OT Security

Implementation Guide_Critical-infrastructure-security

Critical Infrastructure Security

Government security

ICS/SCADA

Nexus

Supply chain

Implementation Guides

Management of change for OT security: running visibility and remediation through MoC


<ul class="wp-block-list">
<li>BPFDoor </li>


<li>OpenSSH compresses a little too much</li>


<li>AI can find bugs. Who gets them fixed?</li>


<li>TP-Link and the courts</li>


<li>Cisco NX-API </li>


<li>ClingSTUN </li>


<li>LineageOS, Android TV, and a Raspberry PI</li>


<li>Dell’s updater has a privilege problem</li>


<li>SonicWall SSRF</li>


<li>U-Boot’s LogoFAIL like</li>


<li>Exploit-DB isn’t dead</li>


<li>MFA passes. The attacker still gets in.</li>


<li>LakeShark and cool gadgets</li>


<li>Kasa cameras and an exposed debug interface</li>


<li>SharePoint hardening is back on the checklist</li>


<li>Google pauses open-source bug bounty submissions</li>


<li>NetScaler’s latest vulnerability needs a closer look</li>


<li>Kiteworks tells customers to shut it down</li>


<li>Exchange gets an unexpected security update</li>


<li>Do LLMs actually reason?</li>


<li>disagree on AI risk?</li>


<li>Anthropic, AI consciousness and the Vatican</li>


<li>Grok gets involved in foreign policy</li>


<li>WordPress malware that survives cleanup</li>


<li>Can spyware vendors stop their own tools?</li>


<li>When an AI chatbot conversation reaches the police</li>


<li>Open-weight AI models enter the cyber debate</li>


<li>AI agents take their attacks shopping</li>
</ul>


<ul><li>BPFDoor </li><li>OpenSSH compresses a little too much</li><li>AI can find bugs. Who gets them fixed?</li><li>TP-Link and the courts</li><li>Cisco NX-API </li><li>ClingSTUN </li><li>LineageOS, Android TV, and a Raspberry PI</li><li>Dell’s updater has a privilege problem</li><li>SonicWall SSRF</li><li>U-Boot’s LogoFAIL like</li><li>Exploit-DB isn’t dead</li><li>MFA passes. The attacker still gets in.</li><li>LakeShark and cool gadgets</li><li>Kasa cameras and an exposed debug interface</li><li>SharePoint hardening is back on the checklist</li><li>Google pauses open-source bug bounty submissions</li><li>NetScaler’s latest vulnerability needs a closer look</li><li>Kiteworks tells customers to shut it down</li><li>Exchange gets an unexpected security update</li><li>Do LLMs actually reason?</li><li>disagree on AI risk?</li><li>Anthropic, AI consciousness and the Vatican</li><li>Grok gets involved in foreign policy</li><li>WordPress malware that survives cleanup</li><li>Can spyware vendors stop their own tools?</li><li>When an AI chatbot conversation reaches the police</li><li>Open-weight AI models enter the cyber debate</li><li>AI agents take their attacks shopping</li></ul>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15248″} podcast from PPWorks

AI/ML

AI benefits/risks

Routers on Trial, AI Found More Bugs – PSW #947

First up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero Trust. Then in the security news:

<p>First up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero Trust. Then in the security news:</p>


