Security Weekly Podcast Network (Video)

Securing AI on the Endpoint - Zero Trust or Bust

Michael joins us for the first time to discuss strategies for securing the latest evolution of AI: local endpoint-based AI agents. Tools like Claude Code, OpenAI Codex, and Google AntiGravity give employees the power to build any software or workflow they can imagine, but what is the risk impact? These models aren't shy about adopting and downloading libraries, tools, and untrusted software to fulfill the goals they've been given.

We explore how execution control and ringfencing can add some sanity and security to the process.

This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

Of all the things AI labs could be researching or cooking up, I wouldn't have guessed AI worms distributing inference across smart TVs would be on the list, but here we are. Adrian, Tyler, and Ayman mull over this strange research.

• It is too loose to be an academic paper, but maybe should have been?
• Is really a pressing AI risk we should be worried about right now?
• Why did Anthropic choose to focus on smart TVs and not more powerful IoT devices?

Finally, in the enterprise security news,

1. we discuss the vibes
2. certified organic books
3. don't mess with criminals
4. the history of ShinyHunters
5. building strategies on the wrong lessons
6. crypto wallet supply chain drama
7. Hot refrigerators
8. Reddit is great for breach tracking
9. Microsoft patch Tuesday is on track to hit 12,000 patches by next April

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-481

Mr. Sparkle, Burger King, Pwnscape, Linux, Cisco, GitHub, Microsoft, Josh Marpet, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-625

In the security news this week:

• Convert this router into an SDR
• Ivanti straight to root
• Anthropic's AI worm FUD
• A kernel exploit to fix downloads
• Supermarket refrigeration attacks
• 400 mystery Java vulnerabilities
• Authentication bypass
• Russia meets the data-center war
• Stop & Shop attacked
• Anthropic cuts eval agents
• AI incident reporting
• FortiBleed lives
• Anthropic offers scanning
• Pre-compromised phones
• FakeGit returns
• Teams deepfake detection
• Let's Encrypt certificates get shorter
• GitLab ships another critical patch
• Engineer gets prison time for locking thousands of devices
• OpenAI employee accused of planting a hidden recorder

Show Notes: https://securityweekly.com/psw-948

Businesses face severe challenges when balancing short-term efficiency with long-term adaptability against unforeseen cyber events. And Artificial Intelligence has only added to those challenges. How should organizations prepare?

Bill O'Connell, Chief Security Officer (CSO) at Commvault, joins Business Security Weekly to discuss why CISOs must think like resilient boxers, not fortresses. Bill will discuss why the CISO is becoming the Chief Resilience Officer and why they need to focus on Availability and Recovery. Bill's four areas of focus include:

• AI Governance and Controls
• Configuration Management
• Backup and Recovery, and
• Testing

Balancing artificial intelligence risk with productivity gains requires organizations to manage the tension between speed, security, and human oversight. The business wants to move fast, but security has concerns and employees fear for their jobs. How can organization adopt AI while eliminating friction points?

In this CyberRisk TV interview, Matt Alderman speaks with Ryan Grant, Country Manager for the US and Canada at ESET, about building cyber resilience in the AI era. They discuss findings from ESET's 2026 S&P Cyber Readiness Index, including the continued challenges organizations face with basic cyber hygiene, the growing sophistication of phishing attacks, and the impact AI is having on traditional threats.

Grant explains why organizations should focus on foundational security practices before layering AI-specific defenses on top, including multifactor authentication, access controls, endpoint detection and response, vulnerability and patch management, and incident response planning. He also addresses the rise of shadow AI and AI agents, emphasizing the need for clear policies, governance, access controls, employee training, and continuous monitoring.

The conversation also explores the challenges facing SMBs with limited cybersecurity resources and how managed service providers and security-as-a-service offerings can help close the gap. Grant discusses ESET's newly redesigned Protect offering, which combines security technology, 24/7 monitoring, vulnerability and patch management, multifactor authentication, premium support, and a cyber warranty into a simplified package designed to help organizations strengthen their security posture and focus on prevention.

Segment Resources:

ESET free AI Skills Checker: ESET AI Skills Checker: https://www.eset.com/us/home/ai-skills-checker/ WeLiveSecurity Blog: Learn more about Guardbreaker, AI skills in the ESET H1 Threat Report, and more: www.welivesecurity.com SMB 2026 Cyber Readiness Index: https://www.eset.com/us/about/newsroom/research/eset-2026-smb-cyber-readiness-index/

This segment is sponsored by ESET. Visit https://securityweekly.com/eset to learn more about them!

