First up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero Trust. Then in the security news:

First up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero Trust. Then in the security news:

<ul class="wp-block-list">
<li>Compiling spreadsheets, because that's why</li>


<li>Nvidia wants to put AI agents in timeout</li>


<li>Citrix NetScaler gets exploited again, and again</li>


<li>Spectre still refuses to die</li>


<li>Your SBOM is incomplete?</li>


<li>File notifications leak more than filenames</li>


<li>ENIAC had cables instead of a BIOS</li>


<li>Another Linux kernel root exploit lands</li>


<li>Containers share a kernel</li>


<li>ThinkNode M9 microSD card gets a virus notice</li>


<li>Google analyst infiltrates a supply-chain gang</li>


<li>Your phone speaker can transmit radio</li>


<li>Reconstructing firmware with a logic analyzer</li>


<li>Robot dogs learn cybersecurity</li>


<li>CISA warns about third-party ICS integrators</li>


<li>Dutch police arrest a ShinyHunters suspect</li>


<li>A soldier goes from telecom hacking to prison</li>


<li>AI companies discover their agents have opinions</li>


<li>Cloudflare containers accidentally share leftovers</li>


<li>OT networks are still mostly not isolated</li>


<li>Florida wants to pause ChatGPT</li>
</ul>

<ul><li>Compiling spreadsheets, because that's why</li><li>Nvidia wants to put AI agents in timeout</li><li>Citrix NetScaler gets exploited again, and again</li><li>Spectre still refuses to die</li><li>Your SBOM is incomplete?</li><li>File notifications leak more than filenames</li><li>ENIAC had cables instead of a BIOS</li><li>Another Linux kernel root exploit lands</li><li>Containers share a kernel</li><li>ThinkNode M9 microSD card gets a virus notice</li><li>Google analyst infiltrates a supply-chain gang</li><li>Your phone speaker can transmit radio</li><li>Reconstructing firmware with a logic analyzer</li><li>Robot dogs learn cybersecurity</li><li>CISA warns about third-party ICS integrators</li><li>Dutch police arrest a ShinyHunters suspect</li><li>A soldier goes from telecom hacking to prison</li><li>AI companies discover their agents have opinions</li><li>Cloudflare containers accidentally share leftovers</li><li>OT networks are still mostly not isolated</li><li>Florida wants to pause ChatGPT</li></ul>

The interview segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlocker">https://securityweekly.com/threatlocker</a> to learn more about them!

The interview segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlocker">https://securityweekly.com/threatlocker</a> to learn more about them!

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15246″} podcast from PPWorks

