The BLUF Podcast

This episode focuses on AI as an indirect, increasingly automated threat to operational technology (OT). Drawing on a Blastwave webinar, it argues that offensive AI can rapidly exploit or even generate vulnerabilities, making “patch and pray” and human-speed detection/response inadequate for OT environments where mistakes can cause real-world safety impacts. We highlights risks from indirect AI exposure such as accidental data sharing, AI-generated scripts or PLC configurations, and hallucinations that can produce unsafe settings. It emphasizes fundamentals that scale against AI: assume breach, prevent discovery, stop IT-to-OT lateral movement, and use human-in-the-loop authentication and zero trust controls, positioning Blastwave and ATPGov as partners to operationalize these measures.

00:00 Introduction

This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com or follow us on LinkedIn.

On this episode we're dissecting a Unit 42 cloud incident response case and highlights from their 2026 Global Incident Response Report. We describe an AWS compromise where a publicly exposed access key enabled attackers to disable and delete CloudTrail, create a new elevated IAM user, and launch GPU-heavy EC2 instances for crypto mining. This use case frames cloud incidents around IAM issues, misconfigurations, and vulnerabilities, citing stats on slow remediation, weak MFA enforcement, excessive permissions, and exposed credentials, and warns attackers are accelerating to exfiltration in about 72 minutes. On the episode we make some recommendations about phishing-resistant MFA, least privilege and just-in-time admin, tamper-resistant centralized logging, DevSecOps guardrails, SaaS/OAuth inventory, and automated containment, and offer a readiness review and 90-day plan via ATP Gov and Unit 42.

00:00 Real Cloud Compromise Setup

This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com or follow us on LinkedIn.

We summarize a briefing from an HPE Partner Day featuring EigenQ on post-quantum cryptography (PQC). It argues the quantum threat is immediate due to “harvest now, decrypt later” and rapid advances that could soon break today’s encryption, making long-lived government data vulnerable. The episode stresses that software-only PQC and algorithms alone are insufficient because key risks persist in entropy (weak randomness), identity (spoofable roots of trust), and execution (keys exposed in compromised hosts). EigenQ’s approach centers on “entropy, identity, execution,” using quantum-generated entropy and running PQC inside trusted execution environments with remote attestation so keys aren’t exposed to the OS. It emphasizes incremental, no “rip-and-replace” deployment via overlays (e.g., quantum-proof VPN/SSL), hybrid cryptography, and phased migration aligned to federal realities, with ATPGov positioned to help implement these solutions.

00:00 Introduction

This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com or follow us on LinkedIn.

This episode of the Bottom Line Up Front discusses the advantages of Cisco Thousand Eyes for federal and military IT leaders. It explains how the technology provides end-to-end digital experience and visibility across owned and external networks, crucial for monitoring citizen services and mission operations. The podcast highlights the challenges of monitoring network performance and addresses how Thousand Eyes enhances problem identification and resolution through synthetic tests and real-time metrics. It also covers use cases and the path for FedRAMP authorization, emphasizing deployment benefits and support from integrators like ATP Gov.

00:00 Understanding Cisco Thousand Eyes

This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com or follow us on LinkedIn.

This episode translates an Arista vendor talk into mission-ready guidance for securing AI-driven traffic at the network edge (bases, field sites, clinics, depots, embassies). We explain how edge AI creates bursty, latency-sensitive, mostly encrypted flows that increase attack surface and require symmetrical bandwidth, QoS, and latency-aware pathing. It contrasts “AI for networking” (GenAI/NLP-assisted troubleshooting) with “networking for AI” (designing WAN/SD-WAN so AI apps perform), emphasizing metadata/behavior-based traffic identification and category policies when payloads can’t be inspected, with selective decryption per compliance. It outlines zero trust at the SD-WAN edge using documented ZTNA, IDS/IPS, microsegmentation, continuous monitoring, and CSA maturity model mapping, plus guardrails for agentic AI/MCP risks via agent telemetry, API inspection, and audit controls aligned to federal requirements.

00:00 AI Moves to the Edge

This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com or follow us on LinkedIn.

