Security Weekly Podcast Network (Video)

Latest Episodes:

SAML & Secrets, Serializing AI Models, OWASP ISTG, More Memory Safety - ASW #275 Mar 05, 2024

Show notes

A SilverSAML example similar to the GoldenSAML attack technique, more about serializing AI models for Hugging Face, OWASP releases 1.0 of the IoT Security Testing Guide, the White House releases more encouragement to move to memory-safe languages, and more!

Show Notes: https://securityweekly.com/asw-275

The Convergence of Security, Compliance, and Risk - Igor Volovich - BSW #340 Mar 04, 2024

Show notes

The SEC's new cyber reporting requirements are forcing organizations to rethink their compliance and risk programs. No longer can compliance and risk be static, point in time assessments. Instead they need to match the speed of security which is dynamic and real-time. Couple the difference in speeds with whistleblowers and attack groups reporting non-compliance with the new SEC rules and organizations find themselves in a regulatory nightmare.

Igor Volovich, VP of Compliance Strategy for Cyber Compliance at Qmulos, joins BSW to share his "Notes from the battlefield" on how automation is the only way to effectively converge security, risk, and compliance into a dynamic, real-time discipline.

Show Notes: https://securityweekly.com/bsw-340

Clueless pols, Lazarus, Ubiquity, UAMPQP, BlackCat, Airlines, Aaran Leyland and More - SWN #365 Mar 01, 2024

Show notes

Clueless pols, Lazarus, Ubiquity, UAMPQP, BlackCat, CryptoChameleon, Airlines, Aaran Leyland, and More on this edition of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-365

Funding goes quiet while M&A makes some noise! - ESW #351 Mar 01, 2024

Show notes

In this week's news segment, we discuss the lack of funding announcements, and the potential effect RSA could have on the timing of all sorts of press releases. We also discuss 1Password's potential future with its sizable customer base and the $620M it raised a few years back.

Some other topics we discuss:

NIST CSF 2.0
insider threats
Ivanti Pulse Secure's appliance software found to be running positively ancient software (11 year old Linux distro, 5-20+ year old libraries & components)
Nevada AG trying to get messaging decrypted for children, to "protect them"
Kelly Shortridge's response to CISA's secure development RFI
OpenAI's new GenAI video product, Sora and the potential impact it could have on cybersecurity
Instacart spews out crappy AI recipes and photos

Show Notes: https://securityweekly.com/esw-351

Hacktivism Unveiled: Insights into the Footprints of Hacktivists - Pascal Geenens - ESW #351 Mar 01, 2024

Show notes

Pascal Geenens from Radware joins us to discuss the latest research findings relating to hacktivists an other actors using volumetric and other network-based attacks. We'll discuss everything from the current state of DDoS attacks to use in the military and even the impact of cyberattacks on popular culture!

You can find the report Pascal mentions here, on Radware's website: https://www.radware.com/threat-analysis-report/

Show Notes: https://securityweekly.com/esw-351

Malware In Strange Places, Overheating, LockBit - PSW #818 Feb 29, 2024

Show notes

The latest attacks against WiFi, its illegal to break encryption, BLE Padlocks are as secure as you think, when command not found attacks, how did your vibrator get infected...with malware, the OT jackpot, the backdoor in a random CSRF library, it's a vulnerability but there is no CVE, car theft and Canada, Glubteba, and settings things on fire!

Show Notes: https://securityweekly.com/psw-818

Social Engineering: AI & Living Off The Land - Jayson E. Street - PSW #818 Feb 29, 2024

Show notes

Jayson joins us to discuss how he is using, and social engineering, AI to help with his security engagements. We also talk about the low-tech tools he employs to get the job done, some tech tools that are in play, and the most important part of any security testing: Talking to people, creating awareness, and great reporting.

Show Notes: https://securityweekly.com/psw-818

PrintListener, Post-Quantum Crypto in iMessage, Silent Sabotage, Rust Survey Results - ASW #274 Feb 27, 2024

Show notes

PrintListener recreates fingerprints, iMessage updates key handling for a PQ3 rating, Silent Sabotage shows supply chain subterfuge against AI models, 2023 Rust survey results, the ways genAI might help developers, and more!

Show Notes: https://securityweekly.com/asw-274

Avast, Hadoop & Druid Servers, HackerGPT, Apple, Crowdstrike, EFF Lockbit, & More - SWN #364 Feb 27, 2024

Show notes

This week in the Security Weekly News: Avast fines, HackerGPT innovations, DDoS threats, encryption updates, Josh Marpet, and more!

Show Notes: https://securityweekly.com/swn-364

Creating the Secure Pipeline Verification Standard - Farshad Abasi - ASW #274 Feb 27, 2024

Show notes

Farshad Abasi joins us again to talk about creating a new OWASP project, the Secure Pipeline Verification Standard. (Bonus points for not being a top ten list!) We talk about what it takes to pitch a new project and the problems that this new project is trying to solve. For this kind of project to be successful -- as in making a positive impact to how software is built -- it's important to not only identify the right audience, but craft guidance in a way that's understandable and achievable for that audience. This is also a chance to learn more about a project in its early days and the opportunities for participating in its development!

Segment resources

https://github.com/OWASP/www-project-secure-pipeline-verification-standard--spvs- (coming soon!)

Show Notes: https://securityweekly.com/asw-274

Our TOPPODCAST Picks

Follow Us

Stay Connected

Security Weekly Podcast Network (Video)

Related Podcasts

Links

Stay Connected