Paul's Security Weekly (Audio)

Latest Episodes:

IoT Hacks Galore - Kieran Human - PSW #895 Oct 09, 2025

Show notes

This week we kick things off with a special interview: Kieran Human from Threat Locker talks about EDR bypasses and other special projects. In the security news:

Hacking TVs
Flushable wipes are not the only problem
People just want to spy on their pets, except the devices can be hacked
Linux EDR is for the birds
What does my hat say
we love exploits and hashes
ESP32s in your router
RF signal generator on a PI Zero
Mic-E-Mouse and other things that will probably never happen, until they do
Hacking with money
Uninitialized variables and other things the compiler should catch
Breaking out of the shell
Hacking with sound, for real, not just another side channel attack
Bring back 2G
When the game engine gets hacked
Oracle 0-days

This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-895

AI: The new trigger word. Or is it Robots? - PSW #894 Oct 02, 2025

Show notes

In addition to some fun news, we get a Mary Ann Davidson as a surprise guest. We even get a great quote from her of "You're never going to have enough cybersecurity people to defend what was never built to be defensible.".

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-894

Broadcom, LastPass, SEO Poisoning, QR codes, H1B visas, Distributed Computing... - PSW #893 Sep 25, 2025

Show notes

Broadcom, LastPass, Brickstone, SEO Poisoning, QR codes, H1B visas, Distributed Computing, and More...

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-893

Safes, Hackers, and Web Servers - PSW #892 Sep 18, 2025

Show notes

This week's technical segment is all about the T-Lora Pager from Lilygo, and really cool Meshtastic device that can also be used for some hacking tasks! In the security news:

Your safe is not safe
Cisco ASA devices are under attack
VMScape
HybridPetya and UEFI attacks in the wild
Eveything is a Linux terminal
Hackers turns 30
Hosting websites on disposable vapes
NPM worms and token stealing
Attackers make mistakes too
AI podcasts

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-892

Americans Can't Hack It - PSW #891 Sep 11, 2025

Show notes

This week:

Americans Can't Hack It
Copy and paste to get malware
Pixel 5 web servers - because you can
How they got in and why security is hard
Vulnerability management is failing - is it dead yet?
Exploiting hacker tools
Bluetooth spending spree!
How to defend your car
IoT security solutions and other such lies
Exploiting IBM i (formerly AS/400)
Vibe coding vulnerabilities
Plex is hacked again
Bill's emoji
ICE spies on phones
Hackers be hackin' FreePBX

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-891

Lasagna DoS, AI Slop, Hacker Ultimatums - PSW #890 Sep 04, 2025

Show notes

In the secure news:

Automakers respond to Flipper Zero attacks
More on the unconfirmed Elastic EDR 0-Day
When Secure Boot does its job too well
Crazy authenitcation bypass
Hacker ultimatums
AI Slop
Impatient hackers
Linux ISOs are malware
Attackers love drivers
Hacking Amazon's Eero, the hard way
Exploits will continue until security improves
The Salesloft breach
TP-Link Zero Days
US DoD using Russian software?
The Lasagna DoS attack

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-890

Hackers Steal Your Car and Vulnerabilities - Rob Allen - PSW #889 Aug 28, 2025

Show notes

Rob Allen joins us to discuss the importance of security research teams, and some cool stuff they've worked on. Then, in the Security News:

Flipper Zero, unlocking cars: The saga continues
The one where they stole the vulnerabilities
ESP32 Bus Pirates
AI will weaponize everything, maybe
What are in-the-wild exploits?
Docker and security boundaries, and other such lies
AI-powered ransomeware
BadCAM, BadUSB, and novel defenses
5G sniffers
Jeff breaks down all the breach reports
AI in your browser is a bad idea
And How to rob a hotel - a nod to the way hacking used to be

This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-889

What We've Learned from LockBit and Black Basta Leaks (and News) - Ian Gray - PSW #888 Aug 21, 2025

Show notes

This segment is sponsored by Flashpoint. Visit https://securityweekly.com/flashpoint to learn more about them!

Recent leaks tied to LockBit and Black Basta have exposed the inner workings of two of the most notorious ransomware groups—revealing their tactics, negotiation strategies, and operational infrastructure. For defenders, this rare window into adversary behavior offers critical intelligence to strengthen incident response and prevention strategies. In this interview, we'll break down what these leaks reveal and how security teams can use this intelligence to proactively harden their defenses, including:

Key takeaways from the LockBit and Black Basta leaks—and what they confirm about ransomware operations
How leaked playbooks, chats, and toolkits can inform detection and response
Practical steps to defend against modern ransomware tactics in 2025

In the security news:

Practical exploit code
Old vulnerabilities, new attackers
AI and web scraping - the battle continues
0-Days: You gotta prove it
WinRAR 0-Day
LLM patch diffing
$20 million bug bounty
Your APT is showing
Hacking from the routers
Its that easy eh?
NIST guidance on AI
Words have meaning
Developers knowingly push vulnerable code
My Hackberry PI post is live: https://eclypsium.com/blog/build-the-ultimate-cyberdeck-hackberry-pi/