Latest Hackingnews Podcast Episodes
Your TV Is Scanning You - PSW #826
Paul's Security Weekly (Video) - April 25, 2024 01:00 - 1 hour - Video ★★★★★ - 2 ratingsThis week the crew discusses: When TVs scan your network, bad things can happen, PuTTY is vulnerable, Crush FTP, vulnerabilities that will never be fixed, CVEs are for vulnerabilities silly, you can test for easily guessable passwords too, FlipperZero can steal all your passwords, more XZ style ...
Advising The President On Cyber-Physical Resilience - Philip Venables - PSW #826
Paul's Security Weekly (Video) - April 24, 2024 09:00 - 1 hour - Video ★★★★★ - 2 ratingsOn February 27, 2024, PCAST (President’s Council of Advisors on Science and Technology) sent a report to the President with recommendations to bolster the resilience and adaptability of the nation’s cyber-physical infrastructure resources. Phil was part of the team that worked on the report and ...
Hacker Heroes - Winn Schwartau - PSW #825
Paul's Security Weekly (Video) - April 18, 2024 09:00 - 1 hour - Video ★★★★★ - 2 ratingsPioneering the Cyber Battlefield: A Deep Dive with Winn Schwartau, Cybersecurity Luminary Get ready for an extraordinary episode as we sit down with Winn Schwartau, a true pioneer and luminary in the world of cybersecurity. Winn's impact on the field is nothing short of legendary, and in this ...
PCI 4.0 - PSW #825
Paul's Security Weekly (Video) - April 17, 2024 21:00 - 59 minutes - Video ★★★★★ - 2 ratingsVersion 4.0 of the Payment Card Industry Data Security Standard (PCI DSS) puts greater emphasis on application security than did previous versions of the standard. It also adds a new “customized approach” option that allows merchants and other entities to come up with their own ways to comply wi...
Combadges, SISENSE, Microsoft, CISA, Lastpass, Palo Alto, Broadband, Aaran and More - SWN #377
Security Weekly Podcast Network (Video) - April 12, 2024 19:27 - 30 minutes - Video ★★★★★ - 34 ratingsCombadges, SISENSE, Microsoft, Malware Next-Gen, Lastpass, Palo Alto, Broadband, Aaran Leyland, and More, on this edition of the Security Weekly News. Show Notes: https://securityweekly.com/swn-377
The AI-est news segment ever, now with even more AI! - ESW #357
Security Weekly Podcast Network (Video) - April 12, 2024 09:00 - 1 hour - Video ★★★★★ - 34 ratingsThis week, Tyler and Adrian discuss Cyera's $300M Series C, which lands them a $1.4B valuation! But is that still a unicorn? Aileen Lee of Cowboy Ventures, who coined the term back in 2013, recently wrote a piece celebrating the 10th anniversary of the term, and revisiting what it means. We HIGH...
Why Is Your TV & NAS On The Internet? - PSW #824
Security Weekly Podcast Network (Video) - April 11, 2024 21:00 - 1 hour - Video ★★★★★ - 34 ratingsAhoi new VM attacks ahead! HTTP/2 floods, USB Hid and run, forwarded email tricks, attackers be scanning, a bunch of nerds write software and give it away for free, your TV is on the Internet, Rust library issue, D-Link strikes again, EV charging station vulnerabilities, and rendering all cybers...
Why Is Your TV & NAS On The Internet? - PSW #824
Paul's Security Weekly (Video) - April 11, 2024 21:00 - 1 hour - Video ★★★★★ - 2 ratingsAhoi new VM attacks ahead! HTTP/2 floods, USB Hid and run, forwarded email tricks, attackers be scanning, a bunch of nerds write software and give it away for free, your TV is on the Internet, Rust library issue, D-Link strikes again, EV charging station vulnerabilities, and rendering all cybers...
Understanding KillNet and Recent Waves of DDoS Attacks - Michael Smith - ESW #357
Security Weekly Podcast Network (Video) - April 11, 2024 20:59 - 36 minutes - Video ★★★★★ - 34 ratingsIn the days when Mirai emerged and took down DynDNS, along with what seemed like half the Internet, DDoS was as active a topic in the headlines as it was behind the scenes (check out Andy Greenberg's amazing story on Mirai on Wired). We don't hear about DDoS attacks as much anymore. What happene...
