Security Weekly Podcast Network (Video)

AI Zombie Lawyers, Scattered Spider, ASUS, Mainframes, GrayAlpha, Backups, Josh Marpet, and more on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-486

What makes a threat modeling process effective? Do you need a long list of threat actors? Do you need a long list of terms? What about a short list like STRIDE? Has an effective process ever come out of a list? Farshad Abasi joins our discussion as we explain why the answer to most of those questions is No and describe the kinds of approaches that are more conducive to useful threat models.

Resources:

• https://www.eurekadevsecops.com/agile-devops-and-the-threat-modeling-disconnect-bridging-the-gap-with-developer-insights/
• https://www.threatmodelingmanifesto.org
• https://kellyshortridge.com/blog/posts/security-decision-trees-with-graphviz/

In the news, learning from outage postmortems, an EchoLeak image speaks a 1,000 words from Microsoft 365 Copilot, TokenBreak attack targets tokenizing techniques, Google's layered strategy against prompt injection looks like a lot like defending against XSS, learning about code security from CodeAuditor CTF, and more!

Show Notes: https://securityweekly.com/asw-335

This segment is sponsored by ThreatLocker. Visit https://www.securityweekly.com/threatlocker to learn more about them!

Cyera

Cyera is the fastest-growing data security company in history, empowering companies to classify, secure, and manage their data, wherever it is, and leverage the power of the industry's first AI native,unified Data Security Platform. Yotam Segev, Cyera's CEO sits down with CyberRisk TV at RSAC Conference 2025 to discuss Cyera's skyrocketing growth, its founding story and why an increasing number of Fortune500 companies are partnering with Cyera, and the company's latest product release: Adaptive DLP, a new AI data loss prevention solution.

Recent Cyera News:

• Cyera Breaks World Record as the Fastest-Growing Data Security Company in History
• Data Security Leader Cyera Secures $300M in Series D Funding
• Cyera Acquires Trail Security for $162M
• Cyera Launches Data Incident Response Service
• Cyera Appoints Renowned Tech Exec Frank Slootman to Board of Directors

This segment is sponsored by Cyera. Visit https://securityweekly.com/cyerarsac to learn more about them!

Blumira

In the evolving world of cybersecurity, the shift from a purely threat-centric mindset to a focus on operational excellence is no longer just a trend—it's a necessity. Matthew Warner, CEO and co-founder of Blumira, argues that this shift is particularly crucial for small and mid-sized businesses (SMBs) and the managed service providers (MSPs) that support them. Matthew believes that traditional SIEM and detection solutions have historically fallen short for these organizations, often due to their complexity, high cost, and steep learning curves. As a result, many SMBs have struggled to keep up with the sophistication of modern threats. Blumira was founded to change that.

Matthew's vision is rooted in democratizing security—making powerful, automated detection and response tools simple, affordable, and accessible for everyone, especially those who need them most. By designing platforms that prioritize operational excellence—efficiency, usability, and actionable intelligence—Blumira enables organizations to be proactive rather than reactive. During the conversation, Matthew will share insights into the latest technologies and trends transforming the cybersecurity space, and offer actionable guidance for IT decision-makers. He'll explore how shifting strategy from chasing every alert to building a solid, efficient operational foundation can lead to better outcomes and stronger protection in the long run.

• Blumira Partners
• Blumira Launches New M365 Threat Response Feature

Security should be accessible to everyone. At Blumira, we're building the future of detection and response — simple, smart, and built to empower the teams who need it most. Check out https://securityweekly.com/blumirarsac and take control of your security today.

Show Notes: https://securityweekly.com/esw-411

This week we have, $200,000 Zoom Call, Microsoft Teams, INTERPOL, Zero-Click, Junk Food, China & Hard Drive With $649 million of Bitcoin.

