Paul's Security Weekly (Video)
by Paul Asadoorian
Latest episode
"That's Not Supposed to Happen" - PSW #951
"That's Not Supposed to Happen" - PSW #951
About this podcast
Where security veterans unpack the latest IT security news, vulnerabilities, and research through a historical and technical lens that can cut through even the thickest cigar smoke. Hosted by Paul Asadoorian and Larry Pesce. Co-hosts: Josh Marpet, Jeff Man, Mandy Logan, Tyler Robinson.
Episodes
The newest 50 of 1,225 episodes
- "That's Not Supposed to Happen" - PSW #951 · 2 h 4 minIn the security news: • Supermarket refrigeration attacks, again! • Rapid7's Ivanti findings and why we can't have "nice" things • Google's massive Android TV botnet takedown •…
- Vulnpocalypse Continues Until Defense Improves - PSW #950 · 2 h 8 minIn the security news this week: In the security news this week: • Cisco says patch faster, then sells you time • Turning AI refusals into vulnerability signals • Brotli's are…
- PHP2Hell - Joshua Wright - PSW #949 · 2 h 9 minSpecial guest Joshua Wright joins us for a timely incident-response discussion! Then, in the security news this week: • Have you heard about PHP2Shell? • Certificates with keys…
- AI Takes Over? - Danny Akacki - PSW #948 · 2 h 0 minIn the security news this week: • Convert this router into an SDR • Ivanti straight to root • Anthropic's AI worm FUD • A kernel exploit to fix downloads • Supermarket…
- Routers on Trial, AI Found More Bugs - PSW #947 · 2 h 1 minIn the security news this week: • BPFDoor • OpenSSH compresses a little too much • AI can find bugs. Who gets them fixed? • TP-Link and the courts • Cisco NX-API • ClingSTUN •…
- Hacking Without Boundaries - Michael Jenkins - PSW #946 · 2 h 1 minFirst up we talk with Threatlocker CTO Michael Jenkins about threat actors use of AI and keeping the bad things out with Zero Trust. Then in the security news: • Compiling…
- AI Will Save Us, or Not? - PSW #945 · 2 h 3 minIn the security news this week: • Build your own router, or just buy one • What to patch first • But maybe don't buy D-Link • AI nearly starts a war • Flock cameras lose their…
- AI hates CAPTCHAs - PSW #944 · 2 h 4 minIn the security news this week: • UK government rolls out passkeys to 20 million users • Phishing-resistant authentication and replay resistance • Passkey adoption, device…
- It's More Secure When It's Disabled - PSW #943 · 2 h 2 minIn the security news this week: • Microsoft patches all the things • Commissary freezers enter cyberwar • Fake AV, real Defender nap • Rowhammer comes for the GPU • BIOS updates…
- Linux Threat Hunting - PSW #942 · 2 h 12 minFirst up: a technical segment on Linux threat hunting. We'll start this series by covering the best places to look for IoCs on Linux systems and devices, starting with startup…
- Hacking All The Devices, with AI? - Rob Allen - PSW #941 · 2 h 6 minRob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access controls to limit what agents can access and do. This…
- Rejoice In The Nostalgia - PSW #940 · 2 h 8 minIn the security news this week: • Cursor opens your repo, the repo opens you • If you want the good model I'm going to need to see your ID • Flock's a Flocking mess • Defender…
- The Breached WiFi AI Ports... What? - PSW #939 · 2 h 4 minIn the security news this week: • North Carolina ports and contingency plans • Back to paper and pencils • Midnight Blizzard compromises hotel Wi-Fi • DNS strikes again • Captive…
- When AI Commits Felonies - PSW #938 · 1 h 58 minThis week: • When you are not at summer camp you can't read about it • The Fettle continues • Using the CFAA against AI • Social contracts are not security models • VSCode…
- Sandwich Hats - PSW #937 · 2 h 5 minIn the security news: • 2.2 million cars, one shared Bluetooth key • JFrog tries to spin an AI 0-day into a win • Sextortion scammers recycling ShinyHunters' leaks • The first…
- Fixing Vulns Is Harder Than Finding Them - PSW #936 · 2 h 2 minIn the news this week: • InfraTrust and knowing what to patch • Adversary in the middle triggered command injection • Exploitarium again • FreeRDP comes with free…
