Skip to content
Sign in
Artwork for Security Weekly Podcast Network (Video)
TechnologyNewsTech News

Security Weekly Podcast Network (Video)

Security Weekly Productions

Welcome to the Security Weekly Podcast Network, your all-in-one source for the latest in cybersecurity! This feed features a diverse lineup of shows, including Application Security Weekly, Business Security Weekly, Paul's Security Weekly, Enterprise Security Weekly, and Security Weekly News. Whether you're a cybersecurity professional, business leader, or tech enthusiast, we cover all angles of the cybersecurity landscape.

Tune in for in-depth panel discussions, expert guest interviews, and breaking news on the latest hacking techniques, vulnerabilities, and industry trends. Stay informed and secure with the most trusted voices in cybersecurity!

Play
Open in
  • 101 episodes
  • daily
  • Avg 1 hr 8 min
  • English

Episodes 101

NewestOldestLongest
All20Unplayed20In progress0Played0
Counted on this page — what you have heard stays on this device, so it is not something the list can be paged by.
  • Thursday · 2 hr 4 min· Video

    "That's Not Supposed to Happen" - PSW #951

    In the security news: Supermarket refrigeration attacks, again! Rapid7's Ivanti findings and why we can't have "nice" things Google's massive Android TV botnet takedown Linux TCP kernel flaw that no one is patching The Binance theft APT flaw gives out root PHP security debt The porn and Digital billboard problem Your own phone system to pwn From PoC to weaponized exploit Hacking to change time Rooting an Echo Dot Firmware should just work AI chained bugs into working exploits USB power states leak data across an air gap AI-assisted vulnerability finding GoAhead's TLS handling Hackers hijack emergency alert apps Taiwan's emergency services become an AI-agent target CUI exposed through GSA's Google Drive GCHQ can't account for thousands of storage devices Railway employee blames an attempted intrusion on AI VulnCheck opens its initial-access playground to the public Show Notes: https://securityweekly.com/psw-951

  • Wednesday · 52 min· Video

    It's The Trickery While Empowering Employees and Redesigning Work for AI - Frank Riccardi - BSW #472

    As the prevalence of AI continues to grow, more and more people are worried about their online safety. New scams seem to be popping up every day, packaged in creative and terrifying ways. How do you protect yourself? Frank Riccardi, Author of CTRL+ALT+PWN: The Hacker's Playbook (And How to Beat It), joins Business Security Weekly to discuss why it's not the technology that PWNs you, it's the trickery. Rather than resign yourself to an inevitable fate or remove yourself from the online world entirely, learn the tricks of the trade to avoid being just another pwned noob. Frank exposes the secret weapons, sneaky tactics, and psychological tricks used by hackers today—and discusses how to stop them. Segment Resources: https://www.amazon.com/CTRL-ALT-PWN-Hackers-Playbook/dp/B0F8GP89NL In the leadership and communications segment, CISO Problems That Can't Be Solved With Technology, When Being Authentic Undermines Your Leadership, Empower Your Most Curious Employees to Drive Your Digital Transformation, and more! Show Notes: https://securityweekly.com/bsw-472

  • Tuesday · 1 hr 3 min· Video

    More Vulns and More Guesswork from Less Data - Jeremiah Grossman - ASW #407

    Following the catalog of CVEs is great for enumeration, but chasing those CVEs for patching is terrible for strategy. Jeremiah Grossman shows what breach data tells us about the differences between having over 400,000 CVEs, a few thousand KEVs, and a few hundred ways that attackers compromise orgs. We go into the importance of distinguishing vulns from exploits and where we see agents making a meaningful impact. Then we touch on some history of appsec and why the trajectory of vulns like SQL injection and XSS, along with well-known security controls, point to a more secure future -- or even possibly a pretty secure present. Resources https://www.rootevidence.com/blog-posts/stop-chasing-cves/ https://www.rootevidence.com/blog-posts/the-defender-window-is-longer-than-you-think/ Show Notes: https://securityweekly.com/asw-407

