ABOUT THIS EPISODE
In the security news this week:
- Microsoft patches all the things
- Commissary freezers enter cyberwar
- Fake AV, real Defender nap
- Rowhammer comes for the GPU
- BIOS updates are no longer optional
- CVSS is not a crystal ball
- Kworker, but make it malware
- FortiGate gets a post-exploitation RAT
- CERN goes Debian underground
- UEFI shells strike again
- Australia loses the plot, and phones
- Cisco routers become covert gateways
- MikroTik patches the takeover chain
- WeWorm wriggles through mobile
- The year of Linux television
- Browsers become backdoors
- Fake IT calls, real data theft
- CVE attribution gets weird
- Boston Scientific keeps talking
- Security tools misconfigure themselves
- AI circuit breakers for rogue agents
- Passkeys meet the real world
- Vibe coding, vibe vulnerabilities
- AI loss of control keeps climbing
- AI agents report themselves to Schneier
Show Notes: https://securityweekly.com/psw-943
English
United States
TRANSCRIPT 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
SEARCH PAST EPISODES
Search past episodes of Paul's Security Weekly (Video).
OTHER EPISODES IN THIS PODCAST
This week, our technical segment covers a new open-source tool written by Paul (and Claude) that helps you keep your Linux systems up to date and assess supply chain risks. It's called "fettle" and is a pure Python implementation that gives you even more features than previously discussed! Then in …
In the security news this week:
• North Carolina ports and contingency plans • Back to paper and pencils • Midnight Blizzard compromises hotel Wi-Fi • DNS strikes again • Captive portals, stolen credentials, and nation-state scale • Phishing-resistant MFA • Goodbye SMS and voice authentication • C…
In the security news:
2.2 million cars, one shared Bluetooth key
JFrog tries to spin an AI 0-day into a win
Sextortion scammers recycling ShinyHunters' leaks
The first hack ever, from 1966
Prompt injection as a service, $150 a month
Cisco's mystery "static credential"
BMCs still on the int…
This week:
When you are not at summer camp you can't read about it
The Fettle continues
Using the CFAA against AI
Social contracts are not security models
VSCode extentions, again
Bugtraq is back!
NVIDA, LVFS, and unraveling AI infrastructure
More routers that come with backdoors
Do we c…
In the news this week:
InfraTrust and knowing what to patch
Adversary in the middle triggered command injection
Exploitarium again
FreeRDP comes with free vulnerabilities
AI breaking out of sandboxes on its own
Wordpress RCE
DMA dangers
Nightmware eclypse is at it again
Fortisandbox
Tur…
Disclaimer: The podcast and artwork embedded on this page are from Paul Asadoorian, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
EDIT
Thank you for helping to keep the podcast database up to date.
