Paul's Security Weekly (Audio)

Rob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access controls to limit what agents can access and do.

This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

In the security news this week:

• Sixteen-year-old Linux LPEs still work
• Ubiquiti UniFi, patch it, also light on details
• If you remember magicJack, you too are old
• Slovakia doesn't trust its own speed cameras
• More homework on NIST's vulnerability database
• Your webcam, mic, and key light, all owned
• Printer moonlights as Minecraft server
• Zombie credit cards
• Your car's infotainment system fuels botnets
• Feds warn about AI-powered PLC attacks
• Can an AI actually reverse engineer its way out?
• Denver International's security breach, volume six
• Charlotte's breach and a parking company
• Why your ancient tech might be the safe one
• Microsoft counts billions of phishing emails
• A password vault that leaked to any website
• Australia sells password books at the post office
• Another perfect ten, this time in Entra ID
• Cisco's bug scores read like Olympic gymnastics

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-941

In the security news this week:

• Cursor opens your repo, the repo opens you
• If you want the good model I'm going to need to see your ID
• Flock's a Flocking mess
• Defender was supposed to be the chosen one
• Side stepping Secure boot - twice
• SonicWall: a LAMP stack in a fancy case
• Macs don't get viruses, part infinity
• Flipper One, but why not Nix?
• NetScaler is back in the room
• Borrowing phone's good reputation
• USB and how to make Windows download stuff
• A KVM with the expensive letters removed
• Five steps to stop the webcam creeps
• PlexTrac acquired
• NIST asks the internet to fix the NVD
• Poland's health software has a very bad week
• If Apple pings you about spyware, believe it
• A macOS stealer that drives your browser for you
• T-Mobile's incident response tool of choice may suprise you, or not...

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-940

In the security news this week:

• North Carolina ports and contingency plans
• Back to paper and pencils
• Midnight Blizzard compromises hotel Wi-Fi
• DNS strikes again
• Captive portals, stolen credentials, and nation-state scale
• Phishing-resistant MFA
• Goodbye SMS and voice authentication
• Cornflake RAT and Chaco Shell
• The NPM worm
• Hundreds of compromised packages
• AI lowers the barrier to mass exploitation
• Rethinking "secure enough"
• Back to basics: know what's on your network
• Get off my PCI lawn

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-939

This week:

• When you are not at summer camp you can't read about it
• The Fettle continues
• Using the CFAA against AI
• Social contracts are not security models
• VSCode extentions, again
• Bugtraq is back!
• NVIDA, LVFS, and unraveling AI infrastructure
• More routers that come with backdoors
• Do we care about LPE?
• Even more AI that finds vulnerabilities
• When AI breaks its own guardtails

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-938

In the security news:

• 2.2 million cars, one shared Bluetooth key
• JFrog tries to spin an AI 0-day into a win
• Sextortion scammers recycling ShinyHunters' leaks
• The first hack ever, from 1966
• Prompt injection as a service, $150 a month
• Cisco's mystery "static credential"
• BMCs still on the internet, still handing out hashes
• Scattered Spider duo sentenced over the TfL hack
• Air-gapped data sneaking out over the video cable
• A ghost in the network
• DNS poisoning checks into hotel WiFi
• Microsoft's cut-rate cybersecurity AI
• Learning to trust USB drives again
• Agentic pentesting shows up just in time for Black Hat
• Microsoft rethinks security for the AI age, again

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-937

In the news this week:

• InfraTrust and knowing what to patch
• Adversary in the middle triggered command injection
• Exploitarium again
• FreeRDP comes with free vulnerabilities
• AI breaking out of sandboxes on its own
• Wordpress RCE
• DMA dangers
• Nightmware eclypse is at it again
• Fortisandbox
• Turning AI to the dark side
• more prompt injection
• Secure boot is broken, still and again...

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-936

This week, our technical segment covers a new open-source tool written by Paul (and Claude) that helps you keep your Linux systems up to date and assess supply chain risks. It's called "fettle" and is a pure Python implementation that gives you even more features than previously discussed! Then in the security news:

• The GodDamn Ransomware
• CMMC suspended
• Holy Microsoft Tuesday!
• Lessons learned
• Without the Internet, do we still get water?
• The forgotten shims
• More than two BIOS passwords
• Cracking firmware encryption with Claude
• 1999 called, and it wants its "Exploits" back
• Prompt injection for defenders
• Grok has your repo
• You're not going to outpatch AI

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-935

In the security news:

• Son of Anton strikes again!
• HalluSquatting and using Claude to defend itself
• CISA KEV's Revolving Door
• LLM's hallucinate and companies get sued
• Additionally - GitLost
• Yet even more Linux vulnerabilities
• Citrix just keeps bleeding
• Old hardware is new again
• A sneak peak into next week's tech segment
• Tenda hidden backdoors
• We're still talking about Mirai
• Today was not a good day for Roundcube
• Canada is hacking criminals
• AI safeguards are still annnoying
• All cars will spy on you
• The FatFs unpatched vulnerability in millions of embedded devices
• Windows OS market share drops below 60% (Paul uses Arch)
• 'We Cannot Choose to Become Idiots' - or can we?

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-934

This week we have a technical segment based on the response to "Atomic Arch", an updated open-source tool to help you catch malicious packages. In the security news:

• Exploitarium
• A hot messy summer of vulnerabilities
• AI Squatting
• Linux LPE - no shortage of those
• Fingerprinting Favicons
• Windows 10 extended
• Can Clothes Make You Invisible to Facial Recognition?
• Fable and Mythos for All
• Do we care about Quantum?
• Execs have AI risk under control
• Biological warefare in Spyware
• The scripts in-scope for PCI
• We don't have privacy, but we may get age restrictions

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-933

First up is Sandy Bird from Sonrai discussing how to protect our cloud infrastructure!

This segment is sponsored by Sonrai Security. Visit https://securityweekly.com/sonrai to learn more about them!

Next up in the security news:

• Help, I am Fortibleeding
• Cisco SD-WAN needs help
• The secret life of probe requests
• Help, I am Squidbleeding
• XSS to RCE and why CVSS isn't the full picture
• TVs spy on you
• Foundational security practices
• Cybersecurity costs money
• Happy "Its too late to update your KEK key" day
• You don't have security flaws if no one can report them
• Rickrolling FIFA
• Domain takeovers
• End of life, out of luck
• The key to Encryption...

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-932