Mastercard and Google Pay Want to Replace Payment Codes With Your Face or Fingerprint. I'm Interested, But I Have Questions.

 

Mastercard and Google Pay Are Changing How We Pay: Are Passwords Becoming a Thing of the Past?

By #EnthusiasticTechie | Chasing the Tech Inside

Technology keeps changing the way we do things, and sometimes we don't realize just how much until something we've been doing for years starts disappearing.

Think about the last time you made an online purchase or paid a bill using your phone.

Depending on the transaction, you might have received a text message with a one-time password, entered that code, and waited for the payment to go through.

It's something many of us have gotten used to.

Well, Mastercard and Google Pay are looking to make that process a little different.

The two companies are working together to introduce biometric payment authentication in India by the end of 2026. Instead of entering a one-time password, customers will be able to use their fingerprints or facial recognition to approve certain payments.

Now, that's the kind of technology that catches my attention.

Not because fingerprints and facial recognition are new, but because of how they're being used to make everyday transactions easier.

And it raises another question I've been thinking about.

Are we slowly moving toward a future where passwords are no longer necessary?

Your Face or Fingerprint Could Become Your Payment Approval

Let's say you're sitting at home paying your electric bill or ordering something online.

Instead of waiting for a text message containing a verification code, you simply look at your phone or place your finger on its sensor.

Your identity is verified, and the payment moves forward.

That's the experience Mastercard and Google Pay are working toward.

The technology uses Mastercard's device verification system along with the fingerprint and facial recognition features already built into many smartphones.

So, in many cases, customers won't need to purchase another device or learn how to use some complicated new technology.

They're simply using features they're probably already familiar with.

And that's something I like.

I've always believed good technology should make things easier for people, not give them another headache.

But there's something important to understand here.

Your fingerprint or face isn't replacing your credit or debit card. It's replacing a verification step used to confirm that you're the person approving the transaction.

That's a pretty significant difference.

Why India?

One thing I found interesting about this announcement is that India will be the first market for the new payment experience.

Mastercard hasn't publicly explained all the reasons behind that decision, at least based on the information I've reviewed.

But India already has a strong digital payment culture, with millions of people using their smartphones for everyday financial transactions.

That makes it an interesting place to introduce another way of approving payments.

And India isn't alone when it comes to embracing biometric technology.

Countries such as China and Singapore have also seen growing use of biometric identification and payment systems.

Meanwhile, adoption has been more cautious in parts of the United States and Europe.

And I can understand why.

Because while technology can make life more convenient, people also want to know what's happening with their personal information.

Especially when we're talking about something as personal as a fingerprint or facial recognition.

Convenience Is Great, But What About Privacy?

Now, here's where I think we need to pay attention.

I like technology. I enjoy learning how it works, and I appreciate companies finding better ways to improve everyday experiences.

But I'm also someone who believes security and privacy should never be treated as an afterthought.

When we talk about passwords, there's one advantage people sometimes overlook.

If somebody steals your password, you can change it.

But you can't exactly go out and get yourself a new fingerprint.

And you certainly can't replace your face.

That's why I believe companies introducing biometric payment technology need to be clear about how the information is protected.

For example, are your fingerprints or facial images stored on your phone, or are they being sent somewhere else?

Who has access to that information?

What happens if your phone is lost or stolen?

And what options do customers have if they don't want to use biometric authentication?

Those are reasonable questions.

To be clear, using your phone's biometric authentication doesn't automatically mean a company receives or stores your actual fingerprint or facial image. Many modern smartphones perform that verification securely on the device.

But consumers still deserve to understand exactly how each payment system works.

Convenience should never require us to give up control over our personal information.

That's something I believe strongly.

This Technology Is Bigger Than Just Paying Bills

Another thing worth watching is how biometric identification is moving beyond financial transactions.

We're already seeing it used in smartphones, airports, digital identification systems, and other services where confirming someone's identity is important.

Digital driver's licenses and passports are becoming part of that conversation, too.

And payment companies aren't sitting still.

Fiserv and its Clover payment platform are also exploring ways to use facial and palm recognition for payment verification in 2026.

Think about where this could eventually lead.

You walk into a store, pick up what you need, and approve your payment without reaching for a wallet or entering a password.

For some people, that sounds like the future they've been waiting for.

For others, it might sound like technology is getting a little too personal.

