Security Weekly Podcast Network (Video)

Snehal Antani, CEO and co-founder of Horizon3 joins us to talk about how automated validation can help with exposure management. As vulnerability counts spike, security teams are looking for a way to prioritize. Automated penetration testing offers a way to quickly separate exploitable vulnerabilities from the rest.

This segment is sponsored by Horizon3. Visit https://securityweekly.com/horizon3 to learn more about them!

For this week's topic segment, we explore privacy and TVs. LG has been in the news for allegedly collecting data from its customers, but the facts are unclear.

We share our recent experiences and dive into some of the primary concerns and theories about what's going on here.

If you want to opt out of some of your TV's data collection, Consumer Reports has a collection of instructions for a variety of TV platforms.

Finally, in the enterprise security news,

1. We check the vibes
2. We check finding and acquisitions
3. Nightmare Eclipse or Good Night of Sleep Eclipse?
4. Update on Anthropic's Glasswing project
5. How long would it take for a mobile phone worm to spread?
6. Don't expose SSH to the public Internet
7. Massive amounts of cryptocurrency continue to get stolen
8. Did you actually read your third party's SOC 2?
9. Your boss may be reading your AI chat history

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-476

Twenty-five years since 9/11, and we open by marking it properly — the people who didn't come home, and the survivors and responders still carrying it, physically and mentally, a quarter of a century on.

Then we get to work.

Shift-left didn't fail. The starting line moved. AI coding agents now read the issue, write the code, pick the dependencies and open the pull request — so the earliest trust boundary isn't your first commit any more, it's the moment an agent gets context and authority. Most of us haven't moved our controls with it.

Unit 42 pull the lid off a pay-per-install operation running out of eleven gaming YouTube channels, with over ten thousand loader samples underneath it. Every layer built to look too boring to escalate. When your analyst closes that alert as adware, they may have just closed three separate compromises.

Google's threat tracker: a credential-harvesting campaign built and run in under six hours, with Markdown files as attacker playbooks. And malware carrying prompt-injection text designed to make your LLM scanner refuse to look at it — because a refusal that reads as "clean" is a free pass.

A CVSS 10 in Gemini CLI that never touched the model. No prompt, no injection, no tool call. The attacker just turned up before the sandbox did.

The first ever Take It Down Act sentencing — handled carefully, with what you actually do if someone tells you something, and a proper shout-out to Dale, the Cyber Safety Guy, whose work every parent with a teenager online should have bookmarked.

Two hundred and sixty-three million dollars walks out of a Bitcoin sidechain and then walks back in. Nobody stole the keys. They just convinced the system to sign a lie.

Anthropic's 154-page threat report. And an alignment lead who puts extinction odds above ten percent.

All that, plus Josh Marpet's take, on Security Weekly News #615.

Show Notes: https://securityweekly.com/swn-615

In the security news this week:

• Microsoft patches all the things
• Commissary freezers enter cyberwar
• Fake AV, real Defender nap
• Rowhammer comes for the GPU
• BIOS updates are no longer optional
• CVSS is not a crystal ball
• Kworker, but make it malware
• FortiGate gets a post-exploitation RAT
• CERN goes Debian underground
• UEFI shells strike again
• Australia loses the plot, and phones
• Cisco routers become covert gateways
• MikroTik patches the takeover chain
• WeWorm wriggles through mobile
• The year of Linux television
• Browsers become backdoors
• Fake IT calls, real data theft
• CVE attribution gets weird
• Boston Scientific keeps talking
• Security tools misconfigure themselves
• AI circuit breakers for rogue agents
• Passkeys meet the real world
• Vibe coding, vibe vulnerabilities
• AI loss of control keeps climbing
• AI agents report themselves to Schneier

Show Notes: https://securityweekly.com/psw-943

AI is all the hype, but we're currently stuck at the bottom of the 'J' curve. Wild enthusiasm has given way to the reality of costs, benefits, and risks. What's next for AI and companies looking to capitalize on the AI trends?

John Willis, author, researcher, and technology industry veteran, joins Business Security Weekly to discuss AI's impact on fundraising. John explores what the history of AI can teach us about the current moment, including how to separate genuine technological transformation from hype and better understand where AI may take us next.

Next, it's time for Security Money. The Index is exploding upwards as the markets continue to climb. Both the Index and the NASDAQ, hit all time highs. The Business Security Weekly crew breaks down funding, acquisitions, and performance of both the public and private markets.