  • Monday · 1 hr 41 min· Video

    Shifting Cyber Turtles with Casey Ellis, the Vibe Check, and the News - Casey Ellis - ESW #483

    Interview with Casey Ellis Our focus for this interview with Casey Ellis are the massive changes in: Vulnerability Discovery Vulnerability Disclosure Exploitation and Remediation The goal is to understand how expectations and strategies should shift as a result. What do we, as an industry, and defenders need to do to ensure 2027 isn't a total train wreck? Vibe Check This week's vibe check explores the question, which security project always takes twice as long as planned? 55% - Enforcing data classification 18% - SOAR automation buildout 9% - Rolling out SSO 9% - Moving to passwordless auth 9% - AI agent discovery 0% - Other News Segment Finally, in the enterprise security news, funding and M&A PHP2Shell update floods of bugs silent train breaches the script kiddy bar has been lowered the basics continue to be important an AI lab pulls a PR stunt an old squirrel story was a scam! All that and more, on this episode of Enterprise Security Weekly. Show Notes: https://securityweekly.com/esw-483

  • October 29 · 2 hr 8 min· Video

    Vulnpocalypse Continues Until Defense Improves - PSW #950

    In the security news this week: In the security news this week: Cisco says patch faster, then sells you time Turning AI refusals into vulnerability signals Brotli's are hiding WordPress image upload exploit Fortinet ships fixes before details PHP2Shell still claiming victims, including firewalls Uncoordinated disclosure Claude finds vulns, go figure PXE strikes again! Sony's PS5 bounty drama Apple's October patches reach older devices CISA looks ahead to 2030 ArubaOS gets a pile of critical fixes New UK rules for protecting undersea infrastructure PortaPack Mayhem goes mobile Can AI agents police other AI agents? DHS bans DeepSeek A Chinese model writes riskier code for a US contractor eMudhra exits the TLS business BlackX bootkit exploits Secure Boot Signal makes hanging up harder than it should be Is AI solving math, or making it harder to trust? Show Notes: https://securityweekly.com/psw-950

  • October 28 · 54 min· Video

    CyberSN Jobs Report as CIOs and CISOs are Unaccountable and Unprepared for AI - BSW #471

    CyberSN just released their Cybersecurity Jobs Report through September 2026. We'll cover that in the leadership and communications segment along with, Only 7% of CISOs at Large Companies Own AI Governance, Our Favorite Management Tips on Delegating Effectively, CIOs unprepared for agentic workforce shift, and more! Show Notes: https://securityweekly.com/bsw-471

  • October 27 · 54 min· Video

    Securing Modern Financial Systems in the Age of AI - Rashid Feroze - ASW #406

    Proactive security doesn't have to wait for a vuln to be disclosed. Even if a patch isn't available, it's possible to deploy controls and design systems to be resilient against how vulns are exploited. Rashid Feroze talks about runtime security and the benefits of deploying eBPF filters to improve observability and block unauthorized behavior. He walks through scenarios related to supply chain attacks, prompt injections against agents, and responding to major events like PHP2Shell. We touch on threat models to help distinguish between what eBPF filters can protect against and what still requires secure coding discipline from developers. Resources https://ebpf.io https://falco.org Show Notes: https://securityweekly.com/asw-406

  • October 26 · 1 hr 25 min· Video

    Building a parallel Internet, security buzzwords that should be retired, and the news - Barrett Lyon - ESW #482

