- wöchentlichErscheinungsrhythmus
- 2 h 05typische Länge
- 29. Okt.letzte Folge
Folgenzu den neuesten
Lasagna DoS, AI Slop, Hacker Ultimatums - PSW #890
In the secure news: • Automakers respond to Flipper Zero attacks • More on the unconfirmed Elastic EDR 0-Day • When Secure Boot does its job too well • Crazy authenitcation bypass • Hacker ultimatums • AI Slop • Impatient hackers • Linux IS
Hackers Steal Your Car and Vulnerabilities - Rob Allen - PSW #889
Rob Allen joins us to discuss the importance of security research teams, and some cool stuff they've worked on. Then, in the Security News: • Flipper Zero, unlocking cars: The saga continues • The one where they stole the vulnerabilities •
What We've Learned from LockBit and Black Basta Leaks (and News) - Ian Gray - PSW #888
This segment is sponsored by Flashpoint. Visit https://securityweekly.com/flashpoint to learn more about them! Recent leaks tied to LockBit and Black Basta have exposed the inner workings of two of the most notorious ransomware groups—revea
Hackberry PIs and Other Hacker Things - PSW #887
We kick things off with a deep dive into the Hackberry PI and how to build one. Then in the security news: • Will Perplexity buy Chrome? • ESP32 Bus Pirates • Poisoned telemetry • Docker image security • Fully Open Source Quantum Sensors •
Devices Are Attacking - PSW #886
• Why should hate AI • When firmware attacks • The 300 second breach • Old ways still work, AI might help • And so begins the crawler wars • Turn off your SonicWall VPN • Your Pie may be wrapped in PII • Attackers will find a way • Signed k
Hacking Washing Machines - PSW #885
In the security news: • Hacking washing machines, good clean fun! • Hacking cars via Bluetooth • More Bluetooth hacking with Breaktooth • Making old vulnerabilities great again: exploiting abandoned hardware • Clorox and Cognizant point fin
Protecting G-Suite/MS365 and Security News - Abhishek Agrawal - PSW #884
We chat with Material Security about protecting G Suite and MS365. How else are you monitoring the most commonly used cloud environments and applications? In the security news: • Google Sues Badbox operators • Authenticated or Unauthenticat
Hackers On A Train - PSW #883
In the security news: • The train is leaving the station, or is it? • The hypervisor will protect you, maybe • The best thing about Flippers are the clones • Also, the Flipper Zero as an interrogation tool • Threats are commercial and open-
Citrixbleed 2, Hardware Hacking, and Failed Bans - PSW #882
This week in the security news: • Citrixbleed 2 and so many failures • Ruckus leads the way on how not to handle vulnerabilities • When you have no egress • Applocker bypass • So you bought earbuds from TikTok • More gadgets and the crazy r
Exploring Meshtastic and LoRa Mesh Networks - Rob Allen - PSW #881
This week, we dive into the world of Meshtastic and LoRa—two technologies empowering secure, long-range, and infrastructure-free communication. We'll talk about the origins of Meshtastic, how LoRa radio works, and why mesh networking is rev
Is Vuln Management Dead? - HD Moore - PSW #880
This conversation explores the intersection of cybersecurity and emerging technologies, focusing on innovative hacking techniques, the evolution of vulnerability management, and the critical importance of asset discovery. The discussion als
Hacking Drivers - PSW #879
This week: * The true details around Salt Typhoon are still unknown * The search for a portable pen testing device * Directories named "hacker2" are suspicious * Can a $24 cable compete with a $180 cable? * Hacking Tesla wall chargers * Old
UEFI Vulnerabilities Galore - PSW #878
This week: • You got a Bad box, again • Cameras are expose to the Internet • EU and connected devices • Hydrophobia • NVRAM variables • Have you heard about IGEL Linux? • SSH and more NVRAM • AI skeptics are nuts, and AI doesn't make you mo
Updating & Protecting Linux Systems - PSW #877
Two parts to this episode: • Tech Segment: Updating Linux Systems - Beyond apt-get upgrade * Custom scripts for ensuring your Linux systems are up-to-date * topgrade - tutorial for using topgrade to update Linux systems on various Linux dis
It's A Trap! - PSW #876
