Latest / Tech Talks With Kinsoft / Last Week in Tech – Apple's Gemini-Powered Siri, ShinyHunters Hit PeopleSoft, and the AI-Chip Land Grab
Transcript
- 0:00Right now, your smartphone is getting smart enough
- 0:03to organize your life just by reading the context
- 0:06of what's on your screen. But at the exact same
- 0:09time... A forgotten 10 -year -old piece of human
- 0:12resources software just brought an entire university
- 0:15system to a grinding halt. Yeah, it's a staggering
- 0:19contradiction, honestly. We are watching this
- 0:21bleeding edge of futuristic technology just collide
- 0:24head -on with the rusted -out pipes of legacy
- 0:27IT infrastructure. Right. And, well, welcome
- 0:31to a brand -new Deep Dive. We have a completely
- 0:33fascinating stack of sources to go through today,
- 0:36covering the week of June 8th to the 14th. It's
- 0:39a busy week. It really is. And the mission for
- 0:41today is to explore that wild whiplash between
- 0:44those two realities. So for you listening, whether
- 0:46you're a business leader trying to figure out
- 0:47how to safely evaluate new AI tools for your
- 0:50team, or you're just an insanely curious learner
- 0:53wanting to know what is actually happening under
- 0:55the hood of the devices you use every day. Which
- 0:58is everyone right now. Exactly. This Deep Dog
- 1:00is going to arm you with the essential knowledge
- 1:02you need this week. And, you know, when you look
- 1:04closely at the facts across... all of our sources
- 1:07this week, there is a very clear overarching
- 1:10theme, one that connects the glittering AI updates
- 1:13to the massive cyber attacks. And that theme
- 1:16is supply chains. OK, let's untack this, because
- 1:20when most people hear supply chains, they think
- 1:22of cargo ships and warehouses, right? Yeah. So
- 1:25how does that apply to software? Well, we really
- 1:28need to think about digital supply chains. What
- 1:30we're seeing in the sources today is this deep
- 1:32connection between the data supply chains that
- 1:35power our cutting edge AI assistance and the
- 1:38well, the criminal supply chains operated by
- 1:41modern ransomware gangs. Oh, wow. Because whether
- 1:44you're a tech giant trying to serve up the smartest
- 1:46artificial intelligence or you're a cyber criminal
- 1:48trying to extort millions of dollars, your success
- 1:51depends entirely on knowing exactly who holds
- 1:54your data. Right. how it flows from point A to
- 1:56point B, and exactly where a backdoor was left
- 1:59open along the way. I love that framing. So let's
- 2:02just jump right into the front end of that digital
- 2:04supply chain, starting with the June 8th Apple
- 2:07Worldwide Developers Conference. Siri has finally
- 2:11been overhauled. We've been waiting for this
- 2:14integration, and it's now branded as Siri AI,
- 2:17running via Apple Intelligence. The demos they
- 2:21showed off were a massive leap forward from the
- 2:24basic voice commands we're used to. Yeah. The
- 2:26shift here is moving from a discrete tool that
- 2:29just like sets timers to an intelligence layer
- 2:32that is deeply embedded into the operating system
- 2:35itself. It understands the context. Exactly.
- 2:38It understands the context of your entire digital
- 2:40life. Yeah. I mean, you can tell Siri to find
- 2:43a specific photo of a person from years ago and
- 2:46drop it into a shared family album all by voice.
- 2:48You can ask it to. remind you the exact minute
- 2:51a ticket lottery opens up. You can even take
- 2:53actions based on what's currently displayed on
- 2:55your screen, which implies it's constantly analyzing
- 2:58your visual workflow. Plus, they rolled out a
- 3:00new standalone Siri app that actually remembers
- 3:03the context of your past conversations. And they're
- 3:06baking this intelligence directly into Spotlight
- 3:09Search on the Mac. Here is where the architecture
- 3:13of this system gets genuinely surprising. The
- 3:16underlying model infrastructure. Yes. Apple confirmed
- 3:19that this new highly capable Siri is actually
- 3:23powered in part by Google's Gemini model. Yeah.
