PODCAST

Security Weekly (Download Only)

Repository for download only audio entities.

All Episodes

02:06:05

Citrixbleed 2, Hardware Hacking, and Failed Bans -...

Security Weekly (Download Only) ·

2025/07/10

This week in the security news: Citrixbleed 2 and so many failures Ruckus leads the way on how not to handle vulnerabilities When you have no egress Applocker bypass So you bought earbuds from TikTok More gadgets and the crazy radio Cheap drones and android apps Best Mario Kart controller ever VSCode: You're forked Bluetooth earbuds and vulnerabilities Do you remember Sound blaster cards? NFC passport chips Whack-a-disk Show Notes: https://securityweekly.com/psw-882

51:58

SolarWinds Settlement, Upgrade Your Leadership...

Security Weekly (Download Only) ·

2025/07/09

SEC settles with SolarWinds. We react! In the leadership and communications section, The Skills and Habits Aspiring CEOs Need to Build, Why People Really Quit — And How Great Managers Make Them Want to Stay, The Small Actions That Become Your Legacy, and more! Show Notes: https://securityweekly.com/bsw-403

33:26

Spying on your kids, Bank Robberies, Qantas, LOTL,...

Security Weekly (Download Only) ·

2025/07/08

Spying on your kids, Bank Robberies, Qantas, LOTL, sudo, Hunters, Aaran Leyland, and more on the Security Weekly News. Show Notes: https://securityweekly.com/swn-492

01:07:15

Checking in on the State of Appsec in 2025 - Sandy...

Security Weekly (Download Only) ·

2025/07/08

Appsec still deals with ancient vulns like SQL injection and XSS. And now LLMs are generating code along side humans. Sandy Carielli and Janet Worthington join us once again to discuss what all this new code means for appsec practices. On a positive note, the prevalence of those ancient vulns seems to be diminishing, but the rising use of LLMs is expanding a new (but not very different) attack surface. We look at where orgs are investing in appsec, who appsec teams are collaborating with, and

01:49:38

Identity, AI & Access: Highlights from Identiverse...

Security Weekly (Download Only) ·

2025/07/07

Single Sign On (SSO) and Multi Factor Authentication (MFA) is critical to secure operations for companies of all sizes. Why is the foundation of cybersecurity still locked behind enterprise licensing? Single Sign-On (SSO) and Multi-Factor Authentication (MFA) are essential—not optional—for protecting modern businesses. But today, these critical tools are overpriced, overcomplicated, and reserved for companies that can afford to overpay and have full-time security teams. That’s broken. Cubeless is

28:50

North Korea, ransomware, social engineering, AI,...

Security Weekly (Download Only) ·

2025/07/04

North Korea, ransomware, social engineering, AI, Apple, Drugs & Iran on this edition of the Security Weekly News! Show Notes: https://securityweekly.com/swn-491

01:08:14

Exploring Meshtastic and LoRa Mesh Networks - Rob...

Security Weekly (Download Only) ·

2025/07/03

This week, we dive into the world of Meshtastic and LoRa—two technologies empowering secure, long-range, and infrastructure-free communication. We'll talk about the origins of Meshtastic, how LoRa radio works, and why mesh networking is revolutionizing off-grid messaging for adventurers, hackers, emergency responders, and privacy advocates alike. We break down the available hardware, walk you through firmware installation, and share real-world use cases of LoRa to create decentralized, encrypted

32:29

The Value of Zero Trust - Rob Allen - BSW #402

Security Weekly (Download Only) ·

2025/07/02

New research estimates the value of Zero Trust. Using the Marsh McLennan Cyber Risk Intelligence Center’s proprietary cyber losses dataset from the past eight years, researchers estimated that overall cyber losses could have been potentially reduced by up to 31% had the organizations widely deployed zero-trust security. This adds up to a projected reduction of up to $465 billion in global annual total economic losses. But Zero Trust projects have struggled due to complexity. Rob Allen, Chief Product

31:11

Sony, Scattered Spider, Hikvision, Cybercrime, Iran,...

Security Weekly (Download Only) ·

2025/07/01

Sony, Scattered Spider, Hikvision, Cybercrime, Iran, BSODs, Cloudflare, Josh Marpet, and more on the Security Weekly News. Show Notes: https://securityweekly.com/swn-490

38:26

Simple Patterns for Complex Secure Code Reviews -...

Security Weekly (Download Only) ·

2025/07/01

Manual secure code reviews can be tedious and time intensive if you're just going through checklists. There's plenty of room for linters and compilers and all the grep-like tools to find flaws. Louis Nyffenegger describes the steps of a successful code review process. It's a process that starts with understanding code, which can even benefit from an LLM assistant, and then applies that understanding to a search for developer patterns that lead to common mistakes like mishandling data, not enforcing

01:52:05

The Illusion of Control: Shadow IT, SSO Shortcomings,...

