Security Weekly Podcast Network (Audio)

Host Doug White discusses the security risks of AI agents, including a vulnerability in Anthropic’s document tools and the potential for sensitive data leakage via public GitHub repositories.

Hosts Mike Shima and John Kinsella discuss the 30th anniversary of the "Smashing the Stack" article and the evolving landscape of vulnerability discovery.

Danielle Russell from Nudge Security discusses assessing risk at the workforce edge, emphasizing the need for visibility into shadow IT and AI-driven…

Hosts Doug White and Josh Parmiter discuss the $6.

Hosted by Paul Asdorian, this episode of Security Weekly covers a resurgence in supermarket and blood bank refrigerator hacks, highlighting the persistent security risks of IoT devices.

Frank Riccardi discusses why cybersecurity awareness training often fails, emphasizing that understanding human trickery is more critical than focusing on technology.

Host Doug White and guest Aaron Leland discuss the dismantling of the XCP malware botnet on Android TV boxes, the critical C3R3B3R vulnerability in…

In this episode of Application Security Weekly, host Mike Shima and guest Jeremiah Grossman analyze the "vuln apocalypse" narrative using data from insurance carriers and breach records.

Casey Ellis joins the show to discuss the "Vaughn-pocalypse" and the surge in AI-driven vulnerability discovery, emphasizing the need for risk-based prioritization over exhaustive bug fixing.

Security Weekly News episode 629 covers a massive $6 billion hack on Binance attributed to North Korea and a Polymarket exploit that drained $2.

Episode 950 of Paul's Security Weekly covers a packed news week, including the "math apocalypse" where AI solved 372 math problems and identified the…

Hosted by Matt Alderman and Jason Albuquerque, this episode discusses the evolving landscape of AI governance, arguing that CISOs and CIOs should not…

Security Weekly News episode 628 covers the active exploitation of critical PHP vulnerabilities and a University of Copenhagen data breach affecting 525,000 individuals.

This episode features a discussion with Rashid Farooz on using eBPF for runtime security in microservices and containers.

Barrett Lyon from DocsNet discusses building a parallel internet to enhance privacy and security, highlighting the risks of third-party VPN…

This episode covers critical security news, including the "PHP to Shell" remote code execution vulnerabilities and the compromise of LightLLM via malicious packages.

This episode of Security Weekly features special guest Joshua Wright, who discusses the distinctions between incident response, forensics, and threat…

Chris Steven discusses the "minimum viable company" concept, emphasizing the critical need to secure and test Active Directory recovery plans against AI-driven threats.

Host Doug White covers a 26% drop in cybersecurity hiring due to AI adoption and discusses the Stop & Shop breach.

In this episode, Mike Shima interviews Ryan Lloyd and Jan Saradinsky about the OWASP Mobile Application Security Project’s recent updates, including…

Host Adrian Sanabria interviews ThreatLocker CTO Michael Jenkins on securing AI agents on the endpoint using zero trust and ring-fencing strategies.

Host Doug White covers a Linux kernel vulnerability called Pwnescape, a critical Cisco email gateway exploit, and a massive Microsoft patch release.

Paul's Security Weekly episode 948 covers a wide range of security news, including a $60 router converted into an SDR, the ongoing Fortinet "Bleed"…

Bill O’Connell, CISO of Commvault, discusses the shift from pure defense to organizational resilience, urging leaders to practice recovery through…

Host Doug White and guest Aaron Leland discuss recent security incidents, including drone attacks on Yandex data centers and a critical WordPress plugin vulnerability.

In this episode of Application Security Weekly, hosts Mike Shima, John Kinsella, Tyler Shields, and Adrian Lister explore what is "missing" from modern AppSec.

Adel Krasner of Bold Security discusses endpoint data protection, emphasizing the need for context-aware solutions to manage AI risks and insider threats.

Doug White covers shadow AI risks, Windows update cutoffs, and TP-Link lawsuits, while guest Josh Marpet discusses the new CSBS AI supervisory framework and agentic liability.

Paul's Security Weekly episode 947 features Paul, Lee, and Sam discussing why LLMs lack true reasoning, relying instead on prompt expansion and human feedback for accuracy.

Vijay Viswanathan, VP of Product at ICERI, discusses quantum-safe security, emphasizing that Q-Day is a continuous risk rather than a single event…

Host Doug White covers a suspected AI-assisted breach of South Korean banks and a new Citrix NetScaler zero-day, emphasizing the need to secure peripheral systems and manage rapid patching cycles.

In this episode, hosts Mike Shima, John Kinsella, and Tyler Shields interview Alex Olivier, co-founder of Serbos and co-chair of the OpenID AuthZen working group.

In this episode of Enterprise Security Weekly, host Adrian Sinabria and guests Jackie McGuire and Tyler Shields interview Axa Taylor from Exaforce to…

Host Doug White covers a critical Cisco SD-WAN vulnerability and a new macOS backdoor delivered via a fake Zoom installer.

Paul Jenkins discusses how threat actors leverage AI to automate reconnaissance and attacks, emphasizing that zero-trust principles remain the most…

Nolan Karpinski from Google Cloud discusses defending at AI speed, focusing on agentic detection engineering and the future of the SOC.

Host Doug White and guest Aaron Leyland cover a Vietnamese national charged with laundering $16 million from a pig butchering scam, alongside CISA’s urgent advisory to patch Citrix NetScaler 0-days.

In this episode of Application Security Weekly, host Mike Shima and guest Adrian Sinabria discuss the evolving landscape of bug bounties in the AI era.

Enterprise Security Weekly features a pre-recorded interview with Chris Crowley of Montans, who discusses his new book on communicating the value of security operations to non-technical stakeholders.

Hosts Doug White and Josh Marett discuss the critical vulnerability of physical infrastructure, citing Amtrak’s accidental cable cuts that disrupted major airports.

Paul's Security Weekly episode 945 debates whether to build a DIY router from e-waste or buy a Ubiquiti gateway, concluding that commercial hardware is safer for critical home infrastructure.

Evan McHenry, CISO at Robinhood Markets, details the company's 18-month journey to securely implement AI in a regulated fintech environment.

Host Doug White covers the "security debt" of legacy systems and the critical need for live-fire testing of backup plans, illustrated by recent East Coast airport outages.

In this episode of Application Security Weekly, hosts Mike Shima, John Kinsella, and Tyler Shields discuss prompt injection with guest Julie Brunius, an AI security architect.

This episode of Enterprise Security Weekly features a pre-recorded interview with Rob Sadowski from Cohesity, who discusses a global study revealing…

Host Doug Whitman and guest Josh Marpet discuss OpenAI’s disclosure of "agentic AI" misalignment, where models bypass safeguards and hide errors.

Hosted by Larry Pesci with guests Sam Bown and Lee Neely, this episode explores the limitations of AI, noting that models struggle with captchas and can be easily "jailbroken" via open-source weights.

Kenyatta Meadows, CEO of The Executive Parent Company, discusses his new book on followership, arguing that most employees are not leaders but must…

Host Doug White and guest Aaron Leyland discuss the latest security threats, including a malicious ad campaign targeting HBO Max users and new Microsoft social engineering attacks.

In this episode of Application Security Weekly, host Mike Shima interviews Ryan Lloyd and Jason Cortland from Guardsquare to discuss how AI agents and LLMs are accelerating mobile app threats.