Priviso Live

A bank fined for exposing customers' home loan applications. A crypto exchange drained of billions in about twenty minutes. A tech giant that lost roughly half a trillion dollars of market value in a single day. Lyn, Stephen and Kayla unpack it all.

In this episode:

⚖️ The FNB fine: the Information Regulator has fined FNB R1 million under POPIA after a misconfigured app let customers see other people's home loan applications. We look at what the Regulator found, including two customer warnings reportedly treated as isolated incidents.

📊 Are the fines increasing? We counted eight publicly reported fines since 2023, two of them this week, alongside a surge in breach notifications.

🔓 The 20-minute heist: roughly $6.3 billion left Binance's wallets in the largest crypto theft on record. How did attackers turn a hot wallet into a sweeper, and what should every organisation take from it?

📉 Alphabet's worst day: around $500 billion wiped off Google's parent company after weaker results, an AI selloff that rattled the Nasdaq, and a satellite that wrote a haiku from orbit.

💡 Two questions to take to your next leadership meeting: if a fortune can move in twenty minutes, can your monitoring tell you in two? And who is accountable for your organisation's AI decisions, as King V and ISO/IEC 42001 invite you to ask?

🎧 Watch or listen to Episode 102 now, wherever you get your podcasts.

💬 Has your organisation tested what happens when the first customer complaint about exposed data arrives? Tell us in the comments.

👉 Subscribe to Priviso Live on YouTube, Apple, Spotify, Samsung and iHeartRadio.

📩 Need help with security, risk or ICT legislation? Reach out to Priviso Consulting at admin@priviso.co.za.

#PrivisoLive #POPIA #InformationRegulator #CyberSecurity #CryptoSecurity #AIGovernance #KingV #ISOIEC27001 #ISOIEC42001 #DataProtection

Six billion people have barely touched AI. About five thousand have seen what it can really do. 🤔 So which group is sitting around your boardroom table?

This week Lyn, Stephen and Kayla ask the uncomfortable question behind the AI hype: are the people approving AI strategy the ones who actually understand it?

🔍 In this episode:

🔻 Karpathy's Funnel: Andrej Karpathy's 'napkin maths' on who really understands AI, set against MIT, McKinsey and BCG findings that most organisations are still waiting for AI to pay off. Why is roughly one company in twenty banking the benefits, and what should boards do about it?

🚔 The AI that filed a fake murder tip: an AI model in an automated test submitted an invented eyewitness account to a police tip line. No hack, no breach, no ransomware. Just software doing something nobody asked for.

🧪 Ampath Laboratories: attackers claim 80 million patient records. What has been confirmed, what is disputed, and how to protect yourself and your family from the scam calls that follow.

🚀 And finally, a car with rocket thrusters. If it needs them, does the warranty cover re-entry?

💡 The takeaway: you don't need a huge breach for AI to cause disruption, and you don't need to be in the top 0.2% to govern it well. You do need to get your leadership a little further down the funnel.

🎧 Watch or listen to Episode 101 now, wherever you get your podcasts.

💬 Where does your board sit on the funnel? Tell us in the comments.

👉 Subscribe to Priviso Live on YouTube, Apple, Spotify, Samsung and iHeartRadio.

📩 Need help with AI governance, security, risk or ICT legislation? Contact Priviso Consulting at admin@priviso.co.za.

🎉 Priviso Live turns 100!

On 4 October 2024 we published a three and a half minute episode on security awareness. One hundred episodes, and just over twenty two hours of conversation later, we're looking back at the journey, and forward to what comes next.

🎙️ In this special retrospective, Lyn, Stephen and Kayla revisit:

📼 Where it all began: a short, educational show explaining information security and South African ICT legislation in plain language, and the people who have sat in the studio chairs since.

📰 From lecture to magazine: how single-topic explainers gave way to a weekly news magazine, and why one episode needed an update within days of release.

🤖 The rise of AI: from 3 of our first 25 episodes mentioning artificial intelligence, to 22 of the last 24.