I can appreciate both perspectives.

Because just because we can do something with technology doesn't always mean everybody will be comfortable using it.

And that's okay.

People should have choices.

Are Passwords Slowly Becoming Outdated?

I don't believe passwords are going to disappear overnight.

There are still plenty of systems, websites, and services that depend on them.

But I do believe we're moving toward a future where we won't have to rely on them as much.

Between fingerprints, facial recognition, and newer ways of securely signing in, the technology is already changing.

And when you think about it, that makes sense.

Passwords can be forgotten, reused, stolen, or exposed through scams.

One-time passwords sent through text messages can also be intercepted or stolen through social engineering.

Biometric verification, when properly implemented, can help reduce some of those risks.

But no security system is perfect.

And replacing one method with another doesn't automatically eliminate every security concern.

The important thing is making sure the newer method is actually safer, not just faster.

Because when it comes to financial transactions, getting the payment completed quickly is nice.

Knowing your money and personal information are protected is even better.

My Take: I Like Where This Is Going, But Let's Keep Consumers in Control

I'm interested in seeing how Mastercard and Google Pay roll out this technology in India and how customers respond to it.

If the system works as intended, it could make everyday payments faster and less frustrating.

And I wouldn't be surprised to see similar experiences become more common in other countries.

But I also think the payment industry needs to remember something.

Not everybody wants to use their face or fingerprint to approve a purchase.

Some people have privacy concerns. Others may have older phones that don't support certain features. And some simply prefer the payment methods they're already comfortable using.

I don't believe those customers should be left behind.

Technology works best when it gives people more options instead of taking them away.

As someone who has spent years around technology, I've seen plenty of changes that once seemed unusual become part of everyday life.

And I think biometric payments could be another one of those changes.

But I'm not ready to say goodbye to passwords completely.

Not just yet.

My biggest takeaway is simple: Making payments easier is a good thing, but making them safer while protecting our privacy is what really matters.

I'll be keeping an eye on how this technology develops, especially if Mastercard and Google Pay eventually bring it to the United States.

Because sometimes the most interesting technology isn't something brand-new.

It's finding a better way to use something we already have.

And that's what keeps me curious.

Article Reference & Further Reading

This blog was inspired by an article I read in Payments Dive about Mastercard and Google Pay working together to make payments easier using fingerprints and facial recognition.

Original article: Mastercard, Google push past passwords

Written by: Lynne Marek
Published: September 21, 2026

https://www.paymentsdive.com/news/mastercard-google-push-past-passwords/830837/

I encourage you to check out the original article for more details about the technology and what Mastercard and Google Pay are planning.

The thoughts and opinions I've shared here are my own. I'm simply sharing what caught my attention and why I believe it's worth following.

Stay Curious, Stay Connected, and Keep Chasing the Tech Inside.

#EnthusiasticTechie | #ChasingTheTechInside

2027 Nissan Rogue Hybrid: A Different Kind of Hybrid, But Is It Worth the Price?

 

2027 Nissan Rogue Hybrid: Nissan Finally Brings Something Different to the Hybrid Game

By #EnthusiasticTechie | Chasing the Tech Inside

I've always enjoyed seeing how automakers approach new technology, especially when it comes to hybrid vehicles. Some manufacturers focus on getting the best gas mileage, while others are trying to give drivers a better experience behind the wheel.

Well, Nissan is bringing something interesting to the table with the 2027 Rogue Hybrid, and I think it's worth talking about.

Nissan isn't exactly new to hybrid technology, but it's been noticeably missing from the hybrid SUV conversation here in the United States. Toyota, Honda, Hyundai, and Kia have been doing their thing for years, giving customers plenty of choices.

Now Nissan wants a piece of that action.

But here's what caught my attention. Nissan isn't just introducing another hybrid SUV. It's bringing its e-Power technology to the American market, and the way this system works is pretty interesting.

This Isn't Your Typical Hybrid

One thing I've learned about hybrid vehicles is that not all hybrid systems operate the same way.

Take Toyota's hybrid system, for example. The gasoline engine and electric motors can both help move the vehicle.

Nissan decided to take a different approach.

With its third-generation e-Power system, the gasoline engine doesn't directly power the wheels at all. Instead, it generates electricity, which supplies the electric motors that actually move the vehicle.

Think about that for a moment.

You're driving a vehicle powered by electric motors, but you don't have to plug it into a charging station.

