Black Hat

amazon_AdobeStock_317604714_Editorial_Use_Only

Cloud Security

Identity

News

Amazon ECS privilege escalation risk described at Black Hat USA 2025

Theresa Lanowitz, LevelBlue

Critical Infrastructure Security

Supply chain

Resource

LevelBlue

The software supply chain and cybersecurity

Semperis CEO Mickey Bresman

Ransomware

Semperis

Semperis’ 2025 global ransomware report

Yuval Wollman

AI/ML

Vulnerability Management

CyberProof

The 2025 mid-year threat landscape and the shifting battlefield

<body>Day 2 at BlackHat USA 2025 was a whirlwind of insights, chaos, and unforgettable moments. In this high-energy wrap-up, Dr. Doug White and Matt Alderman dive deep into today’s hottest cybersecurity themes — from agentic AI reshaping threat intel to the explosive growth of Continuous Threat Exposure Management (CTE).</body>

<body>Day 2 at BlackHat USA 2025 was a whirlwind of insights, chaos, and unforgettable moments. In this high-energy wrap-up, Dr. Doug White and Matt Alderman dive deep into today’s hottest cybersecurity themes — from agentic AI reshaping threat intel to the explosive growth of Continuous Threat Exposure Management (CTE).</body>

<body>From wandering a massive, Vegas-sized expo floor to dodging badge scanners and tracking down elusive booths (shoutout to the Yeti), it’s equal parts tech talk and con survival guide. They explore how AI is outpacing human defenders, what that means for vulnerability management, and how the industry's most forward-thinking vendors are positioning themselves in this new threat landscape.</body>

<body>From wandering a massive, Vegas-sized expo floor to dodging badge scanners and tracking down elusive booths (shoutout to the Yeti), it’s equal parts tech talk and con survival guide. They explore how AI is outpacing human defenders, what that means for vulnerability management, and how the industry's most forward-thinking vendors are positioning themselves in this new threat landscape.</body>

<body>This isn’t your typical recap — it’s part rant, part revelation, and 100% unfiltered BlackHat energy.</body>

<body>This isn’t your typical recap — it’s part rant, part revelation, and 100% unfiltered BlackHat energy.</body>

<body>Missed BlackHat? This is your fast pass to the big conversations, booth gossip, and unmissable insights.</body>

<body>Missed BlackHat? This is your fast pass to the big conversations, booth gossip, and unmissable insights.</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14209″} podcast from PPWorks

AI Arms Race, Supply Chain Nightmares & Booth Scams – Day 2 Recap – BH25 #2

<body>Welcome to Day 2 of Black Hat 2025, live from the Cyber Risk TV studio at Mandalay Bay, Las Vegas! In this engaging and unpredictable daily intro, Doug White sits down with cybersecurity expert Jackie McGuire for a candid, hilarious, and deeply insightful conversation covering today’s most pressing cyber risks.</body>

<body>Welcome to Day 2 of Black Hat 2025, live from the Cyber Risk TV studio at Mandalay Bay, Las Vegas! In this engaging and unpredictable daily intro, Doug White sits down with cybersecurity expert Jackie McGuire for a candid, hilarious, and deeply insightful conversation covering today’s most pressing cyber risks. </body>

<body>The hidden dangers in digital supply chains &amp; the growing risk of vibe coding</body>

<body>The hidden dangers in digital supply chains &amp; the growing risk of vibe coding</body>

<body>How AI blind spots can compromise software security and import practices</body>

<body>How AI blind spots can compromise software security and import practices</body>

<body>The shift in executive protection from physical guards to digital defense</body>

<body>The shift in executive protection from physical guards to digital defense</body>

<body>Real-world stories of data broker noncompliance, doxxing, and location exposure</body>

<body>Real-world stories of data broker noncompliance, doxxing, and location exposure</body>

<body>Witty breakdowns of LLM failures, sarcasm training data, and AI inconsistencies</body>

<body>Witty breakdowns of LLM failures, sarcasm training data, and AI inconsistencies</body>

<body>Whether you're a cybersecurity professional, developer, or tech enthusiast, this segment is a must-watch for understanding how today’s AI and digital ecosystems are reshaping risk management and personal security.</body>

