ABOUT THIS EPISODE
Special guest Joshua Wright joins us for a timely incident-response discussion!
Then, in the security news this week:
- Have you heard about PHP2Shell?
- Certificates with keys small enough to guess
- Tor exit nodes turn into SSH credential traps
- Do USB-C cables need firmware updates now?
- HaleHound packs a radio lab into a cheap display
- Claude solves part of the NIST curve mystery
- The Army and self-directed offensive cyber agents
- Retired nuclear reactors return to power AI
- PatchSlop
- NGINX, NODE.js patches critical flaws
- BeyondTrust exploited before the patch landed
- Plex vulnerabilities move from PoC to exploitation
- ICS patches, including a Siemens flaw exploited in the wild
- Can fake data trigger Japan's emergency alert?
- Agentic pentests?
- AI may add noise more than skill
- AI agents navigate OT and move equipment
- AI model helps build a Chrome exploit
- Utah's VPN law runs into technical reality
Segment Resources:
https://dynamicincidentresponse.com/ - A New Era for Incident Response!
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-949
English
United States
TRANSCRIPT 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
SEARCH PAST EPISODES
Search past episodes of Paul's Security Weekly (Audio).
OTHER EPISODES IN THIS PODCAST
Rob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access controls to limit what agents can access and do.
This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!
In the secu…
In the security news this week:
North Carolina ports and contingency plans
Back to paper and pencils
Midnight Blizzard compromises hotel Wi-Fi
DNS strikes again
Captive portals, stolen credentials, and nation-state scale
Phishing-resistant MFA
Goodbye SMS and voice authentication
Cornflak…
This week:
When you are not at summer camp you can't read about it
The Fettle continues
Using the CFAA against AI
Social contracts are not security models
VSCode extentions, again
Bugtraq is back!
NVIDA, LVFS, and unraveling AI infrastructure
More routers that come with backdoors
Do we c…
In the security news this week:
Cursor opens your repo, the repo opens you
If you want the good model I'm going to need to see your ID
Flock's a Flocking mess
Defender was supposed to be the chosen one
Side stepping Secure boot - twice
SonicWall: a LAMP stack in a fancy case
Macs don't get…
In the security news:
2.2 million cars, one shared Bluetooth key
JFrog tries to spin an AI 0-day into a win
Sextortion scammers recycling ShinyHunters' leaks
The first hack ever, from 1966
Prompt injection as a service, $150 a month
Cisco's mystery "static credential"
BMCs still on the int…
Disclaimer: The podcast and artwork embedded on this page are from Paul Asadoorian, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
EDIT
Thank you for helping to keep the podcast database up to date.
