Security Weekly Podcast Network (Audio)

Borg, GitLost, ColdFusion, GodDamn, GhostApproval, OWA, Epaphroditus, Locutus, Josh Marpet, and More on this episode of the Security Weekly News.
Visit https://www.securityweekly.com/swn for all the latest episodes!
Show Notes: https://securityweekly.com/swn-597

In the security news:
Son of Anton strikes again!
HalluSquatting and using Claude to defend itself
CISA KEV’s Revolving Door
LLM's hallucinate and companies get sued
Additionally - GitLost
Yet even more Linux vulnerabilities
Citrix just keeps bleeding
Old hardware is new again
A sneak peak into next week's tech segment
Tenda hidden backdoors
We're still talking about Mirai
Today was not a good day for Roundcube
Canada is hacking criminals
AI safeguards are still annnoying
All cars will spy on you
The FatFs unpatched vulnerability in millions of embedded devices
Windows OS market share drops below 60% (Paul uses Arch)
‘We Cannot Choose to Become Idiots’ - or can we?
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-934

The latest generation of AI models has collapsed the time from vulnerability discovery to weaponized exploit from weeks to minutes, and reactive, module-based tools built around static dashboards simply can't keep up.
In this episode, Tanium COO Matt Quinn joins Business Security Weekly to discuss Tanium Atlas, the new autonomous operating system for IT and security. Matt explains why "good enough" operations are now a liability, how Atlas turns a single operator into the equivalent of an entire team, giving organizations the speed, scale, and efficiency to match the pace of today's threat environment. He also breaks down why nearly two decades of real-time endpoint telemetry across more than 36 million endpoints is the foundation no AI model can replicate on its own.
This segment is sponsored by Tanium. Visit https://securityweekly.com/tanium to learn more about them!
In the leadership and communications segment, CEOs, CIOs clash over AI’s value, Aspiring Leaders, Don’t Just Network Up, Your Talent Strategy Has to Keep Up with Your AI Transformation, and more!
Visit https://www.securityweekly.com/bsw for all the latest episodes!
Show Notes: https://securityweekly.com/bsw-455

Dune References, FAT, Claude, ZhiPu, PolinRider, RentaBot, Sony, Aaran Leyland, and More on the Security Weekly News.
Visit https://www.securityweekly.com/swn for all the latest episodes!
Show Notes: https://securityweekly.com/swn-596

Mobile applications have unique risks and threat models compared to server-side applications and infrastructure. Consequently, they need different strategies to ensure their business logic and workflows well secured. We'll dive into some of these defense-in-depth strategies and why they are important to mobile applications. Securing workflows goes beyond input validation and pattern matching suspicious payloads; it requires detailed attention to state machines, edge cases, and collecting signals to evaluate trust.
Segment Resources:
https://hubs.la/Q04jLKj70
https://mas.owasp.org/MASTG/0x04c-Tampering-and-Reverse-Engineering/
https://owasp.org/API-Security/editions/2023/en/0x00-header/
This segment is sponsored by Guardsquare. Visit https://securityweekly.com/guardsquare to learn more about them!
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw-390