<ul class="wp-block-list">
<li>Compiling spreadsheets, because that's why</li>


<li>Nvidia wants to put AI agents in timeout</li>


<li>Citrix NetScaler gets exploited again, and again</li>


<li>Spectre still refuses to die</li>


<li>Your SBOM is incomplete?</li>


<li>File notifications leak more than filenames</li>


<li>ENIAC had cables instead of a BIOS</li>


<li>Another Linux kernel root exploit lands</li>


<li>Containers share a kernel</li>


<li>ThinkNode M9 microSD card gets a virus notice</li>


<li>Google analyst infiltrates a supply-chain gang</li>


<li>Your phone speaker can transmit radio</li>


<li>Reconstructing firmware with a logic analyzer</li>


<li>Robot dogs learn cybersecurity</li>


<li>CISA warns about third-party ICS integrators</li>


<li>Dutch police arrest a ShinyHunters suspect</li>


<li>A soldier goes from telecom hacking to prison</li>


<li>AI companies discover their agents have opinions</li>


<li>Cloudflare containers accidentally share leftovers</li>


<li>OT networks are still mostly not isolated</li>


<li>Florida wants to pause ChatGPT</li>
</ul>


<ul><li>Compiling spreadsheets, because that's why</li><li>Nvidia wants to put AI agents in timeout</li><li>Citrix NetScaler gets exploited again, and again</li><li>Spectre still refuses to die</li><li>Your SBOM is incomplete?</li><li>File notifications leak more than filenames</li><li>ENIAC had cables instead of a BIOS</li><li>Another Linux kernel root exploit lands</li><li>Containers share a kernel</li><li>ThinkNode M9 microSD card gets a virus notice</li><li>Google analyst infiltrates a supply-chain gang</li><li>Your phone speaker can transmit radio</li><li>Reconstructing firmware with a logic analyzer</li><li>Robot dogs learn cybersecurity</li><li>CISA warns about third-party ICS integrators</li><li>Dutch police arrest a ShinyHunters suspect</li><li>A soldier goes from telecom hacking to prison</li><li>AI companies discover their agents have opinions</li><li>Cloudflare containers accidentally share leftovers</li><li>OT networks are still mostly not isolated</li><li>Florida wants to pause ChatGPT</li></ul>

The interview segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlocker">https://securityweekly.com/threatlocker</a> to learn more about them!

<p>The interview segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlocker">https://securityweekly.com/threatlocker</a> to learn more about them!</p>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15246″} podcast from PPWorks

Hacking Without Boundaries – Michael Jenkins – PSW #946


<ul class="wp-block-list">
<li>Build your own router, or just buy one</li>


<li>What to patch first</li>


<li>But maybe don't buy D-Link</li>


<li>AI nearly starts a war</li>


<li>Flock cameras lose their keys</li>


<li>The AI slowdown won’t save bad security</li>


<li>Opus at home, just slower</li>


<li>Black Hat says fundamentals still work</li>


<li>Hacker gadgets, and my top pick</li>


<li>Gyazo screenshots</li>


<li>Fake job interviews, real malware</li>


<li>VINCE gets a new home</li>


<li>Munich university gets disconnected</li>


<li>LinkedIn fights the scraping machine</li>


<li>SolarWinds hard-codes another bad idea</li>


<li>Fake LastPass kills 145 security tools</li>


<li>Colorado water gets its settings changed</li>


<li>AI CEOs sell apocalypse and bonds</li>


<li>The AI safety cult gets audited</li>


<li>Ransomware recovery takes weeks, not hours</li>


<li>TeamPCP’s supply-chain tour continues</li>


<li>Zuckoff hunts smart glasses</li>
</ul>


<ul><li>Build your own router, or just buy one</li><li>What to patch first</li><li>But maybe don't buy D-Link</li><li>AI nearly starts a war</li><li>Flock cameras lose their keys</li><li>The AI slowdown won’t save bad security</li><li>Opus at home, just slower</li><li>Black Hat says fundamentals still work</li><li>Hacker gadgets, and my top pick</li><li>Gyazo screenshots</li><li>Fake job interviews, real malware</li><li>VINCE gets a new home</li><li>Munich university gets disconnected</li><li>LinkedIn fights the scraping machine</li><li>SolarWinds hard-codes another bad idea</li><li>Fake LastPass kills 145 security tools</li><li>Colorado water gets its settings changed</li><li>AI CEOs sell apocalypse and bonds</li><li>The AI safety cult gets audited</li><li>Ransomware recovery takes weeks, not hours</li><li>TeamPCP’s supply-chain tour continues</li><li>Zuckoff hunts smart glasses</li></ul>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15244″} podcast from PPWorks

AI Will Save Us, or Not? – PSW #945

vulnerability_AdobeStock_422696210

Brief

BYD Shark 6 remotely hacked, exposing vehicle controls and cabin audio

Micro-Segmentation Architecture for Zero Trust Enterprise Security

OT Security

Management of change for OT security: running visibility and remediation through MoC

Routers on Trial, AI Found More Bugs – PSW #947

Hacking Without Boundaries – Michael Jenkins – PSW #946

AI Will Save Us, or Not? – PSW #945

BYD Shark 6 remotely hacked, exposing vehicle controls and cabin audio

Just 13% of network segments are OT-only, says Forescout Research

How to build an OT security operating model

What OT resilience actually controls

Fast Five

Selected by the SC Media Editorial team every Tuesday.