Security Weekly Podcast Network (Video)

Interview with Aqsa Taylor
Exaforce's Chief Security Evangelist, Aqsa, joins us to discuss the current state of the AI SOC and why it covers so much more than it did over 2 years ago, when our podcast first started covering this market. Exaforce also recently released AI Security and its ExaGo mobile app - we're very excited about the possibility of analyzing incidents at the grocery store!
This segment is sponsored by Exaforce. Visit https://securityweekly.com/exaforce to learn more about them!
Topic Segment - Regulating AI
The AI industry's sandbox escapes have had a big impact on everyone and unsurprisingly, there's a bill proposing to ban some AI products and pause the development of others.
It seems that, increasingly, as pro-AI and anti-AI groups become more polarized and divided, you could start an entire podcast that does nothing but fact-check both sides. We're an emotional species and it seems the more heated debate gets, the more folks on both sides are willing to straight-up fabricate things to help argue their points.
Today's focus is this YouTube video: https://www.youtube.com/watch?v=WXsTCJl7sU4
It's the most on-the-nose type of propaganda - straight up claiming the government is going to break into your house and take your GPUs and LLMs. Could the bill proposed by Bernie Sanders and Greg Casar be characterized as extreme? Sure, but it's nowhere near as extreme as the title of the video, "They're Banning AI Servers at Home" suggests.
The hardest things to swallow about the video:
it characterizes Bernie Sanders as "the government", as if he's representative of most of the US government rather than an outlier that has little to no chance to get a bill like this passed
it never mentions the fact that the bill establishes a model cutoff, measured in training effort (10^25 flops, which doesn't include the open weight models you're using at home, unless you have an 8x cluster of DGX Sparks - $40k+ worth of AI compute)
Enterprise News
Finally, in the enterprise security news,
we check the vibes
massive, connected funding
NVIDIA OpenShell
cars are still hackable
a ransomware arrest turned into a murder investigation
AI welfare
All that and more, on this episode of Enterprise Security Weekly.
Show Notes: https://securityweekly.com/esw-479

RAM, Muse, CloudSyncD, Springsteen, Who Owns Your Software?, Persistence, Michael Jenkins, CTO of ThreatLocker, and More on this episode of the Security Weekly News.
Segment Resources: https://www.bleepingcomputer.com/news/security/malicious-ai-agents-steal-600k-credit-cards-infect-100-plus-sites-with-skimmers/
This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

First up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero Trust. Then in the security news:
Compiling spreadsheets, because that's why
Nvidia wants to put AI agents in timeout
Citrix NetScaler gets exploited again, and again
Spectre still refuses to die
Your SBOM is incomplete?
File notifications leak more than filenames
ENIAC had cables instead of a BIOS
Another Linux kernel root exploit lands
Containers share a kernel
ThinkNode M9 microSD card gets a virus notice
Google analyst infiltrates a supply-chain gang
Your phone speaker can transmit radio
Reconstructing firmware with a logic analyzer
Robot dogs learn cybersecurity
CISA warns about third-party ICS integrators
Dutch police arrest a ShinyHunters suspect
A soldier goes from telecom hacking to prison
AI companies discover their agents have opinions
Cloudflare containers accidentally share leftovers
OT networks are still mostly not isolated
Florida wants to pause ChatGPT
The interview segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!
Show Notes: https://securityweekly.com/psw-946

At a time when the traditional approach to enterprise vulnerability management is no longer effective, security leaders are turning to AI agents to help identify, validate, and contain zero-day threats. Learn how Google Cloud Security is building autonomous detection engineering to help your organization close the remediation gap, establish compensating controls to protect business assets, and outpace AI-powered adversaries.
Segment Resources:
https://services.google.com/fh/files/misc/monitoringandstoppingaipowered_threats.pdf https://cloud.google.com/blog/products/identity-security/detecting-and-containing-powered-threats-with-google-security-operations-agents?e=48754805
This segment is sponsored by Google Cloud. Visit https://securityweekly.com/googlecloud to learn more about them!
In the leadership and communications segment, CISOs can no longer ignore the nation-state threat, AI Policies Won't Save You If You Can't See The Risk, The Invisible Work Draining Your Best Employees , and more!
Show Notes: https://securityweekly.com/bsw-467

Venus in Furs, Money Laundering, Agentic AI Hijinx, MCP, Thunderbastard, Aaran Leyland, and More on the Security Weekly News.
Show Notes: https://securityweekly.com/swn-620