The Rogue Hybrid uses two electric motors, one driving the front wheels and another driving the rear wheels. That means every model comes with all-wheel drive.

There's also a 2.1-kWh battery that helps support the system.

What I find interesting is that Nissan has already delivered nearly 2 million e-Power vehicles in other markets. So while this technology might be new to many American drivers, Nissan has plenty of experience with it.

And that's something I appreciate. It's not technology that just appeared overnight.

Let's Talk Gas Mileage

Now, whenever somebody mentions a hybrid, one of the first questions I ask is how much gas does it save?

According to the figures reported for the 2027 Rogue Hybrid, the SR trim is expected to deliver:

• 40 mpg in the city

• 36 mpg on the highway

• 38 mpg combined

Compare that with the regular all-wheel-drive Rogue, which gets around 31 mpg combined.

That's a seven-mile-per-gallon improvement.

Not bad at all.

But here's where I start looking at the bigger picture.

Gas mileage is important, but so is the amount of money you're spending to get those savings.

If you're paying thousands more for a hybrid, you have to ask yourself how long it will take to make that money back at the gas pump.

Even with gasoline costing $6 a gallon, recovering a $4,000 price difference could take quite a few years, depending on how much you drive.

That's why I don't believe buying a hybrid should always be about saving money on gas alone.

Sometimes it's about the driving experience, the technology, and simply enjoying something different.

And I think that's exactly what Nissan is counting on.

Now Nissan, About That Price!

Here's where things get a little interesting.

The 2027 Nissan Rogue Hybrid starts at $37,065 for the SV trim and climbs to $45,065 for the Platinum. Those prices include the destination charge.

That's not exactly inexpensive.

You're looking at roughly $4,000 more than a comparable gasoline-powered Rogue with all-wheel drive.

And when you compare it with the base front-wheel-drive Rogue, the difference grows to around $6,000.

Meanwhile, Hyundai and Kia offer entry-level hybrid SUVs starting below $33,000.

So Nissan has some competition on its hands.

The Rogue Hybrid is priced in the same general neighborhood as the Toyota RAV4 Hybrid and Honda CR-V Hybrid, two vehicles that already have established reputations.

If Nissan wants buyers to spend that kind of money, it needs to give them a good reason.

A different hybrid system is interesting, but is it enough to convince somebody to spend several thousand dollars more?

That's the question.

The Technology Is Where Nissan Might Win Me Over

Now we're getting to the part I really enjoy.

Nissan appears to be putting a lot of effort into making the Rogue Hybrid feel more like an electric vehicle without requiring drivers to charge it.

Electric motors provide that quick response when you press the accelerator. There's no waiting for a traditional gasoline engine to build power before the wheels respond.

Nissan is also promoting a smoother and quieter driving experience.

I can appreciate that.

As someone who enjoys hybrid vehicles, I understand how much difference a smooth ride can make, especially when you're driving around town.

And the Rogue has some interesting technology inside, too.

The SR model with the Technology Package, priced at $43,065, is expected to arrive first in fall 2026.

Some of the features include:

• A 14.3-inch touchscreen with Google built in

• ProPilot Assist with hands-off capability in certain traffic-jam conditions

• A power panoramic sunroof

• Parking sensors

Move up to the Platinum trim, and you'll find features like dual wireless phone charging, Bose audio, and additional comfort upgrades.

Now, I like technology as much as anybody, but I also believe it should make driving easier, not more complicated.

Give me features that work, are easy to understand, and actually improve the driving experience.

That's the kind of technology I appreciate.

Nissan Needed This Hybrid Yesterday

One thing that stands out to me is just how important this vehicle could be for Nissan.

The Rogue is Nissan's best-selling vehicle in the United States.

That's a pretty big deal.

And with more buyers showing interest in hybrids, Nissan couldn't afford to sit on the sidelines forever.

Toyota has been building its hybrid reputation for decades. Honda has continued improving its hybrid lineup. Hyundai and Kia have also become serious competitors.

Nissan needed something to bring to the conversation.

And rather than simply copying what everybody else is doing, the company is introducing a different approach.

I respect that.

But having different technology doesn't automatically make a vehicle better.

Nissan still has to prove that its system delivers the reliability, efficiency, performance, and value customers expect.

And that's something only real-world driving and long-term ownership will tell us.

Would I Buy One?

