privilege escalation that could expose entire inboxes

With expert insights, real-world context, and a touch of humor, Ryan and Mat unpack what these vulnerabilities mean for IT and security pros — and what steps you should take right now to stay protected

🎃 Tune in for a fast, insightful rundown of October’s top Patch Tuesday updates.

He covers:

• Why the human factor is still your biggest vulnerability
• The basics of zero trust in everyday communication
• Social engineering red flags to watch for
• How to think strategically about patch prioritization
• Why most orgs still struggle with timely patching
• Tips for human-controlled automation using the Automox console

Whether you’re new to cybersecurity or want to tighten your patching strategy, this episode gives you a tactical refresh on where to focus your attention.

Jason shares firsthand stories from U.S. Cyber Command and explains why getting the basics right isn’t optional — it’s essential. Whether you’re building a modern security program or tightening existing controls, this episode delivers clear guidance on where to focus and why.

🎧 Topics covered:

• Why attackers often know your network better than you do
• The operational impact of neglected patching
• IAM missteps that quietly open doors to breaches

Perfect for IT and security leaders looking to sharpen their foundational strategies.

• Reducing human error and noise in detection
• Accelerating response speed during mass exploitation events
• Freeing up security teams to focus on high-value tasks
• Driving consistency and precision across IT operations

From worms of the early internet to today’s rapid weaponization of exploits like Log4j, Jason shares lessons from the field and why automation is no longer optional for security leaders. Whether you’re focused on patching, configuration, or incident response, this episode shows how automation maturity improves resilience, efficiency, and your ability to outpace attackers.

This episode originally aired February 16, 2024

JoLynn shares her background in product leadership, the vision behind AEM, and why prioritizing customer feedback is central to Automox’s roadmap. You’ll also hear how Automox is:

• Delivering automation that reduces mean time to patch to just 17 days
• Improving the end-user experience with recent agent and tray updates
• Expanding OS coverage with day zero macOS support
• Building an ecosystem that integrates seamlessly with IT’s existing tools

If you’re an IT professional looking to cut risk, save time, and modernize endpoint management, this episode gives you a front-row seat to how Automox is leading the charge.

This episode originally aired February 18, 2024. 

• Why IT and security are non-negotiable investments for scaling businesses
• How Maxio structures compliance around SOC 2, ISO 27001, and PCI audits
• The role of IT in go-to-market, customer trust, and competitive differentiation
• Lessons from M&A integrations—where IT diligence can make or break success
• Practical advice for IT and security leaders on building cross-functional governance

Whether you’re a technology leader, operator, or business executive, this conversation offers actionable insights on making IT and security a business driver — not an afterthought.

1. Network Inventory: Knowing what's on your network is crucial. This involves having a comprehensive inventory of all devices and systems connected to the network.
2. Configuration and Patching: Keeping systems configured correctly and up-to-date with patches is essential to prevent vulnerabilities that could be exploited by malicious actors.
3. Identity and Authentication Protection: Ensuring robust identity and authentication measures are in place to protect against unauthorized access and maintain the integrity of user accounts.

This episode originally aired October 10, 2024

You’ll get:

• Clear patch priorities and timing.
• Likely attack paths and real-world detection tips.
• Hardening moves: WDAC/AppLocker, least privilege, Phone Link controls, and removing Hyper-V where it’s not needed.
• How to use the Automox console to group at-risk devices, push updates, disable features, and verify compliance.

Subscribe, share with your team, and tighten your local attack surface today.

Along the way, they share real-world stories about discovering hidden libraries, avoiding common pitfalls, and leaning on version control to save projects from chaos. From Python and Bash basics to Git, Postman, and even the “bus test” for documentation, this episode is packed with practical lessons to help you turn automations into lasting, maintainable solutions.

Whether you’re just starting your automation journey or looking to optimize and scale what you’ve already built, you’ll find insights, strategies, and inspiration to take your IT problem-solving further.

Awesome-Selfhosted GitHub Link: https://github.com/awesome-selfhosted/awesome-selfhosted

Stay tuned for Part 2, where we dig into the tools, testing, and turning automations into solutions! 