- 3:26It's happening through Apple's Cloud Foundation
- 3:28model setup. And I just I have to push back on
- 3:31this strategy because it. It feels so completely
- 3:34jarring for this specific company. It did seem
- 3:37a bit out of character at first glance. Right.
- 3:39I mean, Apple built its entire modern brand identity
- 3:42on the concept of total privacy and vertical
- 3:44integration. They designed their own silicon.
- 3:46They write their own software. Leaning on their
- 3:48biggest rival's AI for their flagship assistant.
- 3:51Yeah. It's like finding out the secret ingredient
- 3:53in a Michelin star vegan restaurant's signature
- 3:55dish is actually sourced from a fast food burger
- 3:58joint. That is a phenomenal analogy. And the
- 4:01irony is on. unavoidable for sure. But if we
- 4:04look at the mechanics of how I actually functions.
- 4:07this decision makes perfect sense how so well
- 4:11apple is basically utilizing a peered supply
- 4:13chain for user queries so when you ask siri to
- 4:18do something highly personal like finding a photo
- 4:20or summarizing an email that processing happens
- 4:23locally on the device because that's where your
- 4:25sensitive data lives right exactly or it goes
- 4:28to apple's proprietary private cloud keeping
- 4:30the personal data locked down but when you ask
- 4:34siri a broad complex question about world history
- 4:36or, you know, ask it to generate a complicated
- 4:38piece of code. It is more juice. Yeah. Apple's
- 4:41internal models just might not have the sheer
- 4:43breadth of general knowledge required to answer
- 4:45accurately without hallucinating. Building a
- 4:48model that knows everything about everything
- 4:50requires scraping the entire Internet. Which
- 4:52Google has already done. Exactly. Google has
- 4:54already done that with Gemini. So Apple basically
- 4:56acts as a secure router. They securely hand off
- 4:59that specific non -personal query to Google's
- 5:02infrastructure. So Apple is essentially admitting
- 5:04that right now, Acting as a broker for the best
- 5:08AI is safer than trying to build the entire encyclopedia
- 5:11themselves. Pretty much, yeah. What does this
- 5:14mean for the listener who's trying to implement
- 5:16AI in their own workflow? It establishes a crucial
- 5:19baseline. If a company with the virtually unlimited
- 5:22resources of Apple cannot build a completely
- 5:25self -contained, perfect AI ecosystem in -house,
- 5:29businesses shouldn't expect to either. You're
- 5:31always going to be relying on third parties.
- 5:33Right. So the question you must ask when evaluating
- 5:35any AI tool is, where is this model actually
- 5:39running? You might purchase an enterprise license
- 5:41from company X, but your proprietary business
- 5:44data might be getting routed and processed on
- 5:47company Y. Oh, that's a huge blind spot. It is.
- 5:50You have to map out that data supply chain before
- 5:52you deploy the tool. And the reason Apple has
- 5:54to hand off those massive general knowledge queries
- 5:57to Google is because of the staggering computing
- 5:59power required to run them, which seamlessly
- 6:02connects to the next massive shift in our sources.
- 6:06The physical hardware supply chain. We are watching
- 6:09a multi -billion dollar land grab for AI chips.
- 6:12The physical iron underneath all of this digital
- 6:15magic, right? Because you can't build a software
- 6:18supply chain without the hardware to support
- 6:20it. Right. Alphabet Google's parent company.
- 6:23has officially started renting out its eighth
- 6:25-generation custom AI chips, known as TPUs, and
- 6:29they are operating at an unbelievable scale.
- 6:32Massive. They formed a $5 billion joint venture
- 6:35with Blackstone specifically to lease server
- 6:39capacity to outside companies like Anthropic
- 6:42and Meta. We should probably clarify what a TPU
- 6:44actually is just because it explains why this
- 6:46hardware race is so fierce right now. Yeah, go
- 6:48for it. So a TPU is a tensor processing unit.
