Security Weekly Podcast Network (Video)

Latest Episodes:

Randomness, Grey, Deepseek, Sonicwall, Spice, CaptiveCrunch, eBay, and Aaran Leyland - SWN #604 Aug 04, 2026

Show notes

Randomness, 50 Shades of Grey, Deepseek, Sonicwall, Spice Weasels, CaptiveCrunch, eBay, Aaran Leyland, and More on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-604

Prompting for Patches That Fix Vulns Without Adding New Ones - Keith Hoodlet - ASW #394 Aug 04, 2026

Show notes

There's already an increase in volume of security flaws found by LLMs. And orgs are already turning to LLMs to write code. So, what happens when orgs lean on LLMs to create patches for those security flaws? Keith Hoodlet gives an exclusive early look at his team's recent research into the success, quality, and failures of LLM-generated security patches. Notably, they saw scenarios across a spectrum from robust, effective patches to patches that changed the software's behavior to patches that introduced new vulns to patches that didn't even fix the original vuln while also introducing a new vuln.

The research considers factors like quality and correctness of prompts, complexity of the target software, programming language, and expertise required to understand what a robust patch should look like. If you're going to spend tokens on fixing security flaws, you want a feedback loop that fixes them correctly -- not an infinite loop of new flaws creeping in with every LLM iteration.

Watch for this research, its toolset, and data to be released on Thursday August 6th during Black Hat.

Show Notes: https://securityweekly.com/asw-394

AppSec, Shopify-Style; State of Mobile Security; the News - Andrew Dunbar, Kern Smith - ESW #470 Aug 03, 2026

Show notes

Interview with Andrew Dunbar, CISO at Shopify

After 13 years at Shopify, Andrew has some valuable insights to share on application security. In this episode, we discuss how AI has changed application security processes where bug bounty now fits in a post-Mythos, post-AI harness world.

Andrew's Resources:

https://shopify.engineering/building-an-agentic-harness-that-outlasts-the-model

Interview with Kern Smith

Kern Smith, VP of Global Solutions at Zimperium, joins us to talk about the state of mobile security. This was a great conversation, talking about the history of mobile devices in the enterprise and how challenging securing mobile apps is in the age of vibe-coding.

Segment Resources

Enterprise Security News

Finally, in the enterprise security news,

Pre-black hat funding goes nuts
we have 4 new cybersecurity unicorns!
Cyera acquires Oasis for one BILLION dollars
Lots of new product announcements with hacker summer camp next week
Hugging Face got hacked by a competitor's agent and are cool with it?
Finding out that wiping a burner phone is illegal the week before DEF CON is not ideal
Are open, local models the future of AI?
AI isn't coming for your job
lots of vendor reports
bad cybersecurity takes are apparently mainstream memes now???

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-470

Rogue AI, the Bar, Breaches, BMC, Hugging Face, Helmuth von Multke, Ike, Shieldfont, - SWN #603 Jul 31, 2026

Show notes

Rogue AI, the Bar, Breaches, BMC, More Hugging Face, Helmuth von Multke, Ike, Shieldfont, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-603

Sandwich Hats - PSW #937 Jul 30, 2026

Show notes

In the security news:

2.2 million cars, one shared Bluetooth key
JFrog tries to spin an AI 0-day into a win
Sextortion scammers recycling ShinyHunters' leaks
The first hack ever, from 1966
Prompt injection as a service, $150 a month
Cisco's mystery "static credential"
BMCs still on the internet, still handing out hashes
Scattered Spider duo sentenced over the TfL hack
Air-gapped data sneaking out over the video cable
A ghost in the network
DNS poisoning checks into hotel WiFi
Microsoft's cut-rate cybersecurity AI
Learning to trust USB drives again
Agentic pentesting shows up just in time for Black Hat
Microsoft rethinks security for the AI age, again

Show Notes: https://securityweekly.com/psw-937

Transparency, The Key To Team Motivation For Remote Workers - Charles Gaudet - BSW #458 Jul 29, 2026

Show notes

Since the pandemic, managing remote teams have been challenging. How do you measure performance and motivate teams when they are remote?

