OT Security

Tech Explainer_Critical-infrastructure-security

Critical Infrastructure Security

Government security

ICS/SCADA

Nexus

Supply chain

Tech Explainer

What OT detection actually reveals

Executive Decision Guide_Critical-infrastructure-security

Executive Decision Guide

What OT resilience failure costs the business


<ul class="wp-block-list">
<li>Convert this router into an SDR</li>


<li>Ivanti straight to root</li>


<li>Anthropic’s AI worm FUD</li>


<li>A kernel exploit to fix downloads</li>


<li>Supermarket refrigeration attacks</li>


<li>400 mystery Java vulnerabilities</li>


<li>Authentication bypass</li>


<li>Russia meets the data-center war</li>


<li>Stop &amp; Shop attacked</li>


<li>Anthropic cuts eval agents</li>


<li>AI incident reporting</li>


<li>FortiBleed lives</li>


<li>Anthropic offers scanning</li>


<li>Pre-compromised phones</li>


<li>FakeGit returns</li>


<li>Teams deepfake detection</li>


<li>Let’s Encrypt certificates get shorter</li>


<li>GitLab ships another critical patch</li>


<li>Engineer gets prison time for locking thousands of devices</li>


<li>OpenAI employee accused of planting a hidden recorder</li>
</ul>


<ul><li>Convert this router into an SDR</li><li>Ivanti straight to root</li><li>Anthropic’s AI worm FUD</li><li>A kernel exploit to fix downloads</li><li>Supermarket refrigeration attacks</li><li>400 mystery Java vulnerabilities</li><li>Authentication bypass</li><li>Russia meets the data-center war</li><li>Stop &amp; Shop attacked</li><li>Anthropic cuts eval agents</li><li>AI incident reporting</li><li>FortiBleed lives</li><li>Anthropic offers scanning</li><li>Pre-compromised phones</li><li>FakeGit returns</li><li>Teams deepfake detection</li><li>Let’s Encrypt certificates get shorter</li><li>GitLab ships another critical patch</li><li>Engineer gets prison time for locking thousands of devices</li><li>OpenAI employee accused of planting a hidden recorder</li></ul>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15250″} podcast from PPWorks

AI/ML

AI benefits/risks

AI Takes Over? – Danny Akacki – PSW #948

Brief

LG smart TV vulnerabilities allow root access over local network

Internet of Things (IoT)

Malware

Threat Intelligence

Anthropic researchers demonstrate autonomous AI replication on IoT devices

Implementation Guide_Critical-infrastructure-security

Implementation Guides

Management of Change for OT Security: Running Visibility and Remediation Through MoC


