Security Weekly (Download Only)

First up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero Trust. Then in the security news:

• Compiling spreadsheets, because that's why
• Nvidia wants to put AI agents in timeout
• Citrix NetScaler gets exploited again, and again
• Spectre still refuses to die
• Your SBOM is incomplete?
• File notifications leak more than filenames
• ENIAC had cables instead of a BIOS
• Another Linux kernel root exploit lands
• Containers share a kernel
• ThinkNode M9 microSD card gets a virus notice
• Google analyst infiltrates a supply-chain gang
• Your phone speaker can transmit radio
• Reconstructing firmware with a logic analyzer
• Robot dogs learn cybersecurity
• CISA warns about third-party ICS integrators
• Dutch police arrest a ShinyHunters suspect
• A soldier goes from telecom hacking to prison
• AI companies discover their agents have opinions
• Cloudflare containers accidentally share leftovers
• OT networks are still mostly not isolated
• Florida wants to pause ChatGPT

The interview segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

Show Notes: https://securityweekly.com/psw-946

At a time when the traditional approach to enterprise vulnerability management is no longer effective, security leaders are turning to AI agents to help identify, validate, and contain zero-day threats. Learn how Google Cloud Security is building autonomous detection engineering to help your organization close the remediation gap, establish compensating controls to protect business assets, and outpace AI-powered adversaries.

Segment Resources:

https://services.google.com/fh/files/misc/monitoringandstoppingaipowered_threats.pdf https://cloud.google.com/blog/products/identity-security/detecting-and-containing-powered-threats-with-google-security-operations-agents?e=48754805

This segment is sponsored by Google Cloud. Visit https://securityweekly.com/googlecloud to learn more about them!

In the leadership and communications segment, CISOs can no longer ignore the nation-state threat, AI Policies Won't Save You If You Can't See The Risk, The Invisible Work Draining Your Best Employees , and more!

Show Notes: https://securityweekly.com/bsw-467

Venus in Furs, Money Laundering, Agentic AI Hijinx, MCP, Thunderbastard, Aaran Leyland, and More on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-620

Finding flaws with LLMs and agents is changing bug bounty programs. But it's not necessarily changing how orgs fix those flaws. Shlomie Liberow shares his experience across a decade of bounty programs and how they have changed for researchers and orgs. He explains why fixing the bug reported through a bug bounty is more about understanding interconnected systems than fixing a single piece of software. We discuss how orgs can be more effective at securing their environment and what role LLMs might have in evaluating controls. Plus, we look to the future of bug bounty programs and how researchers can still excel through curiosity and expertise on a topic rather than relying on scanners, prompts, and luck.

Show Notes: https://securityweekly.com/asw-402

Interview with Christopher Crawley - The Value of SecOps

This week, we talk to Chris Crawley about his new book, The Value of Cybersecurity Operations. Chris has been training teams on security operations for years, but found that students often struggled to justify the importance of secops training and even the need for secops in general. This book was written to more broadly arm practitioners with the information they need to communicate why security operations are necessary to leadership.

The book is available in several forms: eBook, hardcover, softcover, and an audiobook read by Chris himself!

You can pick all versions up here: https://shop.montance.com/collections/all and Security Weekly listeners get 50% off with code sw-50!

The Evolving Exploitation of Trust with Josh Davies, Security Strategist at Fortra

Fortra Intelligence and Research Experts (FIRE) is Fortra's emergent threat intelligence identity, created to unify research teams across multiple security disciplines and share intelligence with the wider threat intelligence community. FIRE co-ordinator and security strategist Josh Davies joins us to share insights from original FIRE research like Calphishing, Mirage2FA, RatPressto phishkit and heavily obfuscated campaigns that evade defences. While also digging into trends from big data analysis within phishing, fraud, social engineering and credential theft.

Segment Resources:

• Art of Security Podcast
• Fortra Research

This segment is sponsored by Fortra. Access FIRE Research here: https://securityweekly.com/fortrabh

Why Agentic AI Security Requires a Defense-In-Depth Strategy with Kaushik Shanadi, CTO and Co-Founder of Helmet Security

Many organizations are approaching agentic AI security by stitching together individual controls, assuming that identity, network, endpoint, or application security alone is enough. Each address only one part of the problem. As AI agents become more autonomous, move across systems, and take actions on behalf of users, organizations need a true defense-in-depth strategy that combines every layer of the security stack. Kaushik can discuss how each security layer provides a different piece of the puzzle and how individually, none of the controls are sufficient. But together, they create the layered governance needed to securely deploy agentic AI.

