Security Weekly Podcast Network (Video)

Airline Zoom Calls, School Picture Day, Windows, TP-Link, AgentCorruption, OSS Scanner, Josh Marpet, and More on this episode of the Security Weekly News.
Show Notes: https://securityweekly.com/swn-623

In the security news this week:
BPFDoor
OpenSSH compresses a little too much
AI can find bugs. Who gets them fixed?
TP-Link and the courts
Cisco NX-API
ClingSTUN
LineageOS, Android TV, and a Raspberry PI
Dell's updater has a privilege problem
SonicWall SSRF
U-Boot's LogoFAIL like
Exploit-DB isn't dead
MFA passes. The attacker still gets in.
LakeShark and cool gadgets
Kasa cameras and an exposed debug interface
SharePoint hardening is back on the checklist
Google pauses open-source bug bounty submissions
NetScaler's latest vulnerability needs a closer look
Kiteworks tells customers to shut it down
Exchange gets an unexpected security update
Do LLMs actually reason?
disagree on AI risk?
Anthropic, AI consciousness and the Vatican
Grok gets involved in foreign policy
WordPress malware that survives cleanup
Can spyware vendors stop their own tools?
When an AI chatbot conversation reaches the police
Open-weight AI models enter the cyber debate
AI agents take their attacks shopping
Show Notes: https://securityweekly.com/psw-947

Harvest-Now-Decrypt-Later attacks are already in motion. Unmanaged keys and outdated algorithms are active weaknesses within an organization's infrastructure. When quantum decryption arrives, the fallout will be immediate—compliance gaps, lost trust, and financial impact. How should organizations prepare?
Vijay Viswanathan, Vice President of Product at ISARA Corporation, joins Business Security Weekly to discuss quantum safe security. For most organizations, cryptography is hidden, therefore it's risk is hidden or unknown. Vijay will discuss how to prepare for Q day, including the steps that should be taken now:
Cryptographic discovery and posture analysis
Executive communication on cryptographic risks
Mitigation and migration strategies
Crypto agility for ongoing maintenance
Segment Resources:
https://isara.com/blog-posts/enterprise-buyers-guide-for-quantum-safe-security/?utmsource=podcast&utmmedium=segment-resource&utm_campaign=bsw
This segment is sponsored by ISARA Corporation. Visit https://securityweekly.com/isara to learn more about them!
In the leadership and communications segment, AI Governance Frameworks Won't Save You, but an Ethically Engaged Workforce Might, Cyber Skills Diminish Quicker than Organizations Can Build Readiness, The Mindsets Leaders Need as AI Accelerates the Pace of Business, and more!
Show Notes: https://securityweekly.com/bsw-468

Typing, textGrain, NetScaler again, Fortinet, Copilot, LibreOffice, Dots, Aaran Leyland, and More on the Security Weekly News.
Show Notes: https://securityweekly.com/swn-622

The principle of least privilege access is ubiquitous in recommendations, but perhaps too uncommon in practice. Alex Olivier explains how the AuthZen Working Group has been approaching new standards, guidelines, and practical deployment patterns to make it easier for orgs to establish more refined and correct access policies. It's a problem that predates LLMs, but also one that agents and MCPs made all the more acute. We talk about what intent means when trying to constrain agents' activities, what role LLMs have in policy decisions, and how LLMs can help create a much-needed inventory of access controls.
Segment Resources:
https://www.cerbos.dev/blog/dimmer-switch-not-a-kill-switch-rethinking-ai-agent-governance
https://www.cerbos.dev/blog/multi-hop-delegation-ai-agents
https://openid.net/wg/authzen/
Show Notes: https://securityweekly.com/asw-403