The Security Weekly 24 Index is made up of the following pure play public security companies:

SAIL Sailpoint Inc PANW Palo Alto Networks Inc CHKP Check Point Software Technologies Ltd RBRK Rubrik Inc GEN Gen Digital Inc FTNT Fortinet Inc AKAM Akamai Technologies Inc FFIV F5 Inc ZS Zscaler Inc OSPN Onespan Inc LDOS Leidos Holdings Inc QLYS Qualys Inc NTSK Netskope Inc TENB Tenable Holdings Inc OKTA Okta Inc S SentinelOne Inc NET Cloudflare Inc CRWD Crowdstrike Holdings Inc NTCT NetScout Systems Inc VRNS Varonis Systems Inc RPD Rapid7 Inc FSLY Fastly Inc RDWR Radware Ltd ATEN A10 Networks Inc

Show Notes: https://securityweekly.com/bsw-464

Cybercabs, Robohobos, BigBear, Nightmare Eclipse, weChat, Flock, ASCII, Aaran Leyland, and More on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-614

We showcase recordings from this year's Black Hat.

The Hidden Risks of the AI Supply Chain - Black Hat interview with Michael Leland, VP and Field CTO of Island

Agents can independently discover and install tools, but the emerging ecosystem of Skills and MCP servers lacks many of the trust and security controls applied to traditional software. Michael Leland discusses Island's research uncovering thousands of malicious repositories, widespread security flaws across MCP servers, and a new attack technique called "AgentBaiting," in which attackers manipulate agents into finding and recommending malware to users. The conversation explains how enterprises can govern AI capabilities without slowing adoption.

Segment Resources:

• https://www.island.io/blog/agentbaiting-how-800-fake-ai-skills-and-mcp-servers-delivered-malware

For more information about Island's research, please visit https://securityweekly.com/islandbh

After Mythos: Securing Frontier AI as Attack and Defense Accelerate - Black Hat interview with Sean Murphy, Field CISO - North America of F5

Frontier AI is compressing the time between discovering and exploiting vulnerabilities, forcing enterprises to rethink how they secure modern applications and AI systems. Sean Murphy shares how security teams can prepare for the next generation of AI-powered threats, why known vulnerabilities may become a bigger risk than zero-days, and what it takes to secure AI at scale from shadow AI and governance to agent and API protection.

This segment is sponsored by F5. Visit https://securityweekly.com/f5bh to learn more about them!

The Perfect Storm: When AI Writes the Code and Sharpens the Attacks - Black Hat interview with Idan Plotnik, Co-Founder and CEO of Apiiro

Two storms are converging on how software gets built. The first: AI coding assistants are generating far more code than any security team can review, and with it, far more risk. The second: AI is sharpening the tools attackers use to find and exploit weaknesses faster than ever. Idan Plotnik explains why this convergence has moved the security perimeter to the coding agent itself, and makes the case for a prevention-first model where an AI AppSec agent guards coding agents in real time, governed by the principle that the agent writing the code cannot be the one to secure it.

This segment is sponsored by Apiiro. Visit https://securityweekly.com/apiirobh to learn more about them!

Model, Harness, Gym: Why Novee Owns the Full AI Pentesting Stack - Black Hat interview with Ido Geffen, Founder & CEO of Novee Security

Most AI security tools are thin wrappers around a general-purpose frontier LLM — reasoning capability rented from someone else, applied to a generic scanning workflow. In this interview, Ido Geffen breaks down what it means to own the full AI pentesting stack — the proprietary offensive reasoning model, the harness that coordinates specialized agents, and the training gym where those agents are continuously benchmarked, post-trained on real attacker tradecraft, and promoted into production.

Ido explains why owning each layer matters: it's how Novee's model consistently outperforms frontier LLMs at live browser exploitation, how the platform improves at a rate the customer feels every cycle, how Novee keeps security testing cost-efficient rather than relying on tokenized pricing models, and how new attacker techniques get injected into agent memory the moment Novee's research team observes them in the wild. He then makes the case that owning the model is only half the story. The other half is the Asset Intelligence Model — a living understanding of each customer's environment, workflows, permissions, APIs, and business logic. That's what turns a generalist AI hacker into a bespoke one: not just an attacker that reasons well, but one that reasons well about your specific business. He closes with how this advantage leads to findings that get more targeted every cycle, remediation tailored to an organization's tech stack, and a platform whose ceiling rises as attackers get faster.