That's a good question.

I like what Nissan is doing with e-Power. The idea of driving on electric motors while a gasoline engine handles generating electricity is something that genuinely interests me.

I also like the fact that you don't have to worry about finding a charging station.

But that price would definitely make me think twice.

When you're spending close to $40,000 or more, you have plenty of good hybrid SUVs to choose from.

For me, the Rogue would need to deliver a noticeably better driving experience to justify the extra money.

I'd want to see how smoothly it operates, how quiet it is on the highway, and how its fuel economy holds up in everyday driving.

And I'd especially want to know how dependable that e-Power system will be after several years and thousands of miles.

Because buying a vehicle is one thing. Living with it is another.

My Final Thoughts: Nissan Is Late, But I'm Glad It Showed Up

The 2027 Nissan Rogue Hybrid brings something different to an already competitive market.

And I think that's a good thing.

Competition pushes automakers to improve their vehicles, introduce new technology, and hopefully give consumers better choices.

Nissan's e-Power system has my attention, particularly because it offers an electric-motor driving experience without the need to plug in.

But I'm not ready to call it a winner just yet.

The fuel economy looks respectable, the technology is interesting, and the features are appealing. However, the price puts it up against some pretty strong competition.

My biggest takeaway is that Nissan may not win the hybrid battle by offering the best gas mileage. It might win over buyers by offering a better driving experience.

Whether that's enough remains to be seen.

One thing is certain: the hybrid SUV market just got a little more interesting.

And for those of us who enjoy cars and the technology that makes them work, that's always something worth keeping an eye on.

---

Article Reference & Further Reading

For more details on the 2027 Nissan Rogue Hybrid, including pricing, projected fuel economy, technology, and expected availability, check out the original article published by WardsAuto.

WardsAuto — 2027 Nissan Rogue Hybrid Starts at $37K, Projected at 38 MPG

https://www.wardsauto.com/news/2027-nissan-rogue-hybrid-starts-at-37k-projected-at-38-mpg/831100/

The article provides additional insight into Nissan's approach to bringing its e-Power hybrid technology to American drivers.

My thoughts and opinions in this blog are my own, inspired by the reporting from WardsAuto.

Stay Curious, Stay Connected, and Keep Chasing the Tech Inside.

#EnthusiasticTechie | #ChasingTheTechInside

😕

🌐 Chasing the Tech Inside: The DNS System Quietly Powering Your Internet

 

What’s DNS and Why Does It Matter?

I spend a lot of time reading about technology because I'm always trying to understand a little more about what's happening behind the screen.

One website I regularly read is PC Tips, and I recently came across a good article about DNS servers written by Deep Shrestha. It got me thinking: DNS is something we use every single day, but a lot of people probably don't know what it actually does.

So let's talk about it.

What Exactly Is DNS?

DNS stands for Domain Name System.

I like to think of DNS as the internet's contact list.

You know the name of the website you want, but computers communicate using IP addresses. DNS handles the lookup and connects the website name you typed with the IP address your device needs.

Think about your phone.

You probably don't remember everybody's phone number. You remember their name, tap their contact, and your phone knows the number.

DNS does something similar for the internet.

Why Does DNS Matter?

Without DNS, we'd have to remember IP addresses instead of simple website names.

Imagine trying to remember a bunch of numbers every time you wanted to check the news, shop online, watch a video or search for something.

No thanks. 😂

DNS quietly handles those lookups behind the scenes, usually so fast that we don't even think about it.

But something else I took away from Deep's article is that which DNS server you use can matter too.

Your internet provider usually supplies a DNS service automatically, but public DNS services are another option. Depending on the provider and your location, they may offer differences in lookup performance, privacy and security.

That's where services such as Cloudflare, Quad9 and Google Public DNS enter the conversation.

And here's something I've learned from working around technology:

Some of the most important systems are the ones you barely notice until they stop working.

When DNS has problems, a website or service might appear to be down even though the server itself is working perfectly fine.

Your computer simply can't figure out where to go.

That's why when I'm troubleshooting connectivity, DNS is one of those pieces I don't overlook.

So the next time you type a website name and it pops right up, remember there's a whole conversation happening behind the scenes.

You typed the name.

DNS found the address.

The network got you there.

Simple on the surface. Serious technology underneath.

That's why I stay curious about how all this stuff works.

I'm just #ChasingTheTechInside.