<body>Whether you're a cybersecurity professional, developer, or tech enthusiast, this segment is a must-watch for understanding how today’s AI and digital ecosystems are reshaping risk management and personal security.</body>

<body>Don’t miss the part where Jackie discusses using deodorant as a hotel water outage workaround — or how sarcasm on motorcycle forums may be misleading your AI.</body>

<body>Don’t miss the part where Jackie discusses using deodorant as a hotel water outage workaround — or how sarcasm on motorcycle forums may be misleading your AI.</body>

<body>New interviews daily from Black Hat 2025. Subscribe and turn on notifications to stay ahead of the cyber curve!</body>

<body>New interviews daily from Black Hat 2025. Subscribe and turn on notifications to stay ahead of the cyber curve!</body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/blackhat">https://securityweekly.com/blackhat</a> for all the coverage of this year's event!</body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/blackhat">https://securityweekly.com/blackhat</a> for all the coverage of this year's event!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14208″} podcast from PPWorks

Digital Supply Chains, AI Blind Spots & Cyber Executive Protection – Black Hat Day 2 – BH25 #2

<body>Live from Black Hat 2025 in Las Vegas, Matt Alderman sits down with Rohit Dhamankar, VP of Product Strategy at Fortra, to dive deep into the evolving world of offensive security. From red teaming and pen testing to the rise of AI-powered threat simulation and continuous penetration testing, this conversation is a must-watch for CISOs, security architects, and compliance pros navigating today's dynamic threat landscape.</body>

<body>Live from Black Hat 2025 in Las Vegas, Matt Alderman sits down with Rohit Dhamankar, VP of Product Strategy at Fortra, to dive deep into the evolving world of offensive security. From red teaming and pen testing to the rise of AI-powered threat simulation and continuous penetration testing, this conversation is a must-watch for CISOs, security architects, and compliance pros navigating today's dynamic threat landscape.</body>

<body>Learn why regulatory bodies worldwide are now embedding offensive security requirements into frameworks like PCI DSS 4.0, and how organizations can adopt scalable strategies—even with limited red team resources. Rohit breaks down the nuances of purple teaming, AI-assisted red teaming, and the role of BAS platforms in enhancing defense postures.</body>

<body>Learn why regulatory bodies worldwide are now embedding offensive security requirements into frameworks like PCI DSS 4.0, and how organizations can adopt scalable strategies—even with limited red team resources. Rohit breaks down the nuances of purple teaming, AI-assisted red teaming, and the role of BAS platforms in enhancing defense postures.</body>

<body>Whether you’re building in-house capabilities or leveraging external partners, this interview reveals key insights on security maturity, strategic outsourcing, and the future of cyber offense and defense convergence.</body>

<body>Whether you’re building in-house capabilities or leveraging external partners, this interview reveals key insights on security maturity, strategic outsourcing, and the future of cyber offense and defense convergence.</body>

<body>This segment is sponsored by Fortra. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/fortrabh">https://securityweekly.com/fortrabh</a> to learn more about them!</body>

<body>This segment is sponsored by Fortra. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/fortrabh">https://securityweekly.com/fortrabh</a> to learn more about them!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14196″} podcast from PPWorks

Penetration Testing

The Rising Need for Offensive Security Strategy and Skill – Rohit Dhamankar – BH25 #2

<body>At Black Hat 2025, CyberRisk TV sits down with HD Moore, CEO &amp; Co-Founder of runZero, for a no-BS conversation on why vulnerability management is still failing enterprises — and what needs to change now. Hosted by Jackie McGuire, this interview dives deep into the real-world challenges facing security teams today: tool overload, missing assets, unauthenticated exposures, and the illusion of visibility.</body>

<body>At Black Hat 2025, CyberRisk TV sits down with HD Moore, CEO &amp; Co-Founder of runZero, for a no-BS conversation on why vulnerability management is still failing enterprises — and what needs to change now. Hosted by Jackie McGuire, this interview dives deep into the real-world challenges facing security teams today: tool overload, missing assets, unauthenticated exposures, and the illusion of visibility.</body>

