Security Weekly Podcast Network (Video)

Latest Episodes:

Opengrep & Semgrep, Hacking Subarus, Hacking Synths, Stealing Cookies, and RANsacked - ASW #315 Jan 28, 2025

Show notes

An open source security project forks in response to license changes (and an echo of how we've been here before), car hacking via spectacularly insecure web apps, hacking a synth via spectacularly cool MIDI messages, cookie parsing problems, the RANsacked paper of 100+ LTE/5G vulns found from fuzzing, and more!

Show Notes: https://securityweekly.com/asw-315

Security the AI SDLC - Niv Braun - ASW #315 Jan 28, 2025

Show notes

A lot of AI security boils down to the boring, but important, software security topics that appsec teams have been dealing with for decades. Niv Braun explains the distinctions between AI-related and AI-specific security as we avoid the FUD and hype of genAI to figure out where appsec teams can invest their time. He notes that data scientists have been working with ML and sensitive data sets for a long time, and it's good to have more scrutiny on what controls should be present to protect that data.

This segment is sponsored by Noma Security. Visit https://securityweekly.com/noma to learn more about them!

Show Notes: https://securityweekly.com/asw-315

IPOs are back, AI jumps the shark, NGFWs have some serious security issues - ESW #391 Jan 27, 2025

Show notes

In this week's enterprise security news,

the first cybersecurity IPO in 3.5 years!
new companies
new tools
the fate of CISA and the cyber safety review board
things we learned about AI in 2024
is the humanless SOC possible?
NGFWs have some surprising vulnerabilities
what did generative music sound like in 1996?

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-391

Guiding an Open Source-Based Business Through Troubled Times - Francis Dinha - ESW #391 Jan 27, 2025

Show notes

This interview is a bit different from our norm. We talk to the founder and CEO of OpenVPN about what it is like to operate a business based on open source, particularly through trying times like the recent pandemic. How do you compete when your competitors are free to build products using your software and IP? It seems like an oxymoron, but an open source-based business actually has some significant advantages over the closed source commercial approach.

Show Notes: https://securityweekly.com/esw-391

AI Red Teaming Comes to Bug Bounties - Michiel Prins - ESW #391 Jan 26, 2025

Show notes

HackerOne's co-founder, Michiel Prins walks us through the latest new offensive security service: AI red teaming.

At the same time enterprises are globally trying to figure out how to QA and red team generative AI models like LLMs, early adopters are challenged to scale these tests. Crowdsourced bug bounty platforms are a natural place to turn for assistance with scaling this work, though, as we'll discuss on this episode, it is unlike anything bug hunters have ever tackled before.

Segment Resources:

Show Notes: https://securityweekly.com/esw-391

Cursive Funk, Microsoft, Ivanti, Sonic Wall, Exchange, PowerSchool, Aaran Leyland... - SWN #445 Jan 24, 2025

Show notes

Cursive Funk, Microsoft, Ivanti, Sonic Wall, Exchange, PowerSchool, Aaran Leyland, and More, on this edition of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-445

Vulnerability Prioritization In The Real World - PSW #858 Jan 23, 2025

Show notes

Andy Jaquith joins us to discuss how to prioritize vulnerabilities and remmediation in the real-world, including asset management and more! In the security news: ESP32s in the wild and security, Google oAuth flaw, DDoS targets, Ban on auto components, Bambu firmware updates, Silk Road founder is free, one last cybersecurity executive order, US Treasury hack update, Mitre launches a new program to deal with naming things, and educational content on Pornhub? (not what you think, its SFW!)

Show Notes: https://securityweekly.com/psw-858

The Future Of The CISO - Part 2 - Jess Burn, Jeff Pollard - BSW #379 Jan 22, 2025

Show notes

Jeff Pollard, Vice-President, Principal Analyst on the Security and Risk Team, and Jess Burn, Principal Analyst, both from Forrester Research join Business Security Weekly to discuss the second part of The Future Of The CISO report. What if you don't like the future of the CISO role and want to get out? The report also provides guidance on what comes after the CISO role, as leaders contemplate the next step in their career. If you think it's a board role, you better know what skills are needed, as cybersecurity by itself is not enough. Join in for part 2.

Show Notes: https://securityweekly.com/bsw-379

The Future Of The CISO - Part 1 - Jess Burn, Jeff Pollard - BSW #379 Jan 22, 2025

Show notes

Becoming a CISO is a lofty goal for many security and risk pros, and the role brings new sets of challenges. CISOs who accept the wrong opportunities will be forced to conform, rather than excel, and take on outsized liability for the scope of responsibilities.

Jeff Pollard, Vice-President, Principal Analyst on the Security and Risk Team, and Jess Burn, Principal Analyst, both from Forrester Research join Business Security Weekly to discuss The Future Of The CISO report. This report outlines the six most common types of CISOs based on Forrester Research and interactions with security leaders, including the characteristics and competencies of each type. This report helps security leaders define who they are, their values, and optimal situations for their skill set.

Show Notes: https://securityweekly.com/bsw-379

Smishing, Microsoft, Star Blizzard, Sneaky Log, VMARE, Josh Marpet, and more... - SWN #444 Jan 21, 2025

Show notes

Smishing, Microsoft, Star Blizzard, Sneaky Log, VMARE, Josh Marpet, and more on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-444