Paul's Security Weekly (Audio)
by Paul Asadoorian
Latest episode
Holes In Everything, Even SSH - PSW #952
Holes In Everything, Even SSH - PSW #952
About this podcast
For the latest in computer security news, hacking, and research! We sit around, drink beer, and talk security. Our show will feature technical segments that show you how to use the latest tools and techniques. Special guests appear on the show to enlighten us and change your perspective on information security. Note: This is only Paul's Security Weekly, a 2-hour show recorded once per week.
Episodes
The newest 50 of 657 episodes
- Holes In Everything, Even SSH - PSW #952 · 2 h 2 minIn the security news this week: • SSH in Shambles • Santa steals your podcast setup • SAP's double feature • Terminal2Shell is CVSS 11 • Dormant neurons, active backdoor •…
- "That's Not Supposed to Happen" - PSW #951 · 2 h 4 minIn the security news: • Supermarket refrigeration attacks, again! • Rapid7's Ivanti findings and why we can't have "nice" things • Google's massive Android TV botnet takedown •…
- Vulnpocalypse Continues Until Defense Improves - PSW #950 · 2 h 8 minIn the security news this week: In the security news this week: • Cisco says patch faster, then sells you time • Turning AI refusals into vulnerability signals • Brotli's are…
- PHP2Hell - Joshua Wright - PSW #949 · 2 h 9 minSpecial guest Joshua Wright joins us for a timely incident-response discussion! Then, in the security news this week: • Have you heard about PHP2Shell? • Certificates with keys…
- AI Takes Over? - Danny Akacki - PSW #948 · 2 h 0 minIn the security news this week: • Convert this router into an SDR • Ivanti straight to root • Anthropic's AI worm FUD • A kernel exploit to fix downloads • Supermarket…
- Routers on Trial, AI Found More Bugs - PSW #947 · 2 h 1 minIn the security news this week: • BPFDoor • OpenSSH compresses a little too much • AI can find bugs. Who gets them fixed? • TP-Link and the courts • Cisco NX-API • ClingSTUN •…
- Hacking Without Boundaries - Michael Jenkins - PSW #946 · 2 h 1 minFirst up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero Trust. Then in the security news: • Compiling…
- AI Will Save Us, or Not? - PSW #945 · 2 h 3 minIn the security news this week: • Build your own router, or just buy one • What to patch first • But maybe don't buy D-Link • AI nearly starts a war • Flock cameras lose their…
- AI hates CAPTCHAs - PSW #944 · 2 h 4 minIn the security news this week: • UK government rolls out passkeys to 20 million users • Phishing-resistant authentication and replay resistance • Passkey adoption, device…
- It's More Secure When It's Disabled - PSW #943 · 2 h 2 minIn the security news this week: • Microsoft patches all the things • Commissary freezers enter cyberwar • Fake AV, real Defender nap • Rowhammer comes for the GPU • BIOS updates…
- Linux Threat Hunting - PSW #942 · 2 h 12 minFirst up: a technical segment on Linux threat hunting. We'll start this series by covering the best places to look for IoCs on Linux systems and devices, starting with startup…
- Hacking All The Devices, with AI? - Rob Allen - PSW #941 · 2 h 6 minRob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access controls to limit what agents can access and do. This…
- Rejoice In The Nostalgia - PSW #940 · 2 h 8 minIn the security news this week: • Cursor opens your repo, the repo opens you • If you want the good model I'm going to need to see your ID • Flock's a Flocking mess • Defender…
- The Breached WiFi AI Ports... What? - PSW #939 · 2 h 4 minIn the security news this week: • North Carolina ports and contingency plans • Back to paper and pencils • Midnight Blizzard compromises hotel Wi-Fi • DNS strikes again •…
- When AI Commits Felonies - PSW #938 · 1 h 58 minThis week: • When you are not at summer camp you can't read about it • The Fettle continues • Using the CFAA against AI • Social contracts are not security models • VSCode…
- Sandwich Hats - PSW #937 · 2 h 5 minIn the security news: • 2.2 million cars, one shared Bluetooth key • JFrog tries to spin an AI 0-day into a win • Sextortion scammers recycling ShinyHunters' leaks • The first…