Digging Into Supply Chain Security - James McMurry - PSW #824
Security Weekly Podcast Network (Video) - April 11, 2024 18:02 - 1 hour - Video ★★★★★ - 34 ratingsJim joins the Security Weekly crew to discuss all things supply chain! Given the recent events with XZ we still have many topics to explore, especially when it comes to practical advice surrounding supply chain threats. Show Notes: https://securityweekly.com/psw-824
Digging Into Supply Chain Security - James McMurry - PSW #824
Paul's Security Weekly (Video) - April 11, 2024 18:02 - 1 hour - Video ★★★★★ - 2 ratingsJim joins the Security Weekly crew to discuss all things supply chain! Given the recent events with XZ we still have many topics to explore, especially when it comes to practical advice surrounding supply chain threats. Show Notes: https://securityweekly.com/psw-824
OWASP Breach, Types of Prompt Injection, Device-Bound Sessions, ASVS & APIs - ASW #280
Security Weekly Podcast Network (Video) - April 09, 2024 21:00 - 28 minutes - Video ★★★★★ - 34 ratingsOWASP leaks resumes, defining different types of prompt injection, a secure design example in device-bound sessions, turning an ASVS requirement into practice, Ivanti has its 2000s-era Microsoft moment, HTTP/2 CONTINUATION flood, and more! Show Notes: https://securityweekly.com/asw-280
Dronepocalypse, Microsoft, DLINK, Home Depot, Phishing, NIST, VenomRat, Josh Marpet - SWN #376
Security Weekly Podcast Network (Video) - April 09, 2024 18:40 - 35 minutes - Video ★★★★★ - 34 ratingsDronepocalypse, Privacy, Microsoft, DLINK, Home Depot, Phishing, NIST, VenomRat, Josh Marpet, and more, are on this edition of the Security Weekly News. Show Notes: https://securityweekly.com/swn-376
Lessons That The XZ Utils Backdoor Spells Out - Farshad Abasi - ASW #280
Security Weekly Podcast Network (Video) - April 09, 2024 13:36 - 31 minutes - Video ★★★★★ - 34 ratingsWe look into the supply chain saga of the XZ Utils backdoor. It's a wild story of a carefully planned long con to add malicious code to a commonly used package that many SSH connections rely on. It hits themes from social engineering and abuse of trust to obscuring the changes and suppressing wa...
Understanding the Cybersecurity Ecosystem, Part 2 - Ross Haleliuk - BSW #345
Security Weekly Podcast Network (Video) - April 09, 2024 09:00 - 29 minutes - Video ★★★★★ - 34 ratingsIn this discussion, we focus on vendor/tool challenges in infosec, from a security leader's perspective. To quote our guest, Ross, "running a security program is often confused with shopping". You can't buy an effective security program any more than you can buy respect, or a black belt in kung ...
Understanding the Cybersecurity Ecosystem, Part 1 - Ross Haleliuk - BSW #345
Security Weekly Podcast Network (Video) - April 08, 2024 18:00 - 30 minutes - Video ★★★★★ - 34 ratingsIn this discussion, we focus on vendor/tool challenges in infosec, from a security leader's perspective. To quote our guest, Ross, "running a security program is often confused with shopping". You can't buy an effective security program any more than you can buy respect, or a black belt in kung ...
SEXi, Powerhost, Acuity, Layerslider, JSOutProx, Byakugan, Josh Marpet, and More - SWN #375
Security Weekly Podcast Network (Video) - April 05, 2024 18:50 - 33 minutes - Video ★★★★★ - 34 ratingsSEXi, AI Dreams, Powerhost, Acuity, Layerslider, JSOutProx, Byakugan, Josh Marpet, and More, on this edition of the Security Weekly News. Show Notes: https://securityweekly.com/swn-375
Have you heard about AI? Lots of AI news. Also, RSA conference, and RooBadges! - ESW #356
Security Weekly Podcast Network (Video) - April 05, 2024 09:00 - 1 hour - Video ★★★★★ - 34 ratingsAs we near RSA conference season, tons of security startups are coming out of stealth! The RSA Innovation Sandbox has also announced the top 10 finalists, also highlighting early stage startups that will be at the show. In this week's news segment, We discuss the highlights of the Cyber Safet...
Getting Vulnerability Management Back on the Rails - Patrick Garrity - ESW #356
Security Weekly Podcast Network (Video) - April 04, 2024 22:48 - 52 minutes - Video ★★★★★ - 34 ratingsNVD checked out, then they came back? Maybe? Should the xz backdoor be treated as a vulnerability? Is scan-driven vulnerability management obsolete when it comes to alerting on emerging threats? What were some of the takeaways from the first-ever VulnCon? EPSS is featured in over 100 sec...
