- wöchentlichErscheinungsrhythmus
- 2 h 05typische Länge
- vor 5 Tagenletzte Folge
For the latest in computer security news, hacking, and research! We sit around, drink beer, and talk security. Our show will feature technical segments that show you how to use the latest tools and techniques. Special guests appear on the show to enlighten us and change your perspective on information security. Note: This is only Paul's Security Weekly, a 2-hour show recorded once per week.
Folgen
Vulnpocalypse Continues Until Defense Improves - PSW #950
In the security news this week: In the security news this week: • Cisco says patch faster, then sells you time • Turning AI refusals into vulnerability signals • Brotli's are hiding • WordPress image upload exploit • Fortinet ships fixes be
PHP2Hell - Joshua Wright - PSW #949
Special guest Joshua Wright joins us for a timely incident-response discussion! Then, in the security news this week: • Have you heard about PHP2Shell? • Certificates with keys small enough to guess • Tor exit nodes turn into SSH credential
AI Takes Over? - Danny Akacki - PSW #948
In the security news this week: • Convert this router into an SDR • Ivanti straight to root • Anthropic's AI worm FUD • A kernel exploit to fix downloads • Supermarket refrigeration attacks • 400 mystery Java vulnerabilities • Authenticatio
Routers on Trial, AI Found More Bugs - PSW #947
In the security news this week: • BPFDoor • OpenSSH compresses a little too much • AI can find bugs. Who gets them fixed? • TP-Link and the courts • Cisco NX-API • ClingSTUN • LineageOS, Android TV, and a Raspberry PI • Dell's updater has a
Hacking Without Boundaries - Michael Jenkins - PSW #946
First up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero Trust. Then in the security news: • Compiling spreadsheets, because that's why • Nvidia wants to put AI agents in
AI Will Save Us, or Not? - PSW #945
In the security news this week: • Build your own router, or just buy one • What to patch first • But maybe don't buy D-Link • AI nearly starts a war • Flock cameras lose their keys • The AI slowdown won't save bad security • Opus at home, j
AI hates CAPTCHAs - PSW #944
In the security news this week: • UK government rolls out passkeys to 20 million users • Phishing-resistant authentication and replay resistance • Passkey adoption, device security, and user acceptance • EU Cyber Resilience Act guidance, sc
It's More Secure When It's Disabled - PSW #943
In the security news this week: • Microsoft patches all the things • Commissary freezers enter cyberwar • Fake AV, real Defender nap • Rowhammer comes for the GPU • BIOS updates are no longer optional • CVSS is not a crystal ball • Kworker,
Linux Threat Hunting - PSW #942
First up: a technical segment on Linux threat hunting. We'll start this series by covering the best places to look for IoCs on Linux systems and devices, starting with startup services and scheduled tasks. Then, in the security news this we
Hacking All The Devices, with AI? - Rob Allen - PSW #941
Rob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access controls to limit what agents can access and do. This segment is sponsored by ThreatLocker. Visit https://securityweek
Rejoice In The Nostalgia - PSW #940
In the security news this week: • Cursor opens your repo, the repo opens you • If you want the good model I'm going to need to see your ID • Flock's a Flocking mess • Defender was supposed to be the chosen one • Side stepping Secure boot -
The Breached WiFi AI Ports... What? - PSW #939
In the security news this week: • North Carolina ports and contingency plans • Back to paper and pencils • Midnight Blizzard compromises hotel Wi-Fi • DNS strikes again • Captive portals, stolen credentials, and nation-state scale • Phishin
When AI Commits Felonies - PSW #938
This week: • When you are not at summer camp you can't read about it • The Fettle continues • Using the CFAA against AI • Social contracts are not security models • VSCode extentions, again • Bugtraq is back! • NVIDA, LVFS, and unraveling A
Sandwich Hats - PSW #937
In the security news: • 2.2 million cars, one shared Bluetooth key • JFrog tries to spin an AI 0-day into a win • Sextortion scammers recycling ShinyHunters' leaks • The first hack ever, from 1966 • Prompt injection as a service, $150 a mon
Fixing Vulns Is Harder Than Finding Them - PSW #936
In the news this week: • InfraTrust and knowing what to patch • Adversary in the middle triggered command injection • Exploitarium again • FreeRDP comes with free vulnerabilities • AI breaking out of sandboxes on its own • Wordpress RCE • D
