Security Weekly Podcast Network (Video)

Surveillance, Murder Hornets, Portmantau, TrueCONF, Siemens, N-Able, Robo-Tips, and More on this episode of the Security Weekly News.
Show Notes: https://securityweekly.com/swn-609

In the security news this week:
Cursor opens your repo, the repo opens you
If you want the good model I'm going to need to see your ID
Flock's a Flocking mess
Defender was supposed to be the chosen one
Side stepping Secure boot - twice
SonicWall: a LAMP stack in a fancy case
Macs don't get viruses, part infinity
Flipper One, but why not Nix?
NetScaler is back in the room
Borrowing phone's good reputation
USB and how to make Windows download stuff
A KVM with the expensive letters removed
Five steps to stop the webcam creeps
PlexTrac acquired
NIST asks the internet to fix the NVD
Poland's health software has a very bad week
If Apple pings you about spyware, believe it
A macOS stealer that drives your browser for you
T-Mobile's incident response tool of choice may suprise you, or not...
Show Notes: https://securityweekly.com/psw-940

Artificial intelligence has quickly evolved from a productivity tool into an active participant in many organizations' daily operations. As organizations give AI greater autonomy within their environment, they're also granting them access to sensitive systems and data. That creates a new challenge for IT and security teams: How do you enable AI to assist productivity without compromising security?
Rob Allen, Chief Product Officer at ThreatLocker, joins Business Security Weekly to discuss how zero trust principles can prevent an AI breakout. Rather than relying solely on the AI tool's built-in safeguards, organizations can choose to enforce security policies using ThreatLocker. Rob will discuss how ThreatLocker can enforce AI boundaries through Allowlisting, Ringfencing™, Endpoint Firewall, and Web Content Control, with Community Policies that govern what agentic AI tools can run, do, access, and reach.
Segment resources: - https://www.threatlocker.com/blog/the-principle-of-least-privilege-for-ai-agents - https://www.threatlocker.com/blog/applying-threatlocker-to-agentic-ai-tools - https://www.threatlocker.com/blog/why-the-five-eyes-alliance-sees-zero-trust-as-the-best-defense-against-agentic-ai-threats
This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!
In the leadership and communications segment, 3 cybersecurity issues that should keep every CEO awake at night, You Don't Find Your Leadership Style. You Mentor Your Way Into It., Cybersecurity Starts With Communication – And We May Be Getting It Wrong, and more!
Show Notes: https://securityweekly.com/bsw-461

The Secret Word is Meow, Red Agent, GitHub, evoooo1bot, Hatman, DecryptAds, Copilot, Aaran Leyland, and More on the Security Weekly News.
Show Notes: https://securityweekly.com/swn-608

All sorts of cybersecurity disciplines are adopting agents to help humans save time and automate routine activities. Sai Kiran Uppu describes his work on creating a platform for agents to analyze external threat intel, examine internal systems, and present triage decisions to operators. This type of work is especially useful to orgs that deal with petabytes of data and thousands of systems. And, as Kiran notes, it's important to keep that scale from blowing up your budget or turning triage into a procession of false positives.
Ideally, this kind of threat intel that's paying attention to attack trends and searching internal systems for evidence of compromise also turns into proactive defenses. We talk about some of the ways to engage developers to improve security visibility into their services and harden their designs against common attacks.
After that discussion we're running two sponsored interviews from Black Hat.
AI Pentesting and the Future of Cybersecurity: Black Hat interview with Chris Wallis, Founder and CEO of Intruder
This segment discusses how AI addresses the long-standing gap between traditional pentesting and automated vulnerability scanning. Intruder CEO and founder Chris Wallis dives into the nuances of AI-enabled security and how these offerings will impact mid-market security teams.
Segment Resources:
https://www.intruder.io/platform/ai-pentesting
https://www.intruder.io/blog/ai-pentesting-the-depth-of-a-pentest-on-demand
https://www.intruder.io/blog/ai-web-app-pentesting-test-on-every-major-release
Intruder's continuous exposure management platform helps security, IT, and engineering teams stop breaches before they start. For more information about Intruder's products and services, please visit https://securityweekly.com/intruderbh.
How Menlo Security Is Securing AI Agents from Prompt Injection: Black Hat Interview with Ramin Farassat, Chief Product Officer of Menlo
Enterprises are deploying AI agents like Microsoft Copilot, Google Gemini, and Claude Code faster than they can secure them, and attackers are exploiting that gap through prompt injection. Hidden instructions get buried in web pages, files, and even images that a human would never notice but an AI agent reads and acts on. Menlo Security is building Menlo Agent Runtime Security (MARS) to close that gap, running every agent session in an isolated cloud that sanitizes content before an agent can act on it. Ramin Farassat, Menlo Security's Chief Product Officer, will discuss why the exposure lives in the connectors and integrations around the model rather than the model itself, and how security teams can put controls on the agent attack surface without blocking agentic AI outright.
Segment Resources:
https://www.menlosecurity.com/product/ai-agent-security
MARS is now available today, please visit https://securityweekly.com/menlobh
Show Notes: https://securityweekly.com/asw-396