Show Notes: https://securityweekly.com/swn-485

This week:

• You got a Bad box, again
• Cameras are expose to the Internet
• EU and connected devices
• Hydrophobia
• NVRAM variables
• Have you heard about IGEL Linux?
• SSH and more NVRAM
• AI skeptics are nuts, and AI doesn't make you more efficient
• Trump Cybersecurity orders
• I think I can root my Pixel 6
• Decentralized Wordpres plugin manager
• Threat actor naming conventions
• I have the phone number linked to your Google account
• Fortinet flaws exploited in ransomeware attacks (and how lack of information sharing is killing us)
• retiring floppy disks
• fault injection for the masses
• there is no defender
• AI blackmails

Show Notes: https://securityweekly.com/psw-878

This week, it's time for security money. The index is up, but the previous quarterly results were brutal.

In the leadership and communications segment, Get out of the audit committee: Why CISOs need dedicated board time, Quietly Burning Out? What To Do When Your Leadership Starts Lacking, How to rethink leadership to energize disengaged employees, and more!

Show Notes: https://securityweekly.com/bsw-399

Vixen Panda, NPM, Roundcube, IoT, 4Chan, Josh Marpet, and more on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-484

CISA has been championing Secure by Design principles. Many of the principles are universal, like adopting MFA and having opinionated defaults that reduce the need for hardening guides. Matthew Rogers talks about how the approach to Secure by Design has to be tailored for Operational Technology (OT) systems. These systems have strict requirements on safety and many of them rely on protocols that are four (or more!) decades old. He explains how the considerations in this space go far beyond just memory safety concerns.

Segment Resources:

• https://www.cisa.gov/sites/default/files/2025-01/joint-guide-secure-by-demand-priority-considerations-for-ot-owners-and-operators-508c_0.pdf
• https://www.youtube.com/watch?v=vHSXu1P4ZTo

Show Notes: https://securityweekly.com/asw-334

This week, in the enterprise security news,

1. Acquisitions
2. potential IPOs
3. Terminator Salvation in real life
4. First $1B one-employee business?
5. Mikko puts in his notice
6. Pitch Black in real life, and more!

The #1 cause of data breaches is stolen credentials. What if we didn't store credentials anymore? We explore Badge's innovative approach—which enables users to generate a private key on the fly instead of storing credentials—to enhance security, solve key use cases such as shared devices, and deliver measurable ROI. Additionally, we'll uncover the unavoidable recovery flow challenges, where users must rely on a pre-enrolled recovery device or fallback passwords, and discuss what this means for enterprise security and cost savings. By shifting the paradigm toward ephemeral key generation, Badge eliminates stored credentials, optimizes enterprise cost savings, and future-proofs authentication.

Segment Resources:

• Mission-Driven Identity Innovation with Dr. Tina Srivastava
• Authenticate 2024 - Data Privacy & Accessibility with Tina Srivastava
• Lecture 2: Airplane Aerodynamics
• CyberArk/Badge Joint Solution Brief
• Badge Integration With Cisco Duo Delivers Unique, Hardware-less MFA Experience
• Passwordless Authentication without Secrets!

Executive Interview with Saviynt

Evolving compliance needs, overflowing tech stacks, and the ever-increasing number of types of enterprise identities — not to mention the complications resulting from business use of AI — means traditional identity platforms can't keep up with the needs of today's enterprises. Organizations need something smarter: converged, cloud-native and future-ready identity security that scales with enterprises as they grow, addressing their cybersecurity challenges today and in the future. Join us in this episode as we break down the shortcomings of legacy IAM and uncover how an intelligent, identity-centric approach sets enterprises on the path to success.

Segment Resources:

• Learn more about The Saviynt Identity Cloud
• Identity Cloud solution brief

This segment is sponsored by Saviynt! To learn more or get a free demo, please visit https://securityweekly.com/saviyntrsac

Executive Interview with Ready1

Semperis has launched Ready1, a first-of-its-kind enterprise resilience platform designed to bring structure, speed, and coordination to cyber crisis management. The release of Ready1 coincides with Semperis' new global study, The State of Enterprise Cyber Crisis Readiness, which highlights a dangerous gap between perceived readiness and real-world response capabilities.

This segment is sponsored by Ready1, powered by Semperis. Visit https://securityweekly.com/ready1rsac to learn more about them!

Show Notes: https://securityweekly.com/esw-410

Elsa, Redline, ChaosRat, iMessage, Bladed Feline , Aaran Leyland, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-483