Security Weekly (Download Only)

Tor, PhP2Shell, Deepfakes, eMudhra, LiteLLM, Meta, Josh Marpet, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-627

Special guest Joshua Wright joins us for a timely incident-response discussion!

Then, in the security news this week:

• Have you heard about PHP2Shell?
• Certificates with keys small enough to guess
• Tor exit nodes turn into SSH credential traps
• Do USB-C cables need firmware updates now?
• HaleHound packs a radio lab into a cheap display
• Claude solves part of the NIST curve mystery
• The Army and self-directed offensive cyber agents
• Retired nuclear reactors return to power AI
• PatchSlop
• NGINX, NODE.js patches critical flaws
• BeyondTrust exploited before the patch landed
• Plex vulnerabilities move from PoC to exploitation
• ICS patches, including a Siemens flaw exploited in the wild
• Can fake data trigger Japan's emergency alert?
• Agentic pentests?
• AI may add noise more than skill
• AI agents navigate OT and move equipment
• AI model helps build a Chrome exploit
• Utah's VPN law runs into technical reality

Segment Resources:

https://dynamicincidentresponse.com/ - A New Era for Incident Response!

Show Notes: https://securityweekly.com/psw-949

In this episode, Kriss Stephen, Principal Solutions Architect at Semperis, explores the concept of the Minimum Viable Company and the three foundational capabilities every organization needs to withstand and recover from a cyberattack. Drawing from his experience in identity security and cyber resilience, Kriss shares practical lessons on how organizations can prioritize recovery, protect critical identity systems, and maintain business operations during disruptive incidents. Listeners will gain actionable insights into building resilience before a breach occurs and accelerating recovery when it matters most.

Segment Resources: Part 1: Minimum Viable Company: True Cyber Resilience Starts with Identity https://www.semperis.com/blog/minimum-viable-company-true-cyber-resilience-starts-with-identity/ Part 2: Minimum Viable Company: Cyber Resilience Beyond the Breach https://www.semperis.com/blog/minimum-viable-company-cyber-resilience-beyond-the-breach/ Part 3: Minimum Viable Company: Enabling Visibility, Control, Resilience https://www.semperis.com/blog/minimum-viable-company-enabling-visibility-control-resilience/

This segment is sponsored by Semperis. Visit https://securityweekly.com/semperis to learn more about them!

In the leadership and communications segment, Crisis Communication for Boards handbook, Unclear AI risk ownership could leave CISOs in familiar scapegoat role, Optimism Is Now an Essential Leadership Skill, and more!

Show Notes: https://securityweekly.com/bsw-470

Klingons, Stop and Shop, OvHCloud, Microsoft, Plex2Shell, ReactOS, Aaran Leyland, and More on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-626

The OWAS Mobile Application Security (MAS) project recently released an updated version of its guidance, with excellent advice organized into common weaknesses, a verification standard for devs (MASVS), and a testing guide (MASTG). Ryan Lloyd and Jan Seredynski from Guardsquare dive into the project to talk about how it's been updated, how orgs can use it, and the challenges orgs face in managing their mobile frameworks and environments. We also cover how agents and LLMs are impacting mobile security and what future iterations of the MAS project might include for securing mobile apps interacting with LLMs or being written by LLMs. Finally, we share practical ways for developers to get involved as OWASP contributors and advocates.

Segment Resources:

• https://mas.owasp.org
• https://mas.owasp.org/MASWE/
• https://hubs.ly/Q04ykvgm0

This segment is sponsored by Guardsquare. Visit https://securityweekly.com/guardsquare to learn more!

Show Notes: https://securityweekly.com/asw-405

Interview with Michael Jenkins from ThreatLocker

Securing AI on the Endpoint - Zero Trust or Bust

Michael joins us for the first time to discuss strategies for securing the latest evolution of AI: local endpoint-based AI agents. Tools like Claude Code, OpenAI Codex, and Google AntiGravity give employees the power to build any software or workflow they can imagine, but what is the risk impact? These models aren't shy about adopting and downloading libraries, tools, and untrusted software to fulfill the goals they've been given.

We explore how execution control and ringfencing can add some sanity and security to the process.