Charles Gaudet, CEO & Founder at Predictable Profits, joins Business Security Weekly to discuss why transparency is the key to team motivation for remote workers. Charles will discuss how culture and performance metrics create that transparency. He will also discuss how to motivate your team based on their personality type.

Segment 1 Resources:

https://www.PredictableProfits.com

Find all of CyberRisk TV's Black Hat 2026 coverage at: https://www.securityweekly.com/blackhat

Show Notes: https://securityweekly.com/bsw-458

Deep Fakes, Molten Salt, PLCS, Checkpoint, Hugging Face, CENTOS, Josh Marpet and More - SWN #602 Jul 28, 2026

Show notes

Deep Fakes, Molten Salt, PLCS, Checkpoint, Hugging Face, CENTOS, Josh Marpet, and More on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-602

Inside the OWASP Agent Security Regression Harness Project - Mert Satilmaz - ASW #393 Jul 28, 2026

Show notes

Orgs need to be able to use agents, MCPs, and LLMs in ways that don't lead to unexpected actions and undesirable outcomes. The OWASP Agent Security Regression Harness project is an approach for defining customizable scenarios and testing whether those systems fail against known security threats. Mert Saltimaz talks about the background of the project, how orgs can use it as they bring more LLMs into their environment, and how the project intends to grow. Importantly, we also talk about the security controls and designs that orgs can build around the systems and data that models interact with in addition to evaluating the security of the agents and agent harnesses themselves.

Segment Resources:

https://github.com/OWASP/Agent-Security-Regression-Harness
https://youtu.be/6DWs5EwbFQ0?si=r0IJ_F0SZnkPzzYg -- "What Trading Systems Taught Me About Breaking (And Defending) Infrastructure"

Show Notes: https://securityweekly.com/asw-393

Exploring AI Network Protocols; Vulnerability Truths and Guarantees; and the News - O'Shea Bowens, Jeremiah Grossman - ESW #469 Jul 27, 2026

Show notes

Segment 1 - Interview with O'Shea Bowens

What do we really know about "AI Network Protocols"? Network security is about to get popular all over again.

Generative AI caused a disruptive explosion across all of tech and every company's roadmap. The move from chatbots to AI agents doubled down on that disruption. Now agents need to talk to each other?

Boom: we have MCP. A2A. Universal Commerce Protocol. General purpose and specialized protocols for agent communication. What does this look like from the network perspective, though? O'Shea Bowen joins us to answer this question, and he thinks the results are interesting enough to spark a resurgence of interest in network security tooling.

Segment Resources:

Segment 2 - Interview with Jeremiah Grossman

Jeremiah Grossman on why we've been measuring cyber risk wrong for 20 years

After decades helping shape modern web security, and building companies that were ultimately acquired by Synopsys and Tenable, Jeremiah Grossman believes cybersecurity has arrived at an inflection point. His argument is a provocative one: for years, the industry has optimized around the wrong metrics. His latest venture, Root Evidence, aims to help security teams identify which risks are most likely to cause meaningful business loss, and he has the evidence - real-world breach data, cyber insurance claims, digital forensics intelligence, attack surface intelligence, and observed attacker behavior - to back it up.

Find all of CyberRisk TV's Black Hat 2026 coverage at: https://www.securityweekly.com/blackhat

Segment 3 - Weekly Enterprise News

Finally, in the enterprise security news,

We vibe check the AI model situation
hidden devices in California cars causes concerns
OpenAI's models escape sandboxes and breaches another AI company, totally by accident, they promise!
Grok Build uploads all your files, totally by accident, they promise!
Eclipsium debuts a firmware version of patch tuesday!
HTTP gets a new method
common problems with incident response
Which one of the security weekly hosts would consider switching to a "dumb phone"?

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-469

Rogue AI Vehicle Porn, OpenAI, Nudes, Clop, Patches, Oracle, Palo Alto, Aaran Leyland - SWN #601 Jul 24, 2026

Show notes

Rogue AI Vehicle Porn, OpenAI, Nudes, Clop, Patches, Oracle, Palo Alto, Aaran Leyland, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-601