Podcasts about threatlocker

In this episode we follow up with Gabby and Justin from Episode 59 - two seasoned penetration testers who tell us a story about the time when they tried to break into a courthouse but it went all wrong, and what happened in the aftermath.SponsorsThis show is brought to you by Doppel. Doppel stops AI attacks with digital risk protection, human risk management, and email security on a unified social engineering defense platform.doppel.comThis show is brought to you by Sinch. Sinch is the cloud communications platform businesses build on to send SMS, make calls, and verify identity at scale — including the one-time codes and two-factor prompts that stand between an account and whoever's trying to get into it. Learn more at https://s.sinch.com/4xc8dnzSupport for this show comes from ThreatLocker. ThreatLocker is a Zero Trust Platform that gives organizations control over what can run and what users and devices can access. It combines prevention with real time detection and automated response, helping security teams stop unauthorized activity and quickly contain compromised machines. Learn how ThreatLocker can strengthen your defenses at threatlocker.com/Darknet.View all active sponsors.SourcesFull list of sources on the show page: https://darknetdiaries.com/episode/179/

Rob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access controls to limit what agents can access and do. This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them! In the security news this week: Sixteen-year-old Linux LPEs still work Ubiquiti UniFi, patch it, also light on details If you remember magicJack, you too are old Slovakia doesn't trust its own speed cameras More homework on NIST's vulnerability database Your webcam, mic, and key light, all owned Printer moonlights as Minecraft server Zombie credit cards Your car's infotainment system fuels botnets Feds warn about AI-powered PLC attacks Can an AI actually reverse engineer its way out? Denver International's security breach, volume six Charlotte's breach and a parking company Why your ancient tech might be the safe one Microsoft counts billions of phishing emails A password vault that leaked to any website Australia sells password books at the post office Another perfect ten, this time in Entra ID Cisco's bug scores read like Olympic gymnastics Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-941

http://www.Threatlocker.com/cisoAll links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series and Edward Contreras, senior evp and CISO, Frost Bank. Joining is sponsored guest Rob Allen, chief product officer, ThreatLocker. In this episode: Not my job, still my problem The tools people actually use Mac, Windows, and the debate that won't quit Hiring for imagination, not acronyms A huge thanks to our sponsor, ThreatLocker ThreatLocker delivers Zero Trust Network Access and Zero Trust Cloud Access that verifies both user and device before granting access to specific applications. No broad access, nothing exposed, and no reliance on credentials alone. It's a smarter way to control access and reduce risk. Learn more at ThreatLocker.com/CISO.

Sandboxing, least privilege, and monitoring are well-established controls in terms of the defenses they provide against unexpected and unauthorized actions. But being well-established in theory doesn't always translate to successful in practice. Kieran Human talks about some of the properties that a good sandbox should have and how monitoring creates a feedback loop to refine allow lists and access controls. In practice, the potential unpredictable behavior of an agent isn't much different from malware. We talk through some of the ways orgs can securely deploy agents without unnecessarily increasing their attack surface. Resources https://www.threatlocker.com/blog/the-principle-of-least-privilege-for-ai-agents https://www.threatlocker.com/blog/applying-threatlocker-to-agentic-ai-tools https://www.threatlocker.com/blog/why-the-five-eyes-alliance-sees-zero-trust-as-the-best-defense-against-agentic-ai-threats This interview is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them! Visit https://www.securityweekly.com/asw for all the latest episodes! Show Notes: https://securityweekly.com/asw-397

Interview with Rob Allen from Threatlocker Safely enabling agentic AI for Businesses OpenClaw was the wakeup call and businesses wanted to know how to block it. “Easy,” Rob Allen said, “it's already blocked if you're using Threatlocker.” Now that things have settled down a bit, those same businesses want to allow their employees to experiment with agents. We discuss how they can do it safely. This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them! Topic Segment For this week's topic segment, we're discussing AI pentesting agents and how likely they are to get you into big legal trouble. You came home from Black Hat with a new, shiny AI pentesting agent. How can you be sure it isn't hacking the wrong company? News Segment Finally, in the enterprise security news, we check the vibes New MCP standard and AI text watermarking what does combatting “cyber-enabled crime” mean? A closer look at Cl0p One 3rd party was responsible for all the AI sandbox escapes and hacking reports vulnerabilities Comcast can track your movements with WiFi A novel solution to the AI datacenter water use concerns All that and more, on this episode of Enterprise Security Weekly. Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-473

All links and images can be found on CISO Series Check out this post from Caleb Sima of Whiterabbit for the discussion that is the basis of our conversation on this week's episode co-hosted David Spark, the producer of CISO Series, and Yaron Levi, CISO, Dolby. Joining is Adrian Ludwig, CSO, Rippling. In this episode: The messy middle The automatable part Where automation stops The influence gap A huge thanks to our sponsor, ThreatLocker ThreatLocker delivers Zero Trust Network Access and Zero Trust Cloud Access that verifies both user and device before granting access to specific applications. No broad access, nothing exposed, and no reliance on credentials alone. It's a smarter way to control access and reduce risk. Learn more at ThreatLocker.com/CISO.

Artificial intelligence has quickly evolved from a productivity tool into an active participant in many organizations' daily operations. As organizations give AI greater autonomy within their environment, they're also granting them access to sensitive systems and data. That creates a new challenge for IT and security teams: How do you enable AI to assist productivity without compromising security? Rob Allen, Chief Product Officer at ThreatLocker, joins Business Security Weekly to discuss how zero trust principles can prevent an AI breakout. Rather than relying solely on the AI tool's built-in safeguards, organizations can choose to enforce security policies using ThreatLocker. Rob will discuss how ThreatLocker can enforce AI boundaries through Allowlisting, Ringfencing™, Endpoint Firewall, and Web Content Control, with Community Policies that govern what agentic AI tools can run, do, access, and reach. Segment resources: - https://www.threatlocker.com/blog/the-principle-of-least-privilege-for-ai-agents - https://www.threatlocker.com/blog/applying-threatlocker-to-agentic-ai-tools - https://www.threatlocker.com/blog/why-the-five-eyes-alliance-sees-zero-trust-as-the-best-defense-against-agentic-ai-threats This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them! In the leadership and communications segment, 3 cybersecurity issues that should keep every CEO awake at night, You Don't Find Your Leadership Style. You Mentor Your Way Into It., Cybersecurity Starts With Communication – And We May Be Getting It Wrong, and more! Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw-461