- 6:51For years, the tech industry relied on GPUs graphics
- 6:53processing units to train AI. Because GPUs were
- 6:56really good at doing many simple math problems
- 6:58at the same time. Right, which was originally
- 7:00needed for rendering video game graphics. But
- 7:03a TPU is custom designed from the ground up by
- 7:05Google specifically for the complex neural network
- 7:07math that drives machine learning. It strips
- 7:10away all the legacy graphics architecture. to
- 7:12focus purely on AI efficiency. Wow. And Google
- 7:15isn't the only giant building custom silicon
- 7:19here. Microsoft just rolled out its second generation
- 7:22Maya accelerator, the Maya 200, which is specifically
- 7:26built to run their co -pilot and open AI workloads.
- 7:29Now, the sources do point out that the vast majority
- 7:32of Azure AI still runs on NVIDIA hardware. NVIDIA
- 7:36spent this exact same week tightening its grip
- 7:39on the hardware supply chain across Asia. They're
- 7:41still the king right now. Right. But the trend
- 7:43is clear. Hyperscalers like Google and Microsoft
- 7:46are desperately trying to build their own chips
- 7:48to escape NVIDIA's absolute dominance of the
- 7:51market. Yeah, the margins on NVIDIA hardware
- 7:52are astronomical and the hyperscalers want to
- 7:54control their own destiny. But this is where
- 7:56I get confused by the corporate strategy here.
- 7:59If Microsoft and Google are spending billions
- 8:01of dollars in R &D to finally build their own
- 8:03custom chips and gain an edge. Yeah. Why is Google
- 8:06immediately turning around and renting those
- 8:08eighth generation TPUs out to direct competitors
- 8:10like Meta and Anthropic? I mean, if you finally
- 8:14have the best engine, why rent it to the other
- 8:16race cars? Why not hoard that advantage? It fundamentally
- 8:19comes down to the economics of hyperscale cloud
- 8:22computing. Okay. The infrastructure costs associated
- 8:25with building these data centers, you know, the
- 8:27physical land, the custom silicon, the massive
- 8:30cooling systems, the energy grids, they're so
- 8:33astronomically high that no single company can
- 8:36absorb them purely for internal use. Not even
- 8:38Google. Not even Google. Plus, these chips depreciate
- 8:41quickly as... newer generations are invented.
- 8:44You cannot afford to let them sit idle for even
- 8:46a second. So by renting them out, Google turns
- 8:49a massive capital expense into a highly lucrative
- 8:53revenue stream. So they realize the real money
- 8:55isn't just in building the best AI. It's in being
- 8:58the landlord for everyone else's AI. Exactly.
- 9:00They control the foundation of the physical supply
- 9:03chain. And for you, the end user, this dynamic
- 9:07is incredibly positive. How so? This fierce competition,
- 9:10Google, Microsoft, and Nvidia all battling to
- 9:13offer the most efficient compute power will ultimately
- 9:16drive down the cost of processing. A diversified
- 9:19hardware supply chain means better pricing and
- 9:21faster innovation for the software we actually
- 9:23use. And that rapidly expanding pool of rental
- 9:27hardware is exactly what is supercharging the
- 9:29companies trying to dethrone the current AI kings.
- 9:33Yeah. The cheaper and more available compute
- 9:35power becomes, the faster a challenger can iterate,
- 9:39which explains the explosive growth of a major
- 9:42contender highlighted in our sources, Anthropic's
- 9:45Claude. Anthropic has been uniquely positioned
- 9:48to take advantage of this hardware availability
- 9:50to scale their operations. The numbers in the
- 9:52report are just staggering. According to the
- 9:55data, Claude's worldwide web visit share was
- 9:57sitting around 8%. But then... They experienced
- 10:00a 300 % jump in a single quarter. Huge. Yeah,
- 10:04they surged from roughly 200 million visits in
- 10:06January to over 800 million in April. In just
- 10:10three months, they quadrupled their traffic.
- 10:12That kind of scaling isn't accidental. It points
- 10:14to a deliberate architectural and business shift.