It's A Minifilter! - PSW #823
Security Weekly Podcast Network (Video) - April 04, 2024 21:00 - 1 hour - Video ★★★★★ - 34 ratingspfSense switches to Linux (April Fools?), Flipper panic in Oz, Tales from the Krypt, Funding to secure the Internet, Abusing SSH on Windows, Blinding EDR, more hotel hacking, Quantum Bleed, and more! Show Notes: https://securityweekly.com/psw-823
It's A Minifilter! - PSW #823
Paul's Security Weekly (Video) - April 04, 2024 21:00 - 1 hour - Video ★★★★★ - 2 ratingspfSense switches to Linux (April Fools?), Flipper panic in Oz, Tales from the Krypt, Funding to secure the Internet, Abusing SSH on Windows, Blinding EDR, more hotel hacking, Quantum Bleed, and more! Show Notes: https://securityweekly.com/psw-823
XZ - Backdoors and The Fragile Supply Chain - PSW #823
Paul's Security Weekly (Video) - April 04, 2024 16:08 - 1 hour - Video ★★★★★ - 2 ratingsAs most of you have probably heard there was a scary supply chain attack against the open source compression software called "xz". The security weekly hosts will break down all the details and provide valuable insights. https://blog.qualys.com/vulnerabilities-threat-research/2024/03/29/xz-util...
XZ - Backdoors and The Fragile Supply Chain - PSW #823
Security Weekly Podcast Network (Video) - April 04, 2024 16:08 - 1 hour - Video ★★★★★ - 34 ratingsAs most of you have probably heard there was a scary supply chain attack against the open source compression software called "xz". The security weekly hosts will break down all the details and provide valuable insights. https://blog.qualys.com/vulnerabilities-threat-research/2024/03/29/xz-util...
Top 10's First Update, Metasploit's Second Update, PHP Prepares Statements, RSA & MS - ASW #279
Security Weekly Podcast Network (Video) - April 03, 2024 09:00 - 26 minutes - Video ★★★★★ - 34 ratingsThe OWASP Top 10 gets its first update after a year, Metasploit gets its first rewrite (but it's still in Perl), PHP adds support for prepared statements, RSA Conference puts passwords on notice while patching remains hard, and more! Show Notes: https://securityweekly.com/asw-279
Lena, XZ, WallEscape, AT&T, OWASP, Google, Microsoft, AI, Josh Marpet, and More - SWN #374
Security Weekly Podcast Network (Video) - April 02, 2024 18:21 - 33 minutes - Video ★★★★★ - 34 ratingsLena, XZ, WallEscape, AT&T, OWASP, Google, Microsoft, AI, Josh Marpet, and more, on this Edition of the Security Weekly News. Show Notes: https://securityweekly.com/swn-374
Infosec Myths, Mistakes, and Misconceptions - Adrian Sanabria - ASW #279
Security Weekly Podcast Network (Video) - April 02, 2024 16:00 - 34 minutes - Video ★★★★★ - 34 ratingsSometimes infosec problems can be summarized succinctly, like "patching is hard". Sometimes a succinct summary sounds convincing, but is based on old data, irrelevant data, or made up data. Adrian Sanabria walks through some of the archeological work he's done to dig up the source of some myths....
CISO Soul Searching: Navigating the Evolving Role of the CISO - Harold Rivas - BSW #344
Security Weekly Podcast Network (Video) - April 02, 2024 15:35 - 31 minutes - Video ★★★★★ - 34 ratingsHarold Rivas has held multiple CISO roles. In his current CISO role, he's championing Trellix's overall mission to address the issues CISOs face every day, encouraging information sharing and collaborative discussions among the CISO community to help address challenges and solve real problems to...
C-Level Perspective, Communication Failure, and Leadership Misconceptions - BSW #344
Security Weekly Podcast Network (Video) - April 02, 2024 15:35 - 25 minutes - Video ★★★★★ - 34 ratingsIn the leadership and communications section, The Strategic Implications of Cybersecurity: A C-Level Perspective, Leadership Misconceptions That Hinder Your Success , "Mastering Communication: Lessons from Two Years of Learning", and more! Show Notes: https://securityweekly.com/bsw-344
Electric Sheep, Exchange, Darcula, NuGet, Rockwell, FTX, Aaran Leyland, and More - SWN #373
Security Weekly Podcast Network (Video) - March 29, 2024 18:52 - 37 minutes - Video ★★★★★ - 34 ratingsAI Dreams of Electric Sheep, Exchange, Darcula, NuGet, Rockwell, FTX, Aaran Leyland, and More, on this edition of the Security Weekly News. Show Notes: https://securityweekly.com/swn-373
Multi-Layered Defense Platforms and other terms we found in security press releases - ESW #355
Security Weekly Podcast Network (Video) - March 29, 2024 18:52 - 56 minutes - Video ★★★★★ - 34 ratingsThis week, in the enterprise security news: Early stage funding is all the rage AI startups continue to pop out of stealth The buyer's market continues with more interesting acquisitions Purpose-built large language models for security Benchmarking LLMs for security GoFetch? More like...
Related Hackingnews Topics
- Securityweekly 2
- Securitynews 2
- Security 2
- Hacking 2