In this episode: How a virus-infected Prince of Persia floppy disk on a Commodore 64 sparked a lifelong obsession with cybersecurity (03:03 - 06:45) From NYU to Yale cryptography PhD to Goldman Sachs to Gilt Groupe, and the near-miss that changed everything (03:03 - 06:45) What SecurityScorecard actually does and why the pen and paper questionnaire era had to end (06:55 - 08:18) What it looked like in the early days, including an IKEA furniture test for business partnerships (08:26 - 12:01) Why SecurityScorecard now scores every company in the world, not just twelve million organizations (12:01 - 12:29) The Gilt Groupe credit card near-miss, what the first 24 hours looked like, and why fear was the first reaction (12:50 - 17:30) What it takes to create an entire market category from scratch and why the job to be done never changes (17:48 - 20:20) The difference between the CISO version and CEO version of Alex, and what Satya Nadella said about zooming out (20:49 - 22:36) Which version of Alex people would rather have a beer with and why any job besides CEO is more fun (22:43 - 23:45) How North Korea used a fake hedge fund to try to recruit SecurityScorecard developers (24:06 - 25:47) Why the world is not becoming safer and the critical difference between robustness and resilience (25:59 - 26:42) The True Confessions keynote: why openly admitting breaches makes the whole ecosystem stronger (27:13 - 29:22) The Jaguar Land Rover breach and what it took to double a UK company's security budget overnight (27:13 - 29:22) The single most dangerous thing a board member has ever said in a meeting about cybersecurity (29:45 - 31:09) What one thing a non-technical CEO could do this week to make their CISO's life better (31:25 - 32:12) The Lifestyle Polygraph: restaurant health scores, PowerPoint ban, The Inner Game of Tennis, chess, false advertising, and podcast advice (33:07 - 41:32)   Timestamp Highlights: (03:03) Prince of Persia, a floppy disk, and the origin of a cybersecurity career (06:07) The realization that changed everything: you can do everything right and still lose (08:26) The IKEA furniture test for business partnerships (12:50) The Gilt Groupe near-miss and what the first 24 hours looked like (17:48) What it takes to create a market category from scratch (20:49) CISO vs CEO: zooming in vs zooming out (22:43) Which version of Alex would you rather have a beer with? (24:06) North Korea's fake hedge fund operation (25:59) Robustness vs resilience: why the mindset has to change (29:45) The most dangerous thing a board member has ever said (31:25) One thing every non-technical CEO should do this week (36:48) The Inner Game of Tennis and the infinite game (40:00) Chess, false advertising, and meeting his future wife   Resources & Links: SecurityScorecard — securityscorecard.com The Perfect Scorecard by Aleksandr Yampolskiy ThreatLocker — Presenting sponsor of No Password Required DerScanner — Episode sponsor Cyber Florida — The Mother Ship

Malicious browser extensions, AI-powered phishing, and the evolution of Australia's Essential Eight are all putting renewed focus on proactive cyber defence. Hear ThreatLocker's lead cyber security engineer, Kieran Human, explain why organisations need to get the basics right before attackers get the chance to exploit them. Malicious browser extensions are giving attackers another route into corporate environments, with phishing campaigns tricking users into installing tools capable of running arbitrary code. Cyber Daily's David Hollingworth and Human break down how the so-called Edgecution attack method works, how initial access brokers fit into the ransomware ecosystem, and why even highly technical employees can fall for increasingly convincing social engineering. The conversation then turns to what defenders can actually do about it. Human argues that security teams need to move beyond relying solely on detection and response, with application allow-listing and other proactive controls providing a critical layer of protection when users inevitably make mistakes. Finally, Hollingworth and Human examine the future of Australia's Essential Eight, including the move towards the new Essentials framework and potential guidance for enterprise, cloud, and AI environments. Enjoy, The Cyber Uncut team

UK eyes AI gene-synthesis guardrails DeadLock puts ransomware on the blockchain An evil twin flies home from DEF CON Episode show notes: https://cisoseries.com/uk-tackles-ai-bioweapon-risk-deadlock-goes-on-chain-evil-twin-flies-home-from-def-con/ Huge thanks to our sponsor, ThreatLocker AI is compressing the timeline between initial access and impact. That leaves security teams less time to identify, investigate, and contain malicious activity. Faster response helps, but prevention can remove actions from the attack chain entirely. Give your responders a more controlled environment. Book a ThreatLocker demo at threatlocker.com/ciso.

Water systems get a federal cyber lifeline Hackers jump into Polish power plant Cyberattacks knock local governments offline Episode show notes:  https://cisoseries.com/water-systems-cyber-lifeline-hackers-polish-power-plant-local-governments-offline/ Huge thanks to our sponsor, ThreatLocker Attackers do not always bring their own tools. AI can help them find ways to misuse software already trusted by the organization. Today's tip: approval should not mean unlimited access. Define what trusted applications can reach and what they can do. Learn how ThreatLocker applies this principle at threatlocker.com/ciso today.

OpenAI loosens cyber limits for vetted defenders Sandworm's fake recruiters plant a poisoned VPN Royal Navy drones phone home to China Episode show notes: https://cisoseries.com/openai-loosens-cyber-limits-sandworms-poisoned-vpn-navy-drones-phone-china/ Huge thanks to our sponsor, ThreatLocker An attacker uses AI to create a payload your security tools have never seen. Detection now has to recognize it before the payload can act. ThreatLocker approaches the problem earlier by controlling whether that code is permitted to run at all. Explore a deny by default approach for your organization at threatlocker.com/ciso.

Monday – What is your biggest meal of the day? China banned A.I. bots, should the U.S. do that? Danny Jenkins from Threatlocker talks cyber-security in an A.I. world. Emily the Movie Girl reviews One Night Only while Jim reviews The Odyssey. Brandon Kravitz on NFL preseason, MLB trades and the first day of 1st grade for his son. Attorney Ray Traendly on an unruly toddler diverting a flight and who is liable. Plus, JCS News, JCS Trivia & You Heard it Here First.

OpenAI slows release of Astra model citing cyber capabilities Irregular won't say if there were more rogue incidents U.S. cyber ambassador nominee Cassady confirmed in Senate Episode shownotes: https://cisoseries.com/cybersecurity-news-openai-slows-astra-irregular-wont-talk-senate-confirms-cassady/ Huge thanks to our sponsor, ThreatLocker AI is helping attackers research targets, create malicious code, and adapt faster. But the fundamentals have not changed. Code still needs to execute, applications still need access, and attackers still need privileges. Today's tip: control those actions instead of trying to predict every threat. Learn more from ThreatLocker at threatlocker.com/ciso. 

Danny Jenkins, CEO and Co-founder of ThreatLocker, a global cybersecurity company, shares the latest cyber threats facing the world today, including when 'Zero Trust' is necessary, AI gents hacking other AI companies, and more.

Apple's bug bounty program overwhelmed by fake AI generated reports China launches cybersecurity review into Palo Alto Networks products Meta AI hacks external systems during cybersecurity testing Get the show notes here: https://cisoseries.com/cybersecurity-news-faked-bug-reports-metas-rogue-ai-china-investigates-palo-alto/ Huge thanks to our episode sponsor, ThreatLocker AI risk does not only come from attackers. Employees are adopting AI tools faster than many organizations can evaluate them. Today's tip: an AI policy should be backed by enforceable controls over what tools can access and do. See how ThreatLocker can help you govern AI use at threatlocker.com/ciso.

At Black Hat Las Vegas, the Security Now crew digs into how AI is not just finding hidden software bugs but also fueling both groundbreaking innovation and alarming new exploits. When open models can launch surprise Bitcoin heists, who draws the line between forbidden knowledge and genuine progress? • Black Hat and DEF CON: Hacking Stories and Conference Culture • Zoox Ride-Hailing Hack and Over-the-Air Vulnerabilities • Autonomous Vehicles, AI, and the Security Implications • Hosts Share Personal Adoption and Use of AI Tools • AI-Powered Coding: From Hobbyists to Advanced Agency Chains • Local Models vs. Cloud AI: Privacy, Cost, and Control • App Development Democratized: Listeners Build Custom Solutions With AI • Code Generation, Testing, and Managing AI-Driven Project Cycles • AI's Role in Security: Vulnerability Discovery, Exploitation, and Patch Challenges • Technical Debt and the Race to Patch Decades-Old Bugs • The Dual-Use Dilemma: AI Tools for Both Attack and Defense • Guardrails, Model Partitioning, and the Fight Over Forbidden Knowledge • Open vs. Restricted AI: Global Models, Distillation, and Free Speech • LLM Security Weaknesses: Prompt Injection and Role Confusion Exposed • The Reliability Problem: Probabilistic AI and Non-Deterministic Software • AI Progress: Public Perception, Skepticism, and "Hogwash" Rebuttals • Reflections on AI's Fast Evolution and the Sci-Fi Reality Gap • Closing Thoughts: Tech Community, Listener Feedback, and the Future of Security Now Hosts: Steve Gibson, Leo Laporte, Richard Campbell, and Paul Thurrott Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: material.security bitwarden.com/twit XBOW.com hoxhunt.com/securitynow threatlocker.com/twit

