Security Weekly Podcast Network (Video)

Latest Episodes:

AI Cocaine Recipes, Russian Hack, Scattered Spider, Cisco, Amazon Q – Aaran Leyland - SWN #594 Jun 30, 2026

Show notes

AI Cocaine Recipes, Green Shirt Jailbreak, JLR Russia Hack, Scattered Spider, Cisco Root, Amazon Q Pwned – Aaran Leyland – SWN #594

Show Notes: https://securityweekly.com/swn-594

Reducing Attack Surface & Evaluating Efficiency in Agents - Itamar Apelblat, David Goldschlag - ASW #389 Jun 30, 2026

Show notes

SquidBleed reveals another vuln that's been lurking for decades, but its real lesson is in managing an attack surface. Regardless of whatever programming language you use, removing code is one of the best security steps you can take, followed by changing default configs to turn off uncommon features and ancient protocols.

The Linux kernel's removal of strncpy is another example of managing attack surface by replacing a notoriously misused and ambiguous function with more specific versions that better match the developers intent. It was a six-year journey for the kernel, but one that should remove a class of vulns and, importantly, improve performance.

Then it's on to agents with a discussion of the newly released OWASP AISVS and yet another example of evaluating LLMs as code reviewers.

Agentic AI Has an Identity Problem

AI agents are already running inside enterprise environments, operating on credentials, API tokens, and cloud roles that most security teams have never inventoried. When an agent acts autonomously across production systems, the security question is no longer just what it can do but who it is and whether that identity is governed at all. Itamar Apelblat, Co-Founder and CEO of Token Security, discusses why identity is the right lens for understanding agentic AI risk and what practical steps security teams can take now.

Segment Resources:

This segment is sponsored by Token Security. To lean more, visit https://securityweekly.com/tokenidv

Blended Identities and the challenge of IAM for AI

AI agents aren't quite human and aren't traditional machines. So how do you secure workflows that involve humans using AI to access sensitive data, and do it at machine speed and scale? David breaks down the challenges and discusses actual implementations of IAM for AI to explain how to solve them.

Segment Resources:

This segment is sponsored by Aembit. Get the cloud security alliance survey on AI Identities at https://securityweekly.com/aembitidv

Show Notes: https://securityweekly.com/asw-389

Fixing pentesting, Meta is destroying its engineering org, the weekly news - Adriel Desautels - ESW #465 Jun 29, 2026

Show notes

Interview with Adriel Desautels - the pentest is broken

Adriel joins us for a discussion on the state of penetration testing, why it hasn't done much to help security teams over the last 20 years, and why AI won't save it.

Segment Resources:

Topic: Why Meta is destroying its engineering organization

The titular essay: https://newsletter.pragmaticengineer.com/p/why-is-meta-destroying-its-engineering

A very interesting analysis of what's going on inside big tech companies as they try to dogfood their own AI hype and tokenmaxx themselves into oblivion. There have been a LOT of stories on this, but this is the most comprehensive and enlightening. A few more are linked below.

This is relevant to security, because heavier AI use appears to be linked to a much higher occurrence of availability and security issues.

'Tell Him He's a Piece of Shit': Meta's New AI Unit Is a Total Mess
The Newest Instagram "Exploit" is the Goofiest I've Seen
Meta CTO Andrew Bosworth Admits the Company's AI Reorg Was 'Atrocious'
Meta's months-old AI unit is a soul-crushing gulag, say the engineers stuck inside it

The Weekly Enterprise News

Finally, in the enterprise security news,

an AI vibe check
An AI SOC vendor shuts down
Cybersecurity vendor layoffs
funding & acquisitions
cascading breaches
digital estate management
criminals don't trust AI either
some devs won't code without AI, even if you pay them to
Midjourney is now a healthcare company?

