Experience Leadership - The Small Business Podcast · Marc Haine

The One Mistake That Could Cripple Your Business with Shayne Kawalilak

·53 min·3 clips

Shane says the average person has 80 passwords, LastPass was breached twice, and his database of 1,400 passwords was exposed.

1. Experience Leadership discusses the one mistake that could cripple a business through everyday cybersecurity failures. 2. Mark Hain hosts Shane Kawalilek, a cybersecurity trainer and author of Don't Be the Weakest Link, and both matter because they frame the episode around employee behavior and business risk. 3. The episode asks what small-business owners should do right now to stop being the weakest link. 4. Shane says small and medium businesses are prime targets because a study released “yesterday” showed small-business compromises doubled last year. 5. He defines phishing as impersonation and says attacks arrive by email, phone, texting, and video. 6. Shane warns that AI is making live video impersonation more common, so a face on screen no longer proves identity. 7. He gives a nonprofit example where a fake message used the treasurer’s name and asked for gift cards, which was the clue that exposed the scam. 8. He points listeners to his “red flags” cut sheet, including urgent language, past-due-bill language, all-caps messages, typos, and bad grammar. 9. He recalls a Canadian example where a bogus government page used English and German, which did not match a bilingual Canadian context. 10. Shane says over 75% of breaches now go through people, not hardware, because attackers are often logging in with stolen credentials. 11. He says breached data can sit for six months, 10 months, a year, or 18 months before it is used. 12. He explains that seeing what information has been taken matters because you cannot secure what you do not know is missing. 13. Shane says passwords are the foundation of security, recommends 12 to 15 characters, and argues that eight-character minimums are “insane.” 14. He says using all four character types matters, and a single symbol can change a crack estimate from one year to 45 years. 15. He says security questions create a false sense of safety because the answers are often published facts or reused across sites. 16. Shane says biometrics are not a magic shield because faces, fingerprints, and voices can be copied or reused, especially with AI. 17. The interview style is direct, practical, and conversational, with Mark Hain using personal examples and Shane answering with specific rules and stories. 18. The energy is alert and instructional, with repeated warnings about red flags, password habits, and employee awareness. 19. Business owners, managers, and employees handling email and logins. 20. Listeners wanting entertainment or abstract theory without practical security steps.

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from Experience Leadership - The Small Business Podcast