At Black Hat Las Vegas, the Security Now crew digs into how AI is not just finding hidden software bugs but also fueling both groundbreaking innovation and alarming new exploits. When open models can launch surprise Bitcoin heists, who draws the line between forbidden knowledge and genuine progress? • Black Hat and DEF CON: Hacking Stories and Conference Culture • Zoox Ride-Hailing Hack and Over-the-Air Vulnerabilities • Autonomous Vehicles, AI, and the Security Implications • Hosts Share Personal Adoption and Use of AI Tools • AI-Powered Coding: From Hobbyists to Advanced Agency Chains • Local Models vs. Cloud AI: Privacy, Cost, and Control • App Development Democratized: Listeners Build Custom Solutions With AI • Code Generation, Testing, and Managing AI-Driven Project Cycles • AI's Role in Security: Vulnerability Discovery, Exploitation, and Patch Challenges • Technical Debt and the Race to Patch Decades-Old Bugs • The Dual-Use Dilemma: AI Tools for Both Attack and Defense • Guardrails, Model Partitioning, and the Fight Over Forbidden Knowledge • Open vs. Restricted AI: Global Models, Distillation, and Free Speech • LLM Security Weaknesses: Prompt Injection and Role Confusion Exposed • The Reliability Problem: Probabilistic AI and Non-Deterministic Software • AI Progress: Public Perception, Skepticism, and "Hogwash" Rebuttals • Reflections on AI's Fast Evolution and the Sci-Fi Reality Gap • Closing Thoughts: Tech Community, Listener Feedback, and the Future of Security Now Hosts: Steve Gibson, Leo Laporte, Richard Campbell, and Paul Thurrott Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: material.security bitwarden.com/twit XBOW.com hoxhunt.com/securitynow threatlocker.com/twit

At Black Hat Las Vegas, the Security Now crew digs into how AI is not just finding hidden software bugs but also fueling both groundbreaking innovation and alarming new exploits. When open models can launch surprise Bitcoin heists, who draws the line between forbidden knowledge and genuine progress? • Black Hat and DEF CON: Hacking Stories and Conference Culture • Zoox Ride-Hailing Hack and Over-the-Air Vulnerabilities • Autonomous Vehicles, AI, and the Security Implications • Hosts Share Personal Adoption and Use of AI Tools • AI-Powered Coding: From Hobbyists to Advanced Agency Chains • Local Models vs. Cloud AI: Privacy, Cost, and Control • App Development Democratized: Listeners Build Custom Solutions With AI • Code Generation, Testing, and Managing AI-Driven Project Cycles • AI's Role in Security: Vulnerability Discovery, Exploitation, and Patch Challenges • Technical Debt and the Race to Patch Decades-Old Bugs • The Dual-Use Dilemma: AI Tools for Both Attack and Defense • Guardrails, Model Partitioning, and the Fight Over Forbidden Knowledge • Open vs. Restricted AI: Global Models, Distillation, and Free Speech • LLM Security Weaknesses: Prompt Injection and Role Confusion Exposed • The Reliability Problem: Probabilistic AI and Non-Deterministic Software • AI Progress: Public Perception, Skepticism, and "Hogwash" Rebuttals • Reflections on AI's Fast Evolution and the Sci-Fi Reality Gap • Closing Thoughts: Tech Community, Listener Feedback, and the Future of Security Now Hosts: Steve Gibson, Leo Laporte, Richard Campbell, and Paul Thurrott Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: material.security bitwarden.com/twit XBOW.com hoxhunt.com/securitynow threatlocker.com/twit

At Black Hat Las Vegas, the Security Now crew digs into how AI is not just finding hidden software bugs but also fueling both groundbreaking innovation and alarming new exploits. When open models can launch surprise Bitcoin heists, who draws the line between forbidden knowledge and genuine progress? • Black Hat and DEF CON: Hacking Stories and Conference Culture • Zoox Ride-Hailing Hack and Over-the-Air Vulnerabilities • Autonomous Vehicles, AI, and the Security Implications • Hosts Share Personal Adoption and Use of AI Tools • AI-Powered Coding: From Hobbyists to Advanced Agency Chains • Local Models vs. Cloud AI: Privacy, Cost, and Control • App Development Democratized: Listeners Build Custom Solutions With AI • Code Generation, Testing, and Managing AI-Driven Project Cycles • AI's Role in Security: Vulnerability Discovery, Exploitation, and Patch Challenges • Technical Debt and the Race to Patch Decades-Old Bugs • The Dual-Use Dilemma: AI Tools for Both Attack and Defense • Guardrails, Model Partitioning, and the Fight Over Forbidden Knowledge • Open vs. Restricted AI: Global Models, Distillation, and Free Speech • LLM Security Weaknesses: Prompt Injection and Role Confusion Exposed • The Reliability Problem: Probabilistic AI and Non-Deterministic Software • AI Progress: Public Perception, Skepticism, and "Hogwash" Rebuttals • Reflections on AI's Fast Evolution and the Sci-Fi Reality Gap • Closing Thoughts: Tech Community, Listener Feedback, and the Future of Security Now Hosts: Steve Gibson, Leo Laporte, Richard Campbell, and Paul Thurrott Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: material.security bitwarden.com/twit XBOW.com hoxhunt.com/securitynow threatlocker.com/twit

At Black Hat Las Vegas, the Security Now crew digs into how AI is not just finding hidden software bugs but also fueling both groundbreaking innovation and alarming new exploits. When open models can launch surprise Bitcoin heists, who draws the line between forbidden knowledge and genuine progress? • Black Hat and DEF CON: Hacking Stories and Conference Culture • Zoox Ride-Hailing Hack and Over-the-Air Vulnerabilities • Autonomous Vehicles, AI, and the Security Implications • Hosts Share Personal Adoption and Use of AI Tools • AI-Powered Coding: From Hobbyists to Advanced Agency Chains • Local Models vs. Cloud AI: Privacy, Cost, and Control • App Development Democratized: Listeners Build Custom Solutions With AI • Code Generation, Testing, and Managing AI-Driven Project Cycles • AI's Role in Security: Vulnerability Discovery, Exploitation, and Patch Challenges • Technical Debt and the Race to Patch Decades-Old Bugs • The Dual-Use Dilemma: AI Tools for Both Attack and Defense • Guardrails, Model Partitioning, and the Fight Over Forbidden Knowledge • Open vs. Restricted AI: Global Models, Distillation, and Free Speech • LLM Security Weaknesses: Prompt Injection and Role Confusion Exposed • The Reliability Problem: Probabilistic AI and Non-Deterministic Software • AI Progress: Public Perception, Skepticism, and "Hogwash" Rebuttals • Reflections on AI's Fast Evolution and the Sci-Fi Reality Gap • Closing Thoughts: Tech Community, Listener Feedback, and the Future of Security Now Hosts: Steve Gibson, Leo Laporte, Richard Campbell, and Paul Thurrott Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: material.security bitwarden.com/twit XBOW.com hoxhunt.com/securitynow threatlocker.com/twit

