Security Weekly Podcast Network (Audio)

Googleglass Returns, Microsoft, SignDrop, ConnectWise, Trezor, Dr. Zikel, Apache, Josh Marpet, and More, on this episode of the Security Weekly News.
Visit https://www.securityweekly.com/swn for all the latest episodes!
Show Notes: https://securityweekly.com/swn-633

In the security news this week:
SSH in Shambles
Santa steals your podcast setup
SAP’s double feature
Terminal2Shell is CVSS 11
Dormant neurons, active backdoor
Patched, but still exploitable
948 paths to root
Barracuda serves root
Node-RED, now with shell access
The secret cigar recipe
FBI agent, crypto thief
Another AI agent identity mess
7.7 million reasons to care
Reddit asks the breach question
Who’s accountable when AI breaks?
Espionage, chips, geopolitics
Don’t ask again, leak forever
AI catches cheating, flags everyone
1.4 million keys need revocation
RSA, now with a countdown
Fingerprint security, SD card reality
Proving Signal’s machine code
Thirty zero-days, one offline switch
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-952

Managing a cyber crisis extends far beyond the initial breach, tossing leadership into a chaotic fog where security teams, legal counsels, and executives must make high-stakes choices under extreme duress. When a catastrophic security event occurs, organizations struggle against a predictable set of systemic, technical, and operational roadblocks. How can organizations transition from a reactive state to a controlled recovery, successful crisis management state?
Mone' Ross, Vice President, Cyber Operations at JPMorganChase, joins Business Security Weekly to discuss Cyber Resilience and the leadership behaviors that determine what happens under pressure. Mone' will discuss why preparation and communication are imperative to a successful response. She has also identified the five Crisis Archetypes and how each type should or should not lead during a crisis.
In the leadership and communications segment, AI Security Now Tops Every CISO Priority for 2027, What a security strategy that survives 2027 looks like, Leaders Need to Grapple with Employee Ambivalence on AI, and more!
Visit https://www.securityweekly.com/bsw for all the latest episodes!
Show Notes: https://securityweekly.com/bsw-473

Bad Claude, Bad, French Fridge Fiasco Fries Fromage, Teenage Mutant Ninja AI, SonicWALL, Aaran Leyland, and More, on the Security Weekly News.
Visit https://www.securityweekly.com/swn for all the latest episodes!
Show Notes: https://securityweekly.com/swn-632

AI-enabled cyber attackers will check every third-party path into an application at scale and speed. The same process can help defenders just as much, but it’s only as effective as the human expertise guiding it. Andrew Wesie, Xint co-founder and CTO. explains how human engineering in harness construction is the determining factor between real, autonomous exploit discovery and validation versus a machine that just generates more noise.
Segment Resources:
Business logic vulns, https://xint.io/blog/compaction-smuggling-reasoning-traces and https://xint.io/blog/openai-compaction-inference
Securing apps and their third-party access, https://xint.io/resources/the-side-door-problem-what-the-korean-bank-breaches-mean-for-us-banks
Working with DARPA to test the infrastructure surrounding messaging apps, https://xint.io/blog/darpa-selects-xint-to-research-source-code-vulnerabilities-in-critical-messaging-applications-used-in-military-communications-330339
This segment is sponsored by Xint. To learn more, visit https://securityweekly.com/xint!
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw-408