Show Notes: https://securityweekly.com/bsw-469

Claude Registers for Citizenship, Yandex, Danfoss, Bricks, Purgatorius, Muse, Xandr, Grindr, Aaran Leyland, and More on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-624

To celebrate our 404th episode we discuss what's not found in modern appsec and what still exists that should become not found. The conversation starts with a classic problem of appsec -- looking for a reliable vuln prioritization methodology. But we expand from there to challenge whether a focus on vulns and patches is even the right choice for an appsec program. Then it's on to incentives, the role of agents in writing and securing software, and what we should be looking for to bring new appsec practitioners into the industry.

Show Notes: https://securityweekly.com/asw-404

This week's interview with Hadar is a fascinating dive into the history of data security and why they chose to tackle endpoint-focused data security. We discuss why securing data is traditionally such a challenging task, making it clear why Bold is such a fitting name for the company. After 30 minutes, we barely scratched the surface and are hoping we can have them back soon for another interview!

Segment Resources:

• https://www.bold.security/blog/endpoint-data-ai-human-risk-convergence
• https://www.bold.security/blog/what-is-real-time-endpoint-data-protection-bold-makes-it-a-reality

This segment is sponsored by Bold Security. Visit https://securityweekly.com/bold-security to learn more about them!

In this week's topic segment, we discuss the emerging epidemic of low-effort AI-generated slides. AI can definitely make slide creation less painful, but you still need to put some effort in to make a good looking deck that makes sense. If you don't, your audience WILL notice.

Finally, in the enterprise security news,

1. we discuss the Sawtooth problem
2. cybersecurity is center stage in AI
3. not everyone is a big fan of passkeys
4. Ross Haleliuk is back with some interesting essays
5. insider threats: sometimes the cybercriminal was inside your organization all along
6. AI can now read your mind
7. and as always, we'll kick off with the vibes

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-480

Airline Zoom Calls, School Picture Day, Windows, TP-Link, AgentCorruption, OSS Scanner, Josh Marpet, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-623

In the security news this week:

• BPFDoor
• OpenSSH compresses a little too much
• AI can find bugs. Who gets them fixed?
• TP-Link and the courts
• Cisco NX-API
• ClingSTUN
• LineageOS, Android TV, and a Raspberry PI
• Dell's updater has a privilege problem
• SonicWall SSRF
• U-Boot's LogoFAIL like
• Exploit-DB isn't dead
• MFA passes. The attacker still gets in.
• LakeShark and cool gadgets
• Kasa cameras and an exposed debug interface
• SharePoint hardening is back on the checklist
• Google pauses open-source bug bounty submissions
• NetScaler's latest vulnerability needs a closer look
• Kiteworks tells customers to shut it down
• Exchange gets an unexpected security update
• Do LLMs actually reason?
• disagree on AI risk?
• Anthropic, AI consciousness and the Vatican
• Grok gets involved in foreign policy
• WordPress malware that survives cleanup
• Can spyware vendors stop their own tools?
• When an AI chatbot conversation reaches the police
• Open-weight AI models enter the cyber debate
• AI agents take their attacks shopping

Show Notes: https://securityweekly.com/psw-947

Harvest-Now-Decrypt-Later attacks are already in motion. Unmanaged keys and outdated algorithms are active weaknesses within an organization's infrastructure. When quantum decryption arrives, the fallout will be immediate—compliance gaps, lost trust, and financial impact. How should organizations prepare?

Vijay Viswanathan, Vice President of Product at ISARA Corporation, joins Business Security Weekly to discuss quantum safe security. For most organizations, cryptography is hidden, therefore it's risk is hidden or unknown. Vijay will discuss how to prepare for Q day, including the steps that should be taken now:

• Cryptographic discovery and posture analysis
• Executive communication on cryptographic risks
• Mitigation and migration strategies
• Crypto agility for ongoing maintenance

Segment Resources:

https://isara.com/blog-posts/enterprise-buyers-guide-for-quantum-safe-security/?utmsource=podcast&utmmedium=segment-resource&utm_campaign=bsw

This segment is sponsored by ISARA Corporation. Visit https://securityweekly.com/isara to learn more about them!

In the leadership and communications segment, AI Governance Frameworks Won't Save You, but an Ethically Engaged Workforce Might, Cyber Skills Diminish Quicker than Organizations Can Build Readiness, The Mindsets Leaders Need as AI Accelerates the Pace of Business, and more!

Show Notes: https://securityweekly.com/bsw-468