- 1999 Called and It Wants It's Exploits Back - PSW #935 · 2 h 11 minThis week, our technical segment covers a new open-source tool written by Paul (and Claude) that helps you keep your Linux systems up to date and assess supply chain risks. It's…
- AI Is Annoying & IoT Devices Still Get Hacked - PSW #934 · 2 h 5 minIn the security news: • Son of Anton strikes again! • HalluSquatting and using Claude to defend itself • CISA KEV's Revolving Door • LLM's hallucinate and companies get sued •…
- Linux Tech Segment & Vulnerabilities Galore - PSW #933 · 2 h 9 minThis week we have a technical segment based on the response to "Atomic Arch", an updated open-source tool to help you catch malicious packages. In the security news: •…
- Cloud Visibility, Fortibleed, hacking things the easy way - Sandy Bird - PSW #932 · 2 h 13 minFirst up is Sandy Bird from Sonrai discussing how to protect our cloud infrastructure! This segment is sponsored by Sonrai Security. Visit https://securityweekly.com/sonrai to…
- GPS, PCI, ARCH, OH MY! - PSW #931 · 2 h 6 minIn the security news this week: • GPS spoofing and satellite jamming are getting way too accessible • Rekeying satellites in orbit sounds terrifying • Cyber extortion and…
- Trolling Microsoft With Vulnerabilities - PSW #930 · 2 h 2 minIn the security news: • Trolling Microsoft With Vulnerabilities • Fable 5 loves guardrails • Binwalk vulnerability • EMBA and local models • EDRChoker • AI worms • Interesting…
- Security Researchers Are Threat Actors - PSW #929 · 2 h 1 minThis week in the security news: • Security Researchers Are Threat Actors according to Microsoft • Hands-free malicious firmware • If you've ever typed "ls" in Windows, this is…
- Linux Supply Chain How-To - PSW #928 · 2 h 4 minThis week we have a technical segment focused on Linux! Paul released a script that helps you get a handle on Linux supply chain security, and new features allow you to assess…
- FCC, Github, MiniShai-hulud, Stated of Supply Chain, Itron, CRA, NIS2, and more!! - PSW #927 · 2 h 2 minIn the security news this week: • FCC router bans and the hidden firmware update problem • Why extending support timelines actually improves security • Github supply chain…
- You're not going to patch your way out of this - PSW #926 · 2 h 2 minThis week: • New Yellowkey bitlocker bypass and what it means for you • Hackers can run you over with a robot lawnmower • FCC says new things about routers, again • Glitching…
- Getting Rid of Your VPN - Rob Allen - PSW #925 · 2 h 4 minRob Allen from Threatlocker joins us to discuss the risks associated with VPN appliances and how to implement better security solutions that don't leave you hanging out on the…
- FIRESTARTER - PSW #924 · 2 h 2 minThis week in the security news: • Are you a FIRESTARTER? • Eavesdropping via fiber-optic cables • Copy Fail - more Linux LPE • Github RCE • Running Linux on a PS5 • BadUSB…
- Back to (or Start) Fundamentals? - Rajesh Khazanchi - PSW #923 · 2 h 3 minThis week: Larry's in the host seat and chaos ensues. We dig into: • A very questionable story about tracking a warship with a $5 Bluetooth tracker • Serial-to-IP devices…
- The AI "Vulnpocolypse" Is Real? - PSW #922 · 2 h 4 minThis week: • CSA issues guidance to CISOs on Mythos • Vuln management woes • Windows tells you about Secure Boot • AI-assisted firmware vuln hunting • The dumbest hack • Edge…
- AI Makes All Bug Shallow? - PSW #921 · 2 h 5 minThis week: • Rage dropping 0-Day • Claude Mythos, things are different now • From UART to root, on a device made in China, where's the FCC? • More CUPS vulnerabilities •…
- What Is A Router? (And all things AI) - PSW #920 · 2 h 5 minIn the Security News: • Claude leaks source code and new models • Two really smart people say AI is finding vulnerabilities better than ever • Windows is using your internet to…
- Scanning The Internet with Linux Tools - PSW #919 · 1 h 3 minIn this segment, we will explore some pretty awesome tools for scanning the Internet, with a focus on network edge devices. We'll bring it all together with Claude Code and look…