— #EnthusiasticTechie

Worth a read: Deep Shrestha's PC Tips article, The Best DNS Servers for Faster, More Secure Internet:
https://tinyurl.com/mry5mbsr

Caller ID Said Spectrum: How I Got Social Engineered After Upgrading My Phone

 

I Thought Spectrum Was Calling Me. I Got Social Engineered Instead.

By #EnthusiasticTechie | Chasing the Tech Inside

I work around technology. I talk about cybersecurity. I know about scams, phishing and social engineering.

And I still got caught.

That's exactly why I'm sharing this.

On Friday, August 21, I received my upgraded mobile phone from Spectrum. I went to Spectrum's website myself and activated the phone online. Everything seemed normal. New phone activated. Good to go.

At least that's what I thought.

Then "Spectrum" Called Me

The next day, August 22, my phone rang.

Caller ID showed Spectrum.

Think about the timing.

I had literally just received and activated a new Spectrum phone the day before. So when somebody who appeared to be from Spectrum called me about my new phone, there wasn't much reason in that moment for me to think something was wrong.

I answered.

The caller immediately started talking about the phone.

He asked whether I had received it.

I said yes and explained that I had already activated it.

Then he told me that the phone still needed to be registered.

That sounded believable enough.

So we proceeded down that road.

He started asking questions, and because I believed I was speaking with Spectrum, I answered them.

Looking back now, that's where the social engineering really took over.

The attacker didn't need to convince me of some wild story. He stepped into a real situation already happening in my life and made himself appear to be part of it.

The Call Felt Legitimate

This wasn't somebody calling and immediately asking me to send gift cards or cryptocurrency.

The conversation felt like customer service.

The caller knew how to keep things moving. By that point I believed I was dealing with someone from Spectrum who was helping finish the setup of my new phone.

Then he suggested that I should get a cover for my new smartphone.

There were emails involved too, which made everything seem even more legitimate at the time.

I finished the conversation thinking I had simply handled another part of setting up my new phone.

I had no idea what had just happened.

Then I Logged Into My Spectrum Account

On August 23, I logged into my Spectrum account.

That's when I saw something that immediately didn't look right.

There were four mobile phones on my account.

There should have been three.

Hold up.

Where did phone number four come from?

I contacted Spectrum and asked what happened and why there was another mobile device on my account.

That's when this situation turned into a fraud investigation.

Spectrum told me my account appeared to have been compromised, and the matter was sent to its fraud department for investigation.

Now I'm waiting to see what they determine.

They Social Engineered Me to the Max

I'm not going to pretend I saw through it.

I didn't.

They got me.

I was socially engineered to the max.

And I've been around technology long enough to understand what social engineering is.

That's what bothers me—and it's also what makes this experience worth sharing.

Cybersecurity knowledge doesn't make you immune to manipulation.

Attackers don't always attack the computer.

Sometimes they attack your trust.

The timing made this attack especially convincing.

I had just upgraded my phone.

I had just activated it.

The caller ID appeared to say Spectrum.

The caller talked about the exact type of transaction I had just completed.

Everything fit together just well enough for my brain to say:

This makes sense.

And once I accepted that first assumption, everything that followed seemed like part of the same legitimate process.

That's social engineering.

Caller ID Is Not Proof of Identity

This experience changed the way I'm going to treat incoming customer-service calls.

Seeing a company's name on caller ID does not prove the person calling actually works for that company. Caller ID information can be spoofed.

So from now on, if somebody calls claiming to represent my phone company, bank, credit-card company or another important account and starts asking me for information, I'm changing the process.

I'm ending the call.

Then I'm opening the company's official app, visiting the website myself or calling the number printed on my bill or listed on the company's official website.

If the issue is legitimate, the real company will still be there when I contact them through a channel I control.

That's the lesson I'm taking from this.

Don't Let Embarrassment Keep You Quiet

Part of me could have kept this story to myself.

I talk about technology. Getting socially engineered isn't exactly something you want to brag about.

But hiding experiences like this helps scammers.

Somebody reading this might get a similar call tomorrow.

Maybe they just ordered a phone.

Maybe they just opened a bank account.

Maybe they just changed an insurance policy.

Then somebody calls at exactly the right moment and appears to know what's happening.

That's when your guard can come down.

So I'm putting my experience out there.

Not because I handled everything perfectly.

