ABOUT THIS EPISODE
First up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero Trust. Then in the security news:
- Compiling spreadsheets, because that's why
- Nvidia wants to put AI agents in timeout
- Citrix NetScaler gets exploited again, and again
- Spectre still refuses to die
- Your SBOM is incomplete?
- File notifications leak more than filenames
- ENIAC had cables instead of a BIOS
- Another Linux kernel root exploit lands
- Containers share a kernel
- ThinkNode M9 microSD card gets a virus notice
- Google analyst infiltrates a supply-chain gang
- Your phone speaker can transmit radio
- Reconstructing firmware with a logic analyzer
- Robot dogs learn cybersecurity
- CISA warns about third-party ICS integrators
- Dutch police arrest a ShinyHunters suspect
- A soldier goes from telecom hacking to prison
- AI companies discover their agents have opinions
- Cloudflare containers accidentally share leftovers
- OT networks are still mostly not isolated
- Florida wants to pause ChatGPT
The interview segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!
Show Notes: https://securityweekly.com/psw-946
English
United States
TRANSCRIPT 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
SEARCH PAST EPISODES
Search past episodes of Paul's Security Weekly (Video).
OTHER EPISODES IN THIS PODCAST
This week, our technical segment covers a new open-source tool written by Paul (and Claude) that helps you keep your Linux systems up to date and assess supply chain risks. It's called "fettle" and is a pure Python implementation that gives you even more features than previously discussed! Then in …
In the security news this week:
• North Carolina ports and contingency plans • Back to paper and pencils • Midnight Blizzard compromises hotel Wi-Fi • DNS strikes again • Captive portals, stolen credentials, and nation-state scale • Phishing-resistant MFA • Goodbye SMS and voice authentication • C…
In the news this week:
InfraTrust and knowing what to patch
Adversary in the middle triggered command injection
Exploitarium again
FreeRDP comes with free vulnerabilities
AI breaking out of sandboxes on its own
Wordpress RCE
DMA dangers
Nightmware eclypse is at it again
Fortisandbox
Tur…
In the security news:
2.2 million cars, one shared Bluetooth key
JFrog tries to spin an AI 0-day into a win
Sextortion scammers recycling ShinyHunters' leaks
The first hack ever, from 1966
Prompt injection as a service, $150 a month
Cisco's mystery "static credential"
BMCs still on the int…
This week:
When you are not at summer camp you can't read about it
The Fettle continues
Using the CFAA against AI
Social contracts are not security models
VSCode extentions, again
Bugtraq is back!
NVIDA, LVFS, and unraveling AI infrastructure
More routers that come with backdoors
Do we c…
Disclaimer: The podcast and artwork embedded on this page are from Paul Asadoorian, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
EDIT
Thank you for helping to keep the podcast database up to date.