1999 Called and It Wants It's Exploits Back - PSW #935
This week, our technical segment covers a new open-source tool written by Paul (and Claude) that helps you keep your Linux systems up to date and assess supply chain risks. It's called "fettle" and is a pure Python implementation that gives
AI Is Annoying & IoT Devices Still Get Hacked - PSW #934
In the security news: • Son of Anton strikes again! • HalluSquatting and using Claude to defend itself • CISA KEV's Revolving Door • LLM's hallucinate and companies get sued • Additionally - GitLost • Yet even more Linux vulnerabilities • C
Linux Tech Segment & Vulnerabilities Galore - PSW #933
This week we have a technical segment based on the response to "Atomic Arch", an updated open-source tool to help you catch malicious packages. In the security news: • Exploitarium • A hot messy summer of vulnerabilities • AI Squatting • Li
Cloud Visibility, Fortibleed, hacking things the easy way - Sandy Bird - PSW #932
First up is Sandy Bird from Sonrai discussing how to protect our cloud infrastructure! This segment is sponsored by Sonrai Security. Visit https://securityweekly.com/sonrai to learn more about them! Next up in the security news: • Help, I a
GPS, PCI, ARCH, OH MY! - PSW #931
In the security news this week: • GPS spoofing and satellite jamming are getting way too accessible • Rekeying satellites in orbit sounds terrifying • Cyber extortion and whether criminals still have ethics • AI helping cybersecurity resear
Trolling Microsoft With Vulnerabilities - PSW #930
In the security news: • Trolling Microsoft With Vulnerabilities • Fable 5 loves guardrails • Binwalk vulnerability • EMBA and local models • EDRChoker • AI worms • Interesting Arista vulnerability added to KEV • BOD 26-04 and stakeholder sp
Security Researchers Are Threat Actors - PSW #929
This week in the security news: • Security Researchers Are Threat Actors according to Microsoft • Hands-free malicious firmware • If you've ever typed "ls" in Windows, this is for you • Cisco makes more patches, wants you to pay • Ambiguous
Linux Supply Chain How-To - PSW #928
This week we have a technical segment focused on Linux! Paul released a script that helps you get a handle on Linux supply chain security, and new features allow you to assess the state of Secure Boot on your Linux systems (that also use MS
FCC, Github, MiniShai-hulud, Stated of Supply Chain, Itron, CRA, NIS2, and more!! - PSW #927
In the security news this week: • FCC router bans and the hidden firmware update problem • Why extending support timelines actually improves security • Github supply chain concerns and the evolving SBOM ecosystem • CRA and NIS2 compliance d
You're not going to patch your way out of this - PSW #926
This week: • New Yellowkey bitlocker bypass and what it means for you • Hackers can run you over with a robot lawnmower • FCC says new things about routers, again • Glitching with AI • almost no false positives • AI thought it was evil • Di
Getting Rid of Your VPN - Rob Allen - PSW #925
Rob Allen from Threatlocker joins us to discuss the risks associated with VPN appliances and how to implement better security solutions that don't leave you hanging out on the open Internet. The interview segment is sponsored by ThreatLocke
FIRESTARTER - PSW #924
This week in the security news: • Are you a FIRESTARTER? • Eavesdropping via fiber-optic cables • Copy Fail - more Linux LPE • Github RCE • Running Linux on a PS5 • BadUSB tricks • SilentGlass and HDMI threats • Sonicwall and vague details
Back to (or Start) Fundamentals? - Rajesh Khazanchi - PSW #923
This week: Larry's in the host seat and chaos ensues. We dig into: • A very questionable story about tracking a warship with a $5 Bluetooth tracker • Serial-to-IP devices quietly sitting in critical infrastructure… and full of holes • New Y
The AI "Vulnpocolypse" Is Real? - PSW #922
This week: • CSA issues guidance to CISOs on Mythos • Vuln management woes • Windows tells you about Secure Boot • AI-assisted firmware vuln hunting • The dumbest hack • Edge decay and the failing perimeter • Mac OS X on a Wii • Little snit
AI Makes All Bug Shallow? - PSW #921
This week: • Rage dropping 0-Day • Claude Mythos, things are different now • From UART to root, on a device made in China, where's the FCC? • More CUPS vulnerabilities • Russians are hacking routers, FCC ban doesn't stop them • Mongoose vul