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-465

AI Brain Harvest, Fortibleed, Win 10, Blacksite, Windchill, Cisco, BB-8, Josh Marpet - SWN #593 Jun 26, 2026

Show notes

AI Brain Harvest, Fortibleed, Win 10, Blacksite, Windchill, Cisco, BB-8 Sidewalk Bots, Josh Marpet, and More on this episode of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-593

Cloud Visibility, Fortibleed, hacking things the easy way - Sandy Bird - PSW #932 Jun 25, 2026

Show notes

First up is Sandy Bird from Sonrai discussing how to protect our cloud infrastructure!

This segment is sponsored by Sonrai Security. Visit https://securityweekly.com/sonrai to learn more about them!

Next up in the security news:

Help, I am Fortibleeding
Cisco SD-WAN needs help
The secret life of probe requests
Help, I am Squidbleeding
XSS to RCE and why CVSS isn't the full picture
TVs spy on you
Foundational security practices
Cybersecurity costs money
Happy "Its too late to update your KEK key" day
You don't have security flaws if no one can report them
Rickrolling FIFA
Domain takeovers
End of life, out of luck
The key to Encryption...

Show Notes: https://securityweekly.com/psw-932

The Strategic Human Firewall as AI Impacts Regulations, Cyber Pros, and Employees - Robert Siciliano - BSW #453 Jun 24, 2026

Show notes

The 2026 Verizon DBIR has arrived and the results are in... Even with a substantial increase in Exploitation of Vulnerabilities, All Credential Abuse is still the top initial access vector for breaches, which means the human is still the weakest link. Why haven't security awareness training and phishing campaigns worked?

Robert Siciliano, Architect of of The Strategic Human Firewall™ at ProtectNow, joins Business Security Weekly to explore why humans, not hackers, are the ultimate deciding factor in organizational security. The industry needs to shift from security awareness to security appreciation. Robert will discuss:

How you can build a culture that actually protects your people, your data, and your operations in an era of AI deception.
Why most companies are still performing 'Security Theater'—checking boxes and hoping for the best—instead of driving genuine behavior change.
How Trust and Denial quietly fuel most disasters, why interactive training is the only way to make the lessons stick, and how leaders can scale this entire framework without needing a Hollywood budget.

Segment Resources:

https://protectnowllc.com/ai-cyber-security-keynote-speaker/

In the leadership and communications segment, Should CEOs Be Held Personally Accountable for Cyber Attacks?, Placing communication at the center of every leadership transition, AI isn't solving cybersecurity workforce woes, and more!

Show Notes: https://securityweekly.com/bsw-453

Turing, BODS, Struwwelpeter, EO-14409, VBScript, Pixemsmash, Cloudflare, Aaran Leylan - SWN #592 Jun 23, 2026

Show notes

Turing's Entscheidungsproblem, BODS, Struwwelpeter, EO-14409, VBScript, Pixemsmash, Cloudflare, Aaran Leyland, and More on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-592

How AI Is Reshaping Identity Security at the Infrastructure Layer - Ev Kontsevoy, Neha Duggal, Amit Masand - ASW #388 Jun 23, 2026

Show notes

Appsec has seen machine identities from daemons and processes to services, microservices, and cloud accounts. And now we have agents. Ev Kontsevoy talks about what it means to have engineers and agents interacting in an environment, and why a focus on actions can be more effective than roles. One of the biggest challenges in securing agents along with all of the other identities that organizations manage is how fragmented that management has become. But a unified engineering view of identities is just a start. Once you're able to shift to a practice where access is granted based on attributes and limited durations, then your environment becomes more resilient to mistakes and unexpected actions, not to mention the security concerns that come with agents acting on their own.

Who Is Responsible for an AI Agent's Actions? As AI agents gain the ability to access systems, invoke tools, and take action on behalf of users, organizations need clear frameworks that define responsibility for machine-driven decisions and outcomes. This segment examines how accountability, delegation, and attribution can be established across users, developers, security teams, and business stakeholders. Neha will explore how governance models support transparent, auditable agent-driven workflows while helping organizations manage risk and maintain trust.

