Security Weekly Podcast Network (Video)

Latest Episodes:

Managing the Minimization of a Container Attack Surface - Neil Carpenter - ASW #344 Aug 19, 2025

Show notes

A smaller attack surface should lead to a smaller list of CVEs to track, which in turn should lead to a smaller set of vulns that you should care about. But in practice, keeping something like a container image small has a lot of challenges in terms of what should be considered minimal. Neil Carpenter shares advice and anecdotes on what it takes to refine a container image and to change an org's expectations that every CVE needs to be fixed.

Show Notes: https://securityweekly.com/asw-344

Rethinking risk based vulnerability management, Black Hat expo insights, and the news - Snehal Antani - ESW #420 Aug 18, 2025

Show notes

Interview with Snehal Antani - Rethinking Risk-Based Vulnerability Management

Vulnerability management is broken. Organizations basically use math to turn a crappy list into a slightly less crappy list, and the hardest part of the job as a CIO is deciding what NOT to fix. There has to be a better way, and there is...

Segment Resources:

https://horizon3.ai/intelligence/blogs/vulnerability-management-is-broken-there-is-a-better-way/

This segment is sponsored by Horizon3.ai. Visit https://securityweekly.com/horizon3 to learn more about them!

Topic - Andy Ellis's Black Hat Expo Experience

Andy Ellis visited every booth at Black Hat. Every. Single. One. He wrote up what he learned and we discuss his findings!

https://www.duha.co/state-of-security-vendors-blackhat-2025/

News

Finally, in the enterprise security news,

Tons of handy new and free tools!
is cybersecurity really at the latter stages of consolidation?
new books
is our obsession with risk quantification hurting our credibility?
AI trends
is there an impending AI layoff-pocalypse?
we explain the kids' favorite new term: Clanker

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-420

Creepy chatbots, Fortinet, CISA, Agentic AI, FIDO, EDR, Aaran Leyland, and More... - SWN #503 Aug 15, 2025

Show notes

Creepy chatbots, Fortinet, CISA, Agentic AI, FIDO, EDR, Aaran Leyland, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-503

Hackberry PIs and Other Hacker Things - PSW #887 Aug 14, 2025

Show notes

We kick things off with a deep dive into the Hackberry PI and how to build one. Then in the security news:

Will Perplexity buy Chrome?
ESP32 Bus Pirates
Poisoned telemetry
Docker image security
Fully Open Source Quantum Sensors
Securing your car, Flippers, and show me the money
Bringing your printer and desktop to Starbucks
Paying a ransom? You need approval
AI: Shield or Spear?
No authentication? That's a problem
Transient Bugs: A realistic threat?
You can run Linux
And who still uses AOL dial-up?

Show Notes: https://securityweekly.com/psw-887

Defending Trust & Reputation as CISOs and Leaders Prepare Their AI Strategy - Santosh Nair - BSW #408 Aug 13, 2025

Show notes

As brands grow more digital, the threats grow more personal. Attackers impersonate executives, spin up fake websites, and leak sensitive data — hurting business reputations and breaking customer trust. How do you defend your organization's reputation and customers' trust?

Santosh Nair, Co-Founder and CTO at Styx Intelligence, joins Business Security Weekly to discuss how to defend trust and reputation in the age of AI. Santosh will cover both the company and executive challenges of defending against the latest AI attacks, including:

Impersonations and Deepfakes
Employee Scams
Financial Fraud

Segment Resources: - https://styxintel.com/blog/what-is-brand-protection/ - https://styxintel.com/blog/brand-impersonation-hurts-business/ - https://styxintel.com/blog/social-engineering-tactics/

In the leadership and communications section, Mind the overconfidence gap: CISOs and staff don't see eye to eye on security posture, Your AI Strategy Needs More Than a Single Leader, Avoid These Communication Breakdowns When Launching Strategic Initiatives, and more!

Show Notes: https://securityweekly.com/bsw-408

300 Baud, Buddy Hackett Nudes, Dell, badUSB, Exchange, Erlang/OTP, Josh Marpet... - SWN #502 Aug 12, 2025

Show notes

300 Baud, Buddy Hackett Nudes, Dell, badUSB, Exchange, Erlang/OTP, Josh Marpet, and more on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-502

The Future of Supply Chain Security - Janet Worthington - ASW #343 Aug 12, 2025

Show notes

Open source software is a massive contribution that provides everything from foundational frameworks to tiny single-purpose libraries. We walk through the dimensions of trust and provenance in the software supply chain with Janet Worthington. And we discuss how even with new code generated by LLMs and new terms like slopsquatting, a lot of the most effective solutions are old techniques.

Resources

Show Notes: https://securityweekly.com/asw-343

ESW at BlackHat and the weekly enterprise security news - ESW #419 Aug 11, 2025

Show notes

Topic Segment - What's new at Black Hat?

We're coming live from hacker summer camp 2025, so it seemed appropriate to share what we've seen and heard so far at this year's event. Adrian's on vacation, so this episode is featuring Jackie McGuire and Ayman Elsawah!

News Segment

Then, in the enterprise security news,

Tons of funding!
SentinelOne picks up an AI security company weeks after Palo Alto closes the Protect AI deal
Vendors shove AI agents into everything they've got
Why SOC analysts ignore your playbooks
NVIDA pinkie swears to China: no back doors!
ChatGPT was allowing shared chat sessions to be indexed and crawled by search engines like Google
Who is gonna secure all this vibe code?
Who is gonna triage all these hallucinated bug reports?
Perplexity and Cloudflare duke it out
When you try to scrub your shady past off the Internet, it might just make things worse.

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-419

SonicWall, Informants Exposed, Cisco Vishing, Perplexity, GPT‑5, Josh Marpet–SWN #501 - SWN #501 Aug 08, 2025

Show notes

Hello and welcome to security weekly news, episode 501, on Aug 8, 2025.

This week we have, SonicWall, Confidential Informants Exposed, Cisco Vishing, Perplexity vs robots.txt, Microsoft's Project Ire, Meta–Flo Jury Verdict, GPT‑5 Lands, TeaOnHer Data Leak, Josh Marpet, and more on the Security Weekly News..

Show Notes: https://securityweekly.com/swn-501

Devices Are Attacking - PSW #886 Aug 07, 2025

Show notes