Awesome-Selfhosted GitHub Link: https://github.com/awesome-selfhosted/awesome-selfhosted

From super-talented IT cartoonist and influencer marketing service agency co-owner, Forrest Brazeal, and gifted Automox VP of Customer Experience, Charles Coaxum, to the sagely verbose CISO and VP of Product at Automox, Jason Kikta, and Gong’s inspirational Director of IT, James Sennett – our handpicked line-up of industry trailblazers won’t just talk about how to advance. Instead, they’ll walk you through real-life strategies to help you climb the career ladder and stay on the top rung once you get there.

This show was broadcast live Wednesday, October 30, 2024 at 12 PM Central Time. 

This episode originally aired January 2, 2025

This episode originally aired October 29, 2024

This episode originally aired January 9, 2025

This episode originally aired October 17, 2024

From crafting high-quality prompts to auditing and hardening code using large language models like Claude and ChatGPT, Landon and Henry share real-world insights, practical strategies, and lessons learned from implementing AI in secure development workflows.

They also explore:

• Why context is king when prompting AI
• Security implications of AI-generated code
• Tips for optimizing token usage and context windows
• How Automox engineers are experimenting safely with AI

Whether you're a developer, security professional, or IT leader, this episode offers actionable advice and forward-thinking perspectives on integrating AI into your workflow.

🔧 Topics Covered:
 • Endpoint security & patch automation
 • Risk score reduction with Rapid7 & Automox
 • Worklet-powered upgrades & scripts
 • Reboot strategies that actually work
 • Culture change in IT and user communications

🎧 Whether you're an IT leader, sysadmin, or tech strategist, this episode delivers actionable advice from someone who's been there.

Here's the setup: a user unknowingly reuses compromised credentials with the company’s SSO provider. An attacker logs in, flies under the radar, and impersonates internal IT support using Slack, email, and calendar invites. Their goal? Convince employees to install a fake remote access tool—all while avoiding anyone likely to report suspicious behavior.

Join Landon Miles, Tom Bowyer, and Ryan Braunstein as they:

• 🔍 Investigate a suspicious login and Slack impersonation
• 🔐 Contain and remediate the breach using real-world tactics and tools
• 📉 Discuss phishing-resistant MFA, endpoint visibility, Slack impersonation risks, and more
• 🧠 Share tips on improving security awareness, incident playbooks, and interdepartmental collaboration
• 💬 Answer live audience questions about malware analysis, EDR response, and building detection rules

Whether you’re a security veteran or just starting out in IT, this episode offers an unfiltered look at how to respond when credentials are compromised and attackers act like insiders.

📎 Bonus: We also include a downloadable Incident Response Checklist to help your team run your own tabletop exercise.

🛡️ Because in today’s world, attackers don’t need to break in—they just need to log in.

Jason breaks down why automation, when paired with rigorous testing and strategic controls, is critical to modern IT and cybersecurity success. He challenges listeners to rethink what IT efficiency really means—not job cuts, but freeing teams to tackle the backlog and do more meaningful work. He wraps with a personal challenge: find and automate one tedious task this week using tools like Automox, Okta workflows, or your own scripts.

This episode originally aired September 12, 2024 

You’ll learn:

• What digital CX looks like in action
• How to transition your skillset into tech
• The importance of proactive, scalable customer education
• Why assuming user knowledge can break your product experience
• Career advice for new grads and professionals making a switch

Whether you're navigating your own tech career or building better customer journeys, this episode is full of practical insight and inspiring takeaways.

👉 Subscribe to the Automous IT Podcast for more behind-the-scenes conversations with the people shaping IT.

Topics include a physical attack method bypassing BitLocker encryption (CVE-2025-48001), the looming expiration of secure boot certificates, a Linux privilege escalation flaw in chroot and sudo (CVE-2025-32463), and a proof-of-concept .zip exploit that hides malicious content during preview but runs it on unzip.

Expect sharp technical insights, practical mitigation tips, and as always, a few laughs. 

This episode originally aired March 18, 2025

Whether you’re rebooting servers at 2 am, automating backend workflows, or trying to catch your breath, this episode is for you.

