Trust between people builds over time, but AI assistants are asking for all of it on day one. In this episode of SipCyber, Jen Lotze settles in at Roots in St. Paul, MN, a youth-led coffee shop and economic development program just down the street from Metro State University, with a tiramisu cold brew before an InfraGard meeting. Fresh off a solo trip to see The Avett Brothers at Wolf Trap, where a group of strangers became friends over a weekend of music and conversation, Jen uses that experience to look at a very different kind of relationship: the one we're forming with AI agents.

Instinct, a new AI assistant still in private beta, has drawn major media attention and a reported $2.5 billion valuation. It can book travel, manage appointments, make reservations, and carry out transactions for you. To make that happen, it can connect to your email, messages, calendar, location, audio, and screen, and its terms describe receiving screen captures, cursor movements, and keyboard inputs.

Key Topics Covered:

• Why trust with people grows over time, while AI tools ask for it up front
• What the Instinct AI assistant can do and the access it needs to do it
• Screen captures, keystrokes, and location data in AI terms of service
• What it means when an AI agent can make commitments and transactions in your name
• Weighing convenience against privacy before you connect your accounts

Convenience is a great selling point, and it's worth knowing exactly what you're trading for it. A few minutes with the fine print can tell you more about an AI assistant than any product demo.

☕ Featured Spot: Roots, St. Paul, MN

Think before you connect. Subscribe for weekly cybersecurity tips delivered from the best local spots across the country, and share this with anyone who's been eyeing an AI assistant to run their day.

#AI #AIAssistant #AIAgents #AgenticAI #DataPrivacy #Privacy #CyberSecurity #InfoSec #DigitalSafety #AIRisks #TermsOfService #OnlineSafety #SipCyber

Our phones hold our photos, conversations, locations, cameras, and microphones, and every app we install gets a key to some part of that space. In this episode of SipCyber, Jen Lotze takes a detour from coffee to Eldon St. Tea Shop in Reston, VA, ahead of a concert at Wolf Trap. She uses Reston's history as one of America's first intentionally planned communities as a lens for how we should be designing our digital lives.

Jen breaks down a recent story about Depthfirst, a cybersecurity company that built an AI-powered tool to hunt for software weaknesses. Researchers took a freely available AI model from the Chinese company Z.ai, modified it heavily, paired it with other tools, and sent it searching for bugs. The path it uncovered led all the way to a phone's camera and photos, a reminder that AI is changing how quickly vulnerabilities can be found by both defenders and attackers.

Key Topics Covered:

• How Depthfirst used a modified open AI model to hunt for software vulnerabilities
• Why an AI-discovered flaw reaching phone cameras and photos matters to everyday users
• What AI-powered bug hunting means for the speed of future attacks
• Treating your phone like a planned community where you decide what each app can access
• Practical steps for reviewing app permissions for your camera, microphone, photos, and location

AI is giving researchers and criminals new ways to find the cracks in our devices. The good news is that the access you control still makes a real difference.

☕ Featured Spot: Eldon St. Tea Shop, Reston, VA

Take five minutes today to check which apps can see your camera and photos. Subscribe for weekly cybersecurity insights delivered from the best local spots across the country, and share this with someone who never reads the permission pop-ups.

#AI #AIHacking #CyberSecurity #PhoneSecurity #MobilePrivacy #AppPermissions #VulnerabilityResearch #InfoSec #DataPrivacy #DigitalSafety #SipCyber #Reston #ITAuditLabs

When someone you love gets scammed, the questions can wait. In this milestone 50th episode of SipCyber, Jen Lotze celebrates the occasion with a visit to the Minnesota State Fair, reflecting on family, tradition, and the small businesses that make the fair feel like home, before turning to one of the most important conversations of the show: how to actually help someone after they've been taken advantage of online.

Whether it's stolen money, a hijacked social media account, or an impersonation attack, the instinct to ask "why did you fall for that?" only adds shame to an already painful moment. Jen breaks down a clear, practical four-step framework for showing up for the people you care about when a scam has already happened.

Key Topics Covered:

• Why judgment and questions make scam recovery harder, not easier
• The 4-step recovery framework: stop the money, secure the accounts, save the evidence, make the reports
• Where to report fraud, including IC3.gov and IdentityTheft.gov
• How to spot "recovery scams" that target people who've already lost money once
• Why sitting beside someone through the process matters more than the advice itself

This isn't just a technical checklist. It's a reminder that cybersecurity, at its core, is about protecting people.

☕ Featured Spot: Minnesota State Fair (recorded from home, with a cold brew root beer float)

50 episodes and counting. Subscribe for weekly cybersecurity tips delivered from coffee shops and community spots across the country, and share this with someone who might need to help a friend or family member through a scam.

#Cybersecurity #ScamRecovery #IdentityTheft #OnlineFraud #InfoSec #CyberSafety #SipCyber #MinnesotaStateFair