Patch now, govern faster. This week Shawn Valle and Garrett Gross break down three stories every security leader needs on their radar: the SharePoint zero-days under active attack (and CISA's 72-hour patch mandate), the Craneware breach that put 2,000 hospitals in the blast radius of a single vendor, and Gartner's warning that AI agents are hitting production 8x faster than governance can keep up — with $234B at risk.

Cybersecurity Growth is a show for aspiring and existing cybersecurity leaders, hosted by Shawn Valle and Garrett Gross.

⏱️ CHAPTERS 0:00 Cold open + welcome 2:30 A word from Cybersecurity Growth 3:30 SharePoint zero-days: CISA says patch in 3 days 11:00 Craneware breach: one vendor, 2,000 hospitals of blast radius 18:30 Gartner: AI agents outpacing governance 8-to-1, $234B at risk 26:00 Rapid takeaways you can use Monday morning

🔗 STORIES WE COVERED

CISA urges immediate SharePoint patching: https://www.securityweek.com/cisa-urges-immediate-patching-of-exploited-sharepoint-vulnerabilities/
CISA SharePoint hardening alert: https://www.cisa.gov/news-events/alerts/2026/07/14/cisa-urges-sharepoint-hardening-after-new-exploitations
Craneware breach (TechCrunch): https://techcrunch.com/2026/07/20/hackers-stole-significant-amount-of-data-from-tech-firm-relied-on-by-thousands-of-us-hospitals-and-pharmacies/
Gartner: agentic AI puts $234B at risk (CIO): https://www.cio.com/article/4192242/agentic-ai-puts-234b-in-enterprise-saas-spending-at-risk-gartner-says.html
Gartner on tiered AI agent governance: https://www.gartner.com/en/newsroom/press-releases/2026-05-26-gartner-says-applying-uniform-governance-across-ai-agents-will-lead-to-enterprise-ai-agent-failure

🎓 LEVEL UP YOUR LEADERSHIP The Cybersecurity Growth platform is live — self-paced courses like "The First 100 Days of a CISO," program-building templates, and a community of global cyber leaders. Courses count toward CPEs (CISSP and more). Free trials at https://CybersecurityGrowth.com

📬 CONNECT

Subscribe on YouTube + hit the bell
Listen on your favorite podcast app
Shorts on TikTok
Live every other week on Twitch + YouTube

New episodes every 2 weeks. Thanks for growing with us.

#Cybersecurity #CISO #Leadership #AISecurity #SharePoint #ThirdPartyRisk #AIGovernance #CyberLeadership

SHOW NOTES

Patch Now, Govern Faster

SharePoint under fire (3:30). Four SharePoint CVEs are being actively exploited, including an unauthenticated RCE, and CISA gave federal agencies just 3 days to patch. Attackers are chaining bugs to steal IIS machine keys and persist — meaning patching alone won't evict them; key rotation is required. We debate the real leadership call: emergency weekend change window vs. normal change control, and whether on-prem SharePoint should exist in your environment at all in 2026.

The vendor blast radius problem (11:00). Craneware — billing software behind ~2,000 US hospitals and ~10,000 clinics and pharmacies — confirmed attackers exfiltrated a significant volume of data. Same week, Hugging Face disclosed a malicious-dataset attack that stole credentials off its infrastructure. Two supply-chain intrusions in one news cycle is a pattern. We dig into what a real vendor-breach playbook looks like, and how much disclosure — and how fast — you should demand from critical vendors.

The AI agent governance gap (18:30). Gartner says AI agents are entering production 7–8x faster than orgs are building governance, with $234B in enterprise software spend at risk by 2030 and 40%+ of agentic AI projects predicted to be canceled by 2027. Their contrarian take: uniform governance across all agents guarantees failure — tier it by autonomy and risk. The real question is organizational, not technical: who owns agent identity and authorization at your company?

Monday-morning takeaways (26:00). Ask your team: do we run on-prem SharePoint anywhere, and which critical vendors have breach-notification SLAs in their contracts? Then start an AI agent inventory — even a spreadsheet of what agents exist, what they can touch, and who approved them puts you ahead of most orgs.

Hosted by Shawn Valle (Founder & Chief Strategist, Cybersecurity Growth) and Garrett Gross. Learn more at https://CybersecurityGrowth.com