At Black Hat Las Vegas, the Security Now crew digs into how AI is not just finding hidden software bugs but also fueling both groundbreaking innovation and alarming new exploits. When open models can launch surprise Bitcoin heists, who draws the line between forbidden knowledge and genuine progress? • Black Hat and DEF CON: Hacking Stories and Conference Culture • Zoox Ride-Hailing Hack and Over-the-Air Vulnerabilities • Autonomous Vehicles, AI, and the Security Implications • Hosts Share Personal Adoption and Use of AI Tools • AI-Powered Coding: From Hobbyists to Advanced Agency Chains • Local Models vs. Cloud AI: Privacy, Cost, and Control • App Development Democratized: Listeners Build Custom Solutions With AI • Code Generation, Testing, and Managing AI-Driven Project Cycles • AI's Role in Security: Vulnerability Discovery, Exploitation, and Patch Challenges • Technical Debt and the Race to Patch Decades-Old Bugs • The Dual-Use Dilemma: AI Tools for Both Attack and Defense • Guardrails, Model Partitioning, and the Fight Over Forbidden Knowledge • Open vs. Restricted AI: Global Models, Distillation, and Free Speech • LLM Security Weaknesses: Prompt Injection and Role Confusion Exposed • The Reliability Problem: Probabilistic AI and Non-Deterministic Software • AI Progress: Public Perception, Skepticism, and "Hogwash" Rebuttals • Reflections on AI's Fast Evolution and the Sci-Fi Reality Gap • Closing Thoughts: Tech Community, Listener Feedback, and the Future of Security Now Hosts: Steve Gibson, Leo Laporte, Richard Campbell, and Paul Thurrott Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: material.security bitwarden.com/twit XBOW.com hoxhunt.com/securitynow threatlocker.com/twit

AI safety tests spill onto the real internet Private Relay flaw unmasks IP addresses Weak telcos left door open for Salt Typhoon Get the show notes here: https://cisoseries.com/cybersecurity-news-ai-safety-tests-reach-the-internet-private-relay-flaw-unmasks-ips-weak-telcos-invite-salt-typhoon/ Huge thanks to our episode sponsor, ThreatLocker AI is compressing the timeline between initial access and impact. That leaves security teams less time to identify, investigate, and contain malicious activity. Faster response helps, but prevention can remove actions from the attack chain entirely. Give your responders a more controlled environment. Book a ThreatLocker demo at threatlocker.com/ciso.  

At Black Hat Las Vegas, the Security Now crew digs into how AI is not just finding hidden software bugs but also fueling both groundbreaking innovation and alarming new exploits. When open models can launch surprise Bitcoin heists, who draws the line between forbidden knowledge and genuine progress? • Black Hat and DEF CON: Hacking Stories and Conference Culture • Zoox Ride-Hailing Hack and Over-the-Air Vulnerabilities • Autonomous Vehicles, AI, and the Security Implications • Hosts Share Personal Adoption and Use of AI Tools • AI-Powered Coding: From Hobbyists to Advanced Agency Chains • Local Models vs. Cloud AI: Privacy, Cost, and Control • App Development Democratized: Listeners Build Custom Solutions With AI • Code Generation, Testing, and Managing AI-Driven Project Cycles • AI's Role in Security: Vulnerability Discovery, Exploitation, and Patch Challenges • Technical Debt and the Race to Patch Decades-Old Bugs • The Dual-Use Dilemma: AI Tools for Both Attack and Defense • Guardrails, Model Partitioning, and the Fight Over Forbidden Knowledge • Open vs. Restricted AI: Global Models, Distillation, and Free Speech • LLM Security Weaknesses: Prompt Injection and Role Confusion Exposed • The Reliability Problem: Probabilistic AI and Non-Deterministic Software • AI Progress: Public Perception, Skepticism, and "Hogwash" Rebuttals • Reflections on AI's Fast Evolution and the Sci-Fi Reality Gap • Closing Thoughts: Tech Community, Listener Feedback, and the Future of Security Now Hosts: Steve Gibson, Leo Laporte, Richard Campbell, and Paul Thurrott Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: material.security bitwarden.com/twit XBOW.com hoxhunt.com/securitynow threatlocker.com/twit

At Black Hat Las Vegas, the Security Now crew digs into how AI is not just finding hidden software bugs but also fueling both groundbreaking innovation and alarming new exploits. When open models can launch surprise Bitcoin heists, who draws the line between forbidden knowledge and genuine progress? • Black Hat and DEF CON: Hacking Stories and Conference Culture • Zoox Ride-Hailing Hack and Over-the-Air Vulnerabilities • Autonomous Vehicles, AI, and the Security Implications • Hosts Share Personal Adoption and Use of AI Tools • AI-Powered Coding: From Hobbyists to Advanced Agency Chains • Local Models vs. Cloud AI: Privacy, Cost, and Control • App Development Democratized: Listeners Build Custom Solutions With AI • Code Generation, Testing, and Managing AI-Driven Project Cycles • AI's Role in Security: Vulnerability Discovery, Exploitation, and Patch Challenges • Technical Debt and the Race to Patch Decades-Old Bugs • The Dual-Use Dilemma: AI Tools for Both Attack and Defense • Guardrails, Model Partitioning, and the Fight Over Forbidden Knowledge • Open vs. Restricted AI: Global Models, Distillation, and Free Speech • LLM Security Weaknesses: Prompt Injection and Role Confusion Exposed • The Reliability Problem: Probabilistic AI and Non-Deterministic Software • AI Progress: Public Perception, Skepticism, and "Hogwash" Rebuttals • Reflections on AI's Fast Evolution and the Sci-Fi Reality Gap • Closing Thoughts: Tech Community, Listener Feedback, and the Future of Security Now Hosts: Steve Gibson, Leo Laporte, Richard Campbell, and Paul Thurrott Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: material.security bitwarden.com/twit XBOW.com hoxhunt.com/securitynow threatlocker.com/twit

Behind the headlines about skyrocketing revenues and AI investments, the actual costs and future risks for Microsoft, Google, and Amazon are shrouded in strategic accounting moves. Plus, Paul finished rewriting and adding new chapters to the Windows 11 Field Guide - mostly just clean-up now, and then whatever new monthly features. Lastly, The Document Foundation issues a friendly reminder about the Office 2021 EOL and how that never happens with their software Microsoft earnings Microsoft earnings up 18 percent to $90 billion Analysis: Microsoft finds a new way to not account for AI costs Windows Pavan Davuluri says he's "energized" about what's happening to Windows in 2026. OK. But what's really happened so far? When will the biggest changes land? And when, if ever, will you address the real enshittification in Windows 11? Windows Insider Program: Five new builds - New Taskbar comes to Beta channel This leads to questions of timing, and here, WIP is not all that transparent still Another antitrust win: Apple to allow Copy and Paste between Windows and iPhone AMD revenues up 50 percent to $11.5 billion, but it's all AI datacenter Amazon: up 20 percent to $200 billion Apple: up 16 percent to $109 billion AI Satya Nadella mentions AI super app again, not clear why anyone cares about this Proton Lumo can do data visualization now Xbox and gaming Asha Sharma details the priorities for XBOX in the next year and number 5 will shock you XBOX console prices going up in the EU and UK Thanks, Caption Obvious: Yes, Backward Compatibility on PC will support Xbox 360 games too XBOX plans new FanFest tour dates - there's SO much to celebrate! Gears of War: E-Day leads the charge for new Game Pass titles in August XBOX Insiders is testing new console features XBOX app comes to Hisense and VIDDA TVs EA goes private for $55 billion in cash, but also some debt Sony has sold 95.3 million PS5s Sony responds to concerns about no more discs (with "pffffftttt") Tips and picks Tip of the week: It's done! App pick of the week: LibreOffice RunAs Radio this week: Ransomware Readiness with Heather Renze Brown liquor pick of the week: Frey Ranch Straight Bourbon Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: cirasync.com/Windows threatlocker.com/twit

