Security Weekly Podcast Network (Video)

Donatello, SharePoint, CrushFTP, WordPress, Replit, AllaKore, Rob Allen, and more on the Security Weekly News.

Segment Resources: https://www.darkreading.com/threat-intelligence/matanbuchus-loader-ransomware-infections

This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

Show Notes: https://securityweekly.com/swn-496

AI is more than LLMs. Machine learning algorithms have been part of infosec solutions for a long time. For appsec practitioners, a key concern is always going to be how to evaluate the security of software or a system. In some cases, it doesn't matter if a human or an LLM generated code -- the code needs to be reviewed for common flaws and design problems. But the creation of MCP servers and LLM-based agents is also adding a concern about what an unattended or autonomous piece of software is doing.

Sohrob Kazerounian gives us context on how LLMs are designed, what to expect from them, and where they pose risk and reward to modern software engineering.

Resources

• https://www.vectra.ai/research

Show Notes: https://securityweekly.com/asw-340

Existential Dread and Seawater, MCP, Cloudflare, ESxi, QR Codes, Salt Typhoon, Aaran Leyland, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-495

In the security news:

• The train is leaving the station, or is it?
• The hypervisor will protect you, maybe
• The best thing about Flippers are the clones
• Also, the Flipper Zero as an interrogation tool
• Threats are commercial and open-source
• Who is still down with FTP?
• AI bug hunters
• Firmware for Russian drones
• Merging Android and ChromOS
• Protecting your assets with CVSS?
• Patch Citrixbleed 2
• Rowhammer comes to NVIDIA GPUs
• I hear Microsoft hires Chinese spies
• Gigabyte motherboards and UEFI vulnerabilities
• McDonald's AI hiring bot: you want some PII with that?

Show Notes: https://securityweekly.com/psw-883

Are you running SAP? The clock is ticking... Standard maintenance end-of-life is set for the end of 2027. Migration to S/4HANA must be completed by then (or 2030 if you buy into SAP's special three-year reprieve). While that may appear to be enough time, companies currently working toward an S/4HANA transition are finding the journey challenging, and that's not including the security challenges.

Chris Carter, CEO at Approyo, joins Business Security Weekly to discuss your SAP options, including:

• ERP Strategy: Stay with SAP or migrate to other solutions?
• S/4HANA Architecture: All cloud or cloud/on-premise?
• Security Challenges: Cloud vs. on-premise
• SAP Migration: Recommendations for success

In the leadership and communications section, Where cybersecurity maturity meets confidence in C-suite and board leadership, Has CISO become the least desirable role in business?, How Radical Transparency Is Revolutionizing Leadership, and more!

Show Notes: https://securityweekly.com/bsw-404

AI meltdowns, Gigabyte, NCSC, Rowhammer, Gravity Form, Grok, AsyncRat, Josh Marpet and more on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-494

What are some appsec basics? There's no monolithic appsec role. Broadly speaking, appsec tends to branch into engineering or compliance paths, each with different areas of focus despite having shared vocabularies and the (hopefully!) shared goal of protecting software, data, and users.

The better question is, "What do you want to secure?"

We discuss the Cybersecurity Skills Framework put together by the OpenSSF and the Linux Foundation and how you might prepare for one of its job families. The important basics aren't about memorizing lists or technical details, but demonstrating experience in working with technologies, understanding how they can fail, and being able to express concerns, recommendations, and curiosity about their security properties.

Resources:

• https://cybersecurityframework.io
• https://owasp.org/www-project-cheat-sheets/
• https://blog.cloudflare.com/rfc-8446-aka-tls-1-3/
• https://aflplus.plus/
• https://writings.stephenwolfram.com/2023/02/what-is-chatgpt-doing-and-why-does-it-work/

Show Notes: https://securityweekly.com/asw-339

In the rush to score AI funding dollars, a lot of startups build a basic wrapper around existing generative AI services like those offered by OpenAI and Anthropic. As a result, these services are expensive, and don't satisfy many security operations teams' privacy requirements.

This is just the tip of the iceberg when discussing the challenges of using AI to aid the SOC. In this interview, we'll dive into the challenge of finding security vendors that care about security, the need for transparency in products, the evolving shared responsibility model, and other topics related to solving security operations challenges.

In the past few weeks, I've talked to several startup founders who are running into buyers that aren't allowed to purchase their products, even though they want them and prefer them over the competition. Why? No AI and they're not allowed to buy.

Finally, in the enterprise security news,

1. We cover the latest funding
2. The Trustwave saga comes to a positive end
3. Android 16 could help you evade law enforcement
4. Microsoft is kicking 3rd party AV out of the kernel
5. Giving AI some personality (and honesty)
6. Log4shell canaries reveal password weirdness
7. Denmark gives citizens copyright to their own faces to fight AI
8. McDonald's has an AI whoopsie
9. Ingram Micro has a ransomware whoopsie
10. Drama in the trailer lock industry

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-415

Tapjacking, ZuChe, PerfektBlue, McHacking, OT in the IT, Add Ons, Josh Marpet, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-493