Security Weekly (Download Only) ·

2025/06/30

Interview with Dave Lewis Organizations believe they have a firm grip on security with SSO and corporate IT policies, but in reality, shadow IT lurks in the background—expanding attack surfaces and exposing sensitive data. Employees bypass security controls for the sake of convenience, while SSO fails to provide the comprehensive security net organizations expect. Talk about the critical weaknesses in traditional SSO implementations, how shadow IT thrives under the radar, and why enterprises

31:28

Broadcom, Direct Send, N0auth, UNFI, Cisco, Oneclik, ...

Security Weekly (Download Only) ·

2025/06/27

Broadcom is coming for you, Direct Send, N0auth, UNFI, Cisco, Oneclik, Russ Beauchemin, and More on this episode of the Security Weekly News. Show Notes: https://securityweekly.com/swn-489

02:16:08

Is Vuln Management Dead? - HD Moore - PSW #880

Security Weekly (Download Only) ·

2025/06/26

This conversation explores the intersection of cybersecurity and emerging technologies, focusing on innovative hacking techniques, the evolution of vulnerability management, and the critical importance of asset discovery. The discussion also delves into the implications of cyber warfare, the persistent threat of default passwords, and the integration of open source tools in enhancing security measures. The conversation delves into various aspects of cybersecurity, focusing on aircraft tracking, data

01:05:24

Thriving Through Volatility: Insights for CISOs -...

Security Weekly (Download Only) ·

2025/06/25

In this episode, Mandy Logan, Summer Craze Fowler, Jason Albuquerque, and Jeff Pollard of Forrester discuss the challenges and strategies for CISOs in navigating volatility in the security landscape. They emphasize the importance of building relationships within the organization, particularly with the CFO, to manage budgets effectively. The conversation also covers the significance of communicating security needs in terms of compliance and customer requirements, maximizing budget through flex

35:37

The Rise of Malware: Salt Typhoon and Spark Kitty -...

Security Weekly (Download Only) ·

2025/06/24

In this episode of Security Weekly News, Doug White discusses various cybersecurity threats, including the Salt Typhoon and Spark Kitty malware, the implications of Microsoft's decision to drop support for old hardware drivers, and the potential increase in cyber threats from Iran. The conversation also covers the alarming 16 billion password leak and the evolving landscape of password security, including the rise of passkeys and the challenges posed by AI in misinformation and social engineering

01:01:18

How Fuzzing Barcodes Raises the Bar for Secure Code -...

Security Weekly (Download Only) ·

2025/06/24

Fuzzing has been one of the most successful ways to improve software quality. And it demonstrates how improving software quality improves security. Artur Cygan shares his experience in building and applying fuzzers to barcode scanners, smart contracts, and just about any code you can imagine. We go through the useful relationship between unit tests and fuzzing coverage, nudging fuzzers into deeper code paths, and how LLMs can help guide a fuzzer into using better inputs for its testing. Resources

01:38:23

Rethinking Identity: IAM, PAM & Passwordless Trends...

Security Weekly (Download Only) ·

2025/06/23

In fast-paced, shared device environments like healthcare, manufacturing, and other critical industries, traditional access management approaches are falling short, quietly eroding both security and productivity. This episode explores how outdated methods, like shared credentials and clunky logins, create friction, increase risk, and undermine compliance. We’ll discuss what a modern, strategic access management approach looks like and how passwordless authentication solutions are closing the gap

33:37

Donut Holes, clickfix, rapperbots, bad devs, war,...

Security Weekly (Download Only) ·

2025/06/20

Donut Holes, clickfix, rapperbots, bad devs, war, Doug Rants about Backups, and More on this episode of the Security Weekly News. Show Notes: https://securityweekly.com/swn-487

02:03:17

Hacking Drivers - PSW #879

Security Weekly (Download Only) ·

2025/06/19

This week: * The true details around Salt Typhoon are still unknown * The search for a portable pen testing device * Directories named "hacker2" are suspicious * Can a $24 cable compete with a $180 cable? * Hacking Tesla wall chargers * Old Zyxel exploits are new again * Hacking Asus drivers * Stealing KIAs - but not like you may think * Fake articles * Just give everything to LLMs, like Nmap * Retiring Floppy disks * An intern leaked secrets * Discord link hijacking * Cray vs. Raspberry PI * More

01:03:41

CISO Cyber Insurance Empowerment - Peter Hedberg,...

Security Weekly (Download Only) ·

2025/06/18

Segment description coming soon! This month BeyondTrust released it's 12th annual edition of the Microsoft Vulnerabilities Report. The report reveals a record-breaking year for Microsoft vulnerabilities, and helps organizations understand, identify, and address the risks within their Microsoft ecosystems. Segment Resources: Insights Security Assessment Tool: https://www.beyondtrust.com/products/identity-security-insights/assessment For a copy of the Microsoft Vulnerabilities Threat Report:

805 results