Topics covered:

• Balancing 2 a.m. server reboots with life at home | What that means for you
• Spotting early burnout signs | Steps you can take now
• Learning from peers | Practical tips to expand your IT skill set
• Finding small wins | Why a quick acknowledgment goes a long way

Stephen shares how he:

• Transitioned from the Air Force into IT
• Unlocked the full potential of Automox in a previously underused environment
• Built a hands-on lab to test Linux and Windows automation
• Earned all three Automox University certifications
• Became a go-to expert through community collaboration and scripting

This episode originally aired July 21, 2024

Ted shares how a midnight knock on his window sparked a decades-long journey into IT, what it’s like to support and expand Automox’s Linux agent, and why Linux isn't as intimidating as it seems. 

🔥 Highlights:

• How Ted got into IT thanks to a surprise 1 a.m. “interview”
• Behind the scenes of supporting 2x Linux distributions at Automox
• Ted’s dual life as an IT expert and volunteer firefighter
• Why exploring config files is the best way to learn Linux

Whether you're a sysadmin, Linux enthusiast, or just here for the pirate jokes, this episode is packed with insights and fun. Don’t miss it!

This episode originally aired March 15, 2024

Links:
- Liz Lerman Critical Response Process
- We Can Do Hard Things Podcast 

This podcast originally aired August 8, 2024.

• A chained SSH vulnerability (CVE-2025-26465 & CVE-2025-26466) that allows memory exhaustion and bypasses host key verification
• A WebDAV remote code execution flaw (CVE-2025-33053) actively exploited in the wild
• Multiple macOS threats, from sandbox escapes to keychain access and privilege escalation

The team also shares patching strategies, mitigation tips, and password hygiene advice you’ll want to follow.

You’ll learn how to balance empathy with efficiency using proven frameworks like ITIL, SRE, and the NIST Cybersecurity Framework. Discover the people skills that drive career growth—active listening, clear communication, and trust-building—and why vulnerability (yes, that kind) belongs in your IT toolkit.

This episode originally aired February 4, 2025. 

Whether you're a CISO, CTO, or security architect, this episode is your briefing on where the industry is headed.

Then, explore the updated patching analytics dashboards. You can measure mean time to remediate (MTTR), track patch impact and performance, and identify exactly where to improve your risk mitigation strategy.

You'll also get a sneak peek at upcoming summer releases, including 300+ new device inventory data points and a redesigned device details page. Plus, scheduling policy now syncs automatically with Patch Tuesday — with flexible offsets.

Tune in to stay ahead of vulnerabilities, streamline your workflows, and make data-driven decisions across your IT environment.

This live show originally aired April 16, 2025 

 💼 Segment 1: Work-life balance in IT

Eric Fonseca (Union School District) and Ashlyn Davis (Automox) talk about setting healthy boundaries, offloading low-value tasks through automation, and building sustainable practices that support both productivity and peace of mind.

 🧱 Segment 2: Taming technical debt

Colby Hall and Henry Smith from Automox unpack what technical debt looks like in practice, where it hides, and how it can turn into operational and security risk. They share real-world strategies for identifying, triaging, and resolving issues for long-term efficiency.

 🔧 Segment 3: SRE spring cleaning tasks

Jeremy Maldonado, Ted Harapat, and Spencer Pothier deliver a checklist of spring cleaning tasks for site reliability engineering teams — from reducing alert fatigue and removing unused infrastructure to tightening up service level objectives and minimizing toil. Ideal for teams managing cloud environments and uptime-critical systems.

 Drawing from his own journey into the IT space, Jeremy unpacks practical strategies for improving compliance, prioritizing threats, and empowering IT teams to play offense — not just defense. Whether you're an IT pro or just endpoint-curious, this episode will give you fresh perspective on managing smarter, not harder.

Tune in and learn how a little proactive maintenance today can save you countless hours of reactive troubleshooting tomorrow!

1. Clean Your Desk and Workspace
2. Dust Off Your Hardware and Check for Wear
3. Untangle and Manage Cables
4. Review Patch Policies
5. Purge Old Accounts and Review Software Contracts
6. Declutter Local Systems and Storage
7. Audit and Test Your Backups
8. Review Digital and Hardware Tech Debt
9. Update Your Documentation and Refresh Policies

Along the way, he reflects on his career journey from marketing to IT leadership and reveals some personal spring cleaning confessions. Tune in for expert advice and a fresh perspective to help you refresh your IT environment this season.