Behind the headlines about skyrocketing revenues and AI investments, the actual costs and future risks for Microsoft, Google, and Amazon are shrouded in strategic accounting moves. Plus, Paul finished rewriting and adding new chapters to the Windows 11 Field Guide - mostly just clean-up now, and then whatever new monthly features. Lastly, The Document Foundation issues a friendly reminder about the Office 2021 EOL and how that never happens with their software Microsoft earnings Microsoft earnings up 18 percent to $90 billion Analysis: Microsoft finds a new way to not account for AI costs Windows Pavan Davuluri says he's "energized" about what's happening to Windows in 2026. OK. But what's really happened so far? When will the biggest changes land? And when, if ever, will you address the real enshittification in Windows 11? Windows Insider Program: Five new builds - New Taskbar comes to Beta channel This leads to questions of timing, and here, WIP is not all that transparent still Another antitrust win: Apple to allow Copy and Paste between Windows and iPhone AMD revenues up 50 percent to $11.5 billion, but it's all AI datacenter Amazon: up 20 percent to $200 billion Apple: up 16 percent to $109 billion AI Satya Nadella mentions AI super app again, not clear why anyone cares about this Proton Lumo can do data visualization now Xbox and gaming Asha Sharma details the priorities for XBOX in the next year and number 5 will shock you XBOX console prices going up in the EU and UK Thanks, Caption Obvious: Yes, Backward Compatibility on PC will support Xbox 360 games too XBOX plans new FanFest tour dates - there's SO much to celebrate! Gears of War: E-Day leads the charge for new Game Pass titles in August XBOX Insiders is testing new console features XBOX app comes to Hisense and VIDDA TVs EA goes private for $55 billion in cash, but also some debt Sony has sold 95.3 million PS5s Sony responds to concerns about no more discs (with "pffffftttt") Tips and picks Tip of the week: It's done! App pick of the week: LibreOffice RunAs Radio this week: Ransomware Readiness with Heather Renze Brown liquor pick of the week: Frey Ranch Straight Bourbon Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: cirasync.com/Windows threatlocker.com/twit

Behind the headlines about skyrocketing revenues and AI investments, the actual costs and future risks for Microsoft, Google, and Amazon are shrouded in strategic accounting moves. Plus, Paul finished rewriting and adding new chapters to the Windows 11 Field Guide - mostly just clean-up now, and then whatever new monthly features. Lastly, The Document Foundation issues a friendly reminder about the Office 2021 EOL and how that never happens with their software Microsoft earnings Microsoft earnings up 18 percent to $90 billion Analysis: Microsoft finds a new way to not account for AI costs Windows Pavan Davuluri says he's "energized" about what's happening to Windows in 2026. OK. But what's really happened so far? When will the biggest changes land? And when, if ever, will you address the real enshittification in Windows 11? Windows Insider Program: Five new builds - New Taskbar comes to Beta channel This leads to questions of timing, and here, WIP is not all that transparent still Another antitrust win: Apple to allow Copy and Paste between Windows and iPhone AMD revenues up 50 percent to $11.5 billion, but it's all AI datacenter Amazon: up 20 percent to $200 billion Apple: up 16 percent to $109 billion AI Satya Nadella mentions AI super app again, not clear why anyone cares about this Proton Lumo can do data visualization now Xbox and gaming Asha Sharma details the priorities for XBOX in the next year and number 5 will shock you XBOX console prices going up in the EU and UK Thanks, Caption Obvious: Yes, Backward Compatibility on PC will support Xbox 360 games too XBOX plans new FanFest tour dates - there's SO much to celebrate! Gears of War: E-Day leads the charge for new Game Pass titles in August XBOX Insiders is testing new console features XBOX app comes to Hisense and VIDDA TVs EA goes private for $55 billion in cash, but also some debt Sony has sold 95.3 million PS5s Sony responds to concerns about no more discs (with "pffffftttt") Tips and picks Tip of the week: It's done! App pick of the week: LibreOffice RunAs Radio this week: Ransomware Readiness with Heather Renze Brown liquor pick of the week: Frey Ranch Straight Bourbon Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: cirasync.com/Windows threatlocker.com/twit

Behind the headlines about skyrocketing revenues and AI investments, the actual costs and future risks for Microsoft, Google, and Amazon are shrouded in strategic accounting moves. Plus, Paul finished rewriting and adding new chapters to the Windows 11 Field Guide - mostly just clean-up now, and then whatever new monthly features. Lastly, The Document Foundation issues a friendly reminder about the Office 2021 EOL and how that never happens with their software Microsoft earnings Microsoft earnings up 18 percent to $90 billion Analysis: Microsoft finds a new way to not account for AI costs Windows Pavan Davuluri says he's "energized" about what's happening to Windows in 2026. OK. But what's really happened so far? When will the biggest changes land? And when, if ever, will you address the real enshittification in Windows 11? Windows Insider Program: Five new builds - New Taskbar comes to Beta channel This leads to questions of timing, and here, WIP is not all that transparent still Another antitrust win: Apple to allow Copy and Paste between Windows and iPhone AMD revenues up 50 percent to $11.5 billion, but it's all AI datacenter Amazon: up 20 percent to $200 billion Apple: up 16 percent to $109 billion AI Satya Nadella mentions AI super app again, not clear why anyone cares about this Proton Lumo can do data visualization now Xbox and gaming Asha Sharma details the priorities for XBOX in the next year and number 5 will shock you XBOX console prices going up in the EU and UK Thanks, Caption Obvious: Yes, Backward Compatibility on PC will support Xbox 360 games too XBOX plans new FanFest tour dates - there's SO much to celebrate! Gears of War: E-Day leads the charge for new Game Pass titles in August XBOX Insiders is testing new console features XBOX app comes to Hisense and VIDDA TVs EA goes private for $55 billion in cash, but also some debt Sony has sold 95.3 million PS5s Sony responds to concerns about no more discs (with "pffffftttt") Tips and picks Tip of the week: It's done! App pick of the week: LibreOffice RunAs Radio this week: Ransomware Readiness with Heather Renze Brown liquor pick of the week: Frey Ranch Straight Bourbon Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: cirasync.com/Windows threatlocker.com/twit

ChainDrop attack hits npm Pass-ta-key attacks target passkeys  AI accounts for most cybercrime in Africa Get the show notes here: https://cisoseries.com/cybersecurity-news-chaindrop-hits-npm-pass-ta-key-targets-passkeys-ai-runs-amok-in-africa/  Huge thanks to our episode sponsor, ThreatLocker Attackers do not always bring their own tools. AI can help them find ways to misuse software already trusted by the organization. Today's tip: approval should not mean unlimited access. Define what trusted applications can reach and what they can do. Learn how ThreatLocker applies this principle at threatlocker.com/ciso today.  