I didn't.

I'm sharing it because somebody else might recognize the setup before they go as far down the road as I did.

My New Rule

If a company unexpectedly calls me and wants information involving my account, identity, device or money, I'm not going to verify myself to the caller.

First, I'm going to verify the caller.

And the easiest way to do that is to end the conversation and contact the company myself using its official channel.

A legitimate representative may understand why.

A scammer just lost control of the conversation.

That's one cybersecurity lesson I won't forget.

Technology can have some incredible security protecting the systems behind it, but humans are still part of that system.

This time, somebody came after the human.

They got me.

Now I'm learning from it, tightening things up and sharing the experience so maybe they don't get the next person.

Stay curious. Stay alert. And never let a familiar name on caller ID make the trust decision for you.

#EnthusiasticTechie #ChasingTheTechInside #Cybersecurity #SocialEngineering #ScamAwareness

🔐 Meet the New Digital Defender: The Rise of AI Cybersecurity Agents

 

The Next Cybersecurity Analyst May Be an AI Agent

For years, cybersecurity teams have been using automation to help monitor networks, scan systems, and respond to threats. But something bigger is starting to happen.

The next cybersecurity analyst working inside a Security Operations Center may not be a person sitting behind six monitors. It could be an AI agent working alongside the human security team.

Now, let me be clear. I am not saying AI is about to replace every cybersecurity analyst. We are not there, and the research does not prove that. What is happening is that AI agents are beginning to take over some of the repetitive work that normally lands on a Tier 1 analyst’s desk.

This is more than a chatbot answering a cybersecurity question. An AI agent can be given a goal, examine information from different security tools, decide what steps to take, use those tools, and return with a finding or recommended action.

That is where this starts getting off the chain.

From answering questions to taking action

A regular AI assistant waits for someone to ask it a question. An AI agent can continue working through a task with less step-by-step direction.

Let’s say a suspicious email is reported inside a company. A security analyst would normally have to examine the sender, email headers, links, attachments, domain reputation, previous alerts, and activity connected to the user’s account.

An AI security agent can be set up to perform many of those same steps. It can collect the evidence, compare it with threat intelligence, decide whether the email looks malicious, explain how it reached that conclusion, and recommend what the analyst should do next.

That is not some future concept sitting in a research lab.

Microsoft’s Phishing Triage Agent already uses large language model-based analysis to review user-reported emails and classify them as threats or false alarms. Microsoft says the system applies contextual reasoning instead of relying only on static rules. It also provides an explanation for its decision so the security team can review the evidence. Microsoft’s technical documentation describes this as autonomous triage without the analyst having to provide instructions for every step.

Google Security Operations is moving in the same direction. Its Triage Agent can investigate supported alerts, determine whether they appear to be true or false positives, build a timeline, summarize its findings, and suggest the next investigative steps. Google says its agentic security system can reduce an investigation that might normally take around 30 minutes to about 60 seconds in certain workflows. That is the company’s reported performance, not a guarantee that every investigation will be completed that quickly. Google Cloud’s Agentic SOC

The shift is already underway.

What work could an AI security agent handle?

A cybersecurity analyst does much more than stare at alerts. The job involves gathering evidence, looking for patterns, deciding what deserves attention, documenting incidents, and helping the organization respond.

AI agents are being developed to assist with work such as:

• Sorting real alerts from false positives

• Investigating suspicious emails

• Connecting related alerts across users and devices

• Searching logs for unusual activity

• Summarizing an incident timeline

• Checking threat intelligence

• Finding gaps in identity and access policies

• Prioritizing vulnerabilities

• Recommending patches or configuration changes

• Producing investigation reports

• Hunting for similar activity elsewhere in the environment

Microsoft introduced security agents for phishing, data-loss prevention, insider-risk alerts, Conditional Access policies, vulnerability remediation, and threat-intelligence briefings. Some of these agents recommend an action while leaving the final approval to the security administrator. Microsoft Security

That human approval is important.

There is a huge difference between allowing an agent to summarize an alert and allowing it to disable an account, isolate a production server, block network traffic, or change a firewall policy. The higher the possible impact, the more human oversight should be required.

The proof goes beyond product announcements

Company demonstrations are interesting, but I like to see evidence that the technology can perform under tougher conditions.

The DARPA AI Cyber Challenge gave us some of that proof.

