OT Security

Male apprentice engineer working with CNC machine in factory

Critical Infrastructure Security

Brief

Report: Operational tech remains primary target for hackers

WirelessRouter2

Threat Intelligence

Network Security

China-linked hackers hijack thousands of ASUS routers

<body><ul><li>Minecraft on your lightbulb</li><li>Sonicwall breached, who's next?</li><li>Ditch Android, install Linux</li><li>Hacking your face</li><li>Thermostat freedom</li><li>Pen test fails</li><li>HackRF hacking times 2</li><li>Going around EDR</li><li>Hackers in your printer</li><li>Chinese data breach</li><li>NFC relays and PCI</li><li>Constructive construction hacks</li><li>FlipperZero firmware update</li><li>ICS, PLCs, and attacks</li><li>Bayesian Swiss Cheese, taste good?</li><li>Do you want to hack back?</li><li>Keeping secrets</li><li>Enforcing CMMC</li><li>OWASP top ten gets a make over</li><li>Android Spyware makes a LANDFALL</li><li>Gemini's deep research into your documents</li><li>Slopguard</li><li>and AI datacenters in space!</li></ul></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14301″} podcast from PPWorks

Breach

AI/ML

Going Around EDR – PSW #900

Critical infrastructure IoT, Android devices face mounting cyberattacks

<body>Segment 1: OT Security Doesn’t Have to be a Struggle</body>

<body><h3>Segment 1: OT Security Doesn’t Have to be a Struggle</h3></body>

<body>OT/ICS/SCADA systems are often off limits to cybersecurity folks, and exempt from many controls. Attackers don’t care how fragile these systems are, however. For attackers aiming to disrupt operations, fragile but critical systems fit criminals’ plans nicely.</body>

<body><p>OT/ICS/SCADA systems are often off limits to cybersecurity folks, and exempt from many controls. Attackers don’t care how fragile these systems are, however. For attackers aiming to disrupt operations, fragile but critical systems fit criminals’ plans nicely.</p></body>

<body>In this interview, we discuss the challenge of securing OT systems with Todd Peterson and Joshua Hay from Junto Security.</body>

<body><p>In this interview, we discuss the challenge of securing OT systems with Todd Peterson and Joshua Hay from Junto Security.</p></body>

<body>This segment is sponsored by Junto Security. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/junto">https://securityweekly.com/junto</a> to learn more!</body>

<body><p>This segment is sponsored by Junto Security. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/junto">https://securityweekly.com/junto</a> to learn more!</p></body>

<body>Segment 2: Topic - Spotting Red Flags in Online Posts</body>

<body><h3>Segment 2: Topic - Spotting Red Flags in Online Posts</h3></body>

<body>This week's topic segment is all about tuning your 'spidey sense' to spot myths and misconceptions online so we can avoid amplifying AI slop, scams, and other forms of Internet bunk. It was inspired by <a rel="noreferrer noopener" target="_blank" href="https://www.linkedin.com/feed/update/urn:li:activity:7390405003657543680/">this LinkedIn post</a>, but we've got a cybersecurity story in the news that we could have easily used for this as well (the report from MIT).</body>

<body><p>This week's topic segment is all about tuning your 'spidey sense' to spot myths and misconceptions online so we can avoid amplifying AI slop, scams, and other forms of Internet bunk. It was inspired by <a rel="noreferrer noopener" target="_blank" href="https://www.linkedin.com/feed/update/urn:li:activity:7390405003657543680/">this LinkedIn post</a>, but we've got a cybersecurity story in the news that we could have easily used for this as well (the report from MIT). </p></body>

<body>Segment 3: Weekly Enterprise News</body>

<body><h3>Segment 3: Weekly Enterprise News</h3></body>

<body>Finally, in the enterprise security news,</body>

<body><p>Finally, in the enterprise security news, </p></body>

<body><ol><li>Some interesting fundings</li><li>Some more interesting acquisitions</li><li>a new AI-related term has been coined: cyberslop</li><li>the latest insights from cyber insurance claims</li><li>The AI security market isn’t nearly as big as it might seem</li><li>cybercriminals are targeting trucking and logistics to steal goods</li><li>Sorry dads, science says the smarts come from mom</li></ol></body>

<body>All that and more, on this episode of Enterprise Security Weekly.</body>

<body><p>All that and more, on this episode of Enterprise Security Weekly.</p></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14255″} podcast from PPWorks

ICS/SCADA

OT Security Doesn’t Have to be a Struggle, Spotting Red Flags, Enterprise News – Joshua Hay, Todd Peterson – ESW #432

<body><ul><li>Reversing keyboard firmware</li><li>Ghost networks</li><li>Invasion of the face changers</li><li>Ghost tapping and whole lot of FUD</li><li>AI doesn't code securely, but Aardvark can secure code</li><li>De-Googling Thermostats</li><li>Dodgy Android TV boxes can run Debian</li><li>HackRF vs. Honda</li><li>Cyberslop AI paper</li><li>Turning to the darkside</li><li>Poisoning the watering hole</li><li>Nagios vulnerabilities</li><li>VPNs are a target</li></ul></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14299″} podcast from PPWorks

Ransomware

Turning To The Darkside & AI Cyberslop – PSW #899

<body>AI Cheating?, O, Canada, npms, passkeys, Exchange, Solaris, the amazing Rob Allen of Threatlocker, and More on this edition of the Security Weekly News.</body>

<body><p>AI Cheating?, O, Canada, npms, passkeys, Exchange, Solaris, the amazing Rob Allen of Threatlocker, and More on this edition of the Security Weekly News.</p></body>

<body>Ingram Micro Working Through Ransomware Attack by SafePay Group | MSSP Alert: <a rel="noopener" target="_blank" href="https://www.msspalert.com/news/ingram-micro-working-through-ransomware-attack-by-safepay-group">https://www.msspalert.com/news/ingram-micro-working-through-ransomware-attack-by-safepay-group</a></body>

<body><p>Ingram Micro Working Through Ransomware Attack by SafePay Group | MSSP Alert: <a rel="noopener" target="_blank" href="https://www.msspalert.com/news/ingram-micro-working-through-ransomware-attack-by-safepay-group">https://www.msspalert.com/news/ingram-micro-working-through-ransomware-attack-by-safepay-group</a></p></body>

<body>This segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlocker">https://securityweekly.com/threatlocker</a> to learn more about them!</body>

<body><p>This segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlocker">https://securityweekly.com/threatlocker</a> to learn more about them!</p></body>