Security Weekly Podcast Network (Video)

Latest Episodes:

Unforgivable Vulns, DeepSeek iOS App Security Flaws, Memory Safety Standards - ASW #317 Feb 11, 2025

Show notes

Identifying and eradicating unforgivable vulns, an unforgivable flaw (and a few others) in DeepSeek's iOS app, academics and industry looking to standardize principles and practices for memory safety, and more!

Show Notes: https://securityweekly.com/asw-317

Code Scanning That Works With Your Code - Scott Norberg - ASW #317 Feb 11, 2025

Show notes

Code scanning is one of the oldest appsec practices. In many cases, simple grep patterns and some fancy regular expressions are enough to find many of the obvious software mistakes. Scott Norberg shares his experience with encountering code scanners that didn't find the .NET vuln classes he needed to find and why that led him to creating a scanner from scratch. We talk about some challenges in testing tools, making smart investments in engineering time, and why working with .NET's compiler made his decisions easier.

Segment Resources:

-https://github.com/ScottNorberg-NCG/CodeSheriff.NET

Show Notes: https://securityweekly.com/asw-317

Breach details need to be transparent and kids need cybersecurity education - ESW #393 Feb 10, 2025

Show notes

This week, in the enterprise security news,

Semgrep raises a lotta money
CYE acquires Solvo
Sophos completes the Secureworks acquisition
SailPoint prepares for IPO
Summarizing the 2024 cybersecurity market
Lawyers that specialize in keeping breach details secret
Scientists torture AI
Make sure to offboard your S3 buckets
extinguish fires with bass

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-393

Inside look and lessons from a Recent APT Attack on a U.S. Aerospace Company - John Dwyer - ESW #393 Feb 10, 2025

Show notes

Listeners of the show are probably aware (possibly painfully aware) that I spend a lot of time analyzing breaches to understand how failures occurred. Every breach story contains lessons organizations can learn from to avoid suffering the same fate. A few details make today's breach story particularly interesting:

It was a Chinese APT
Maybe the B or C team? They seemed to be having a hard time
Their target was a blind spot for both the defender AND the attacker

Segment Resources:

Show Notes: https://securityweekly.com/esw-393

The groundbreaking technology addressing employment scams and deepfakes - Aaron Painter - ESW #393 Feb 09, 2025

Show notes

Spoiler: it's probably in your pocket or sitting on the table in front of you, right now!

Modern smartphones are conveniently well-suited for identity verification. They have microphones, cameras, depth sensors, and fingerprint readers in some cases. With face scanning quickly becoming the de facto technology used for identity verification, it was a no-brainer for Nametag to build a solution around mobile devices to address employment scams.

Segment Resources:

Show Notes: https://securityweekly.com/esw-393

AI Cheese, CISA, Scaryware, Kimsuky Returns, Backups, Encryption, Jason Wood... - SWN #449 Feb 07, 2025

Show notes

AI Cheese, CISA, Scaryware, Kimsuky Returns, Backups, Encryption, Jason Wood, and More, on this edition of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-449

Deepseek, AMD, and Forgotten Buckets - PSW #860 Feb 06, 2025

Show notes

Deepseek troubles, AI models explained, AMD CPU microcode signature validation, what happens when you leave an AWS S3 bucket laying around, 3D printing tips, and the malware that never was on Ethernet to USB adapters.

Show Notes: https://securityweekly.com/psw-860

C-Suite Cybersecurity Responsibilities, Humble Leaders, and Effective Communication - BSW #381 Feb 05, 2025

Show notes

In the leadership and communications segment, Cybersecurity Responsibilities Across the C-Suite: A Breakdown for Every Executive, Humble Leaders Inspire Others to Step Up, Effective Communication in the Workplace, and more!

Show Notes: https://securityweekly.com/bsw-381

Enforcement of the Digital Operational Resilience Act (DORA) - Madelein van der Hout - BSW #381 Feb 05, 2025

Show notes

From online banking to mobile payments, nearly every aspect of our financial lives relies on digital systems. This reliance has brought incredible convenience, but it also means that any disruption — whether due to cyberattacks, system failures, or operational incidents— can have severe consequences. The Digital Operational Resilience Act (DORA) provides the framework to ensure that financial entities have robust measures to withstand and recover from disruptions. By addressing vulnerabilities in this highly digitized ecosystem, DORA not only protects financial institutions but also safeguards the stability and well-being of the European society as a whole.

Madelein van der Hout, Senior Analyst at Forrester, joins Business Security Weekly to discuss why DORA is important, how prepared financial institutions are, the consequences of failing to comply, and the impact these regulations will have outside of the EU, including fines up to 2% of global annual turnover or €10 million—whichever is higher.

Show Notes: https://securityweekly.com/bsw-381

DeepSeek, Nicolas Cage, OpenAI, Hackers, Ransomware, Canada, Joshua Marpet and More - SWN #448 Feb 04, 2025

Show notes

Today, we've got: DeepSeek, Nicolas Cage, OpenAI, Hackers, Ransomware, Canada, Joshua Marpet and More, on this edition of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-448