關於這一集
Special guest Joshua Wright joins us for a timely incident-response discussion!
Then, in the security news this week:
- Have you heard about PHP2Shell?
- Certificates with keys small enough to guess
- Tor exit nodes turn into SSH credential traps
- Do USB-C cables need firmware updates now?
- HaleHound packs a radio lab into a cheap display
- Claude solves part of the NIST curve mystery
- The Army and self-directed offensive cyber agents
- Retired nuclear reactors return to power AI
- PatchSlop
- NGINX, NODE.js patches critical flaws
- BeyondTrust exploited before the patch landed
- Plex vulnerabilities move from PoC to exploitation
- ICS patches, including a Siemens flaw exploited in the wild
- Can fake data trigger Japan's emergency alert?
- Agentic pentests?
- AI may add noise more than skill
- AI agents navigate OT and move equipment
- AI model helps build a Chrome exploit
- Utah's VPN law runs into technical reality
Segment Resources:
https://dynamicincidentresponse.com/ - A New Era for Incident Response!
Show Notes: https://securityweekly.com/psw-949
英語
美國
逐字稿 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
本 Podcast 中的其他單集
Interview with Michael Jenkins from ThreatLocker Securing AI on the Endpoint - Zero Trust or Bust
Michael joins us for the first time to discuss strategies for securing the latest evolution of AI: local endpoint-based AI agents. Tools like Claude Code, OpenAI Codex, and Google AntiGravity give emp…
In this episode, Kriss Stephen, Principal Solutions Architect at Semperis, explores the concept of the Minimum Viable Company and the three foundational capabilities every organization needs to withstand and recover from a cyberattack. Drawing from his experience in identity security and cyber resi…
Klingons, Stop and Shop, OvHCloud, Microsoft, Plex2Shell, ReactOS, Aaran Leyland, and More on the Security Weekly News.
Show Notes: https://securityweekly.com/swn-626
The OWAS Mobile Application Security (MAS) project recently released an updated version of its guidance, with excellent advice organized into common weaknesses, a verification standard for devs (MASVS), and a testing guide (MASTG). Ryan Lloyd and Jan Seredynski from Guardsquare dive into the projec…
免責聲明: 本頁面嵌入的 Podcast 和封面圖片來自 Security Weekly Productions，歸其所有者所有，與 Listen Notes, Inc. 無關聯，也未獲得 Listen Notes, Inc. 背書。
