There Is No Court in America That Wants You to Buy Gift Cards
Craig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
Release Date: 06/16/2026
Craig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
This was the biggest Patch Tuesday on record: Microsoft pushed close to 700 patches in a single month, roughly six times the usual volume. Craig's follow-up question is the one that actually decides whether a machine is exposed. Microsoft is patching Microsoft. Who is patching everything else? Windows Update never touches third-party software — it barely updates Windows itself, Craig said, and it does nothing for the average of 62 other programs sitting on a typical computer, many of which are being actively exploited right now. He named Adobe Reader and WinZip specifically: the current...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
Craig grew up in Canada and left in the 1970s, and this week he put numbers on why. A driver's license in Quebec cost $300 a year. Registration on the family station wagon cost $3,000 a year. Both figures in 1970s dollars. Auto insurance, by contrast, was free — which Craig turned into the sharpest point of the segment: his father remarried, his stepmother got her license at 26, and she totaled three cars. Craig's question was not about her driving. It was about what happens to the premium. "How much does insurance go up? How much is the risk? Zero, of course, because there is no insurance....
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
Craig added it up recently: more than 5,000 businesses have had IT services from him over the years. He also used to carry 50 employees to support them. He described cutting that back on purpose — "it's way too many" — down to a family business handling a small number of customers, on the reasoning that the headaches of supporting that many clients with that many staff cost more than they returned. It is an unusual thing for a vendor to say out loud on the radio, and it was the first thing out of his mouth. The bulk of the segment was Craig on juries, prompted by a trial in the news. His...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
On Monday, a client of Craig's was driving down the road when a prompt appeared in the authentication app on his phone: was he trying to log into the company VPN? He said no. It appeared again. He said no again. Craig's team got him on the phone, changed his passwords, and started digging. The login was coming from a data center in New York — until Craig looked at the actual net block, which traced back to China. The attacker already had the man's email address, his VPN contact information, and his password. The prompt on his phone was the only thing standing in the way, and it worked...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
Central Virginia has neighbors close to blows in the street over new data centers. Craig's number for the other side of the ledger: one community found that without the tax revenue a data center brings in, property taxes on every home would rise $5,800 a year. Add $250,000-a-year electrician jobs, emissions cut more than 90% once a site is required to generate its own power, and a mandated 20% energy surplus handed back to the grid, and the case against building locally gets a lot thinner than the protest signs suggest. Then the turn: Jeff points out that a lot of the people fighting these...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
A friend of Jim's at Boston Scientific told him the company has come to a complete stop: nothing shipping, nothing receiving, product sitting in the warehouse untouched. Nobody at the company would say who's behind it. Craig's read: this fits a pattern he's now seeing constantly, with both Russia and Iran running AI-assisted attacks against U.S. contractors — including military suppliers whose cybersecurity, despite the assumption, is often not what it should be. Craig had his own live example from the day before. A client — a parts distributor supplying components that end up in military...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
The FBI, CIA, NSA, CISA and others issued a warning about active AI-driven attacks on American critical infrastructure. Craig, who ran the FBI's InfraGard online training program, explains what's actually exposed: old controllers that open and close valves, set flow rates, decide how much acid or base goes into the water — many of them reachable directly from the internet, on networks that have been comprehensively mapped for years. Several water systems have already been shut down; one town lost power along with its water. Josh, who works InfraGard in his own homeland security practice,...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
The detail that makes this scam land is not the fake website. It's what happens two seconds after you use it. Craig walks the whole sequence. Attackers use AI to build a pixel-accurate copy of a bank's site — he uses Bank of America as the example and is careful to say he's picking on the scammers, not the bank. They send a wide net of email claiming fraudulent activity on your account, knowing that some fraction of any list banks there. You click, you land on the copy, you enter your username and password. Then the clever part. They immediately redirect you to the real bank's site, which...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
The NSA, CISA, the FBI, the Department of Energy and the EPA put out a joint advisory last Wednesday, and the language is unusually direct: AI dramatically reduces the technical skill and the time required to attack industrial control systems. Those controllers run public works. A great many of them are reachable from the internet, and their locations are not a secret. That sets up the larger conversation. Ray Kurzweil wrote The Singularity Is Near twenty years ago, predicting broadly human-level machine intelligence by 2029 and human-machine integration by 2045. Elon Musk and others now say...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
Matt opens with a poll finding he calls one of the great PR failures of our time: people would rather have a nuclear power plant built next door than a data center. Pennsylvania's governor has now signed legislation that effectively stops data centers unless they clear a long approvals process. Craig's answer isn't a defense of data centers so much as a description of what a few counties actually did. They said yes — on conditions. Generate your own power, and 20% more than you use, fed back into our grid. And pay full property tax, none of the abatement deals. It worked well enough that...
info_outlineThe FTC warning Craig brings in is a jury duty scam, and the craft in it is worth understanding. An email arrives with a PDF attached. Open it and there is an official-looking arrest warrant, because you failed to appear for jury duty. Call this number before the police come. One of Craig's own Forward to Safety subscribers forwarded him a copy, and his honest first reaction was that it looked legitimate.
Two things break it, and both are things you can carry around. You do not receive a warrant as a PDF by email — it comes in the mail from the court, or a sheriff knocks on your door. And, as Craig puts it flatly, there is no court system anywhere in America that will ask you to run to the pharmacy for a stack of gift cards.
Jeff worries aloud that saying so makes the victims sound stupid, and Craig's answer is the most useful thing in the segment: the entire design is to get the logical brain out of the way and adrenaline into the body. Nobody makes good decisions in that state. These people know where you live, where your courthouse is, your name, your job, your income, your cars — the letter reads as personal because it is.
Then Craig makes it personal about himself, twice, which is what gives the advice weight.
A bank called him. Because he'd just opened an account, he answered — and the caller wouldn't identify himself, kept demanding Craig's name and number, so Craig hung up. He then looked up the bank's number independently, called them, and found it had genuinely been the bank. They wouldn't say "is this Craig Peterson?" because they were guarding against scammers too. Everyone is now so defended that legitimate contact has become indistinguishable from fraud.
And the one that actually cost him: a bank emailed about a $65 balance on a card he'd forgotten during an account move. Craig — his words — Mr. Make-Sure-The-Email-Is-Valid, glanced at it, decided it was malarkey, and deleted it. That missed payment took 80 points off his credit rating.
He closes with his father, long a technology man and a senior VP of operations at a very large bank, who searched Google for Microsoft tech support, called the number in a top result, and was being talked through installing remote-access software when Craig's stepmother looked over his shoulder and said it didn't smell right. Craig shut it down remotely. The attackers were searching the machine for Word documents and spreadsheets, because that is where people keep passwords — and his father kept every bank account in an Excel file.
Also in this segment:
- A business Craig took on as a client after its operating account was emptied. The attackers had been inside long enough to copy the invoice format, then billed that company's customers $100,000–200,000 with a note that the account number had changed — please ACH to this one instead
- "Prove you're human" checkboxes now being weaponised: some ask you to run a PowerShell script to confirm you're not a robot, which hands over the machine
- Tennessee becoming the first state to write its own rule book for fusion plants, clearing a 400 megawatt plant near Oak Ridge for construction within a couple of years, against about $10 billion invested in fusion
- Craig's term for the people doing all this: hosers, because they're trying to hose the money out of your account
Free newsletter: CraigPeterson.com — and Craig offers his client prep documents free to anyone who emails him directly