AI/ML

AI benefits/risks

Hacking Without Boundaries – Michael Jenkins – PSW #946

<ul class="wp-block-list">
<li>Build your own router, or just buy one</li>


<li>What to patch first</li>


<li>But maybe don't buy D-Link</li>


<li>AI nearly starts a war</li>


<li>Flock cameras lose their keys</li>


<li>The AI slowdown won’t save bad security</li>


<li>Opus at home, just slower</li>


<li>Black Hat says fundamentals still work</li>


<li>Hacker gadgets, and my top pick</li>


<li>Gyazo screenshots</li>


<li>Fake job interviews, real malware</li>


<li>VINCE gets a new home</li>


<li>Munich university gets disconnected</li>


<li>LinkedIn fights the scraping machine</li>


<li>SolarWinds hard-codes another bad idea</li>


<li>Fake LastPass kills 145 security tools</li>


<li>Colorado water gets its settings changed</li>


<li>AI CEOs sell apocalypse and bonds</li>


<li>The AI safety cult gets audited</li>


<li>Ransomware recovery takes weeks, not hours</li>


<li>TeamPCP’s supply-chain tour continues</li>


<li>Zuckoff hunts smart glasses</li>
</ul>

<ul><li>Build your own router, or just buy one</li><li>What to patch first</li><li>But maybe don't buy D-Link</li><li>AI nearly starts a war</li><li>Flock cameras lose their keys</li><li>The AI slowdown won’t save bad security</li><li>Opus at home, just slower</li><li>Black Hat says fundamentals still work</li><li>Hacker gadgets, and my top pick</li><li>Gyazo screenshots</li><li>Fake job interviews, real malware</li><li>VINCE gets a new home</li><li>Munich university gets disconnected</li><li>LinkedIn fights the scraping machine</li><li>SolarWinds hard-codes another bad idea</li><li>Fake LastPass kills 145 security tools</li><li>Colorado water gets its settings changed</li><li>AI CEOs sell apocalypse and bonds</li><li>The AI safety cult gets audited</li><li>Ransomware recovery takes weeks, not hours</li><li>TeamPCP’s supply-chain tour continues</li><li>Zuckoff hunts smart glasses</li></ul>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15244″} podcast from PPWorks

AI Will Save Us, or Not? – PSW #945

vulnerability_AdobeStock_422696210

Brief

BYD Shark 6 remotely hacked, exposing vehicle controls and cabin audio

Micro-Segmentation Architecture for Zero Trust Enterprise Security

Micro-Segmentation Architecture for Zero Trust Enterprise Securi

Critical Infrastructure Security

OT Security

News

Just 13% of network segments are OT-only, says Forescout Research

Tech Explainer_OT-security

Government security

ICS/SCADA

Nexus

Supply chain

Implementation Guides

How to build an OT security operating model

Tech Explainer

What OT resilience actually controls

Assam, india – April 10, 2021 : Bluetooth logo on phone screen s

Skullcandy Dime 3 earbuds vulnerable to Bluetooth hijacking

First up: a technical segment on Linux threat hunting. We'll start this series by covering the best places to look for IoCs on Linux systems and devices, starting with startup services and scheduled tasks. Then, in the security news this week:

First up: a technical segment on Linux threat hunting. We'll start this series by covering the best places to look for IoCs on Linux systems and devices, starting with startup services and scheduled tasks. Then, in the security news this week:

<ul class="wp-block-list">
<li>SonicWall zero-days, again</li>


<li>AI finds a pile of Cisco bugs, and a root RCE</li>


<li>Claude Code Auto Mode dangers</li>


<li>BGP hijacks your unsigned software update</li>


<li>California, Linux and age verification</li>


<li>Free movies, complimentary malware</li>


<li>Citrix puts Linux alongside Windows</li>


<li>Signal's "secure" enclave</li>


<li>An expired domain answers military phone calls</li>


<li>MORE Cheap Android TV boxes arrive pre-pwned</li>


<li>CISA red teams meet critical infrastructure</li>


<li>PaperCut vulnerability cuts both ways</li>


<li>Big Tech asks everyone to secure its AI future</li>


<li>Pacemaker monitoring</li>


<li>DOJ files on a criminal leak site</li>


<li>Water utility security, right after the breaches</li>
</ul>

<ul><li>SonicWall zero-days, again</li><li>AI finds a pile of Cisco bugs, and a root RCE</li><li>Claude Code Auto Mode dangers</li><li>BGP hijacks your unsigned software update</li><li>California, Linux and age verification</li><li>Free movies, complimentary malware</li><li>Citrix puts Linux alongside Windows</li><li>Signal's "secure" enclave</li><li>An expired domain answers military phone calls</li><li>MORE Cheap Android TV boxes arrive pre-pwned</li><li>CISA red teams meet critical infrastructure</li><li>PaperCut vulnerability cuts both ways</li><li>Big Tech asks everyone to secure its AI future</li><li>Pacemaker monitoring</li><li>DOJ files on a criminal leak site</li><li>Water utility security, right after the breaches</li></ul>

IoT

Hacking Without Boundaries – Michael Jenkins – PSW #946

AI Will Save Us, or Not? – PSW #945

BYD Shark 6 remotely hacked, exposing vehicle controls and cabin audio

Just 13% of network segments are OT-only, says Forescout Research

How to build an OT security operating model

What OT resilience actually controls

Skullcandy Dime 3 earbuds vulnerable to Bluetooth hijacking

Linux Threat Hunting – PSW #942

Fast Five

Selected by the SC Media Editorial team every Tuesday.