In the security news: • Vicious Trap - The malware hiding in your router • Hacking your car • WSL is open-source, but why? • Using AI to find vulnerabilities - a case study • Why you should not build your own password manager • The inside s
Malware Laced Printer Drivers - PSW #875
This week in the security news: • Malware-laced printer drivers • Unicode steganography • Rhode Island may sue Deloitte for breach. They may even win. • Japan's active cyber defense law • Stop with the ping • LLMs replace Stack Overflow - y
Ransomware in your CPU - PSW #874
This week in the security news: • Android catches up to iOS with its own lockdown mode • Just in case, there is a new CVE foundation • Branch privilege injection attacks • My screen is vulnerable • The return of embedded devices to take ove
Are You Down With RDP? - PSW #873
Security news for this week: • RDP and credentials that are not really revoked, and some RDP bitmap caching fun • Some magic info on MagicINFO • Vulnerability Management Zombies • There is a backdoor in your e-commerce • Airborne: vulnerabi
AI Tips, Tricks, and Traps! - PSW #872
The PSW crew discusses tips, tricks, and traps for using AI and LLMs. We discuss a wide range of AI-related topics, including how to utilize AI tools for writing, coding, data analysis, website design, and more! Some key takeaways include:
Hacking Crosswalks and Attacking Boilers - PSW #871
The crosswalk is talking to me man!, don't block my website without due process, Florida is demanding encryption backdoors, attacking boilers and banning HackRF Ones, time to update your flipper zero, using AI to create working exploits, wh
Govt Unravelling, AI Hijinx, Bot Chaos, Recall, Oracle, Slopesquatting, Tycoon 2FA... - PSW #870
Govt Unravelling, AI Hijinx, Bot Chaos, Recall, Oracle, Slopesquatting, Tycoon 2FA, College, who knows, a lot more... On Paul's Security Weekly. Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://secur
You Should Just Patch - PSW #869
In the security news this week: You should really just patch things, the NVD backlog, Android phones with malware pre-installed, so convenient, keyloggers and a creepy pharmacist, snooping on federal workers, someone stole your browser hist
Not-So-Secure Boot - Rob Allen - PSW #868
Rob Allen, Chief Product Officer at Threatlocker joins us for an interview segment on using AI in security products: What works and what's not fully baked! Then in the security news, There are more holes in your boot...loader according to M
SignalGate and How Not To Protect Secrets - PSW #867
How do we handle scope creep for vulnerabilities?, find the bugs before it hits the real world, risk or hype vulnerabilities, RTL-SDR in a browser, using AI to hack AI and protect AI, 73 vulnerabilities of which 0 patches have been issued,
Its Not Really A 0-Day - PSW #866
This week: Compliance, localization, blah blah, the Greatest Cybersecurity Myth Ever Told, trolling Microsoft with a video, Github actions give birth to a supply chain attack, prioritizing security research, I'm tired of 0-Days that are not
AI Is Oversharing and Leaking Data - Sounil Yu - PSW #865
Sounil Yu joins us to kick things off with AI defenses: Enterprise AI search tools like Copilot for Microsoft 365 lack the in-depth access controls required to ensure that query responses align with the user's need-to-know boundaries. Witho
Don't Hack Russia - PSW #864
Hacking your mattress, Taylor Swift all the time, DNS sinkholes, throwing parties at rental properties, detect jamming, it took 18 years to hack, airtag hacks, undetectable weapons, RIP Skype, Cellebrite targets, upgrade ALL the things, Kal
Zero Days Are Not Just Fiction - PSW #863
Apple, the UK, and data protection, you can get pwned really fast, Australia says no Kaspersky for you!, the default password is on the Internet, topological qubits, dangerous AI tools, old software is not just old but vulnerable too, teari
Live from ZTW - PSW #862
Our thoughts on Zero Trust World, and just a little bit of news. Of course we covered some firmware and UEFI without Paul! Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-862
Prompt Injection, CISA, Patch Tuesday - PSW #861
You can install Linux in your PDF, just upload everything to AI, hackers behind the forum, TP-Link's taking security seriously, patche Tuesday for everyone including Intel, AMD, Microsoft, Fortinet, and Ivanti, hacking your space heater for
