Security Weekly Podcast Network (Video)

Klingons, Stop and Shop, OvHCloud, Microsoft, Plex2Shell, ReactOS, Aaran Leyland, and More on the Security Weekly News.
Show Notes: https://securityweekly.com/swn-626

The OWAS Mobile Application Security (MAS) project recently released an updated version of its guidance, with excellent advice organized into common weaknesses, a verification standard for devs (MASVS), and a testing guide (MASTG). Ryan Lloyd and Jan Seredynski from Guardsquare dive into the project to talk about how it's been updated, how orgs can use it, and the challenges orgs face in managing their mobile frameworks and environments. We also cover how agents and LLMs are impacting mobile security and what future iterations of the MAS project might include for securing mobile apps interacting with LLMs or being written by LLMs. Finally, we share practical ways for developers to get involved as OWASP contributors and advocates.
Segment Resources:
https://mas.owasp.org
https://mas.owasp.org/MASWE/
https://hubs.ly/Q04ykvgm0
This segment is sponsored by Guardsquare. Visit https://securityweekly.com/guardsquare to learn more!
Show Notes: https://securityweekly.com/asw-405

Interview with Michael Jenkins from ThreatLocker
Securing AI on the Endpoint - Zero Trust or Bust
Michael joins us for the first time to discuss strategies for securing the latest evolution of AI: local endpoint-based AI agents. Tools like Claude Code, OpenAI Codex, and Google AntiGravity give employees the power to build any software or workflow they can imagine, but what is the risk impact? These models aren't shy about adopting and downloading libraries, tools, and untrusted software to fulfill the goals they've been given.
We explore how execution control and ringfencing can add some sanity and security to the process.
This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!
Topic Segment: Anthropic Dreams of AI Replicants
Of all the things AI labs could be researching or cooking up, I wouldn't have guessed AI worms distributing inference across smart TVs would be on the list, but here we are. Adrian, Tyler, and Ayman mull over this strange research.
It is too loose to be an academic paper, but maybe should have been?
Is really a pressing AI risk we should be worried about right now?
Why did Anthropic choose to focus on smart TVs and not more powerful IoT devices?
Weekly Enterprise News
Finally, in the enterprise security news,
we discuss the vibes
certified organic books
don't mess with criminals
the history of ShinyHunters
building strategies on the wrong lessons
crypto wallet supply chain drama
Hot refrigerators
Reddit is great for breach tracking
Microsoft patch Tuesday is on track to hit 12,000 patches by next April
All that and more, on this episode of Enterprise Security Weekly.
Show Notes: https://securityweekly.com/esw-481

Mr. Sparkle, Burger King, Pwnscape, Linux, Cisco, GitHub, Microsoft, Josh Marpet, and More on this episode of the Security Weekly News.
Show Notes: https://securityweekly.com/swn-625

In the security news this week:
Convert this router into an SDR
Ivanti straight to root
Anthropic's AI worm FUD
A kernel exploit to fix downloads
Supermarket refrigeration attacks
400 mystery Java vulnerabilities
Authentication bypass
Russia meets the data-center war
Stop & Shop attacked
Anthropic cuts eval agents
AI incident reporting
FortiBleed lives
Anthropic offers scanning
Pre-compromised phones
FakeGit returns
Teams deepfake detection
Let's Encrypt certificates get shorter
GitLab ships another critical patch
Engineer gets prison time for locking thousands of devices
OpenAI employee accused of planting a hidden recorder
Show Notes: https://securityweekly.com/psw-948