Behind the headlines about skyrocketing revenues and AI investments, the actual costs and future risks for Microsoft, Google, and Amazon are shrouded in strategic accounting moves. Plus, Paul finished rewriting and adding new chapters to the Windows 11 Field Guide - mostly just clean-up now, and then whatever new monthly features. Lastly, The Document Foundation issues a friendly reminder about the Office 2021 EOL and how that never happens with their software Microsoft earnings Microsoft earnings up 18 percent to $90 billion Analysis: Microsoft finds a new way to not account for AI costs Windows Pavan Davuluri says he's "energized" about what's happening to Windows in 2026. OK. But what's really happened so far? When will the biggest changes land? And when, if ever, will you address the real enshittification in Windows 11? Windows Insider Program: Five new builds - New Taskbar comes to Beta channel This leads to questions of timing, and here, WIP is not all that transparent still Another antitrust win: Apple to allow Copy and Paste between Windows and iPhone AMD revenues up 50 percent to $11.5 billion, but it's all AI datacenter Amazon: up 20 percent to $200 billion Apple: up 16 percent to $109 billion AI Satya Nadella mentions AI super app again, not clear why anyone cares about this Proton Lumo can do data visualization now Xbox and gaming Asha Sharma details the priorities for XBOX in the next year and number 5 will shock you XBOX console prices going up in the EU and UK Thanks, Caption Obvious: Yes, Backward Compatibility on PC will support Xbox 360 games too XBOX plans new FanFest tour dates - there's SO much to celebrate! Gears of War: E-Day leads the charge for new Game Pass titles in August XBOX Insiders is testing new console features XBOX app comes to Hisense and VIDDA TVs EA goes private for $55 billion in cash, but also some debt Sony has sold 95.3 million PS5s Sony responds to concerns about no more discs (with "pffffftttt") Tips and picks Tip of the week: It's done! App pick of the week: LibreOffice RunAs Radio this week: Ransomware Readiness with Heather Renze Brown liquor pick of the week: Frey Ranch Straight Bourbon Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: cirasync.com/Windows threatlocker.com/twit

Behind the headlines about skyrocketing revenues and AI investments, the actual costs and future risks for Microsoft, Google, and Amazon are shrouded in strategic accounting moves. Plus, Paul finished rewriting and adding new chapters to the Windows 11 Field Guide - mostly just clean-up now, and then whatever new monthly features. Lastly, The Document Foundation issues a friendly reminder about the Office 2021 EOL and how that never happens with their software Microsoft earnings Microsoft earnings up 18 percent to $90 billion Analysis: Microsoft finds a new way to not account for AI costs Windows Pavan Davuluri says he's "energized" about what's happening to Windows in 2026. OK. But what's really happened so far? When will the biggest changes land? And when, if ever, will you address the real enshittification in Windows 11? Windows Insider Program: Five new builds - New Taskbar comes to Beta channel This leads to questions of timing, and here, WIP is not all that transparent still Another antitrust win: Apple to allow Copy and Paste between Windows and iPhone AMD revenues up 50 percent to $11.5 billion, but it's all AI datacenter Amazon: up 20 percent to $200 billion Apple: up 16 percent to $109 billion AI Satya Nadella mentions AI super app again, not clear why anyone cares about this Proton Lumo can do data visualization now Xbox and gaming Asha Sharma details the priorities for XBOX in the next year and number 5 will shock you XBOX console prices going up in the EU and UK Thanks, Caption Obvious: Yes, Backward Compatibility on PC will support Xbox 360 games too XBOX plans new FanFest tour dates - there's SO much to celebrate! Gears of War: E-Day leads the charge for new Game Pass titles in August XBOX Insiders is testing new console features XBOX app comes to Hisense and VIDDA TVs EA goes private for $55 billion in cash, but also some debt Sony has sold 95.3 million PS5s Sony responds to concerns about no more discs (with "pffffftttt") Tips and picks Tip of the week: It's done! App pick of the week: LibreOffice RunAs Radio this week: Ransomware Readiness with Heather Renze Brown liquor pick of the week: Frey Ranch Straight Bourbon Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: cirasync.com/Windows threatlocker.com/twit

Nickolas Sharp worked for Ubiquiti, a company that makes networking equipment. He noticed that there were some security problems at work. He tried to point them out, but didn't feel like he was being listened to enough. What do you do when the company you work for isn't securing their software up to your standards? Well, he thought he needed to teach them a lesson, but in the end, he learned an even bigger lesson.SponsorsThis show is brought to you by Drata. Drata is the trust management platform that uses AI-driven automation to modernize governance, risk, and compliance, helping thousands of businesses stay audit-ready and scale securely. Learn more at drata.com/darknetdiaries.This show is sponsored by Material Security. Your cloud office (think Google Workspace or Microsoft 365) is the core of your business, but it's often protected by scattered tools and manual fixes. Material is a purpose-built detection and response platform that closes the gaps those point solutions leave behind. From email threats to misconfigurations and account takeovers, Material monitors everything and steps in with real-time fixes to keep your data flowing where it should. Learn more at https://material.security.Support for this show comes from ThreatLocker. ThreatLocker is a Zero Trust Platform that gives organizations control over what can run and what users and devices can access. It combines prevention with real time detection and automated response, helping security teams stop unauthorized activity and quickly contain compromised machines. Learn how ThreatLocker can strengthen your defenses at threatlocker.com/Darknet.View all active sponsors.SourcesFull list of sources on the show page: https://darknetdiaries.com/episode/178/

When license plate readers become stalking tools ExfilSquad dumps UK police contact data China-linked hackers shrink the patch window Get the show notes here: https://cisoseries.com/cybersecurity-news-license-plate-readers-as-stalking-tools-exfilsquad-dumps-uk-police-data-the-ever-shrinking-patch-window/ Huge thanks to our episode sponsor, ThreatLocker An attacker uses AI to create a payload your security tools have never seen. Detection now has to recognize it before the payload can act. ThreatLocker approaches the problem earlier by controlling whether that code is permitted to run at all. Explore a deny by default approach for your organization at threatlocker.com/ciso.  

No Password Required: Next Gen - Ep. 3 - Kieran Human How Lead Cybersecurity Engineers Actually Think  In this episode of No Password Required: Next Gen, Yazzel interviews Kieran Human, Lead Cybersecurity Engineer at ThreatLocker. From research to working directly with ThreatLocker's CEO on new security initiatives, Kieran gives an inside look at what it's really like to work on the front lines of cybersecurity. Kieran stands out as a cybersecurity professional by hares why curiosity, strong communication, and understanding the bigger picture are just as valuable as technical skills. He also reflects on one of his proudest career moments, writing a compliance white paper that earned praise from ThreatLocker's CEO Danny Jenkins, and explains how that experience reinforced the importance of research, writing, and always looking for ways to improve. Kieran also explains why Zero Trust security is becoming essential, teaches viewers a few cybersecurity terms that are guaranteed to impress at dinner, and even reveals why the Terminator would be his ultimate cybersecurity teammate!  Whether you're exploring a career in cyber or looking for practical advice from someone working in the field every day, this episode is packed with insights for the next generation of cybersecurity professionals. Presented by ThreatLocker Supported by DerScanner Follow Kieran on Linked in here: https://www.linkedin.com/in/kieran-human-5495ab170/  Chapter List: 00:00 Introduction to Cybersecurity and Career Path 02:54 Key Skills and Qualities for Success in Cybersecurity 06:07 Impact of AI and Zero Trust in Cybersecurity 06:56 Fun Insights and Closing Thoughts  

UK's state investments agency suffers data breach CISA tells utilities to remove internet-exposed PLCs following Minnesota attacks Anthropic says its AI hacked real-world companies in three incidents Get the show notes here: https://cisoseries.com/cybersecurity-news-cybersecurity-news-uk-investments-agency-breach-cisa-water-warning-anthropic-threesome/ Huge thanks to our episode sponsor, ThreatLocker AI is helping attackers research targets, create malicious code, and adapt faster. But the fundamentals have not changed. Code still needs to execute, applications still need access, and attackers still need privileges. Today's tip: control those actions instead of trying to predict every threat. Learn more from ThreatLocker at threatlocker.com/ciso.  