- Fixing Vulns Is Harder Than Finding Them - PSW #936 · 2 h 2 minIn the news this week: • InfraTrust and knowing what to patch • Adversary in the middle triggered command injection • Exploitarium again • FreeRDP comes with free…
- 1999 Called and It Wants It's Exploits Back - PSW #935 · 2 h 11 minThis week, our technical segment covers a new open-source tool written by Paul (and Claude) that helps you keep your Linux systems up to date and assess supply chain risks. It's…
- AI Is Annoying & IoT Devices Still Get Hacked - PSW #934 · 2 h 5 minIn the security news: • Son of Anton strikes again! • HalluSquatting and using Claude to defend itself • CISA KEV's Revolving Door • LLM's hallucinate and companies get sued •…
- Linux Tech Segment & Vulnerabilities Galore - PSW #933 · 2 h 9 minThis week we have a technical segment based on the response to "Atomic Arch", an updated open-source tool to help you catch malicious packages. In the security news: •…
- Cloud Visibility, Fortibleed, hacking things the easy way - Sandy Bird - PSW #932 · 2 h 13 minFirst up is Sandy Bird from Sonrai discussing how to protect our cloud infrastructure! This segment is sponsored by Sonrai Security. Visit https://securityweekly.com/sonrai to…
- GPS, PCI, ARCH, OH MY! - PSW #931 · 2 h 6 minIn the security news this week: • GPS spoofing and satellite jamming are getting way too accessible • Rekeying satellites in orbit sounds terrifying • Cyber extortion and…
- Trolling Microsoft With Vulnerabilities - PSW #930 · 2 h 2 minIn the security news: • Trolling Microsoft With Vulnerabilities • Fable 5 loves guardrails • Binwalk vulnerability • EMBA and local models • EDRChoker • AI worms • Interesting…
- Security Researchers Are Threat Actors - PSW #929 · 2 h 1 minThis week in the security news: • Security Researchers Are Threat Actors according to Microsoft • Hands-free malicious firmware • If you've ever typed "ls" in Windows, this is…
- Linux Supply Chain How-To - PSW #928 · 2 h 4 minThis week we have a technical segment focused on Linux! Paul released a script that helps you get a handle on Linux supply chain security, and new features allow you to assess…
- FCC, Github, MiniShai-hulud, Stated of Supply Chain, Itron, CRA, NIS2, and more!! - PSW #927 · 2 h 2 minIn the security news this week: • FCC router bans and the hidden firmware update problem • Why extending support timelines actually improves security • Github supply chain…
- You're not going to patch your way out of this - PSW #926 · 2 h 2 minThis week: • New Yellowkey bitlocker bypass and what it means for you • Hackers can run you over with a robot lawnmower • FCC says new things about routers, again • Glitching…
- Getting Rid of Your VPN - Rob Allen - PSW #925 · 2 h 4 minRob Allen from Threatlocker joins us to discuss the risks associated with VPN appliances and how to implement better security solutions that don't leave you hanging out on the…
- FIRESTARTER - PSW #924 · 2 h 2 minThis week in the security news: • Are you a FIRESTARTER? • Eavesdropping via fiber-optic cables • Copy Fail - more Linux LPE • Github RCE • Running Linux on a PS5 • BadUSB…
- Back to (or Start) Fundamentals? - Rajesh Khazanchi - PSW #923 · 2 h 3 minThis week: Larry's in the host seat and chaos ensues. We dig into: • A very questionable story about tracking a warship with a $5 Bluetooth tracker • Serial-to-IP devices…
- The AI "Vulnpocolypse" Is Real? - PSW #922 · 2 h 4 minThis week: • CSA issues guidance to CISOs on Mythos • Vuln management woes • Windows tells you about Secure Boot • AI-assisted firmware vuln hunting • The dumbest hack • Edge…
- AI Makes All Bug Shallow? - PSW #921 · 2 h 5 minThis week: • Rage dropping 0-Day • Claude Mythos, things are different now • From UART to root, on a device made in China, where's the FCC? • More CUPS vulnerabilities •…
- What Is A Router? (And all things AI) - PSW #920 · 2 h 5 minIn the Security News: • Claude leaks source code and new models • Two really smart people say AI is finding vulnerabilities better than ever • Windows is using your internet to…
