The Security Ledger Podcast

Security Ledger host Paul Roberts speaks with Censys’s Silas Cutler about two major incidents: critical remotely exploitable PHP vulnerabilities discovered by a frontier model AI and follow-on AI-assisted research, and cyberattacks on internet-exposed Danfoss refrigeration controllers that forced French supermarkets’ systems into defrost or extreme temperatures, spoiling food and causing some fires. Cutler explains PHP’s ubiquity, what exploitation traffic may look like, and Censys findings estimating roughly 41 million vulnerable websites (about 1–3 million direct hosts) while noting rapid patch adoption (8.1 million patched since Oct. 21) and ongoing probing using early proof-of-concepts. On Danfoss, he describes chaining two disclosed bugs (March and August) to achieve unauthenticated compromise, Censys counts of 2,991 exposed StoreView panels (61% in France), post-incident reductions, and broader risks from publicly exposed, third-party-managed, end-of-life systems and the need for stronger notification and long-term support approaches.

In this episode of the podcast (#266) we welcome back Jon “Gainsec” Gaines to discuss “Bird Hunting” - a multi-year research project analyzing AI-powered surveillance products including automated license plate readers (ALPRs) and other products made by Flock Safety. The discussion covers coordinated disclosure friction, risks of manipulation and broader surveillance/privacy concerns, and argues for stronger standards and incentives for secure design.

In this episode of the podcast, host Paul Roberts interviews Nishawn Smagh of the firm GreyNoise Intelligence about the findings of their State of the Edge report, an analysis of GreyNoise data on risks stemming from compromised edge devices such as broadband routers, VPN gateways, smart home devices and more. Shawn and Paul talk about how attackers are turning edge devices into their favorite entry point, and strategies for organizations to counter the growing risk of compromised edge devices.

The post Edge Devices Are Your Cyber Underbelly. Here’s Why. appeared first on The Security Ledger with Paul F. Roberts.

Can a remote software attack send a power wheelchair tumbling down a staircase? Sadly: the answer is “yes.” Check out our latest podcast interview with Billy Rios and Brandon Rothel of QED Secure Solutions. Billy and Brandon discuss their research into security flaws in power wheelchairs by the Japanese firm WHILL.

The post When Cybersecurity Breaks Mobility: The Hidden Risks of Software-Powered Wheelchairs appeared first on The Security Ledger with Paul F. Roberts.

Security researcher Jon “Gainsec” Gaines and YouTuber Benn Jordan discuss their examination of Flock Safety’s AI-powered license plate readers and how cost-driven design choices, outdated software, and weak security controls expose them to abuse.

The post AI Surveillance: Unmasking Flock Safety’s Insecurities appeared first on The Security Ledger with Paul F. Roberts.

Cyber attacks on water infrastructure are growing. Josh Corman of IAmTheCavalry joins us to discuss efforts to secure critical water systems.

The post Cyber Threats to Water Infrastructure: Insights from Josh Corman appeared first on The Security Ledger with Paul F. Roberts.

Cybersecurity researcher Noam Moshe of Claroty met up with The Security Ledger Podcast at this year's Black Hat Briefings to discuss his presentation on critical Axis IP camera vulnerabilities that could let hackers spy, manipulate video feeds, and pivot into sensitive networks—and what organizations can do to defend against these (and other) IoT threats.

The post How Hackers Take Over Security Cameras (and What You Can Do About It): A Conversation With Claroty’s Noam Moshe appeared first on The Security Ledger with Paul F. Roberts.

In this episode of the podcast, host Paul Roberts welcomes Tanya Janca of She Hacks Purple back into the studio. Tanya talks about her newly released book: Alice and Bob Learn Secure Coding, published by Wiley and the larger problem of how to promote the teaching of secure coding practices to developers.

The post Episode 260: The Art of Teaching Secure Coding with Tanya Janca appeared first on The Security Ledger with Paul F. Roberts.

In this Spotlight episode, host Paul Roberts speaks with David Kellerman, the Field CTO at Cymulate, about the growing demand for security validation technology, like Cymulate's, as organizations struggle to assess the utility and effectiveness of their security investments.

The post Security Validation: A Deep Dive with Cymulate’s David Kellerman appeared first on The Security Ledger with Paul F. Roberts.

Host Paul Roberts interviews Sophos CISO Ross McKerchar about the company's recent report, Pacific Rim, detailing its multi-year battle to beat back a sophisticated Chinese hacking campaign.

The post Pacific Rim: Sophos’ 6 Year Battle To Beat Back China State Hackers appeared first on The Security Ledger with Paul F. Roberts.