معلومات عن هذه الحلقة
Special guest Joshua Wright joins us for a timely incident-response discussion!
Then, in the security news this week:
- Have you heard about PHP2Shell?
- Certificates with keys small enough to guess
- Tor exit nodes turn into SSH credential traps
- Do USB-C cables need firmware updates now?
- HaleHound packs a radio lab into a cheap display
- Claude solves part of the NIST curve mystery
- The Army and self-directed offensive cyber agents
- Retired nuclear reactors return to power AI
- PatchSlop
- NGINX, NODE.js patches critical flaws
- BeyondTrust exploited before the patch landed
- Plex vulnerabilities move from PoC to exploitation
- ICS patches, including a Siemens flaw exploited in the wild
- Can fake data trigger Japan's emergency alert?
- Agentic pentests?
- AI may add noise more than skill
- AI agents navigate OT and move equipment
- AI model helps build a Chrome exploit
- Utah's VPN law runs into technical reality
Segment Resources:
https://dynamicincidentresponse.com/ - A New Era for Incident Response!
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-949
الإنجليزية
الولايات المتحدة
النص 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
البحث في الحلقات الماضية
البحث في الحلقات السابقة من Paul's Security Weekly (Audio).
حلقات أخرى في هذا البودكاست
First up: a technical segment on Linux threat hunting. We'll start this series by covering the best places to look for IoCs on Linux systems and devices, starting with startup services and scheduled tasks. Then, in the security news this week:
SonicWall zero-days, again
AI finds a pile of Cisco…
This week:
When you are not at summer camp you can't read about it
The Fettle continues
Using the CFAA against AI
Social contracts are not security models
VSCode extentions, again
Bugtraq is back!
NVIDA, LVFS, and unraveling AI infrastructure
More routers that come with backdoors
Do we c…
In the security news this week:
North Carolina ports and contingency plans
Back to paper and pencils
Midnight Blizzard compromises hotel Wi-Fi
DNS strikes again
Captive portals, stolen credentials, and nation-state scale
Phishing-resistant MFA
Goodbye SMS and voice authentication
Cornflak…
In the security news this week:
Cursor opens your repo, the repo opens you
If you want the good model I'm going to need to see your ID
Flock's a Flocking mess
Defender was supposed to be the chosen one
Side stepping Secure boot - twice
SonicWall: a LAMP stack in a fancy case
Macs don't get…
Rob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access controls to limit what agents can access and do.
This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!
In the secu…
إخلاء المسؤولية: البودكاست والأعمال الفنية المضمنة في هذه الصفحة مأخوذة من Paul Asadoorian، وهي مملوكة لمالكها وليست تابعة لشركة Listen Notes, Inc أو معتمدة منها.
تعديل
شكراً على مساعدتنا في الحفاظ على قاعدة بيانات البودكاست مُحدَّثة.