- Hacking IP KVMs & Reversing with Radare2 - Sergi Àlvarez - PSW #918 · 2 h 10 minIn this episode, we sit down with the Radare community leader, Pancake, the creator of the Radare2 reverse engineering framework. Whether you've never heard of Radare, already…
- Vulnerability Mis-Management - PSW #917 · 2 h 3 minIn the security news this week: • The XZ backdoor documentary • Zero days - the clock isn't ticking • Vulnerability Mis-Management • Reversing traffic light controllers •…
- Airsnitch, Claude, Hacking Firewalls - PSW #916 · 2 h 3 minIn the security news this week: • Remembering "FX" • Finding and analyzing Windows drivers • Network monitoring with Gibson • the backdoor in your PAM • The edge is fraying…
- AI Is Taking Over Cybersecurity - PSW #915 · 2 h 1 minFirst up is a technical segment called "Paul's Linux Hacks". I finally got around to releasing a bunch of scripts and tutorials for Linux that I've created over the years. We'll…
- Firmware Backdoors Be Spying On You - PSW #914 · 2 h 6 minAI says that this is the show where we turn coffee into threat intelligence and cigar smoke into packet captures. This week: • a firmware backdoor living its best life inside…
- AI Vulnerability Hunting - PSW #913 · 2 h 4 minIn the security news: • Viral AI prompts • Things to do in your home security lab • I can open your garage door • They call me DKnife • Beyondtrust RCE • Cool AI device • Robots…
- AI: No One Is Safe - PSW #912 · 2 h 5 minIn the security news this week: • Residential proxy abuse is everywhere this week: from Google's takedown of IPIDEA to massive Citrix NetScaler scanning and the Badbox 2.0…
- To curmudgeon or not to curmudgeon, that is the question. - PSW #911 · 2 h 4 minThis week, we get un-curmudgeoned by Mandy, spending a bunch of time talking about regulations, compliance, and even the US federal government's commitment to cybersecurity…
- We Left It Vulnerable On Purpose - Rob Allen - PSW #910 · 2 h 16 minIn the security news: • Rainbow tables for everyone • Lilygo releases a new T-Display that looks awesome • AI generated malware for real • Detecting BadUSB when its not a dongle…
- Digging For Vulnerability Gold - PSW #909 · 2 h 7 minIn the security news: • KVMs are a hacker's dream • Hacking an e-scooter • Flipper Zero alternatives • The best authentication bypass • Pwning Claude Code • ForiSIEM…
- No FlipperZeros Allowed - PSW #908 · 2 h 5 minThis week in the security news: • Supply chain attacks and XSS • PS5 leaked keys • Claude tips for security pros • No Flipper Zeros allowed, or Raspberry PIs for that matter •…
- Breaking Into Cybersecurity - PSW #907 · 1 h 5 minOur field is booming! Cybersecurity jobs are projected to grow 33 percent through 2033, far outpacing the average 4 percent growth across all jobs. (And yes, those stats could be…
- Building a Hacking Lab in 2025 - PSW #906 · 1 h 3 minThe crew makes suggestions for building a hacking lab today! We will tackle: • What is recommended today to build a lab, given the latest advancements in tech • Hardware hacking…
- With AI Nothing Is Safe - PSW #905 · 2 h 13 minThis week in the security news: • Linux process injection • Threat actors need training too • A Linux device "capable of practically anything" • The Internet of webcams •…
- Tech Segment: MITM Automation + Security News - Josh Bressers - PSW #904 · 2 h 7 minThis week in our technical segment, you will learn how to build a MITM proxy device using Kali Linux, some custom scripts, and a Raspberry PI! In the security news: • Hacking…
- Holiday Hack Challenge, AI, Internet of Trash - Ed Skoudis - PSW #903 · 2 h 10 minThis week we welcome Ed Skoudis to talk about the holiday hack challenge (https://sans.org/HolidayHack). In the security news: • Oh Asus • Dashcam botnets • Weird CVEs being…
- Vibe Coding For Success and Failure - PSW #902 · 1 h 6 minTune in for some hands-on tips on how to use Claude code to create some amazing and not-so-amazing software. Paul will walk you through what worked and what didn't as he 100%…
