Libsyn Directory

The Breached WiFi AI Ports... What? - PSW #939

Release Date: 08/13/2026

AI Takes Over? - Danny Akacki - PSW #948

Paul's Security Weekly (Audio)

In the security news this week: Convert this router into an SDR Ivanti straight to root Anthropic’s AI worm FUD A kernel exploit to fix downloads Supermarket refrigeration attacks 400 mystery Java vulnerabilities Authentication bypass Russia meets the data-center war Stop & Shop attacked Anthropic cuts eval agents AI incident reporting FortiBleed lives Anthropic offers scanning Pre-compromised phones FakeGit returns Teams deepfake detection Let’s Encrypt certificates get shorter GitLab ships another critical patch Engineer gets prison time for locking thousands of devices OpenAI...

Routers on Trial, AI Found More Bugs - PSW #947

Paul's Security Weekly (Audio)

In the security news this week: BPFDoor OpenSSH compresses a little too much AI can find bugs. Who gets them fixed? TP-Link and the courts Cisco NX-API ClingSTUN LineageOS, Android TV, and a Raspberry PI Dell’s updater has a privilege problem SonicWall SSRF U-Boot’s LogoFAIL like Exploit-DB isn’t dead MFA passes. The attacker still gets in. LakeShark and cool gadgets Kasa cameras and an exposed debug interface SharePoint hardening is back on the checklist Google pauses open-source bug bounty submissions NetScaler’s latest vulnerability needs a closer look Kiteworks tells customers to...

Hacking Without Boundaries - Michael Jenkins - PSW #946

Paul's Security Weekly (Audio)

First up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero Trust. Then in the security news: Compiling spreadsheets, because that's why Nvidia wants to put AI agents in timeout Citrix NetScaler gets exploited again, and again Spectre still refuses to die Your SBOM is incomplete? File notifications leak more than filenames ENIAC had cables instead of a BIOS Another Linux kernel root exploit lands Containers share a kernel ThinkNode M9 microSD card gets a virus notice Google analyst infiltrates a supply-chain gang Your phone...

AI Will Save Us, or Not? - PSW #945

Paul's Security Weekly (Audio)

In the security news this week: Build your own router, or just buy one What to patch first But maybe don't buy D-Link AI nearly starts a war Flock cameras lose their keys The AI slowdown won’t save bad security Opus at home, just slower Black Hat says fundamentals still work Hacker gadgets, and my top pick Gyazo screenshots Fake job interviews, real malware VINCE gets a new home Munich university gets disconnected LinkedIn fights the scraping machine SolarWinds hard-codes another bad idea Fake LastPass kills 145 security tools Colorado water gets its settings changed AI CEOs sell apocalypse...

AI hates CAPTCHAs - PSW #944

Paul's Security Weekly (Audio)

In the security news this week: UK government rolls out passkeys to 20 million users Phishing-resistant authentication and replay resistance Passkey adoption, device security, and user acceptance EU Cyber Resilience Act guidance, scope, and compliance CRA vulnerability disclosure and reporting requirements The real cost of cyberattacks and cybersecurity spending Cyber insurance and improving organizational security Nightmare Eclipse and the release of Windows zero-days Check Point VPN vulnerabilities and perimeter security GitLab security updates and shadow IT Discovering unmanaged GitLab...

It's More Secure When It's Disabled - PSW #943

Paul's Security Weekly (Audio)

In the security news this week: Microsoft patches all the things Commissary freezers enter cyberwar Fake AV, real Defender nap Rowhammer comes for the GPU BIOS updates are no longer optional CVSS is not a crystal ball Kworker, but make it malware FortiGate gets a post-exploitation RAT CERN goes Debian underground UEFI shells strike again Australia loses the plot, and phones Cisco routers become covert gateways MikroTik patches the takeover chain WeWorm wriggles through mobile The year of Linux television Browsers become backdoors Fake IT calls, real data theft CVE attribution gets weird...

Linux Threat Hunting - PSW #942

Paul's Security Weekly (Audio)

First up: a technical segment on Linux threat hunting. We'll start this series by covering the best places to look for IoCs on Linux systems and devices, starting with startup services and scheduled tasks. Then, in the security news this week: SonicWall zero-days, again AI finds a pile of Cisco bugs, and a root RCE Claude Code Auto Mode dangers BGP hijacks your unsigned software update California, Linux and age verification Free movies, complimentary malware Citrix puts Linux alongside Windows Signal's "secure" enclave An expired domain answers military phone calls MORE Cheap Android TV boxes...

Hacking All The Devices, with AI? - Rob Allen - PSW #941

Paul's Security Weekly (Audio)

Rob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access controls to limit what agents can access and do. This segment is sponsored by ThreatLocker. Visit to learn more about them! In the security news this week: Sixteen-year-old Linux LPEs still work Ubiquiti UniFi, patch it, also light on details If you remember magicJack, you too are old Slovakia doesn't trust its own speed cameras More homework on NIST's vulnerability database Your webcam, mic, and key light, all owned Printer moonlights as Minecraft server Zombie credit...

Rejoice In The Nostalgia - PSW #940

Paul's Security Weekly (Audio)

In the security news this week: Cursor opens your repo, the repo opens you If you want the good model I'm going to need to see your ID Flock's a Flocking mess Defender was supposed to be the chosen one Side stepping Secure boot - twice SonicWall: a LAMP stack in a fancy case Macs don't get viruses, part infinity Flipper One, but why not Nix? NetScaler is back in the room Borrowing phone's good reputation USB and how to make Windows download stuff A KVM with the expensive letters removed Five steps to stop the webcam creeps PlexTrac acquired NIST asks the internet to fix the NVD Poland's...

The Breached WiFi AI Ports... What? - PSW #939

Paul's Security Weekly (Audio)

In the security news this week: North Carolina ports and contingency plans Back to paper and pencils Midnight Blizzard compromises hotel Wi-Fi DNS strikes again Captive portals, stolen credentials, and nation-state scale Phishing-resistant MFA Goodbye SMS and voice authentication Cornflake RAT and Chaco Shell The NPM worm Hundreds of compromised packages AI lowers the barrier to mass exploitation Rethinking “secure enough” Back to basics: know what's on your network Get off my PCI lawn Visit for all the latest episodes! Show Notes:

More Episodes

In the security news this week:

North Carolina ports and contingency plans
Back to paper and pencils
Midnight Blizzard compromises hotel Wi-Fi
DNS strikes again
Captive portals, stolen credentials, and nation-state scale
Phishing-resistant MFA
Goodbye SMS and voice authentication
Cornflake RAT and Chaco Shell
The NPM worm
Hundreds of compromised packages
AI lowers the barrier to mass exploitation
Rethinking “secure enough”
Back to basics: know what's on your network
Get off my PCI lawn

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-939

TOPICS