    Interview with Barrett Lyon Why do we need a Parallel Internet? Barrett details his journey to build truly private access to the Internet. My first thought was, "why not VPN? Why not TOR?" He has good answers to both. To get there, he had to ship his own hardware all over the world. He had to stand up a CDN. DNS. BGP. Anti-DDoS. This is more than just a safer, more secure way to access the Internet - it is an API-driven, optionally agent-controlled software-defined network. And it's a consumer-priced product that starts at $6 a month? My head is spinning. Note: this is NOT a sponsored segment, I'm just legitimately fascinated by it! When this was pitched to me, it sounded so outlandish, I almost passed on it. Then I saw that Barrett created and sold 5 companies, two of which were major anti-DDoS vendors. Clearly, this guy knows how to build serious, scalable infrastructure. Enjoy the conversation! Segment Resources: The main website: https://doxx.net Doxx.net Discord channel: https://discord.gg/595hAxHH4 Barrett's previous work mapping the internet for the Opte project: https://www.opte.org Vibe Check Which security acronym/phrases deserves to be retired? 38% - XDR 25% - Zero Trust 25% - UEBA 6% - CNAPP 6% - Non-Human 0% - Other (leave a comment) Nothing like some acronym soup and buzzwords to really get people out to vote! Shared anger can be a powerful thing, and I'm here for the rants. I have to agree with the top three votes: XDR, Zero Trust, and UEBA (User and Entity Behavior Analytics). CNAPP can see ya later, and since agents outnumber humans 100-1,000 to 1 now, can we call our user accounts "Pro-Human" instead of calling service accounts and agent IDs "Non-Human"? I'm currently raising on this business concept - pre-revenue, pre-TAM, pre-founder, and pre-idea. Expecting to close a $150M pre-seed at a $100B post-money valuation in the next few weeks. Let me know if you want in. ???? Top Comments "Other - The "AI TRiSM" term can go kick the biggest of rocks" "Other - Shift left" "My god I have always hated zero trust and would love to see it die. What a stupid, over-the-top & exaggerated phrase to just basically mean that having a bunch of unauth/flat user roles things is bad… how an entire category of the industry managed to piggyback off cloud to make ZTNA a thing I've no idea. Also led to the annoying trend of overly segmenting all the things. rant over" Enterprise Weekly News Finally, in the enterprise security news, We check out funding There are a lot of acquisitions And a round of layoffs A tech startup goes out of business after two breaches Private keys should be larger than "4" PHP2Shell disrupts everyone's plans this week Want to impress your friends with the quirkiest 2FA authenticator ever? Stick around until the end of the news. All that and more, on this episode of Enterprise Security Weekly. Show Notes: https://securityweekly.com/esw-482

  • October 22 · 2 hr 9 min· Video

    PHP2Hell - Joshua Wright - PSW #949

    Special guest Joshua Wright joins us for a timely incident-response discussion! Then, in the security news this week: Have you heard about PHP2Shell? Certificates with keys small enough to guess Tor exit nodes turn into SSH credential traps Do USB-C cables need firmware updates now? HaleHound packs a radio lab into a cheap display Claude solves part of the NIST curve mystery The Army and self-directed offensive cyber agents Retired nuclear reactors return to power AI PatchSlop NGINX, NODE.js patches critical flaws BeyondTrust exploited before the patch landed Plex vulnerabilities move from PoC to exploitation ICS patches, including a Siemens flaw exploited in the wild Can fake data trigger Japan's emergency alert? Agentic pentests? AI may add noise more than skill AI agents navigate OT and move equipment AI model helps build a Chrome exploit Utah's VPN law runs into technical reality Segment Resources: https://dynamicincidentresponse.com/ - A New Era for Incident Response! Show Notes: https://securityweekly.com/psw-949

  • October 21 · 57 min· Video

    Minimum Viable Company as Security's Inflection Point & Human Breaking Point Collide - Kriss Stephen - BSW #470

    In this episode, Kriss Stephen, Principal Solutions Architect at Semperis, explores the concept of the Minimum Viable Company and the three foundational capabilities every organization needs to withstand and recover from a cyberattack. Drawing from his experience in identity security and cyber resilience, Kriss shares practical lessons on how organizations can prioritize recovery, protect critical identity systems, and maintain business operations during disruptive incidents. Listeners will gain actionable insights into building resilience before a breach occurs and accelerating recovery when it matters most. Segment Resources: Part 1: Minimum Viable Company: True Cyber Resilience Starts with Identity https://www.semperis.com/blog/minimum-viable-company-true-cyber-resilience-starts-with-identity/ Part 2: Minimum Viable Company: Cyber Resilience Beyond the Breach https://www.semperis.com/blog/minimum-viable-company-cyber-resilience-beyond-the-breach/ Part 3: Minimum Viable Company: Enabling Visibility, Control, Resilience https://www.semperis.com/blog/minimum-viable-company-enabling-visibility-control-resilience/ This segment is sponsored by Semperis. Visit https://securityweekly.com/semperis to learn more about them! In the leadership and communications segment, Crisis Communication for Boards handbook, Unclear AI risk ownership could leave CISOs in familiar scapegoat role, Optimism Is Now an Essential Leadership Skill, and more! Show Notes: https://securityweekly.com/bsw-470

