Security Weekly Podcast Network (Video)

In the security news this week:

• Cursor opens your repo, the repo opens you
• If you want the good model I'm going to need to see your ID
• Flock's a Flocking mess
• Defender was supposed to be the chosen one
• Side stepping Secure boot - twice
• SonicWall: a LAMP stack in a fancy case
• Macs don't get viruses, part infinity
• Flipper One, but why not Nix?
• NetScaler is back in the room
• Borrowing phone's good reputation
• USB and how to make Windows download stuff
• A KVM with the expensive letters removed
• Five steps to stop the webcam creeps
• PlexTrac acquired
• NIST asks the internet to fix the NVD
• Poland's health software has a very bad week
• If Apple pings you about spyware, believe it
• A macOS stealer that drives your browser for you
• T-Mobile's incident response tool of choice may suprise you, or not...

Show Notes: https://securityweekly.com/psw-940

Artificial intelligence has quickly evolved from a productivity tool into an active participant in many organizations' daily operations. As organizations give AI greater autonomy within their environment, they're also granting them access to sensitive systems and data. That creates a new challenge for IT and security teams: How do you enable AI to assist productivity without compromising security?

Rob Allen, Chief Product Officer at ThreatLocker, joins Business Security Weekly to discuss how zero trust principles can prevent an AI breakout. Rather than relying solely on the AI tool's built-in safeguards, organizations can choose to enforce security policies using ThreatLocker. Rob will discuss how ThreatLocker can enforce AI boundaries through Allowlisting, Ringfencing™, Endpoint Firewall, and Web Content Control, with Community Policies that govern what agentic AI tools can run, do, access, and reach.

Segment resources: - https://www.threatlocker.com/blog/the-principle-of-least-privilege-for-ai-agents - https://www.threatlocker.com/blog/applying-threatlocker-to-agentic-ai-tools - https://www.threatlocker.com/blog/why-the-five-eyes-alliance-sees-zero-trust-as-the-best-defense-against-agentic-ai-threats

This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

In the leadership and communications segment, 3 cybersecurity issues that should keep every CEO awake at night, You Don't Find Your Leadership Style. You Mentor Your Way Into It., Cybersecurity Starts With Communication – And We May Be Getting It Wrong, and more!

Show Notes: https://securityweekly.com/bsw-461

The Secret Word is Meow, Red Agent, GitHub, evoooo1bot, Hatman, DecryptAds, Copilot, Aaran Leyland, and More on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-608

All sorts of cybersecurity disciplines are adopting agents to help humans save time and automate routine activities. Sai Kiran Uppu describes his work on creating a platform for agents to analyze external threat intel, examine internal systems, and present triage decisions to operators. This type of work is especially useful to orgs that deal with petabytes of data and thousands of systems. And, as Kiran notes, it's important to keep that scale from blowing up your budget or turning triage into a procession of false positives.

Ideally, this kind of threat intel that's paying attention to attack trends and searching internal systems for evidence of compromise also turns into proactive defenses. We talk about some of the ways to engage developers to improve security visibility into their services and harden their designs against common attacks.

After that discussion we're running two sponsored interviews from Black Hat.

AI Pentesting and the Future of Cybersecurity: Black Hat interview with Chris Wallis, Founder and CEO of Intruder

This segment discusses how AI addresses the long-standing gap between traditional pentesting and automated vulnerability scanning. Intruder CEO and founder Chris Wallis dives into the nuances of AI-enabled security and how these offerings will impact mid-market security teams.

Segment Resources:

https://www.intruder.io/platform/ai-pentesting

https://www.intruder.io/blog/ai-pentesting-the-depth-of-a-pentest-on-demand

https://www.intruder.io/blog/ai-web-app-pentesting-test-on-every-major-release

Intruder's continuous exposure management platform helps security, IT, and engineering teams stop breaches before they start. For more information about Intruder's products and services, please visit https://securityweekly.com/intruderbh.

How Menlo Security Is Securing AI Agents from Prompt Injection: Black Hat Interview with Ramin Farassat, Chief Product Officer of Menlo

Enterprises are deploying AI agents like Microsoft Copilot, Google Gemini, and Claude Code faster than they can secure them, and attackers are exploiting that gap through prompt injection. Hidden instructions get buried in web pages, files, and even images that a human would never notice but an AI agent reads and acts on. Menlo Security is building Menlo Agent Runtime Security (MARS) to close that gap, running every agent session in an isolated cloud that sanitizes content before an agent can act on it. Ramin Farassat, Menlo Security's Chief Product Officer, will discuss why the exposure lives in the connectors and integrations around the model rather than the model itself, and how security teams can put controls on the agent attack surface without blocking agentic AI outright.

Segment Resources:

https://www.menlosecurity.com/product/ai-agent-security

MARS is now available today, please visit https://securityweekly.com/menlobh

Show Notes: https://securityweekly.com/asw-396

Imagine a user asks an LLM a question about a document. An attacker then gains an interactive prompt on the user's chat session, enabling the attacker to instruct the AI assistant to take actions on behalf of the victim. That is exactly the capability researchers at Rubrik Zero Labs were able to demonstrate in a recent study designed to test the bounds of LLM security.

Join Joe Hladik, Head of Rubrik Zero Labs, as he breaks down the discovery of "Remote Prompt Execution," a novel vulnerability class that enabled full takeovers of Microsoft Copilot sessions through sandbox escapes. He explores the technical journey behind the eight critical CVEs uncovered by Rubrik Zero Labs and discusses the broader implications for securing generative AI assistants within enterprise environments. This interview highlights the groundbreaking research that earned a $48,000 bounty and featured as a premier briefing at Black Hat USA.