On this episode, we cover all the latest updates to Elastic 9.4 as a shift from search to an AI-driven operational data platform for mission systems, cyber operations, and data-driven decision-making. It highlights Elastic’s role as a secure context/retrieval layer for AI agents through agent builder enhancements, connectors, semantic metadata, and improved long-interaction context handling. It emphasizes observability at scale with native Prometheus/PromQL support, time series ES|QL, TSDB improvements, and unified logs/metrics/traces, plus agentic Kubernetes observability with AI-driven root cause analysis. Security advances target an autonomous SOC via Elastic Workflows automation and an entity-centric model for identity resolution and proactive threat hunting. Backend updates include GPU-accelerated vector indexing, vector search and ES|QL improvements, and full-stack FIPS 140-3 compliance, with ATPGov offering integration and implementation support.

00:00 Introduction

This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com or follow us on LinkedIn.

This episode of Bottom Line Up Front compares Red Hat Enterprise Linux, Ubuntu, and SUSE with a focus on minimizing mission risk in regulated environments. It argues that migrations impact ATO packages, RMF controls, STIG baselines, interoperability testing, and downtime, and presents SUSE Multi-Linux Support as a “zero migration, zero retraining, zero disruption” way to keep existing Red Hat and CentOS workloads supported with predictable CVE patching. SUSE emphasizes ABI-level compatibility, backported fixes to preserve application behavior, and centralized management via SUSE Multi-Linux Manager for over 16 distributions, plus SUSE Global Services for consulting and training. We outline a SWOT-style comparison between "the big 3" and recommend assessing Linux estates against mission and sustainment constraints, integrating unified management and patching aligned to continuous monitoring, and building a roadmap to migrate later on the program’s timeline.

00:00 Why Migrations Hurt

This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com or follow us on LinkedIn.

On this episode we focus on CMMC Level 2 as an immediate operational bottleneck for DoD contract eligibility involving CUI, affecting over 300,000 defense industrial base organizations while fewer than 1% are certified due to limited auditors, ~$60K assessments, and manual workflows that can take 6–8 months. It highlights Zifino’s new AI-native compliance platform, built to automate document ingestion, control mapping to CMMC/NIST 800-171, gap analysis, remediation paths, and audit-ready outputs (including SSPs) with deterministic, traceable evidence mapping and human-in-the-loop judgment. Zifino claims readiness in weeks, up to 3x auditor throughput, continuous verification, and integrations (Microsoft 365, AWS, Azure, ServiceNow, CrowdStrike), using a hybrid SaaS readiness model plus deployment in customer-controlled enclaves to respect CUI and secure environments, and notes ATPGov can help implement and operationalize these solutions.

00:00 Introduction

This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com or follow us on LinkedIn.

This podcast episode of The Bottom Line Up Front breaks down the functionalities of SUSE Rancher Prime for Kubernetes management and Portworx from EverPure (formerly Pure Storage) for stateful data management. The episode highlights the comprehensive tools offered by Rancher Prime for deploying, managing, and operating Kubernetes clusters across various environments, emphasizing ease of use through a unified console. Similarly, Portworx provides enhanced storage solutions for Kubernetes, ensuring high availability, disaster recovery, and efficient data management. The podcast emphasizes the significance of these technologies in terms of federal and DoD operational needs such as Zero Trust, RMF sustainment, and cost savings, while offering advice on implementing these tools with the help of ATP Gov.

00:00 Introduction

This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com or follow us on LinkedIn.

This episode focuses on addressing pain points in object storage such as log data, backup sprawl, and ransomware risks, by introducing Cloudian (+HPE) software-defined, S3-compatible storage solutions. These solutions offer cloud-native workflows on-premises, with capabilities for ransomware-resilient backups, Splunk Smart Store integrations, and AI workflow support. Cloudian provides flexible topologies including replication and erasure coding, ensures mission data security with FIPs aligned features, and supports non-disruptive upgrades. The podcast emphasizes how these solutions can meet varied data storage needs efficiently and securely.

00:00 Pain Points in Object Storage

This episode is brought to you by ATP Gov. Visit us online at www.atpgov.com or follow us on LinkedIn.