Security Weekly Podcast Network (Video)

The Mattress Money Principle: What a 50-Year Veteran Knows About System Fragility

In this interview, Robin and Adrian discuss how technology has evolved over the past 50 years. Despite massive technological changes over the decades: the PC revolution, the Internet, smartphones, the Cloud, and now Generative AI - the majority of financial institutions still use mainframes and midrange machines. Why?

We explore the reasons why older technology persists alongside the new and the lessons retiring technologists can pass on to new generations inheriting an increasingly diverse tech landscape.

Operational Clarity as the New Customer Experience

Kyle Sandy joins Adrian to discuss how prioritizing resilience affects how organizations should plan for incident response. In the past, security teams were focused on prevention and limiting breach damage. Today, boards want to know how long it will take to recover operations.

The interview wraps up with a discussion of the right and wrong way to handle a breach and the three most important things every company must get right in order to handle an incident well.

AI Agents and Identity Security: How Enterprises Are Rewriting the Rules

Todd joins ESW with some eye-opening survey insights on the topic of IAM for AI agents. While cybersecurity conversations about internal AI use often revolve around the SOC and security operations, Omdia surveyed identity professionals for a more holistic enterprise perspective.

Unsurprisingly, AI agent use is as diverse as enterprise business units. The surprises are around where the budget comes from for these AI projects, and how authentication is handled.

Show Notes: https://securityweekly.com/esw-471

Sci-Fi, PKD, Greatness, Passkeys, AgentBreaker, Rockwell, Flock, Doug is very dark, Josh Marpet, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-605

This week:

• When you are not at summer camp you can't read about it
• The Fettle continues
• Using the CFAA against AI
• Social contracts are not security models
• VSCode extentions, again
• Bugtraq is back!
• NVIDA, LVFS, and unraveling AI infrastructure
• More routers that come with backdoors
• Do we care about LPE?
• Even more AI that finds vulnerabilities
• When AI breaks its own guardtails

Show Notes: https://securityweekly.com/psw-938

This week, we air our thirteenth pre-recorded segment called "Say Easy, Do Hard". Inspired by my co-host, Jason Albuquerque, we discuss "Performance Through People". Greg Hoffman joined us a few weeks back to discuss his new book. This week, we dig into his five disciplines of Performance Through People and do the hard part.

Show Notes: https://securityweekly.com/bsw-459

Randomness, 50 Shades of Grey, Deepseek, Sonicwall, Spice Weasels, CaptiveCrunch, eBay, Aaran Leyland, and More on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-604

There's already an increase in volume of security flaws found by LLMs. And orgs are already turning to LLMs to write code. So, what happens when orgs lean on LLMs to create patches for those security flaws? Keith Hoodlet gives an exclusive early look at his team's recent research into the success, quality, and failures of LLM-generated security patches. Notably, they saw scenarios across a spectrum from robust, effective patches to patches that changed the software's behavior to patches that introduced new vulns to patches that didn't even fix the original vuln while also introducing a new vuln.

The research considers factors like quality and correctness of prompts, complexity of the target software, programming language, and expertise required to understand what a robust patch should look like. If you're going to spend tokens on fixing security flaws, you want a feedback loop that fixes them correctly -- not an infinite loop of new flaws creeping in with every LLM iteration.

Watch for this research, its toolset, and data to be released on Thursday August 6th during Black Hat.

Show Notes: https://securityweekly.com/asw-394

After 13 years at Shopify, Andrew has some valuable insights to share on application security. In this episode, we discuss how AI has changed application security processes where bug bounty now fits in a post-Mythos, post-AI harness world.

Andrew's Resources:

• https://shopify.engineering/building-an-agentic-harness-that-outlasts-the-model

Kern Smith, VP of Global Solutions at Zimperium, joins us to talk about the state of mobile security. This was a great conversation, talking about the history of mobile devices in the enterprise and how challenging securing mobile apps is in the age of vibe-coding.

Segment Resources

• https://zimperium.com/resources/new-zimperium-research-reveals-that-ai-based-attacks-are-targeting-and-succeeding-on-mobile
• Global Mobile Threat Report 2026

Finally, in the enterprise security news,

1. Pre-black hat funding goes nuts
2. we have 4 new cybersecurity unicorns!
3. Cyera acquires Oasis for one BILLION dollars
4. Lots of new product announcements with hacker summer camp next week
5. Hugging Face got hacked by a competitor's agent and are cool with it?
6. Finding out that wiping a burner phone is illegal the week before DEF CON is not ideal
7. Are open, local models the future of AI?
8. AI isn't coming for your job
9. lots of vendor reports
10. bad cybersecurity takes are apparently mainstream memes now???

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-470

Rogue AI, the Bar, Breaches, BMC, More Hugging Face, Helmuth von Multke, Ike, Shieldfont, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-603

In the security news:

• 2.2 million cars, one shared Bluetooth key
• JFrog tries to spin an AI 0-day into a win
• Sextortion scammers recycling ShinyHunters' leaks
• The first hack ever, from 1966
• Prompt injection as a service, $150 a month
• Cisco's mystery "static credential"
• BMCs still on the internet, still handing out hashes
• Scattered Spider duo sentenced over the TfL hack
• Air-gapped data sneaking out over the video cable
• A ghost in the network
• DNS poisoning checks into hotel WiFi
• Microsoft's cut-rate cybersecurity AI
• Learning to trust USB drives again
• Agentic pentesting shows up just in time for Black Hat
• Microsoft rethinks security for the AI age, again

Show Notes: https://securityweekly.com/psw-937

Since the pandemic, managing remote teams have been challenging. How do you measure performance and motivate teams when they are remote?

Charles Gaudet, CEO & Founder at Predictable Profits, joins Business Security Weekly to discuss why transparency is the key to team motivation for remote workers. Charles will discuss how culture and performance metrics create that transparency. He will also discuss how to motivate your team based on their personality type.

Segment 1 Resources:

https://www.PredictableProfits.com

Find all of CyberRisk TV's Black Hat 2026 coverage at: https://www.securityweekly.com/blackhat

Show Notes: https://securityweekly.com/bsw-458