This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

Topic Segment: Anthropic Dreams of AI Replicants

Of all the things AI labs could be researching or cooking up, I wouldn't have guessed AI worms distributing inference across smart TVs would be on the list, but here we are. Adrian, Tyler, and Ayman mull over this strange research.

• It is too loose to be an academic paper, but maybe should have been?
• Is really a pressing AI risk we should be worried about right now?
• Why did Anthropic choose to focus on smart TVs and not more powerful IoT devices?

Weekly Enterprise News

Finally, in the enterprise security news,

1. we discuss the vibes
2. certified organic books
3. don't mess with criminals
4. the history of ShinyHunters
5. building strategies on the wrong lessons
6. crypto wallet supply chain drama
7. Hot refrigerators
8. Reddit is great for breach tracking
9. Microsoft patch Tuesday is on track to hit 12,000 patches by next April

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-481

Mr. Sparkle, Burger King, Pwnscape, Linux, Cisco, GitHub, Microsoft, Josh Marpet, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-625

In the security news this week:

• Convert this router into an SDR
• Ivanti straight to root
• Anthropic's AI worm FUD
• A kernel exploit to fix downloads
• Supermarket refrigeration attacks
• 400 mystery Java vulnerabilities
• Authentication bypass
• Russia meets the data-center war
• Stop & Shop attacked
• Anthropic cuts eval agents
• AI incident reporting
• FortiBleed lives
• Anthropic offers scanning
• Pre-compromised phones
• FakeGit returns
• Teams deepfake detection
• Let's Encrypt certificates get shorter
• GitLab ships another critical patch
• Engineer gets prison time for locking thousands of devices
• OpenAI employee accused of planting a hidden recorder

Show Notes: https://securityweekly.com/psw-948

Businesses face severe challenges when balancing short-term efficiency with long-term adaptability against unforeseen cyber events. And Artificial Intelligence has only added to those challenges. How should organizations prepare?

Bill O'Connell, Chief Security Officer (CSO) at Commvault, joins Business Security Weekly to discuss why CISOs must think like resilient boxers, not fortresses. Bill will discuss why the CISO is becoming the Chief Resilience Officer and why they need to focus on Availability and Recovery. Bill's four areas of focus include:

• AI Governance and Controls
• Configuration Management
• Backup and Recovery, and
• Testing

Balancing artificial intelligence risk with productivity gains requires organizations to manage the tension between speed, security, and human oversight. The business wants to move fast, but security has concerns and employees fear for their jobs. How can organization adopt AI while eliminating friction points?

In this CyberRisk TV interview, Matt Alderman speaks with Ryan Grant, Country Manager for the US and Canada at ESET, about building cyber resilience in the AI era. They discuss findings from ESET's 2026 S&P Cyber Readiness Index, including the continued challenges organizations face with basic cyber hygiene, the growing sophistication of phishing attacks, and the impact AI is having on traditional threats.

Grant explains why organizations should focus on foundational security practices before layering AI-specific defenses on top, including multifactor authentication, access controls, endpoint detection and response, vulnerability and patch management, and incident response planning. He also addresses the rise of shadow AI and AI agents, emphasizing the need for clear policies, governance, access controls, employee training, and continuous monitoring.

The conversation also explores the challenges facing SMBs with limited cybersecurity resources and how managed service providers and security-as-a-service offerings can help close the gap. Grant discusses ESET's newly redesigned Protect offering, which combines security technology, 24/7 monitoring, vulnerability and patch management, multifactor authentication, premium support, and a cyber warranty into a simplified package designed to help organizations strengthen their security posture and focus on prevention.

Segment Resources:

ESET free AI Skills Checker: ESET AI Skills Checker: https://www.eset.com/us/home/ai-skills-checker/ WeLiveSecurity Blog: Learn more about Guardbreaker, AI skills in the ESET H1 Threat Report, and more: www.welivesecurity.com SMB 2026 Cyber Readiness Index: https://www.eset.com/us/about/newsroom/research/eset-2026-smb-cyber-readiness-index/

This segment is sponsored by ESET. Visit https://securityweekly.com/eset to learn more about them!

Show Notes: https://securityweekly.com/bsw-469

Claude Registers for Citizenship, Yandex, Danfoss, Bricks, Purgatorius, Muse, Xandr, Grindr, Aaran Leyland, and More on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-624