<body>HD reveals how attackers are exploiting blind spots faster than defenders can react — and why unauthenticated discovery is the secret weapon defenders need. From the evolution of pentesting to the pitfalls of modern tooling, this interview offers a powerful call to rethink how we manage risk.</body>

<body>HD reveals how attackers are exploiting blind spots faster than defenders can react — and why unauthenticated discovery is the secret weapon defenders need. From the evolution of pentesting to the pitfalls of modern tooling, this interview offers a powerful call to rethink how we manage risk.</body>

<body>Why vulnerability tools are worse today than 20 years ago</body>

<body>Why vulnerability tools are worse today than 20 years ago</body>

<body>The myth of full visibility in enterprise security</body>

<body>The myth of full visibility in enterprise security</body>

<body>How AI and Shadow IT are accelerating unauthenticated risk</body>

<body>How AI and Shadow IT are accelerating unauthenticated risk</body>

<body>The "garage keypad is 1234" problem in cyber hygiene</body>

<body>The "garage keypad is 1234" problem in cyber hygiene</body>

<body>runZero’s unique approach: find everything, fast, without credentials</body>

<body>runZero’s unique approach: find everything, fast, without credentials</body>

<body>What every CISO needs to hear to justify better investments</body>

<body>What every CISO needs to hear to justify better investments</body>

<body>If you're tired of dashboards full of false confidence and alerts that don’t matter, this is your wake-up call.</body>

<body>If you're tired of dashboards full of false confidence and alerts that don’t matter, this is your wake-up call.</body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://www.runzero.com/resources/is-vuln-management-dead-psw-880/">https://www.runzero.com/resources/is-vuln-management-dead-psw-880/</a>
<a rel="noreferrer noopener" target="_blank" href="https://www.runzero.com/blog/new-era-exposure-management/">https://www.runzero.com/blog/new-era-exposure-management/</a>
<a rel="noreferrer noopener" target="_blank" href="https://www.runzero.com/resources/your-next-incident-wont-have-a-cve/">https://www.runzero.com/resources/your-next-incident-wont-have-a-cve/</a>
<a rel="noreferrer noopener" target="_blank" href="https://www.runzero.com/resources/pirates-guide-to-snake-oil-security/">https://www.runzero.com/resources/pirates-guide-to-snake-oil-security/</a></body>

<body>Segment Resources:
<a rel="noreferrer noopener" target="_blank" href="https://www.runzero.com/resources/is-vuln-management-dead-psw-880/">https://www.runzero.com/resources/is-vuln-management-dead-psw-880/</a>
<a rel="noreferrer noopener" target="_blank" href="https://www.runzero.com/blog/new-era-exposure-management/">https://www.runzero.com/blog/new-era-exposure-management/</a>
<a rel="noreferrer noopener" target="_blank" href="https://www.runzero.com/resources/your-next-incident-wont-have-a-cve/">https://www.runzero.com/resources/your-next-incident-wont-have-a-cve/</a>
<a rel="noreferrer noopener" target="_blank" href="https://www.runzero.com/resources/pirates-guide-to-snake-oil-security/">https://www.runzero.com/resources/pirates-guide-to-snake-oil-security/</a></body>

<body>Try runZero free! Get started at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/runzerobh">https://securityweekly.com/runzerobh</a></body>

<body>Try runZero free! Get started at <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/runzerobh">https://securityweekly.com/runzerobh</a></body>

Black Hat

Amazon ECS privilege escalation risk described at Black Hat USA 2025

The software supply chain and cybersecurity

Semperis’ 2025 global ransomware report

The 2025 mid-year threat landscape and the shifting battlefield

AI Arms Race, Supply Chain Nightmares & Booth Scams – Day 2 Recap – BH25 #2

Digital Supply Chains, AI Blind Spots & Cyber Executive Protection – Black Hat Day 2 – BH25 #2

The Rising Need for Offensive Security Strategy and Skill – Rohit Dhamankar – BH25 #2

You Can’t Get There From Here: Why We Need A New Way to Manage Exposure – HD Moore – BH25 #2

Fast Five

Selected by the SC Media Editorial team every Tuesday.