For more information about Helmet Security, please visit https://securityweekly.com/helmetbh

Above Security on Why Legacy Tools Don't Cut It for Modern Insider Risk with Tricia Howard, Head of Marketing at Above Security

As organizations rush to adopt agentic AI, agents are often given broad access to critical business systems and sensitive data. Legacy insider risk management tools weren't built for this, and organizations have spent years on insider risk posturing and investments that leave security teams inundated with false positives while the real risk slips through undetected. In this segment, Tricia Howard draws on her decade in cybersecurity, including years watching user and entity behavior analytics (UEBA) overpromise and underdeliver, to unpack why understanding human – and now AI – intent is the missing piece.

Segment Resources:

• Blog Post: Redefining Insider Threat
• Blog Post: What I wanted UEBA to be, Years Ago

To learn more about Above Security and insider risk management in the era of agentic AI, visit: https://securityweekly.com/abovebh

The Identity Crisis Your Security Team Didn't See Coming: Governing AI Agents with Darren Guccione, CEO and Co-Founder of Keeper Security

AI agents outnumber human identities in enterprise environments, and traditional security software was never built to govern them. 89% of cybersecurity decision-makers recently surveyed by Keeper Security said that AI adoption has made identity management harder.

In this Black Hat USA conversation with Cyber Risk TV, Darren Guccione, CEO and Co-Founder of Keeper Security, shares a practical framework for extending identity governance to non-human identities and AI agents before the access gap becomes a breach.

Segment Resources:

• Privileged Access Management
• Identity Security at Machine Speed

To learn more about Keeper Security, visit: https://securityweekly.com/keeperbh

Show Notes: https://securityweekly.com/esw-478

Ear mite butterfly effects, Chuds, Agentic AI galore, CISA, Shiny Hunters, FreeBSD, Ghost Accounts, Pervs, Josh Marpet, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-619

In the security news this week:

• Build your own router, or just buy one
• What to patch first
• But maybe don't buy D-Link
• AI nearly starts a war
• Flock cameras lose their keys
• The AI slowdown won't save bad security
• Opus at home, just slower
• Black Hat says fundamentals still work
• Hacker gadgets, and my top pick
• Gyazo screenshots
• Fake job interviews, real malware
• VINCE gets a new home
• Munich university gets disconnected
• LinkedIn fights the scraping machine
• SolarWinds hard-codes another bad idea
• Fake LastPass kills 145 security tools
• Colorado water gets its settings changed
• AI CEOs sell apocalypse and bonds
• The AI safety cult gets audited
• Ransomware recovery takes weeks, not hours
• TeamPCP's supply-chain tour continues
• Zuckoff hunts smart glasses

Show Notes: https://securityweekly.com/psw-945

As businesses race to embrace AI, security leaders are struggling to modernize cyber hygiene and prevent over-privileged agents from causing unintended harm. How do you balance the benefits of AI with the Risks of AI?

Evan McHenry, Chief Information Security Officer at Robinhood Markets, joins Business Security Weekly to discuss how to practically implement and secure AI in the enterprise. Evan will share his lessons learned over the last 18 months, including how to communicate with the Board, why you should own Enterprise Architecture and embrace IT, and why you don't have time to argue with your CFO. If you're struggling to balance the benefits of AI with the Risks of AI, this interview is for you.

In the leadership and communications segment, Security spending is growing — except for the typical CISO, What Leaders Need to Know About AI and Psychological Safety, The Cyber Gap, and more!

Show Notes: https://securityweekly.com/bsw-466

Prompt injection demonstrates one of the major challenges in securing LLMs and agents -- how do you ensure an agent ignores attackers and only does what you instructed it to do. The flaw highlights how LLMs mix inputs, context, and outputs without any strict boundaries between them. Julie Brunias joins us to talk through examples of injections, why their consequences can go beyond information leaks, and why trying to mitigate them with other LLMs is insufficient.

Segment resources:

• https://llmgateway.io/open-source
• https://www.wiz.io/blog/off-guard-breaking-litellm-from-authentication-bypass-to-cloud-compromise

Show Notes: https://securityweekly.com/asw-401