- 10:17Anthropic realized that to capture the real value
- 10:20in this market, they couldn't just build a clever
- 10:22consumer chatbot. Right. They had to build highly
- 10:24efficient models with massive context windows
- 10:26that businesses could actually use to process
- 10:28hundreds of pages of internal documents at once.
- 10:31And they are aggressively capitalizing on that
- 10:34enterprise focus. The sources note that Anthropic
- 10:37just formalized a $100 million partner program.
- 10:40They're calling it the Partner Hub. And it includes
- 10:42a dedicated services track specifically aimed
- 10:45at helping businesses put Claude into production.
- 10:49This really solidifies for me that the AI -assisted
- 10:52market is no longer just about chat GPT. No,
- 10:55not at all. It feels like we have transitioned
- 10:56overnight from the concept car phase of AI where
- 11:00everyone is just marveling at the technology
- 11:02straight into mass -producing sedans for enterprise
- 11:05fleets. The novelty phase is officially over.
- 11:08And the key phrase in the sources that we need
- 11:10to analyze is putting it into production. OK,
- 11:13unpack that. Vendors like Anthropic are no longer
- 11:16just handing a business a web login for their
- 11:18employees to use. They are actively pushing to
- 11:21integrate their AI via APIs directly into a company's
- 11:25internal workflows. So they're essentially just
- 11:27embedding themselves right into. Into the daily
- 11:29operations. Yeah, exactly. Their customer service
- 11:31staff boards and their proprietary databases.
- 11:35And this serves as a critical warning for anyone
- 11:37listening. If your team is trialing AI right
- 11:40now, the marketplace of available tools is widening
- 11:43rapidly, and the pressure to integrate them will
- 11:45be intense. Oh, for sure. But when you put AI
- 11:48into production, you are actively stitching a
- 11:51new powerful entity into your internal data supply
- 11:54chain. Conversations about data handling, retention
- 11:57policies, and security access cannot be an afterthought.
- 12:01They must happen on day one before a single API
- 12:04key is generated. Security from day one. is such
- 12:07a crucial mindset. Because while the entire tech
- 12:10world is utterly mesmerized by integrating these
- 12:13cutting -edge screen -reading AI tools, the back
- 12:16door of the enterprise is being left wide open.
- 12:18Absolutely. We are building these highly complex,
- 12:20futuristic supply chains, but ignoring the rusted
- 12:23locks on the doors we already have. Which brings
- 12:25us to the dark, unglamorous reality of this week's
- 12:28news. The cyber -criminal element thrives on
- 12:30that exact distraction. There's an extortion
- 12:32crew known as Shiny Hunters. Google's threat
- 12:35intelligence team Mandiant actually tracks their
- 12:38activity under the designation UNC 6240. And
- 12:42from late May right up to June 9th, this crew
- 12:45exploited an unpatched flaw in Oracle PeopleSoft.
- 12:48For context, Oracle PeopleSoft is a classic foundational
- 12:51enterprise application used for human resources,
- 12:55finance, and student administration. Very old
- 12:57school. It is the definition of legacy infrastructure.
- 13:00And shiny hunters used a known unpatched flaw
- 13:03in this software to break into enterprise systems,
- 13:06steal vast amounts of data and demand extortion
- 13:09payments. The sources specifically note that
- 13:11universities were hit the hardest by this campaign.
- 13:14Right. On top of that, on June 10th, CISA, the
- 13:17U .S. Cybersecurity and Infrastructure Security
- 13:19Agency, added three more actively attacked vulnerabilities
- 13:23to its known exploited list. And, you know, when
- 13:25a vulnerability lands on the CISA known exploited
- 13:27list, it isn't theoretical. It means criminals.