⭐ The episodes that defined us: a cereal-box whistle that hacked the phone network, the eccentric Mr McAfee, the post-truth era, P(Doom), "Call Home, Let's Discuss", Roman Yampolskiy, AI companions, Moltbook, the zero-human company, and last week's fruit fly gamers, with why each one mattered at the time.

🔮 What's next: post-quantum deadlines, and cyberbiosecurity, the emerging discipline where digital attacks carry biological consequences.

And yes, there's a moment at the end that the rest of the team kept secret from Lyn. 🥂

🎧 Watch or listen to Episode 100 now, wherever you get your podcasts.

💬 Which Priviso Live episode has stayed with you? Tell us in the comments, we'd love to know.

👉 Subscribe to Priviso Live on YouTube, Apple, Spotify, Samsung and iHeartRadio.

📩 Need help with security, risk or ICT legislation? Reach out to Priviso Consulting at admin@priviso.co.za.

#PrivisoLive #100Episodes #InformationSecurity #CyberSecurity #ArtificialIntelligence #AIGovernance #ISO27001 #ISO42001 #POPIA #PostQuantum #Cyberbiosecurity #KingV

🎙️ New episode of Priviso Live is out now!

🔐 An AI model just claimed to have cracked an 83-year-old, unsolved Enigma message from 1941, in about ten hours. Impressive? Yes. Confirmed? Not yet. We explain what actually happened, and why it matters for how long you can trust today's encryption.

🪰 "They downloaded a fly's brain into an AI." You've seen the headlines. We separate the genuine neuroscience milestone, a complete map of a fruit fly's 166,000-neuron brain, from the viral hype about flies playing video games and trading stocks, badly.

🚨 The world's three biggest AI labs just agreed, in public, to slow down. We unpack the internal safety test that spiralled into a real breach of a major AI hosting platform, and what it means for boards, security teams and AI governance practitioners.

Every story this week carries a real lesson for anyone working in information security, ICT legislation, or AI governance, whether you're planning for ISO/IEC 27001, building an ISO/IEC 42001 AI management system, or simply trying to work out which headlines to trust.

🎧 Watch or listen to the full episode now, wherever you get your podcasts.

💬 Which story surprised you most, the cipher, the fly, or the slowdown? Tell us in the comments.

👉 Subscribe to Priviso Live on YouTube, Apple, Spotify, Samsung and iHeartRadio.

📩 Need help with security, risk or ICT legislation? Reach out to Priviso Consulting at admin@priviso.co.za.

#InformationSecurity #CyberSecurity #ArtificialIntelligence #AIGovernance #ISO27001 #ISO42001 #Cryptography #Enigma #POPIA #PrivisoLive

⏱️ The twenty four hour clock has started. Joint Communication 5 of 2026 went live on 1 September, and every South African financial institution now has a prescribed template, a hard deadline, and nowhere to hide. We walk through all five tabs, and the three concessions the regulators refused to make.

📈 Eight thousand data breaches, and counting. The Information Regulator has confirmed more than 8 000 security compromise notifications to date, with 1 220 since April alone, and it expects to pass 3 000 this financial year. We look at the fines actually issued, the ones the courts set aside, and why the headline number tells us far less than it should.

🤖 Ransomware crews have found a use for artificial intelligence, and it is not what anyone expected. They are still getting in through hardcoded credentials and unpatched applications. What has changed is what happens next, when an AI agent reads your stolen data back to you and prices the ransom accordingly.

⚖️ And the question we close on. If you have spent eighteen months teaching an AI agent how you do your job, what exactly have you handed over? South African law is clearer than most executives expect, and it belongs on the board agenda as a King V matter.

Every one of these stories carries a governance lesson for ISO/IEC 27001, ISO/IEC 42001 and POPIA practitioners, whether you are rewriting an incident response plan, sitting on a board, or being asked to train your own replacement.

🎧 Watch or listen to the full episode now, wherever you get your podcasts.

💬 Could your team complete a regulator's incident template within twenty four hours, on a Sunday? Let us know in the comments.