Security Weekly Podcast Network (Audio) Security Weekly Podcast Network (Audio)

It's More Secure When It's Disabled - PSW #943

Sep 10, 2026 · 2h 2m

Summary

Security Weekly episode 943 covers a range of threats, including alleged cyberattacks on military commissary freezers and a critical UEFI secure boot bypass affecting Cisco and other vendors. The panel discusses the risks of firmware updates, the dangers of AI-generated code, and how AI agents are now autonomously reporting vulnerabilities to Bruce Schneier. Additional topics include the rise of Linux on smart TVs, new passkey attack vectors, and the growing need for robust access controls to manage rogue AI agents.

Topics discussed

Episode intro and topic list Host introductions and banter InfoSec World conference promotion Sandwich hat segment and transition Commissary freezers and cyber war Canadian bacon and ham joke ThreatLocker sponsor and zero trust GPU BIOS vulnerabilities and memory protection UEFI shell risks and patching issues Eclipse research on UEFI shell hardening Removing UEFI shell and secure boot Manufacturer firmware signing issues Cisco Unified Computing System details Detecting UEFI shell exploitation Vibe coding and AI vulnerabilities Local AI models for code checking Broadcom and VMware security changes Virtualization and container security boundaries AI bug finding capabilities and limits Vulnerability disclosure etiquette Responsible disclosure vs public dump Frustrations with vendor patching Company culture and vulnerability handling Adapting security for smaller companies AI agent protection and supervision AI agent permissions and credentials Limiting AI agent destructive actions Passkey authentication compromises Complexity in secure implementations Workshop anecdote and Linux desktop Linux desktop adoption debate LG TV hacking and security research LG TV ad tracking and privacy Corporate security failures and media Linux TV setup and DRM challenges HDMP and HDMI protection issues Netflix and old streaming tech DRM circumvention and content access Time vs money in streaming choices CERN and Linux transition story Particle accelerators and Linux distros CERN driver and hardware challenges CERN 15-year Debian migration plan Underground facility and data collection Custom hardware and real-time requirements GPS time servers and aging hardware Unpatched time server vulnerability Australian rail and phone system outage NTP maintenance and AI support Microsoft September patch release AI-assisted vulnerability discovery AI patch creation and testing errors Defender AI and patch Tuesday impact Arctic Wolf and Prey 58 activity CPU-level ransomware detection Basic security hygiene and detection Device compromise visibility Shift from detection to prevention Confidence in detection and prevention ThreatLocker sponsor discussion Epstein data and AI pattern matching AI agents for data analysis Social media and algorithm fatigue Targeted advertising and consumer behavior Price comparison and product quality Shitification and manual labor Family labor and oyster shucking Sandwich hats and targeted ads Vat of maggots and food aversion Boil and local food traditions GPU Row Hammer and bit flips Memory cell isolation and attacks Security boundaries in AI infrastructure Hardware faults and tenant isolation Hardware faults and cloud security Payment card skimmers and PCI Kworker malware and process hiding Simple stealth methods in malware Kworker detection and responsibility Linux vs Windows security enforcement Cisco Firewall Management Center RCE Exploited in the wild definitions Vulnerability classification confusion Personal anecdotes and parenting Creating fake kworker executables Future detection challenges Show outro and music
Listen ad-free on Castria

Episode summaries and topics are generated from the audio by Castria — a free podcast app that skips ads automatically. IP Geolocation by DB-IP