loader from loading.io

Ransomware in your CPU - PSW #874

Paul's Security Weekly (Audio)

Release Date: 05/15/2025

Going Around EDR - PSW #900 show art Going Around EDR - PSW #900

Paul's Security Weekly (Audio)

This week: Minecraft on your lightbulb Sonicwall breached, who's next? Ditch Android, install Linux Hacking your face Thermostat freedom Pen test fails HackRF hacking times 2 Going around EDR Hackers in your printer Chinese data breach NFC relays and PCI Constructive construction hacks FlipperZero firmware update ICS, PLCs, and attacks Bayesian Swiss Cheese, taste good? Do you want to hack back? Keeping secrets Enforcing CMMC OWASP top ten gets a make over Android Spyware makes a LANDFALL Gemini's deep research into your documents Slopguard and AI datacenters in space! Visit for all the...

info_outline
Turning To The Darkside & AI Cyberslop - PSW #899 show art Turning To The Darkside & AI Cyberslop - PSW #899

Paul's Security Weekly (Audio)

This week: Reversing keyboard firmware Ghost networks Invasion of the face changers Ghost tapping and whole lot of FUD AI doesn't code securely, but Aardvark can secure code De-Googling Thermostats Dodgy Android TV boxes can run Debian HackRF vs. Honda Cyberslop AI paper Turning to the darkside Poisoning the watering hole Nagios vulnerabilities VPNs are a target Visit for all the latest episodes! Show Notes:

info_outline
Cybersecurity Is Dead - PSW #898 show art Cybersecurity Is Dead - PSW #898

Paul's Security Weekly (Audio)

In the security news this week: Cybersecurity is dead, and AI killed it Exploiting the patching system Apple makes it easier for spyware Who is patching Cisco ASA? Shove that DMCA somewhere HTTPS - a requirement Russia wants to own all the exploits Abandonware challenges Reversing at its hardest with Lua Hacking team is back, and leetspeak malware When you forget to authenticate your API Jamming with cool tech GoSpoof and After 35 Years, a Solution to the CIA’s Kryptos Puzzle Has Been Found! Visit for all the latest episodes! Show Notes:

info_outline
Its Always DNS - PSW #897 show art Its Always DNS - PSW #897

Paul's Security Weekly (Audio)

In the security news: When in doubt, blame DNS, you're almost always correct How to Make Windows 11 great, or at least suck less CSRF is the least of your problems Shady exploits Linux security table stakes (not steaks) The pill camera Give AI access to your UART Security products that actually try to be secure? Firmware vulnerabilities, lots of them Teams is spying on you More details on PolarEdge VSCode, marketplaces, and developers at risk Cisco SNMP flaw used to deploy malware The 90's called, they want their exploits back This segment is sponsored by ThreatLocker. Visit to learn more...

info_outline
AI, EDR, and Hacking Things - PSW #896 show art AI, EDR, and Hacking Things - PSW #896

Paul's Security Weekly (Audio)

First up is a technical segment on UEFI shells: determining if they contain dangerous functionality that allows attackers to bypass Secure Boot. Then in the security news: Your vulnerability scanner is your weakest link Scams that almost got me The state of EDR is not good You don't need to do that on a phone or Raspberry PI Hash cracking and exploits Revisiting LG WebOS Hardening Docker images Hacking Moxa NPort Shoddy academic research The original sin of computing Bodycam hacking A new OS for ESP32 The AI bubble is going to burt Mobile VPNs are not always secure Visit for all the latest...

info_outline
IoT Hacks Galore - Kieran Human - PSW #895 show art IoT Hacks Galore - Kieran Human - PSW #895

Paul's Security Weekly (Audio)

This week we kick things off with a special interview: Kieran Human from Threat Locker talks about EDR bypasses and other special projects. In the security news: Hacking TVs Flushable wipes are not the only problem People just want to spy on their pets, except the devices can be hacked Linux EDR is for the birds What does my hat say we love exploits and hashes ESP32s in your router RF signal generator on a PI Zero Mic-E-Mouse and other things that will probably never happen, until they do Hacking with money Uninitialized variables and other things the compiler should catch Breaking out of the...

info_outline
AI: The new trigger word. Or is it Robots? - PSW #894 show art AI: The new trigger word. Or is it Robots? - PSW #894

Paul's Security Weekly (Audio)

In addition to some fun news, we get a Mary Ann Davidson as a surprise guest. We even get a great quote from her of "You're never going to have enough cybersecurity people to defend what was never built to be defensible.". Visit for all the latest episodes! Show Notes:

info_outline
Broadcom, LastPass, SEO Poisoning, QR codes, H1B visas, Distributed Computing... - PSW #893 show art Broadcom, LastPass, SEO Poisoning, QR codes, H1B visas, Distributed Computing... - PSW #893

Paul's Security Weekly (Audio)

Broadcom, LastPass, Brickstone, SEO Poisoning, QR codes, H1B visas, Distributed Computing, and More... Visit for all the latest episodes! Show Notes:

info_outline
Safes, Hackers, and Web Servers - PSW #892 show art Safes, Hackers, and Web Servers - PSW #892

Paul's Security Weekly (Audio)

This week's technical segment is all about the T-Lora Pager from Lilygo, and really cool Meshtastic device that can also be used for some hacking tasks! In the security news: Your safe is not safe Cisco ASA devices are under attack VMScape HybridPetya and UEFI attacks in the wild Eveything is a Linux terminal Hackers turns 30 Hosting websites on disposable vapes NPM worms and token stealing Attackers make mistakes too AI podcasts Visit for all the latest episodes! Show Notes:

info_outline
Americans Can't Hack It - PSW #891 show art Americans Can't Hack It - PSW #891

Paul's Security Weekly (Audio)

This week: Americans Can't Hack It Copy and paste to get malware Pixel 5 web servers - because you can How they got in and why security is hard Vulnerability management is failing - is it dead yet? Exploiting hacker tools Bluetooth spending spree! How to defend your car IoT security solutions and other such lies Exploiting IBM i (formerly AS/400) Vibe coding vulnerabilities Plex is hacked again Bill's emoji ICE spies on phones Hackers be hackin' FreePBX Visit for all the latest episodes! Show Notes:

info_outline
 
More Episodes

This week in the security news:

  • Android catches up to iOS with its own lockdown mode
  • Just in case, there is a new CVE foundation
  • Branch privilege injection attacks
  • My screen is vulnerable
  • The return of embedded devices to take over the world - 15 years later
  • Attackers are going after MagicINFO
  • Hacking Starlink
  • Mitel SIP phones can be hacked
  • Reversing with Hopper
  • Supercharge your Ghidra with AI
  • Pretending to be an anti-virus to bypass anti-virus
  • macOS RCE - perfect colors
  • End of life routers are a hackers dream, and how info sharing sucks
  • Ransomware in your CPU
  • Disable ASUS DriverHub
  • Age verification and privacy concerns

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-874