- 13:29are actively weaponizing it in the wild right
- 13:31now to breach networks. But the contrast here
- 13:34is making my head spin. We literally just spent
- 13:37the first half of this deep dive talking about
- 13:39billions of dollars spent on custom silicon and
- 13:43AI models that can visually analyze a user's
- 13:46desktop. Yeah. And yet massive multimillion dollar
- 13:49institutions like universities are being completely
- 13:53taken down simply because someone didn't click
- 13:55update on an enterprise HR app. How does a sophisticated
- 13:59institution fall to something so basic? It is
- 14:02baffling, but it highlights the incredibly unglamorous
- 14:05nature of cyber defense. To understand why universities
- 14:08are hit so hard, you have to look at how they
- 14:09operate. Very decentralized. Incredibly decentralized
- 14:12IT departments, massive legacy user bases of
- 14:16students and alumni, and hundreds of web -facing
- 14:18portals. It makes tracking down every single
- 14:21instance of an old application a nightmare. Criminals
- 14:24do not need hyper -advanced AI to hack you. They
- 14:26don't need custom Google. TPUs. They just use
- 14:29the exact same boring old playbook they have
- 14:31relied on for over a decade. Walk us through
- 14:33that playbook. How is it actually happening?
- 14:35It's a highly mechanized four -step process.
- 14:38Step one, use automated scanners to scour the
- 14:41internet for an exposed internet -facing enterprise
- 14:44app. Step two, the moment a vulnerability is
- 14:49publicly announced, race to exploit it before
- 14:51the target's IT team has time to test and apply
- 14:54the patch. Just a race against the clock. Exactly.
- 14:57Step three, move laterally through the network
- 15:00to exfiltrate the most sensitive data possible.
- 15:03And step four, lock the systems and extort the
- 15:06victim. It is entirely opportunistic. They are
- 15:09simply looking for the weakest link in your software
- 15:11supply chain. Which means the technological defense
- 15:14against this massive threat is literally just
- 15:16patching. Yes. But if the defense is that conceptually
- 15:19simple. And these highly organized gangs are
- 15:22this relentless. How do we actually stop them?
- 15:24Law enforcement agencies cannot possibly run
- 15:26around playing whack -a -mole, forcing thousands
- 15:28of individual universities to update their HR
- 15:31software. No, they cannot patch the Internet
- 15:33by force, which is why global law enforcement
- 15:36has fundamentally shifted their strategy. They
- 15:39are no longer just going after the software vulnerabilities.
- 15:41They're attacking the business model itself.
- 15:44They're targeting the financial supply chain.
- 15:46Following the money. Our sources detail a massive
- 15:49operation on June 12th by Europol. They executed
- 15:52a major disruption of a cryptocurrency laundering
- 15:55service that was used specifically by ransomware
- 15:58gangs to wash their illicit profits. Huge win.
- 16:01And the scale of this operation is hard to comprehend.
- 16:06This single service had claimed an estimated
- 16:08€336 million. That is an industrialized scale
- 16:12of money laundering. €336 million of extorted
- 16:15money washed clean and integrated back into the
- 16:18legitimate economy. How does the service even
- 16:21begin to hide that much digital currency? Well,
- 16:23it requires a sophisticated mechanism to break
- 16:26the blockchain's chain of custody. Cryptocurrencies
- 16:28like Bitcoin feature public ledgers, meaning
- 16:31anyone can track a ransom payment from the victim's
- 16:33wallet to the hacker's wallet. Right. It's all
- 16:36public. Exactly. So to actually spend that money,
- 16:39criminals use laundering services that employ
- 16:42mixers or tumblers. How do those work? Basically,
- 16:45they take the illicit cryptocurrency from...
- 16:48hundreds of different crimes and they pool it
- 16:50together. Like dumping it all into one massive
- 16:52pot. Right. And then they break it into thousands
- 16:56of microtransactions, rapidly swap it across
- 16:59different types of cryptocurrency chains, and
- 17:02then deposit the equivalent value back to the
- 17:05criminals. Oh, wow. Yeah. It obfuscates the origin
- 17:07so the funds can be cashed out for fiat currency
- 17:10safely. And shutting down that Tumblr service
- 17:12is a massive blow. But of course, as one threat
- 17:15vector is disrupted, another immediately rises
- 17:18to take its place. Always. The sources also mention
- 17:20a relatively new extortion crew that has quickly
- 17:23climbed the ranks to become one of the most active
- 17:25ransomware gangs globally by victim count. And
- 17:29they call themselves the gentlemen. It is a striking
- 17:32departure from typical threat actor branding.