Ashley also explores Casey’s go-to strategies for spring cleaning in IT, his preference for Automox over traditional tools like Intune for app deployment, and how he balances standardization with flexibility in complex environments.

TL;DR: Patch your systems, secure your gateways, and maybe don’t trust that sketchy MP3.

The discussion covers the transition from minicomputers to personal computing, the impact of open-source software, and the shift toward containerization, hybrid cloud, and AI-driven infrastructure. With a focus on the forces driving technological progress, this episode unpacks the past, present, and future of server technology and its role in digital transformation.

Hosted by IT expert Landon Miles, the Teach IT podcast delivers bite-sized, actionable IT tips in three minutes or less. Perfect for both tech pros and beginners, each minisode simplifies complex concepts into clear, practical advice. Tune in to sharpen your IT skills and discover smarter solutions, one quick episode at a time.

Link to book discussed:
The Design Thinking Playbook

Episodes Highlights: 

1. (00:32 - 13:28) Autonomous IT Live – Optimize Your Endpoint Management: 3 IT Team Resolutions for 2025, E02 
2. (13:29-15:50) Automox Insiders – Curiosity, Adaptability, and Career Growth with Ryan Jeziorski, E13
3. (15:51-17:07) Hands-On IT – Resilience Rewired: Building Strength and Adaptability in IT, E14
4. (17:08-22:05) Patch [FIX] Tuesday – January 2025 [Experts Analyze New Hyper-V, Active Directory, and macOS Vulnerabilities], E15
5. (22:06-25:09) CISO IT – The CISO Blueprint pt. 1: Why There Are No 'Nos' in IT with Rich Casselberry, E15
6. (25:10-28:51) Product Talk – Agent 2.0, New Linux CVE Data, and the Future of Autonomous Endpoint Management, E13
7. (28:52-31:28) Automate IT – Building Resilient IT Teams and Solutions, E12

Hosted by IT expert Landon Miles, the Teach IT podcast delivers quick, actionable IT tips in three-minutes or less. Tailored for tech pros and beginners alike, each minisode breaks down complex concepts into clear, easy-to-use advice. Tune in to sharpen your IT skills and discover smarter solutions, one short episode at a time.

Listen to gain insights on how ITOps teams can best work with finance, advice on overcoming tooling and automation issues,
and learn some failproof strategies for ITOps improvement. 

Whether you're looking to create adaptable IT solutions, enhance your problem-solving skills, or kick-start habits that fuel long-term personal development, this episode offers actionable advice you can put into practice right away. 

This episode recaps some the most critical and interesting exploits, from supply chain compromises to elevation of privilege threats targeting widely used platforms. Whether you're an IT administrator, security professional, or tech enthusiast, this episode provides valuable insights to stay ahead of evolving threats.

Here’s a list of vulnerabilities discussed in this episode, and be sure to tune into the Patch [FIX] Tuesday podcast on the second Tuesday of every month. 

1. Operation Triangulation (00:13)
2. CVE-2024-21401: Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability (5:00)
3. CVE-2024-21400: Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability (11:00)
4. CVE-2024-3094: XZ/Liblzma Supply Chain Backdoor (17:08)
5. CVE-2024-4671: Google Chrome Use-After-Free Vulnerability (30:00)
6. CVE-2024-30078: Windows WiFi Driver Remote Code Execution Vulnerability(35:03)
7. CVE-2024-38053: Windows Layer Two Bridge Network RCE (47:14)
8. CVE-2024-38180: SmartScreen Prompt Remote Code Execution Vulnerability (53:12)
9. CVE-2024-43491: Microsoft Windows Update Remote Code Execution Vulnerability (1:00:00)
10. CVE-2024-43533: Remote Desktop Client Remote Code Execution Vulnerability (1:04:24)
11. CVE-2024-5535: Microsoft Defender for Endpoint Remote Code Execution Vulnerability (1:07:35)
12. CVE-2024-49093: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability (1:09:36)

In this special episode, we’ve compiled some of our favorite interviews from 2024. 

