Security Weekly Podcast Network (Audio)

Interview with Casey Ellis
Our focus for this interview with Casey Ellis are the massive changes in:
Vulnerability Discovery
Vulnerability Disclosure
Exploitation and Remediation
The goal is to understand how expectations and strategies should shift as a result. What do we, as an industry, and defenders need to do to ensure 2027 isn't a total train wreck?
Vibe Check
This week's vibe check explores the question, which security project always takes twice as long as planned?
55% - Enforcing data classification
18% - SOAR automation buildout
9% - Rolling out SSO
9% - Moving to passwordless auth
9% - AI agent discovery
0% - Other
News Segment
Finally, in the enterprise security news,
funding and M&A
PHP2Shell update
floods of bugs
silent train
breaches
the script kiddy bar has been lowered
the basics continue to be important
an AI lab pulls a PR stunt
an old squirrel story was a scam!
All that and more, on this episode of Enterprise Security Weekly.
Visit https://www.securityweekly.com/esw for all the latest episodes!
Show Notes: https://securityweekly.com/esw-483

In the security news this week:
In the security news this week:
Cisco says patch faster, then sells you time
Turning AI refusals into vulnerability signals
Brotli’s are hiding
WordPress image upload exploit
Fortinet ships fixes before details
PHP2Shell still claiming victims, including firewalls
Uncoordinated disclosure
Claude finds vulns, go figure
PXE strikes again!
Sony’s PS5 bounty drama
Apple’s October patches reach older devices
CISA looks ahead to 2030
ArubaOS gets a pile of critical fixes
New UK rules for protecting undersea infrastructure
PortaPack Mayhem goes mobile
Can AI agents police other AI agents?
DHS bans DeepSeek
A Chinese model writes riskier code for a US contractor
eMudhra exits the TLS business
BlackX bootkit exploits Secure Boot
Signal makes hanging up harder than it should be
Is AI solving math, or making it harder to trust?
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-950

CyberSN just released their Cybersecurity Jobs Report through September 2026. We’ll cover that in the leadership and communications segment along with, Only 7% of CISOs at Large Companies Own AI Governance, Our Favorite Management Tips on Delegating Effectively, CIOs unprepared for agentic workforce shift, and more!
Visit https://www.securityweekly.com/bsw for all the latest episodes!
Show Notes: https://securityweekly.com/bsw-471

Agents, Train Robberies, Jazz, Microsoft, Elvis Gyrates, Aaran Leyland, and More, on the Security Weekly News.
Visit https://www.securityweekly.com/swn for all the latest episodes!
Show Notes: https://securityweekly.com/swn-628

Proactive security doesn't have to wait for a vuln to be disclosed. Even if a patch isn't available, it's possible to deploy controls and design systems to be resilient against how vulns are exploited. Rashid Feroze talks about runtime security and the benefits of deploying eBPF filters to improve observability and block unauthorized behavior. He walks through scenarios related to supply chain attacks, prompt injections against agents, and responding to major events like PHP2Shell. We touch on threat models to help distinguish between what eBPF filters can protect against and what still requires secure coding discipline from developers.
Resources
https://ebpf.io
https://falco.org
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw-406