Surveillance, Murder Hornets, Portmantau, TrueCONF, Siemens, N-Able and More - SWN #609
Summary
In this episode of Security Weekly, host Doug White discusses the "vulmpocalypse," where AI accelerates vulnerability exploitation and breaks traditional patching cycles. He covers CISA's urgent advisory for TrueConf server flaws and a joint alert from five US agencies regarding AI-assisted attacks on Siemens S7 PLCs in critical infrastructure. The show also analyzes a sophisticated phishing campaign targeting Hacker Summer Camp attendees via malicious Google Docs and a $10,000 phishing kit that enrolls rogue passkeys for persistent access. Finally, White addresses security flaws in the clo…
Topics discussed
Intro, episode 609, and school nostalgia
Sponsor: Threat Intelligence Virtual Cybersecurity Summit
AI breaking vulnerability management: the 'Vulmpocalypse'
Sponsor: ThreatLocker zero trust enforcement
Sponsor: InfoSec World 2026 conference
CISA orders patching for TrueConf server vulnerabilities
AI-assisted attacks on Siemens S7 PLCs at critical infrastructure
Phishing attack targeting Hacker Summer Camp attendees
Dark web sale of phishing kit with persistent passkey access
Enable (Passport) password manager cloud security flaw
Sponsor: Tanium Atlas endpoint security
The annoyance of auto-tip screens and robot bartenders
The trade-offs of surveillance: body cams, smart glasses, and privacy
Outro and subscription reminder
Listen ad-free on Castria