Segment Resources:

• Find more research from Rubrik Zero Labs
• Rubrik Zero Labs' Black Hat session
• Demo of the ChatMate attack in action

This segment is sponsored by Rubrik. Visit https://securityweekly.com/rubrik to learn more about them!

AI notetakers are built into everything now, and hardware-based AI recorders are becoming mainstream as well. Is privacy over in the workplace? Adrian, Jackie, Katie, and Tyler discuss.

Questions enterprises should be asking:

1. Are employees recording or transcribing meetings?
2. Does this policy change if non-employees (external parties) are present?
3. Is consent asked for/given?
4. Is the context of the conversation taken into consideration?
5. Is the geographic/legal/political context of the external party taken into account?
6. Have you done your due diligence on third parties hosting/storing these recordings and transcriptions?
7. Was your due diligence a SOC 2, or real, actual evidence-based due diligence?
8. Do these third parties have an option to allow you to store/manage your own recordings in a place of your choosing, or does it have to be hosted by the AI recording/transcription company?

Finally, in the enterprise security news,

1. we check the vibes
2. and the funding, and the acquisitions
3. seriously, don't mess with the wifi on planes
4. 181,000 meetings were left wide open
5. the sandbox escapes are getting ridiculous
6. research on how reliable AI-generated patches are
7. research on what attackers do after they get a shell
8. research on how cybercriminals are using AI agents
9. research on how vulnerable datacenters are
10. and finally, what's a "mouthpad"?
11. Stick around till the end of the news segment to find out!

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-472

Famous Mathematician feuds, Delta Flight 591, Lazarus, Akira, Computer History, Zoom, Clones, LiteLLM, Josh Marpet, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-607

In the security news this week:

• North Carolina ports and contingency plans • Back to paper and pencils • Midnight Blizzard compromises hotel Wi-Fi • DNS strikes again • Captive portals, stolen credentials, and nation-state scale • Phishing-resistant MFA • Goodbye SMS and voice authentication • Cornflake RAT and Chaco Shell • The NPM worm • Hundreds of compromised packages • AI lowers the barrier to mass exploitation • Rethinking "secure enough" • Back to basics: know what's on your network • Get off my PCI lawn

Show Notes: https://securityweekly.com/psw-939

As cyber threats become more AI-powered, attacks continue to rise. Threats can arise from all areas of a company's IT infrastructure, however most attacks utilize a domain name to infiltrate systems. How secure is your domain ecosystem?

Ihab Shraim, Chief Technology Offider at CSC Digital Brand Services, joins Business Security Weekly to discuss why domain security is a fundamental blind spot in corporate cybersecurity programs. Ihab will discuss his team's research finding that 67% of Forbes Global 2000 companies have implemented fewer than half of recommended domain security measures. He will also outline the key domain security practices that teams should implement to protect their organization from the risk of domain attacks.

Segment Resources:

• CSC 2026 Domain Security Report: https://www.cscdbs.com/en/resources/domain-security-report-2026/
• CSC 2026 CISO Outlook Report: https://www.cscdbs.com/en/resources/ciso-outlook-2026-report/

How AI Is Reshaping What's Possible for Leaders of The Security Program - Black Hat Interview with Greg Baker, Co-founder and CEO of Balance Theory

Cybersecurity leaders are still making high-stakes decisions with fragmented data, static assessments, and market guidance that is often slow, expensive, or commercially biased. Greg Baker will explore how AI can create a continuously updated understanding of both the enterprise security program and the market around it—giving CISOs the context to model scenarios, prioritize investments, and move from insight to action with greater speed and confidence.

For more information about Balance Theory, please visit: https://securityweekly.com/balancetheorybh

The Business Case for Cybersecurity Workforce Resilience - Black Hat Interview with Lynn Dohm, Executive Director of WiCyS

The joint report from WiCyS and FourOne Insights reveals that mentorship, skills-based promotion, and third-party partnerships don't just improve workforce outcomes — they deliver measurable ROI, including more than $125,000 in savings per employee.

As cybersecurity leaders grapple with persistent talent shortages, AI-driven skill shifts, and demographic headwinds, the report positions workforce resilience as a measurable business advantage — not just an HR initiative.

Segment Resources:

https://www.wicys.org/resources/the-roi-of-resilience/ https://www.wicys.org/initiatives/the-wicys-cyber-talent-study/

This segment is sponsored by Women in CyberSecurity (WiCyS). Visit https://securityweekly.com/wicysbh to learn more about them!

Show Notes: https://securityweekly.com/bsw-460

Squirrel (and other) Soup, Ghostjacking, OpenSource, Gunra, Beesafe, AI threats, SBOMS, and More on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-606

Finding flaws has always been a focus of appsec. And now with open source projects and open weight models orgs have modern tools to review code and conduct pentests. Rishi Sharma describes the motivation behind creating a platform of LLM-driven security tools and the effective ways to keep the tools in scope, on budget, and for engineering teams. We talk about how prompts influence LLM activity, as well as the external constraints to keep the LLMs on task.

And even if finding flaws is a major focus of appsec, its goal should be delivering secure software and systems. We touch on some of the ways to keep bugs from creeping back into software and why it's more important to care about vuln classes than vuln counts.

Episode Resources:

• https://projectdiscovery.io/research/ai-coding-impact-report
• https://projectdiscovery.io/blog/oh-my-rogue-agent

Show Notes: https://securityweekly.com/asw-395