In this episode of IT Insiders, Maddie Regis interviews Jeremy Maldonado, a Worklet Systems Engineer at Automox. They discuss the concept of Worklets, which allow IT administrators to run custom scripts on managed endpoints. Jeremy explains how Worklets enhance IT automation by providing customization, safety, and accessibility. The conversation also covers the practical aspects of creating and using Worklets, their applications in IT management, and concludes with a trivia game about automation. 

In other exciting news, Jeremy will be hosting the Automate IT podcast starting in January!

From super-talented IT cartoonist and influencer marketing service agency co-owner, Forrest Brazeal, and gifted Automox VP of Customer Experience, Charles Coaxum, to the sagely verbose CISO and VP of Product at Automox, Jason Kikta, and Gong’s inspirational Director of IT, James Sennett – our handpicked line-up of industry trailblazers won’t just talk about how to advance. Instead, they’ll walk you through real-life strategies to help you climb the career ladder and stay on the top rung once you get there.

This show was broadcast live Wednesday, October 30, 2024 at 12 PM Central Time. 

1. Network Inventory: Knowing what's on your network is crucial. This involves having a comprehensive inventory of all devices and systems connected to the network.
2. Configuration and Patching: Keeping systems configured correctly and up-to-date with patches is essential to prevent vulnerabilities that could be exploited by malicious actors.
3. Identity and Authentication Protection: Ensuring robust identity and authentication measures are in place to protect against unauthorized access and maintain the integrity of user accounts.

Links: 
AEM Manifesto: aem-manifesto.org

He encourages listeners to automate tedious tasks to free up time for more valuable and rewarding work. The episode concludes with Jason expressing gratitude for the growing listenership and the impact of the podcast.

They also discuss the YubiKey vulnerability, noting that while it requires specialized equipment to exploit, it highlights the fundamental role of YubiKeys in security.

In this episode, Jason Kikta, the CISO at Automox, shares his background with the early days of Linux and highlights its importance in the computing industry. He discusses the history of Linux, its early challenges, and the advancements it has made over the years. Jason emphasizes the role of Linux in driving innovation and its impact on the software ecosystem. He encourages listeners to explore Linux and experience the possibilities it offers. Experimentation is a great teacher!

They highlight the simplicity and ease of use of Automox and how Automox University aims to provide concise and relevant content to help users quickly understand and get value from the product. They also mention the certification programs offered by Automox University and the value of certifications in the IT and security industry.

Links:
- Liz Lerman Critical Response Process
- We Can Do Hard Things Podcast 

Key Takeaways: 

• The skill gap in IT is a common challenge due to the broad and varied domains within the field.
• Vendors can be valuable resources for closing the skill gap, as they have specialized knowledge and are motivated to help their customers succeed.
• Reach out to vendors technical support for advice and support beyond their predefined courses and materials.
• Leverage vendor resources to level up skills and address skill gaps in specialized industries.

In this episode, Jason Kikta and Rich Cassleberry discuss the challenges of IT security and how to make better risk decisions. They explore the difficulty of proving a negative in security and the lack of obvious metrics of success. They emphasize the importance of balancing risk and finding the right level of security for the organization. They also discuss the need for reputation management and building trust within the company. The conversation highlights the value of security tools that automatically take action and the need for ongoing evaluation and improvement in security practices. They conclude with advice for new security practitioners, encouraging them to find a path to yes and how to be a trusted partner within your organization.

In this episode of Automox Insiders, Maddie Regis interviews Charles Coaxum, the Senior Vice President of Customer Experience at Automox. They discuss Charles' role in maximizing customer satisfaction and his passion for understanding and meeting the needs of others. Charles explains why he joined Automox and highlights the company's innovative approach to modernizing IT operations. They also explore the key to keeping customers happy, which involves genuine relationships built on trust, communication, and empathy. 

Links:
community.automox.com

Links:
World on the Brink
How America Can Beat China in the Race for the Twenty-First Century
By Dmitri Alperovitch

https://www.amazon.com/World-Brink-America-Twenty-First-Century/dp/1541704096

Books Referenced:

Algorithms by Panos Louridas 

Book/Content Recommendations:
- Brené Brown: Daring Greatly
- Brené Brown: The Call to Courage (on Netflix, if that's your thing!)
- Crucial Conversations

Welcome to the Automox Insiders podcast, your behind-the-scenes look into Automox, hosted by Maddie Regis. This podcast will introduce you to the creative and dedicated individuals driving the progress of our product. Each episode uncovers the unique stories, insights, and experiences of the people working behind the product. Join Maddie as she uncovers the human stories at the heart of Automox’s technological innovation.