In the 2025 final competition, autonomous cyber reasoning systems analyzed more than 54 million lines of code. According to DARPA, those systems discovered 54 of the competition’s 63 synthetic vulnerabilities and patched 43 of them. They also found 18 real vulnerabilities that had not been planted for the contest and produced 11 patches for those real flaws.

The teams submitted patches in an average of 45 minutes. DARPA’s final results

That does not mean one AI model did everything by itself. These were complete cyber reasoning systems built by highly skilled teams. They combined AI models with scanners, fuzzing tools, code analysis, testing environments, and other cybersecurity technology.

Still, the results matter. They show that AI-powered systems can do more than explain what a vulnerability is. They can examine software, find a weakness, prove that the weakness exists, create a possible patch, and test the result.

That is starting to look like actual security work.

But AI agents are not ready to run the whole SOC

This is where I have to pump the brakes a little.

AI agents can be fast, but fast and correct are not always the same thing. An agent can misunderstand evidence, miss part of an attack, trust bad information, or recommend an action that creates another problem.

Research benchmarks also show a large gap between knowing cybersecurity facts and handling a complicated, changing attack. One 2025 cybersecurity benchmark found that leading systems performed much better on knowledge-based security questions than on multi-step attack-and-defense scenarios. In those more demanding environments, reported success rates fell into the 20%–40% range. CAIBench research

Another benchmark tested AI agents against real-world web application vulnerabilities. Its strongest evaluated agent framework resolved only up to 13% of the vulnerabilities. CVE-Bench research

That is a major reality check.

An AI agent may handle a familiar phishing investigation pretty well but struggle when an attacker changes tactics, hides inside normal network activity, or creates a situation the agent has never encountered.

AI agents can also become attack targets themselves. A malicious instruction hidden inside an email, webpage, document, or log entry could attempt to manipulate an agent. This is known as prompt injection. If that agent has access to sensitive data or powerful administrative tools, the risk becomes much more serious.

The agent needs its own security controls:

• Limited permissions

• Approved tools and data sources

• Detailed activity logs

• Human approval for high-impact actions

• Testing before production deployment

• A quick way to stop or disconnect it

• Continuous review of its accuracy

• Protection against prompt injection and data leakage

You cannot hand an AI agent the keys to the whole network and just hope it behaves. That would not be innovation. That would be poor access management wearing a shiny new outfit.

The analyst’s job is changing, not disappearing

My honest opinion is that the near-term future is not human analyst versus AI agent. It is the human analyst working with a team of specialized AI agents.

One agent may investigate phishing. Another may watch identities and access policies. Another may hunt through endpoint and network logs. Another may organize threat intelligence. The human analyst reviews their work, connects the bigger picture, handles unusual situations, and decides when the organization needs to act.

The AI agent brings speed, scale, and the ability to work continuously. The human analyst brings judgment, accountability, business knowledge, ethics, and the ability to recognize when something just does not feel right.

Cybersecurity is not only about finding bad files and strange IP addresses. Analysts must understand how the company operates. They need to know which systems are critical, what downtime would cost, whether an unusual action is actually normal for that business, and how a response could affect customers and employees.

An AI agent may detect suspicious activity on a server. A human has to understand whether shutting down that server could interrupt payroll, hospital operations, manufacturing, or payment processing.

Context matters.

What this means for people entering cybersecurity

If you are studying cybersecurity, this is not the time to give up because AI is coming. This is the time to learn how cybersecurity and AI work together.

Future analysts will need the traditional foundation:

• Networking

• Windows and Linux

• Identity and access management

• Cloud security

• Logs and SIEM platforms

• Incident response

• Vulnerability management

• Threat intelligence

• Scripting and automation

But they will also need to understand how to supervise agents, verify their findings, control their permissions, test their recommendations, and recognize when the agent is confidently wrong.

Knowing how to ask an AI agent to investigate something will be useful. Knowing whether its answer makes technical sense will be even more valuable.

The strongest analyst may not be the person who manually works every alert. It may be the person who knows which tasks to delegate to an agent, which evidence to verify, and when to take back control.

My final thought

The next cybersecurity analyst may be an AI agent—but that agent will still need a good human analyst watching the operation.

We are moving from security tools that only send alerts to security agents that can investigate, reason, and recommend actions. The research shows real progress, especially in phishing triage, alert investigation, vulnerability discovery, and software patching. It also shows that these systems still struggle with complex, unpredictable, multi-step situations.