This segment is sponsored by Novee Security. Visit https://securityweekly.com/noveebh to learn more about them!

Show Notes: https://securityweekly.com/asw-399

As employees rapidly adopt local AI models, autonomous agents, and browser extensions to boost productivity, enterprise endpoints are quietly accumulating unchecked security risks. This episode explores how traditional EDR solutions miss non-binary software, leaving critical blind spots for prompt injection and data exfiltration. Discover how Cortex Agentic Endpoint Security (AES) uses LLM-based classifiers and an AI powered risk engine to surface shadow AI and protect the modern workspace without stalling innovation.

This segment is sponsored by Palo Alto Networks. Visit https://securityweekly.com/paloalto to learn more about them!

For this week's topic segment, we're discussing the British Library cyber-attack.

In October 2023, the British Library, one of the largest libraries in the world, was breached by the Rhysida ransomware group. The attack encrypted systems across the organization, led to over 500,000 files being leaked, and set off a recovery effort that consumed a significant portion of the Library's £17.5 million cash reserves. With no clear end date, this is a story of what could happen when all of an organization's tech debt comes due at once.

Resources

• https://www.defendersinitiative.com/p/breach-lessons-the-2023-british-library

Finally, in the enterprise security news,

1. We check the vibes
2. the funding
3. the acquisitions
4. and the closures
5. is the vulnpocalypse real, or not?
6. TeamPCP finds out why being perpetually online isn't great if you're doing cybercrimes
7. millions of IDs get leaked online
8. What's the bigger story: Huggingface and NVIDIA or Microduck?
9. Dyson enters a new product category. Try to guess what it is without cheating and looking it up before the end of the episode!

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-475

Wireguard, Chrome, RMMS, Sonicwall, Microsoft, Sumerian VPNS, Harvard, Josh Marpet, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-613

First up: a technical segment on Linux threat hunting. We'll start this series by covering the best places to look for IoCs on Linux systems and devices, starting with startup services and scheduled tasks. Then, in the security news this week:

• SonicWall zero-days, again
• AI finds a pile of Cisco bugs, and a root RCE
• Claude Code Auto Mode dangers
• BGP hijacks your unsigned software update
• California, Linux and age verification
• Free movies, complimentary malware
• Citrix puts Linux alongside Windows
• Signal's "secure" enclave
• An expired domain answers military phone calls
• MORE Cheap Android TV boxes arrive pre-pwned
• CISA red teams meet critical infrastructure
• PaperCut vulnerability cuts both ways
• Big Tech asks everyone to secure its AI future
• Pacemaker monitoring
• DOJ files on a criminal leak site
• Water utility security, right after the breaches

Show Notes: https://securityweekly.com/psw-942

Wire fraud, identity spoofing, and PII exposure now top the list of operational risks for private capital. In a world of ongoing fraud risk, fiduciary responsibility doesn't end with sound investment decisions — it must extend to operational best practices that protect every capital event. But how?

Todd Sorrel, CEO & Co-Founder at 6lock, joins Business Security Weekly to discuss how ever evolving AI attacks are increasing the chances of wire fraud. From voice cloning to deep fakes to impersonation, trust-based, high-touch controls for money transfer processes are inadequate. Todd will share how Zero Trust and verify principles are the only way to defend against these sophisticated wire fraud attacks.

Optiv: The One Partner to Advise, Deploy and Operate. That's Cybersecurity Simplified - Black Hat interview with John Hurley, Chief Revenue Officer of Optiv

This segment will focus on Optiv's unmatched ability to advise, deploy and operate complete cybersecurity programs. With more than 6,000 clients and 450 technology partners, Optiv is the one clients trust to handle real-world cyber complexity, reduce risk and deliver real results.

Learn why Optiv is the most trusted brand in cyber at https://securityweekly.com/optivbh.

The Shift to Machine-Led Security: What's Next for Cyber Defense - Black Hat interview with Galina Antova, CEO and Co-Founder of Kai

Artificial intelligence is fundamentally changing cybersecurity- not only by making attacks faster and more sophisticated, but also by forcing defenders to rethink how security operations are built. In this conversation, Kai CEO and co-founder Galina Antova discusses why the industry is moving toward machine-led security, what is preventing organizations from trusting autonomous AI, and what recent survey data from hundreds of CISOs reveals about where cybersecurity is headed next.

To learn more about Kai, please visit: https://securityweekly.com/kaibh

Show Notes: https://securityweekly.com/bsw-463