<ul class="wp-block-list">
<li>BPFDoor </li>


<li>OpenSSH compresses a little too much</li>


<li>AI can find bugs. Who gets them fixed?</li>


<li>TP-Link and the courts</li>


<li>Cisco NX-API </li>


<li>ClingSTUN </li>


<li>LineageOS, Android TV, and a Raspberry PI</li>


<li>Dell’s updater has a privilege problem</li>


<li>SonicWall SSRF</li>


<li>U-Boot’s LogoFAIL like</li>


<li>Exploit-DB isn’t dead</li>


<li>MFA passes. The attacker still gets in.</li>


<li>LakeShark and cool gadgets</li>


<li>Kasa cameras and an exposed debug interface</li>


<li>SharePoint hardening is back on the checklist</li>


<li>Google pauses open-source bug bounty submissions</li>


<li>NetScaler’s latest vulnerability needs a closer look</li>


<li>Kiteworks tells customers to shut it down</li>


<li>Exchange gets an unexpected security update</li>


<li>Do LLMs actually reason?</li>


<li>disagree on AI risk?</li>


<li>Anthropic, AI consciousness and the Vatican</li>


<li>Grok gets involved in foreign policy</li>


<li>WordPress malware that survives cleanup</li>


<li>Can spyware vendors stop their own tools?</li>


<li>When an AI chatbot conversation reaches the police</li>


<li>Open-weight AI models enter the cyber debate</li>


<li>AI agents take their attacks shopping</li>
</ul>


<ul><li>BPFDoor </li><li>OpenSSH compresses a little too much</li><li>AI can find bugs. Who gets them fixed?</li><li>TP-Link and the courts</li><li>Cisco NX-API </li><li>ClingSTUN </li><li>LineageOS, Android TV, and a Raspberry PI</li><li>Dell’s updater has a privilege problem</li><li>SonicWall SSRF</li><li>U-Boot’s LogoFAIL like</li><li>Exploit-DB isn’t dead</li><li>MFA passes. The attacker still gets in.</li><li>LakeShark and cool gadgets</li><li>Kasa cameras and an exposed debug interface</li><li>SharePoint hardening is back on the checklist</li><li>Google pauses open-source bug bounty submissions</li><li>NetScaler’s latest vulnerability needs a closer look</li><li>Kiteworks tells customers to shut it down</li><li>Exchange gets an unexpected security update</li><li>Do LLMs actually reason?</li><li>disagree on AI risk?</li><li>Anthropic, AI consciousness and the Vatican</li><li>Grok gets involved in foreign policy</li><li>WordPress malware that survives cleanup</li><li>Can spyware vendors stop their own tools?</li><li>When an AI chatbot conversation reaches the police</li><li>Open-weight AI models enter the cyber debate</li><li>AI agents take their attacks shopping</li></ul>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15248″} podcast from PPWorks

Routers on Trial, AI Found More Bugs – PSW #947

First up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero Trust. Then in the security news:

<p>First up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero Trust. Then in the security news:</p>


<ul class="wp-block-list">
<li>Compiling spreadsheets, because that's why</li>


<li>Nvidia wants to put AI agents in timeout</li>


<li>Citrix NetScaler gets exploited again, and again</li>


<li>Spectre still refuses to die</li>


<li>Your SBOM is incomplete?</li>


<li>File notifications leak more than filenames</li>


<li>ENIAC had cables instead of a BIOS</li>


<li>Another Linux kernel root exploit lands</li>


<li>Containers share a kernel</li>


<li>ThinkNode M9 microSD card gets a virus notice</li>


<li>Google analyst infiltrates a supply-chain gang</li>


<li>Your phone speaker can transmit radio</li>


<li>Reconstructing firmware with a logic analyzer</li>


<li>Robot dogs learn cybersecurity</li>


<li>CISA warns about third-party ICS integrators</li>


<li>Dutch police arrest a ShinyHunters suspect</li>


<li>A soldier goes from telecom hacking to prison</li>


<li>AI companies discover their agents have opinions</li>


<li>Cloudflare containers accidentally share leftovers</li>


<li>OT networks are still mostly not isolated</li>


<li>Florida wants to pause ChatGPT</li>
</ul>


<ul><li>Compiling spreadsheets, because that's why</li><li>Nvidia wants to put AI agents in timeout</li><li>Citrix NetScaler gets exploited again, and again</li><li>Spectre still refuses to die</li><li>Your SBOM is incomplete?</li><li>File notifications leak more than filenames</li><li>ENIAC had cables instead of a BIOS</li><li>Another Linux kernel root exploit lands</li><li>Containers share a kernel</li><li>ThinkNode M9 microSD card gets a virus notice</li><li>Google analyst infiltrates a supply-chain gang</li><li>Your phone speaker can transmit radio</li><li>Reconstructing firmware with a logic analyzer</li><li>Robot dogs learn cybersecurity</li><li>CISA warns about third-party ICS integrators</li><li>Dutch police arrest a ShinyHunters suspect</li><li>A soldier goes from telecom hacking to prison</li><li>AI companies discover their agents have opinions</li><li>Cloudflare containers accidentally share leftovers</li><li>OT networks are still mostly not isolated</li><li>Florida wants to pause ChatGPT</li></ul>

The interview segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlocker">https://securityweekly.com/threatlocker</a> to learn more about them!

<p>The interview segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlocker">https://securityweekly.com/threatlocker</a> to learn more about them!</p>