So I would not call the human cybersecurity analyst obsolete. I would call the role upgraded.

The future SOC may have fewer people buried under repetitive alerts and more people managing investigations, validating evidence, supervising AI agents, and concentrating on the threats that require real human judgment.

That is the part I am watching closely. I’m just chasing the tech inside and trying to see where the human fits before the technology makes that decision for us.

#ChasingTheTechInside #Cybersecurity #AIAgents #StayCurious #StayConnected

The First Command I Run When Troubleshooting a Windows Computer

 

Chasing the Tech Inside: One Windows Command Everyone Should Know — winver

Sometimes the best tech tips are the simplest ones.

Here's one I use all the time: winver.

Most people never think about it until someone from IT asks, "What version of Windows are you running?" Instead of digging through Settings, just press Windows + R, type winver, and hit Enter.

A small window pops up showing your Windows edition, version number, and OS build. It's quick, it's built into Windows, and it can save you a lot of back-and-forth.

Here's something else many people don't realize. That same window can also show the Microsoft account that's associated with your Windows installation. Depending on how your PC is set up, you may see the email address tied to your Windows license or Microsoft account.

Why does that matter?

Because today, your Microsoft account is connected to a lot more than just email. It can be linked to your Windows activation, Microsoft 365 subscription, OneDrive files, the Microsoft Store, device syncing, and even BitLocker recovery information. If you're troubleshooting a PC, buying a used computer, handing a device to a family member, or getting ready for a fresh install, knowing which account is connected can answer a lot of questions before they become problems.

It's also handy when you're talking with tech support. Instead of guessing what version you're running or which account the system is tied to, you can have that information ready in seconds.

I've learned over the years that good troubleshooting usually starts with the basics. Before replacing hardware, reinstalling Windows, or chasing down strange errors, make sure you know exactly what you're working with.

So the next time someone asks, "What version of Windows do you have?" don't start clicking through menus.

Just remember one little command:

winver

Simple. Fast. And one of those small Windows tools that's worth keeping in your back pocket.

Stay curious, stay connected... and keep chasing the tech inside.

Hybrids May Not Get the Hype, But Toyota Keeps Moving Units

 

Toyota Keeps Showing Why Hybrids Still Matter

Toyota keeps proving something I think a lot of people overlook: practical electrification has power.

Everybody loves to talk about full EVs, big batteries, super-fast charging, futuristic dashboards, and all that fancy tech. Don’t get me wrong, I like seeing where the auto industry is headed. I’m always chasing the tech inside. But sometimes the smartest technology is not the loudest technology.

That is where hybrids come in.

Hybrids may not always get the hype, but they sure do move units. And Toyota has been playing this game for a long time. While some automakers were trying to go all-in on full EVs overnight, Toyota stayed steady with hybrids, plug-in hybrids, and practical electrified options that everyday drivers can actually use.

That matters.

A lot of people still want better gas mileage. They want lower fuel costs. They want something reliable. They want technology that helps without making life more complicated. Not everybody is ready to figure out charging stations, battery range, winter range loss, charging speeds, and whether their apartment or house is set up for an EV charger.

That does not mean people are against electrification. It means people want electrification that fits their real life.

Toyota seems to understand that.

The hybrid approach is not about being boring. It is about meeting drivers where they are. You get better efficiency, less fuel waste, and a smoother driving experience without having to change your whole routine. That is why hybrids continue to make sense for so many people.

And I can respect that.

Sometimes we get caught up thinking the future has to arrive all at once. But in the real world, the future usually shows up step by step. First people get comfortable with the technology. Then the infrastructure improves. Then prices come down. Then adoption grows.

That is how practical innovation wins.

Toyota may not always be the loudest company in the EV conversation, but they are showing that electrification is not one-size-fits-all. Full EVs have their place. Hybrids have their place. Plug-in hybrids have their place too.

The real winner is the driver.

Because at the end of the day, people do not just buy technology because it sounds cool. They buy it when it saves money, feels reliable, fits their lifestyle, and makes sense for the road ahead.

That is why Toyota’s hybrid strategy still has power.

Hybrids may not always be flashy, but they are practical. And practical tech is still tech.

#ChasingTheTechInside #EnthusiasticTechie #Toyota #Hybrids #EVs #CarTech