- Scanning The Internet with Linux Tools - PSW #919 · 1 h 3 minIn this segment, we will explore some pretty awesome tools for scanning the Internet, with a focus on network edge devices. We'll bring it all together with Claude Code and look…
- Hacking IP KVMs & Reversing with Radare2 - Sergi Àlvarez - PSW #918 · 2 h 10 minIn this episode, we sit down with the Radare community leader, Pancake, the creator of the Radare2 reverse engineering framework. Whether you've never heard of Radare, already…
- Vulnerability Mis-Management - PSW #917 · 2 h 3 minIn the security news this week: • The XZ backdoor documentary • Zero days - the clock isn't ticking • Vulnerability Mis-Management • Reversing traffic light controllers •…
- Airsnitch, Claude, Hacking Firewalls - PSW #916 · 2 h 3 minIn the security news this week: • Remembering "FX" • Finding and analyzing Windows drivers • Network monitoring with Gibson • the backdoor in your PAM • The edge is fraying…
- AI Is Taking Over Cybersecurity - PSW #915 · 2 h 1 minFirst up is a technical segment called "Paul's Linux Hacks". I finally got around to releasing a bunch of scripts and tutorials for Linux that I've created over the years. We'll…
- Firmware Backdoors Be Spying On You - PSW #914 · 2 h 6 minAI says that this is the show where we turn coffee into threat intelligence and cigar smoke into packet captures. This week: • a firmware backdoor living its best life inside…
- AI Vulnerability Hunting - PSW #913 · 2 h 4 minIn the security news: • Viral AI prompts • Things to do in your home security lab • I can open your garage door • They call me DKnife • Beyondtrust RCE • Cool AI device • Robots…
- AI: No One Is Safe - PSW #912 · 2 h 5 minIn the security news this week: • Residential proxy abuse is everywhere this week: from Google's takedown of IPIDEA to massive Citrix NetScaler scanning and the Badbox 2.0…
- To curmudgeon or not to curmudgeon, that is the question. - PSW #911 · 2 h 4 minThis week, we get un-curmudgeoned by Mandy, spending a bunch of time talking about regulations, compliance, and even the US federal government's commitment to cybersecurity…
- We Left It Vulnerable On Purpose - Rob Allen - PSW #910 · 2 h 16 minIn the security news: • Rainbow tables for everyone • Lilygo releases a new T-Display that looks awesome • AI generated malware for real • Detecting BadUSB when its not a dongle…
- Digging For Vulnerability Gold - PSW #909 · 2 h 7 minIn the security news: • KVMs are a hacker's dream • Hacking an e-scooter • Flipper Zero alternatives • The best authentication bypass • Pwning Claude Code • ForiSIEM…
- No FlipperZeros Allowed - PSW #908 · 2 h 5 minThis week in the security news: • Supply chain attacks and XSS • PS5 leaked keys • Claude tips for security pros • No Flipper Zeros allowed, or Raspberry PIs for that matter •…
- Breaking Into Cybersecurity - PSW #907 · 1 h 5 minOur field is booming! Cybersecurity jobs are projected to grow 33 percent through 2033, far outpacing the average 4 percent growth across all jobs. (And yes, those stats could be…
- Building a Hacking Lab in 2025 - PSW #906 · 1 h 3 minThe crew makes suggestions for building a hacking lab today! We will tackle: • What is recommended today to build a lab, given the latest advancements in tech • Hardware hacking…
- With AI Nothing Is Safe - PSW #905 · 2 h 13 minThis week in the security news: • Linux process injection • Threat actors need training too • A Linux device "capable of practically anything" • The Internet of webcams •…
- Tech Segment: MITM Automation + Security News - Josh Bressers - PSW #904 · 2 h 7 minThis week in our technical segment, you will learn how to build a MITM proxy device using Kali Linux, some custom scripts, and a Raspberry PI! In the security news: • Hacking…
- Holiday Hack Challenge, AI, Internet of Trash - Ed Skoudis - PSW #903 · 2 h 10 minThis week we welcome Ed Skoudis to talk about the holiday hack challenge (https://sans.org/HolidayHack). In the security news: • Oh Asus • Dashcam botnets • Weird CVEs being…
