Security Weekly Podcast Network (Audio)

Latest Episodes:

Existential Dread, MCP, Cloudflare, ESXI, QR Codes, Salt Typhoon, Aaran Leyland... - SWN #495 Jul 18, 2025

Show notes

Existential Dread and Seawater, MCP, Cloudflare, ESxi, QR Codes, Salt Typhoon, Aaran Leyland, and More on this episode of the Security Weekly News.

Visit https://www.securityweekly.com/swn for all the latest episodes!

Show Notes: https://securityweekly.com/swn-495

Hackers On A Train - PSW #883 Jul 17, 2025

Show notes

In the security news:

The train is leaving the station, or is it?
The hypervisor will protect you, maybe
The best thing about Flippers are the clones
Also, the Flipper Zero as an interrogation tool
Threats are commercial and open-source
Who is still down with FTP?
AI bug hunters
Firmware for Russian drones
Merging Android and ChromOS
Protecting your assets with CVSS?
Patch Citrixbleed 2
Rowhammer comes to NVIDIA GPUs
I hear Microsoft hires Chinese spies
Gigabyte motherboards and UEFI vulnerabilities
McDonald's AI hiring bot: you want some PII with that?

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-883

Minimize SAP Migration Challenges, Cybersecurity Maturity, and Radical Transparency - Christopher Carter - BSW #404 Jul 16, 2025

Show notes

Are you running SAP? The clock is ticking... Standard maintenance end-of-life is set for the end of 2027. Migration to S/4HANA must be completed by then (or 2030 if you buy into SAP’s special three-year reprieve). While that may appear to be enough time, companies currently working toward an S/4HANA transition are finding the journey challenging, and that's not including the security challenges.

Chris Carter, CEO at Approyo, joins Business Security Weekly to discuss your SAP options, including:

ERP Strategy: Stay with SAP or migrate to other solutions?
S/4HANA Architecture: All cloud or cloud/on-premise?
Security Challenges: Cloud vs. on-premise
SAP Migration: Recommendations for success

In the leadership and communications section, Where cybersecurity maturity meets confidence in C-suite and board leadership, Has CISO become the least desirable role in business?, How Radical Transparency Is Revolutionizing Leadership, and more!

Visit https://www.securityweekly.com/bsw for all the latest episodes!

Show Notes: https://securityweekly.com/bsw-404

AI meltdowns, Gigabyte, NCSC, Rowhammer, Gravity Form, Grok, AsyncRat, Josh Marpet... - SWN #494 Jul 15, 2025

Show notes

AI meltdowns, Gigabyte, NCSC, Rowhammer, Gravity Form, Grok, AsyncRat, Josh Marpet and more on the Security Weekly News.

Visit https://www.securityweekly.com/swn for all the latest episodes!

Show Notes: https://securityweekly.com/swn-494

Getting Started with Security Basics on the Way to Finding a Specialization - ASW #339 Jul 15, 2025

Show notes

What are some appsec basics? There's no monolithic appsec role. Broadly speaking, appsec tends to branch into engineering or compliance paths, each with different areas of focus despite having shared vocabularies and the (hopefully!) shared goal of protecting software, data, and users.

The better question is, "What do you want to secure?"

We discuss the Cybersecurity Skills Framework put together by the OpenSSF and the Linux Foundation and how you might prepare for one of its job families. The important basics aren't about memorizing lists or technical details, but demonstrating experience in working with technologies, understanding how they can fail, and being able to express concerns, recommendations, and curiosity about their security properties.

Resources:

Visit https://www.securityweekly.com/asw for all the latest episodes!

Show Notes: https://securityweekly.com/asw-339

Monzy Merza, How Much AI is Too Much, and the Weekly News - Monzy Merza - ESW #415 Jul 14, 2025

Show notes

Segment 1: Interview with Monzy Merza - There is a Right and Wrong Way to use AI in the SOC

In the rush to score AI funding dollars, a lot of startups build a basic wrapper around existing generative AI services like those offered by OpenAI and Anthropic. As a result, these services are expensive, and don't satisfy many security operations teams' privacy requirements.

This is just the tip of the iceberg when discussing the challenges of using AI to aid the SOC. In this interview, we'll dive into the challenge of finding security vendors that care about security, the need for transparency in products, the evolving shared responsibility model, and other topics related to solving security operations challenges.

Segment 2: Topic Segment - How much AI is too much AI?

In the past few weeks, I've talked to several startup founders who are running into buyers that aren’t allowed to purchase their products, even though they want them and prefer them over the competition. Why? No AI and they’re not allowed to buy.

Segment 3: News Segment

Finally, in the enterprise security news,

We cover the latest funding
The Trustwave saga comes to a positive end
Android 16 could help you evade law enforcement
Microsoft is kicking 3rd party AV out of the kernel
Giving AI some personality (and honesty)
Log4shell canaries reveal password weirdness
Denmark gives citizens copyright to their own faces to fight AI
McDonald’s has an AI whoopsie
Ingram Micro has a ransomware whoopsie
Drama in the trailer lock industry

All that and more, on this episode of Enterprise Security Weekly.

Visit https://www.securityweekly.com/esw for all the latest episodes!

Show Notes: https://securityweekly.com/esw-415

Tapjacking, ZuChe, PerfektBlue, McHacking, OT in the IT, Add Ons, Josh Marpet... - SWN #493 Jul 11, 2025

Show notes

Tapjacking, ZuChe, PerfektBlue, McHacking, OT in the IT, Add Ons, Josh Marpet, and More on this episode of the Security Weekly News.

Visit https://www.securityweekly.com/swn for all the latest episodes!

Show Notes: https://securityweekly.com/swn-493

Citrixbleed 2, Hardware Hacking, and Failed Bans - PSW #882 Jul 10, 2025

Show notes

This week in the security news:

Citrixbleed 2 and so many failures
Ruckus leads the way on how not to handle vulnerabilities
When you have no egress
Applocker bypass
So you bought earbuds from TikTok
More gadgets and the crazy radio
Cheap drones and android apps
Best Mario Kart controller ever
VSCode: You're forked
Bluetooth earbuds and vulnerabilities
Do you remember Sound blaster cards?
NFC passport chips
Whack-a-disk

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-882

SolarWinds Settlement, Upgrade Your Leadership Instincts to Build Your Legacy - BSW #403 Jul 09, 2025

Show notes

SEC settles with SolarWinds. We react!

In the leadership and communications section, The Skills and Habits Aspiring CEOs Need to Build, Why People Really Quit — And How Great Managers Make Them Want to Stay, The Small Actions That Become Your Legacy, and more!

Visit https://www.securityweekly.com/bsw for all the latest episodes!

Show Notes: https://securityweekly.com/bsw-403

Spying on your kids, Bank Robberies, Qantas, LOTL, sudo, Hunters, Aaran Leyland... - SWN #492 Jul 08, 2025

Show notes

Spying on your kids, Bank Robberies, Qantas, LOTL, sudo, Hunters, Aaran Leyland, and more on the Security Weekly News.

Visit https://www.securityweekly.com/swn for all the latest episodes!

Show Notes: https://securityweekly.com/swn-492