  • October 20 · 52 min· Video

    Standardizing Mobile Defense: Inside the OWASP Mobile App Security Project v2 - Ryan Lloyd, Jan Seredynski - ASW #405

    The OWAS Mobile Application Security (MAS) project recently released an updated version of its guidance, with excellent advice organized into common weaknesses, a verification standard for devs (MASVS), and a testing guide (MASTG). Ryan Lloyd and Jan Seredynski from Guardsquare dive into the project to talk about how it's been updated, how orgs can use it, and the challenges orgs face in managing their mobile frameworks and environments. We also cover how agents and LLMs are impacting mobile security and what future iterations of the MAS project might include for securing mobile apps interacting with LLMs or being written by LLMs. Finally, we share practical ways for developers to get involved as OWASP contributors and advocates. Segment Resources: https://mas.owasp.org https://mas.owasp.org/MASWE/ https://hubs.ly/Q04ykvgm0 This segment is sponsored by Guardsquare. Visit https://securityweekly.com/guardsquare to learn more! Show Notes: https://securityweekly.com/asw-405

  • October 19 · 1 hr 32 min· Video

    Securing AI on the Endpoint, Anthropic Dreams of AI Replicants, and the News - Michael Jenkins - ESW #481

    Interview with Michael Jenkins from ThreatLocker Securing AI on the Endpoint - Zero Trust or Bust Michael joins us for the first time to discuss strategies for securing the latest evolution of AI: local endpoint-based AI agents. Tools like Claude Code, OpenAI Codex, and Google AntiGravity give employees the power to build any software or workflow they can imagine, but what is the risk impact? These models aren't shy about adopting and downloading libraries, tools, and untrusted software to fulfill the goals they've been given. We explore how execution control and ringfencing can add some sanity and security to the process. This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them! Topic Segment: Anthropic Dreams of AI Replicants Of all the things AI labs could be researching or cooking up, I wouldn't have guessed AI worms distributing inference across smart TVs would be on the list, but here we are. Adrian, Tyler, and Ayman mull over this strange research. It is too loose to be an academic paper, but maybe should have been? Is really a pressing AI risk we should be worried about right now? Why did Anthropic choose to focus on smart TVs and not more powerful IoT devices? Weekly Enterprise News Finally, in the enterprise security news, we discuss the vibes certified organic books don't mess with criminals the history of ShinyHunters building strategies on the wrong lessons crypto wallet supply chain drama Hot refrigerators Reddit is great for breach tracking Microsoft patch Tuesday is on track to hit 12,000 patches by next April All that and more, on this episode of Enterprise Security Weekly. Show Notes: https://securityweekly.com/esw-481

  • October 15 · 2 hr· Video

    AI Takes Over? - Danny Akacki - PSW #948

    In the security news this week: Convert this router into an SDR Ivanti straight to root Anthropic's AI worm FUD A kernel exploit to fix downloads Supermarket refrigeration attacks 400 mystery Java vulnerabilities Authentication bypass Russia meets the data-center war Stop & Shop attacked Anthropic cuts eval agents AI incident reporting FortiBleed lives Anthropic offers scanning Pre-compromised phones FakeGit returns Teams deepfake detection Let's Encrypt certificates get shorter GitLab ships another critical patch Engineer gets prison time for locking thousands of devices OpenAI employee accused of planting a hidden recorder Show Notes: https://securityweekly.com/psw-948

Showing 1–20 of 101 episodes