Paul's Security Weekly (Audio)

First up: a technical segment on Linux threat hunting. We'll start this series by covering the best places to look for IoCs on Linux systems and devices, starting with startup services and scheduled tasks. Then, in the security news this week:
SonicWall zero-days, again
AI finds a pile of Cisco bugs, and a root RCE
Claude Code Auto Mode dangers
BGP hijacks your unsigned software update
California, Linux and age verification
Free movies, complimentary malware
Citrix puts Linux alongside Windows
Signal's "secure" enclave
An expired domain answers military phone calls
MORE Cheap Android TV boxes arrive pre-pwned
CISA red teams meet critical infrastructure
PaperCut vulnerability cuts both ways
Big Tech asks everyone to secure its AI future
Pacemaker monitoring
DOJ files on a criminal leak site
Water utility security, right after the breaches
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-942

Rob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access controls to limit what agents can access and do.
This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!
In the security news this week:
Sixteen-year-old Linux LPEs still work
Ubiquiti UniFi, patch it, also light on details
If you remember magicJack, you too are old
Slovakia doesn't trust its own speed cameras
More homework on NIST's vulnerability database
Your webcam, mic, and key light, all owned
Printer moonlights as Minecraft server
Zombie credit cards
Your car's infotainment system fuels botnets
Feds warn about AI-powered PLC attacks
Can an AI actually reverse engineer its way out?
Denver International's security breach, volume six
Charlotte's breach and a parking company
Why your ancient tech might be the safe one
Microsoft counts billions of phishing emails
A password vault that leaked to any website
Australia sells password books at the post office
Another perfect ten, this time in Entra ID
Cisco's bug scores read like Olympic gymnastics
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-941

In the security news this week:
Cursor opens your repo, the repo opens you
If you want the good model I'm going to need to see your ID
Flock's a Flocking mess
Defender was supposed to be the chosen one
Side stepping Secure boot - twice
SonicWall: a LAMP stack in a fancy case
Macs don't get viruses, part infinity
Flipper One, but why not Nix?
NetScaler is back in the room
Borrowing phone's good reputation
USB and how to make Windows download stuff
A KVM with the expensive letters removed
Five steps to stop the webcam creeps
PlexTrac acquired
NIST asks the internet to fix the NVD
Poland's health software has a very bad week
If Apple pings you about spyware, believe it
A macOS stealer that drives your browser for you
T-Mobile's incident response tool of choice may suprise you, or not...
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-940

In the security news this week:
North Carolina ports and contingency plans
Back to paper and pencils
Midnight Blizzard compromises hotel Wi-Fi
DNS strikes again
Captive portals, stolen credentials, and nation-state scale
Phishing-resistant MFA
Goodbye SMS and voice authentication
Cornflake RAT and Chaco Shell
The NPM worm
Hundreds of compromised packages
AI lowers the barrier to mass exploitation
Rethinking "secure enough"
Back to basics: know what's on your network
Get off my PCI lawn
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-939

This week:
When you are not at summer camp you can't read about it
The Fettle continues
Using the CFAA against AI
Social contracts are not security models
VSCode extentions, again
Bugtraq is back!
NVIDA, LVFS, and unraveling AI infrastructure
More routers that come with backdoors
Do we care about LPE?
Even more AI that finds vulnerabilities
When AI breaks its own guardtails
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-938