Hackers are using overlooked IoT devices such as IP cameras, printers and smart speakers to gain access to networks and spread ransomware. Philip Wylie explains how an outdated IP camera became a ransomware gateway, why default passwords and poor segmentation remain serious risks, and how to protect your network using separate VLANs, firmware updates, monitoring and zero-trust controls. The interview also explores medical devices, OT security, AI-enabled devices and the growing demand for IoT penetration-testing skills. Big thanks to ThreatLocker for sponsoring my trip to ZTW26 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal // Philip Wylie's SOCIAL // X: https://x.com/phillipwylie LinkedIn: / phillipwylie YouTube: / @phillipwylie Instagram: / phillipwylie // Book REFERENCE // The Pentester Blueprint Phillip Wylie: US: https://amzn.to/4jkigAa UK: https://amzn.to/42vShPB // YouTube video REFERENCE // Pentester Blueprint: Your Road to Success: • Pentester Blueprint: Your road to success How to hack IP Cameras (Ethically) and learn IoT hacking: • How to hack IP Cameras (Ethically) and lea... // Website REFERENCE // https://training.brownfinesecurity.com/ // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 0:00 - Coming Up 0:56 - Intro 03:08 - The Weakness in Pen-testing 07:38 - How Do Hackers Get Access? 11:30 - How To Protect IoT Devices 14:36 - Dangers of Medical IoT Devices 18:24 - Countries Banning IoT Devices 20:46 - Phillip's Recommendations 22:42 - What is Exploit DB 27:30 - How Vulnerable Are You? 28:28 - Advice To The Youth 29:40 - How To Start Learning 31:15 - Conclusion 31:23 - Threatlocker Advert Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #iot #iothacking #security

All links and images can be found on CISO Series This week's episode is hosted by me, David Spark, producer of CISO Series and Andy Ellis, principal of Duha. Joining is Pavi Ramamurthy, Global CISO and CIO, Blackhawk Network. In this episode: Numbers that make the board feel good and nothing else The audit is not the same thing as the truth Receipts aren't a strategy Stop blaming the human, fix the system they're standing in A huge thanks to our sponsor, ThreatLocker ThreatLocker delivers Zero Trust Network Access and Zero Trust Cloud Access that verifies both user and device before granting access to specific applications. No broad access, nothing exposed, and no reliance on credentials alone. It's a smarter way to control access and reduce risk. Learn more at ThreatLocker.com/CISO.  

This is the story of the hacker known as "USDoD". When he was young he had a vengeance on the US, and this lead him down a road of continual data breaches, until he hacked into National Public Data, which is when his spree went one step too far.SponsorsSupport for this show comes from ThreatLocker®. ThreatLocker® is a Zero Trust Endpoint Protection Platform that strengthens your infrastructure from the ground up. With ThreatLocker® Allowlisting and Ringfencing™, you gain a more secure approach to blocking exploits of known and unknown vulnerabilities. ThreatLocker® provides Zero Trust control at the kernel level that enables you to allow everything you need and block everything else, including ransomware! Learn more at www.threatlocker.com.This show is sponsored by Maze. Maze uses AI agents to triage and remediate cloud vulnerabilities by figuring out what's actually exploitable, not just what's theoretically risky. They remove the noise, prioritize vulns that matter, and manage remediation, so your team stops wasting time on meaningless vulns. Visit MazeHQ.com/darknet for more information.This show is sponsored by Sentry.IO. Sentry wants to help you monitor your environment for problems. They do error tracking, stack tracing, debugging, all so that your developers can diagnose, fix, and optimize the performance of their code. This makes it so developers ship more reliable code faster. Learn more at sentry.io.View all active sponsors.SourcesFull list of sources on the show page: https://darknetdiaries.com/episode/177/

Nudification, Yeats, LegacyHive, ACR Stealer, Hugging Face, Route 53, 764, Wordpress, Kieran Human from Threatlocker, and More. Segment Resources: Malicious Edge extension abuses Native Messaging as bridge to malware: https://www.bleepingcomputer.com/news/security/malicious-edge-extension-abuses-native-messaging-as-bridge-to-malware/ This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them! Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-600

Nudification, Yeats, LegacyHive, ACR Stealer, Hugging Face, Route 53, 764, Wordpress, Kieran Human from Threatlocker, and More. Segment Resources: Malicious Edge extension abuses Native Messaging as bridge to malware: https://www.bleepingcomputer.com/news/security/malicious-edge-extension-abuses-native-messaging-as-bridge-to-malware/ This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them! Show Notes: https://securityweekly.com/swn-600

Nudification, Yeats, LegacyHive, ACR Stealer, Hugging Face, Route 53, 764, Wordpress, Kieran Human from Threatlocker, and More. Segment Resources: Malicious Edge extension abuses Native Messaging as bridge to malware: https://www.bleepingcomputer.com/news/security/malicious-edge-extension-abuses-native-messaging-as-bridge-to-malware/ This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them! Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-600

Philipp Leo — Swiss cyber expert, diplomat, and military officer, always two steps ahead of the storm No Password Required Season 7: Episode 7 - Philipp Leo Philipp Leo co-founded Leo & Muhly Cyber Advisory, a strategic advisory firm specializing in cyber risk, resilience, and geopolitics. Now consulting with governments and private firms in Switzerland and abroad, Philipp has served as a UN observer on the Korean DMZ, trained the next generation of Swiss Armed Forces cyber specialists, and taught at the University of Glasgow. He is also part of Europol's network of experts in data protection and cybercrime and has published stateside in MIT Sloan Management Review. In this episode, Philipp shares his journey from a Swiss bank he couldn't wait to leave to the Korean border, and eventually to the boardrooms of executives who still think cyber risk is someone else's problem. He breaks down the three most dangerous misconceptions executives have about cyber risk, why the CISO is too often a poster child rather than a decision-maker, and the challenges to cyber insurance in Europe. Cyber attorney Jack Clabby and co-host Kayley Jerrell talk with Philipp about his live crisis simulation that nobody can win, how to train cyber warriors, and how nation-state cyber conflict is looking more and more like the age of Caribbean pirates. In the Lifestyle Polygraph, Philipp reveals his favorite book, his eye-opening, go-to celebratory drink, and the weight of his luxury umbrella. He also shares his favorite escape when the complexity of modern life gets to be too much and introduces us to a Zurich commuting tradition that involves swimming home through a river.   In this episode: Philipp's journey from a Swiss bank he couldn't wait to leave to the Korean DMZ and eventually the boardrooms of Fortune 500 executives (00:27 - 02:22) The three most dangerous misconceptions executives have about cyber risk and why cyber risk is a corporate problem, not a technology problem (04:19 - 05:30) How Philipp's live crisis simulation works, why nobody can win it, and why that's exactly the point (05:49 - 08:47) Why cyber crisis teams have improved dramatically but leadership boards remain the weakest link (06:30 - 08:47) The CISO poster child problem: why most CISOs have the accountability without the authority (09:54 - 11:00) Why cyber insurance in Europe has largely failed to deliver and what happens when attackers find your policy before you do (11:17 - 13:44) The OFAC twist: what happens mid-exercise when a Swiss bank decides to pay and then learns the attackers are on the sanctions list (18:38 - 19:31) Training Swiss Armed Forces cyber specialists and why the first lesson is that the other side plays by no rules (19:47 - 21:37) Whether nation states can ever beat the cyber threat and why the east side of Vienna tells you everything you need to know (21:54 - 23:25) Why nation-state cyber conflict has become remarkably similar to the age of Caribbean pirates (23:46 - 24:23) The Lifestyle Polygraph: Endurance, Campari Red Bull, a three-ounce umbrella, a cabin in the Alps, and swimming home through a Zurich river (00:04 - 12:03)   Timestamp Highlights: (00:27) From Swiss banker to UN observer on the Korean DMZ (04:19) The three misconceptions executives have about cyber risk (05:49) The crisis simulation nobody can win and why that's the whole point (09:54) Why the CISO is too often a poster child without real power (11:17) Why cyber insurance in Europe has largely failed (18:38) The OFAC twist that stopped a Swiss bank mid-exercise (19:47) Training Swiss cyber warriors to understand the other side plays by no rules (21:54) Nation states vs. cyber threats: are defenders always outpaced? (23:46) How nation-state cyber conflict mirrors the age of Caribbean pirates (07:25) Always prepared: the three-ounce umbrella that nobody sees   Resources & Links: Leo & Muhly Cyber Advisory  Philipp Leo on LinkedIn ThreatLocker — Presenting sponsor DerScanner — Supporter of this podcast Cyber Florida — The Mother Ship  

