Hacking Without Boundaries - Michael Jenkins - PSW #946
Summary
Paul Jenkins discusses how threat actors leverage AI to automate reconnaissance and attacks, emphasizing that zero-trust principles remain the most effective defense by restricting access to only what is needed. The episode also covers a critique of Software Bills of Materials (SBOMs) for missing runtime dependencies, highlighting the importance of continuous behavioral monitoring and binary analysis to detect vulnerabilities like missing PIE compiler flags.
Topics discussed
Show intro and security news headlines
Interview with ThreatLocker CTO on AI threats and Zero Trust
Announcements and host departure news
SBOMs, runtime dependencies, and supply chain risks
Binary analysis and finding 'weird shit' in systems
Citrix NetScaler CVEs and memory corruption exploits
Network appliance patching and kernel visibility
Hardware hacking and SPI flash extraction techniques
AI lawsuits, regulation, and small model efficiency
Container security, data remnants, and shared resources
OT and medical device network segmentation issues
MicroSD card supply chain virus and camera storage
Early computer history and Silicon Valley movie discussion
Hacker culture merchandise and collectibles
Linux LPE vulnerabilities and iOS 27 feature gating
Listen ad-free on Castria