This segment is sponsored by P0 Security. Visit https://securityweekly.com/p0idv to learn more about them!

The rapid rise of agentic AI and non-human identities is fundamentally reshaping the future of identity security, challenging traditional IAM and PAM models built around predictable human behavior. In this executive interview at Identiverse 2026, Amit Masand discusses how autonomous systems, AI agents, and machine identities are creating new operational and governance challenges for modern enterprises. Drawing from more than two decades of industry experience, the conversation explores the growing complexity of continuous governance in a world where identities increasingly operate at machine speed.

Segment Resources: https://www.idmexpress.com/post/preventing-cybersecurity-incidents-through-managed-services https://www.idmexpress.com/post/cyberark-securing-aws https://www.idmexpress.com/post/turning-roadblocks-into-breakthroughs-a-custom-oracle-pam-integration-story

Contact IDMEXPRESS! Secure Your Tomorrow, Today: https://securityweekly.com/idmidv

Show Notes: https://securityweekly.com/asw-388

Navigating Shadow AI in the Enterprise, Verizon's SECOND 2026 report, and the news - Ankita Gupta - ESW #464 Jun 22, 2026

Show notes

Interview with Ankita Gupta, CEO of Akto

How to Navigate Shadow AI Risk in the enterprise

This week, we discuss AI governance in the enterprise, starting with the nuts and bolts of how to discover and understand shadow AI. Following that, we dive into what security and tech leaders should do next with this information: apply guardrails? Limit vendor options?

Ankita has a wealth of experience and anecdotes to share here, from years of working with customers and seeing all the unexpected things that happen with AI in today's workplace.

Segment Resources:

Website: https://www.akto.io
Book a Free Demo: https://www.akto.io/agentic-security-demo
LinkedIn: https://www.linkedin.com/company/akto-io
YouTube: https://www.youtube.com/@aktodotio

This segment is sponsored by Akto. Visit https://securityweekly.com/akto to secure your AI agents before attackers do.

Topic Segment: Verizon's Breach Impact Study

The same team that delivers the DBIR every year gave us a bonus, based on over 70,000 insurance claims!

Some of my favorite insights:

Cost of breaches, broken out by SMB, mid-sized enterprise, and large
The claim amount as a percentage of the company's revenue
Losses broken down by loss TYPE

This data validates something I think everyone in cyber needs to understand: cyber events are rarely business-ending events. Every cybersecurity professional and vendor, frustrated by companies "not taking security seriously enough" now have data explaining why: breaches don't hurt as much as you thought they did. Maybe you think they should hurt more? Push for regulation/fines/etc.

With that said, the report also shows breach costs increasing significantly over the past 6 years and the quantity of incidents shooting up. Specifically, the median impact has almost doubled.

Security failures aren't getting any cheaper.

Weekly Enterprise News

Finally, in the enterprise security news,

A $100M seed round!
Accenture acquires 3 security vendors
Some thoughts on the government takedown of Fable and Mythos
One of the craziest security mistakes I've ever seen, in the software FIFA uses to manage World Cup streams!
A Critical Copilot vulnerability
75,000 Fortinet Firewalls get compromised
Remediation is broken
Using guardrails to evade detection

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-464

LLMS, Identity, EDR, JiGong, QiLin, Warlock, with Rob Allen from Threatlocker... - Rob Allen - SWN #591 Jun 19, 2026

Show notes

Doug and Rob Allen talk about Identity, EDR, Your Great Aunt Ida Meets some hot firefighters, and more.

Segment Resources:

Qilin and Warlock Ransomware Use Vulnerable Drivers to Disable 300+ EDR Tools: https://thehackernews.com/2026/04/qilin-and-warlock-ransomware-use.html

This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

Show Notes: https://securityweekly.com/swn-591

Our TOPPODCAST Picks

Follow Us

Stay Connected

Security Weekly Podcast Network (Video)

Related Podcasts

Links

Stay Connected