ClickLock stealer uses kill loops to force password entry TELEPUZ malware uses ClickFix to steal data and run commands 1Password's new Agentic Mode lets Claude log into accounts Notes: https://cisoseries.com/cybersecurity-news-clicklocks-kill-loops-telepuz-clickfix-tricks-1passwords-agentic-login/ Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind every major technology decision. ThreatLocker helps organizations take a Zero Trust approach to that challenge—giving them greater control over what can execute, what can access their environment, and what users and applications are allowed to do. That's why ThreatLocker is proud to support Cyber Security Headlines. Because security works best when innovation and control move together.

"Context Bombing" flips the script on prompt injections Pentagon suspends CMMC Phase II requirements Old tech, new problems Get the show notes here: https://cisoseries.com/the-department-of-know-cmmc-suspended-sharefile-shutdown-context-bombing-strikes-back/  This week's Department of Know is hosted by Rich Stroffolino, with guests Tom Hollingsworth, networking technology advisor, Futurum Group, and Mark Eggleston, former CISO, CSC. Missed the live show? Check it out on YouTube. The Department of Know is live every Friday at 4:00 p.m. ET. Join us each week by registering for the open discussion at CISOSeries.com. Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind every major technology decision. ThreatLocker helps organizations take a Zero Trust approach to that challenge—giving them greater control over what can execute, what can access their environment, and what users and applications are allowed to do. That's why ThreatLocker is proud to support Cyber Security Headlines.  Because security works best when innovation and control move together.

Zoom's account takeover wake-up call Two zero-days, one urgent SonicWall patch 23andMe's breach bill keeps growing Show Notes: https://cisoseries.com/cybersecurity-news-zooms-wake-up-call-zero-day-sonicwall-patch-23andmes-growing-breach-bill/ Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind every major technology decision. ThreatLocker helps organizations take a Zero Trust approach to that challenge—giving them greater control over what can execute, what can access their environment, and what users and applications are allowed to do. That's why ThreatLocker is proud to support Cyber Security Headlines. Because security works best when innovation and control move together.

Pentagon suspends CMMC Phase II requirements US troop location data under attack in Iran "Context Bombing" flips the script on prompt injections Get the show notes here: https://cisoseries.com/cybersecurity-news-cmmc-phase-ii-suspended-tracking-troops-in-iran-defenders-turn-to-context-bombing/  Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind every major technology decision. ThreatLocker helps organizations take a Zero Trust approach to that challenge—giving them greater control over what can execute, what can access their environment, and what users and applications are allowed to do. That's why ThreatLocker is proud to support Cyber Security Headlines. Because security works best when innovation and control move together.

Russia's router access routes MemGhost haunts AI memory DHS alert got waved off… twice Get the show notes here: https://cisoseries.com/cybersecurity-news-russias-router-access-routes-memghost-haunts-ai-memory-dhs-alert-got-waved-off-twice/↗ Huge thanks to our sponsor, ThreatLocker Every security leader is being asked the same question right now: How do we enable innovation without creating unnecessary risk? That's the challenge behind cloud adoption. Behind AI. Behind automation. And behind every major technology decision. ThreatLocker helps organizations take a Zero Trust approach to that challenge—giving them greater control over what can execute, what can access their environment, and what users and applications are allowed to do. That's why ThreatLocker is proud to support Cyber Security Headlines. Because security works best when innovation and control move together.

One day Nick got a visit from the FBI demanding he give them data on one of his customers. They asked for it in the form of a National Security Letter or NSL. Something wasn't right about this letter. It seemed to violate the constitution. So he set out to change the law.Learn more about Nicks work at calyxinstitute.org and phreeli.com.Check out Cindy's book Privacy's Defender: My Thirty-Year Fight Against Digital Surveillance (https://amzn.to/4gXuK2J).SponsorsSupport for this show comes from ThreatLocker®. ThreatLocker® is a Zero Trust Endpoint Protection Platform that strengthens your infrastructure from the ground up. With ThreatLocker® Allowlisting and Ringfencing™, you gain a more secure approach to blocking exploits of known and unknown vulnerabilities. ThreatLocker® provides Zero Trust control at the kernel level that enables you to allow everything you need and block everything else, including ransomware! Learn more at www.threatlocker.com.Support for this episode comes from NetSuite. NetSuite gives you visibility and control of your financials, planning, budgeting, and of course - inventory - so you can manage risk, get reliable forecasts, and improve margins. NetSuite helps you identify rising costs, automate your manual business processes, and see where to save money. KNOW your numbers. KNOW your business. And get to KNOW how NetSuite can be the source of truth for your entire company. Visit www.netsuite.com/darknet to learn more.This show is sponsored by Maze. Maze uses AI agents to triage and remediate cloud vulnerabilities by figuring out what's actually exploitable, not just what's theoretically risky. They remove the noise, prioritize vulns that matter, and manage remediation, so your team stops wasting time on meaningless vulns. Visit MazeHQ.com/darknet for more information.View all active sponsors.Sources https://www.democracynow.org/2010/8/11/gagged_for_6_years_nick_merrill https://globalfreedomofexpression.columbia.edu/cases/u-s-nicholas-merrill-v-loretta-e-lynch-14-cv-9763-vm/ https://clearinghouse.net/case/12966/ https://www.theguardian.com/law/2015/dec/06/fbi-national-security-letter-gag-order-nick-merrill https://www.aclu.org/documents/national-security-letters https://www.eff.org/cases/re-matter-2011-national-security-letter Cindy's Book: Privacy's Defender: My Thirty-Year Fight Against Digital Surveillance

All links and images can be found on CISO Series This week's episode is hosted by David Spark, producer of CISO Series, and Andy Ellis, principal of Duha. Joining is Patti Degnan, operating partner, Andreessen Horowitz. In this episode: Identity built for one person at a time Patching can't outrun the exploit timeline The exception hiding inside zero trust A revenue question nobody's answered yet A huge thanks to our sponsor, ThreatLocker ThreatLocker delivers Zero Trust Network Access and Zero Trust Cloud Access that verifies both user and device before granting access to specific applications. No broad access, nothing exposed, and no reliance on credentials alone. It's a smarter way to control access and reduce risk. Learn more at ThreatLocker.com/CISO.