- 17:34It really is. I was noting the bizarre contrast
- 17:36in hacker naming conventions. On one hand, you
- 17:39have a flashy, almost comic book name like shiny
- 17:42hunters. Right. And on the other, you have the
- 17:44weirdly polite, sophisticated sounding the gentlemen.
- 17:49But. Regardless of what they call themselves
- 17:51or what branding they adopt, they're all operating
- 17:54to feed a multi -hundred million euro... criminal
- 17:57ecosystem. Yeah. The naming conventions are just
- 17:59marketing. What is fascinating here is how clearly
- 18:03this Europol bust illustrates the core economics
- 18:06of ransomware. Yeah. Cutting that cryptocurrency
- 18:08money pipeline is the absolute most effective
- 18:11way to take the profit incentive out of cybercrime.
- 18:14If the gangs cannot wash the money, they cannot
- 18:16spend the money and the entire operation collapses.
- 18:19Which is the ultimate goal. Exactly. For the
- 18:21listener, the enduring lesson here is that the
- 18:23cast of characters will constantly rotate from
- 18:25shiny hunters to the to whoever emerges next
- 18:27month. But the exploitation of unpatched systems
- 18:31and the underlying financial motivations remain
- 18:33exactly the same. It truly all comes back to
- 18:36the ply chains. So to seamlessly wrap up our
- 18:39journey today, we have explored how Apple's brand
- 18:42new context -aware Siri AI evolution is actually
- 18:46relying on... Google's foundation model supply
- 18:48chain to handle complex queries. We dug into
- 18:51the multi -billion dollar hardware race where
- 18:54giants like Google and Microsoft are building
- 18:57custom silicon -like TPUs and immediately renting
- 19:00them out to control the physical infrastructure
- 19:02of AI. We saw Anthropix Quad leverage that compute
- 19:06power to achieve a massive 300 % surge in traffic
- 19:09as they push to integrate AI directly into enterprise
- 19:12production. And we contrasted all of that glittering
- 19:16future tech with the gritty, enduring reality
- 19:18of unpatched Oracle software bringing down universities
- 19:22and multi -million euro pole takedowns designed
- 19:26to sever the financial supply chains of cybercrime.
- 19:29It is a complex web of information, but seeing
- 19:31how the physical hardware, the AI software, and
- 19:33the criminal networks all intersect gives us
- 19:36a much clearer picture of the landscape. Absolutely.
- 19:38So for you listening, your immediate actionable
- 19:40takeaways for this week are crystal clear. First,
- 19:43know exactly what legacy enterprise apps you
- 19:45have exposed to the open internet right now.
- 19:47Have someone check the cease and unexploited
- 19:49list today and prioritize that patch queue. Second,
- 19:52when you are evaluating all these incredible
- 19:54new AI tools for your team, ask the hard questions
- 19:58about where your data actually lives and who
- 20:01else in the supply chain is processing it. And
- 20:03I want to leave you with a final provocative
- 20:05thought to mull over as you step away from this
- 20:07deep dive. Let's hear it. Throughout our discussion
- 20:09today, we have seen tech giants pooling immense
- 20:12resources to centralize unimaginable amounts
- 20:14of corporate data to feed their AI models and
- 20:17partner ecosystems. Meanwhile, highly organized
- 20:21ransomware syndicates like The Gentleman are
- 20:23perfecting the art of extracting data from forgotten,
- 20:26unpatched systems. Right. If the future of our
- 20:29business productivity requires us to feed our
- 20:32most intimate internal data into a complex, constantly
- 20:35shifting supply chain of rented AI chips and
- 20:38third -party partner programs, are we inadvertently
- 20:40building the ultimate, perfectly centralized
- 20:42payload for tomorrow's extortionists?