Paul's Security Weekly (Audio)

In the security news:
Son of Anton strikes again!
HalluSquatting and using Claude to defend itself
CISA KEV's Revolving Door
LLM's hallucinate and companies get sued
Additionally - GitLost
Yet even more Linux vulnerabilities
Citrix just keeps bleeding
Old hardware is new again
A sneak peak into next week's tech segment
Tenda hidden backdoors
We're still talking about Mirai
Today was not a good day for Roundcube
Canada is hacking criminals
AI safeguards are still annnoying
All cars will spy on you
The FatFs unpatched vulnerability in millions of embedded devices
Windows OS market share drops below 60% (Paul uses Arch)
'We Cannot Choose to Become Idiots' - or can we?
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-934

This week we have a technical segment based on the response to "Atomic Arch", an updated open-source tool to help you catch malicious packages. In the security news:
Exploitarium
A hot messy summer of vulnerabilities
AI Squatting
Linux LPE - no shortage of those
Fingerprinting Favicons
Windows 10 extended
Can Clothes Make You Invisible to Facial Recognition?
Fable and Mythos for All
Do we care about Quantum?
Execs have AI risk under control
Biological warefare in Spyware
The scripts in-scope for PCI
We don't have privacy, but we may get age restrictions
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-933

First up is Sandy Bird from Sonrai discussing how to protect our cloud infrastructure!
This segment is sponsored by Sonrai Security. Visit https://securityweekly.com/sonrai to learn more about them!
Next up in the security news:
Help, I am Fortibleeding
Cisco SD-WAN needs help
The secret life of probe requests
Help, I am Squidbleeding
XSS to RCE and why CVSS isn't the full picture
TVs spy on you
Foundational security practices
Cybersecurity costs money
Happy "Its too late to update your KEK key" day
You don't have security flaws if no one can report them
Rickrolling FIFA
Domain takeovers
End of life, out of luck
The key to Encryption...
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-932

In the security news this week:
GPS spoofing and satellite jamming are getting way too accessible
Rekeying satellites in orbit sounds terrifying
Cyber extortion and whether criminals still have ethics
AI helping cybersecurity research... and drug discovery
Data centers eating regional power grids
Nuclear, solar, natural gas, and the future of AI infrastructure
What happens when GPS stops being trustworthy?
Satellite constellations as the next critical infrastructure target
AI guardrails and why sci-fi warned us first
Cyber ranges that don't simulate reality anymore
The weird morality line between hackers, scammers, and criminals
Future satellite warfare without calling it warfare
Security standards for infrastructure nobody thought would be online
Historical cybersecurity stories that suddenly feel very current
Why AI changes both offense and defense simultaneously
And how much of modern cyber defense is just educated guessing
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-931

In the security news:
Trolling Microsoft With Vulnerabilities
Fable 5 loves guardrails
Binwalk vulnerability
EMBA and local models
EDRChoker
AI worms
Interesting Arista vulnerability added to KEV
BOD 26-04 and stakeholder specific vulnerability categorization
Bring your own execution environment
Homelab tips
MikroTik routers as interceptors
Ivanti Sentry and irony
Smart TV botnets
Privacy laws
Solarwinds Serv-U lives on
More Cisco SD-WAN fun!
Russia can jam GPS
No nudes for you says UK Government
"Why would someone want to learn code when AI does it better and faster?"
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-930