Notes: 

• 5 second clip I saw on the Big Bang Theory: https://www.youtube.com/watch?v=X_mzgdQGwY4
• How to contribute to the linux kernel: https://www.linux.com/news/three-ways-beginners-contribute-linux-kernel/
• Linus Torvalds Linux Pronunciation: https://en.wikipedia.org/wiki/File:Linus-linux.ogg

Where to start: 

• Everyone will tell you differently. But, pick one and start. Here’s Ubuntu. It’s what I started with! 
  • https://ubuntu.com/download/desktop
• Here’s how to create a bootable USB drive on Windows: https://ubuntu.com/tutorials/create-a-usb-stick-on-windows#1-overview
• If you have an Apple Silicon Mac, try out UTM for creating virtual machines. https://mac.getutm.app/

Sources:

Since we’re talking about open source software, I figured it’d be ok to use Wikipedia, as it’s an open source encyclopedia. 

• The Unix Time Sharing System (1973 Paper): https://dsf.berkeley.edu/cs262/unix.pdf
• Linux Kernel: https://en.wikipedia.org/wiki/Linux_kernel
• Linux: https://en.wikipedia.org/wiki/Linux
• History of Unix: https://en.wikipedia.org/wiki/History_of_Unix
• Origins and History of Unix: https://web.archive.org/web/20101109165942/http://www.faqs.org/docs/artu/ch02s01.html
• Larry Wall: https://en.wikipedia.org/wiki/Larry_Wall
• Linus Torvalds: https://en.wikipedia.org/wiki/Linus_Torvalds

Other Podcasts: 

• CISO IT – Livin' on the Edge: Linux's Impact on Computing, E04:  https://listen.automox.com/episodes/ciso-it-livin-on-the-edge-linuxs-impact-on-computing-e04
• Automate IT - Starting Your Linux Adventure, E03: https://listen.automox.com/episodes/automate-it-starting-your-linux-adventure-e03

Show Links:

Zac’s Recommendations: 

Sysadmin subreddit: https://www.reddit.com/r/sysadmin/

John Hammond Youtube Channel: https://www.youtube.com/@_JohnHammond

Gerald Auger Youtube Channel: https://www.youtube.com/c/geraldauger

Show Links:

Getting started with Home Assistant: https://www.home-assistant.io/getting-started/

Links: 

• Risky Business Podcast: https://risky.biz/
• Latest CISO IT Podcast: https://www.automox.com/resources/podcasts/ciso-it-e03
• macOS Sonoma 14.4 Security Release Notes: https://support.apple.com/en-us/HT214084

Links:

• Automox Worklet Catalog (public): https://www.automox.com/worklets
• Automox Worklet Catalog (in console): https://console.automox.com/manage/worklet-catalog
• Automox Supported Linux Distros: https://help.automox.com/hc/en-us/articles/5352186282644-Supported-Operating-Systems

Links:
Nacho: https://www.youtube.com/watch?v=OKdF2GRitTQ
 
More about Boolean Logic, Binary, and Computer Science:  https://www.codecademy.com/resources/blog/what-is-boolean-logic/

Automox Community Episode Forum: https://community.automox.com/watercooler-133/hands-on-it-automation-101-discussion-2374

Home Automation:
IFTTT: https://ifttt.com/
Home Assistant: https://www.home-assistant.io/

Book Discussed: https://the1thing.com/book/

Automox Roadmap: https://discover.automox.com/product/roadmap

Link to Mitigation Script: 

https://www.automox.com/blog/anydesk-compromised-automox-fix

Show Links:

• 2024 State of ITOps Report: https://go.automox.com/itops-report-2024/
• Heroes of IT – Interview with James Sennet, Gong Director of IT Operations, Episode 01: https://listen.automox.com/episodes/heroes-of-it-episode-01
• State of ITOps Webinar: https://www.youtube.com/watch?v=xvhC0qp4TiE
• Landon’s LinkedIn Profile: https://www.linkedin.com/in/landonmiles/
• Automox Twitter: https://twitter.com/Automox