Security Weekly

26 episodes scanned. 28% of ad slots promote the show's own products.

Recent Episodes

1. Patrick Stewart, Videostrong, C3RB3R, GitLab, VMware, BTCPay, Binance, Aaran Leyland. - SWN #630

   Nov 3, 2026

   Co-host Aaran Leyland joins host Doug White for episode 630 of Security Weekly News, a weekly roundup of security news. Topics include the Google takedown of the XCPE botnet built on Android TV boxes made by Videostrong Technology, a GitLab flaw left unpatched on more than 1,000 servers, VMware's restriction of the VDDK, the Binance hot-wallet theft, BTCPay Server's update, and attacks on European supermarket freezer controllers. The hosts mix the news with commentary and frequent pop-culture asides.

2. Mrfoofoo, Binance, Polymarket, Silent Train, robosurance, privacy, and Josh Marpet - SWN #629

   Oct 30, 2026

   Security Weekly News episode 629, hosted by Doug White with Josh Marpet joining for the middle segments, covers a string of security and privacy stories. Topics include the Binance hack that halted withdrawals, the Polymarket trading suspension after a wallet-draining script, Veracode's 2026 GenAI security report on insecure AI-generated code, and a Cisco Talos report linking UAT-11473 to Volt Typhoon's infrastructure. The discussion also addresses a FinCEN rule change allowing companies to avoid disclosing beneficial owners, an AI relay used to get around export restrictions, and General Motors' settlement over selling driver data to insurers.

3. Agents, Train Robberies, Jazz, Microsoft, Elvis Gyrates, Aaran Leyland, and More - SWN #628

   Oct 27, 2026

   Security Weekly News episode 628 covers a range of security stories, including the actively exploited PHP-to-shell vulnerabilities, a University of Copenhagen data exposure, agentic AI risks, a Microsoft Authenticator flaw, and GPS-spoofing freight theft. Aaron Leyland appears in a guest segment on MFA-bypass attacks, including relay-based session token theft and device code phishing against Microsoft 365, and explains how organizations should respond and choose stronger MFA methods.

4. Tor, PhP2Shell, Deepfakes, eMudhra, LiteLLM, Meta, Josh Marpet, and More - SWN #627

   Oct 23, 2026

   Security Weekly News episode 627 covers the PHP-to-Shell vulnerabilities, eMudra's issuance of weak SSL/TLS keys, the LiteLLM package compromise, and a New Mexico jury verdict against Meta. Doug White and guest Josh Marpet also discuss deepfake voice attacks, CISO reporting lines and AI governance, and the AI supply chain. The episode closes with a hijacking of more than 300 Tor exit nodes.

5. Klingons, Stop and Shop, OvHCloud, Microsoft, Plex2Shell, ReactOS, and Aaran Leyland - SWN #626

   Oct 20, 2026

   Security Weekly News episode 626 covers a range of security stories, including AI's effect on cybersecurity hiring, an OVHcloud CLI compromise, a ConnectWise cloud backup credential breach, a U.S. ban on DeepSeek, a Plex vulnerability, and ReactOS. Guest Aaron Leyland joins for a segment on ransomware negotiation, using reporting by Brian Krebs on the Shiny Hunters extortion site and a former cyber executive's alleged links to the gang. He argues that negotiators should be engaged under pre-approved policies with limited authority, and that their fees and incentives should be scrutinized.

6. Mr. Sparkle, Burger King, Pwnscape, Linux, Cisco, GitHub, Microsoft, Josh Marpet... - SWN #625

   Oct 16, 2026

   Josh Marpet joins Doug White for a live-stream segment from John Con, a local hacker conference, where he shows off conference gear and urges listeners to attend local cons over big-name events. He later discusses the risks of depending on third-party and vendor services that could be cut off, using the Starlink cutoff as an example. The episode's news items cover a Burger King Japan data breach via a third-party system, the PoC||GTFO-style "PonEscape" Linux kernel VM escape, a Cisco Secure Email Gateway exploit, a Meta GitHub repository breach, Microsoft's Defender for Endpoint on Linux and its large October patch release, and FBI arrests tied to North Korean laptop farms.

7. Claude Visa, Yandex, Danfoss, Bricks, Purgatorius, Muse, Xandr, Grindr, Aaran Leyland - SWN #624

   Oct 13, 2026

   Episode 624 of the Security Weekly News covers a week of security stories, including a drone attack on Yandex data centers, an attack on Danfoss refrigeration controllers in French supermarkets, a WordPress Bricks plugin vulnerability, a Norwegian fine against Xandr over Grindr user data, and Anthropic's Claude submitting a false police tip. Doug White hosts and Aaran Leyland joins for a segment on vulnerability disclosure trends and ransomware economics, drawing on Google Threat Intelligence and Chainalysis figures. The discussion centers on data location, exposed OT devices, third-party plugin risk, and the defensive priorities that follow from these stories.

8. Airline Zoom Calls,Pix, Windows, TP-Link, AgentCorruption, OSS Scanner, Josh Marpet - SWN #623

   Oct 9, 2026

   Josh Marpet joins Doug White on Security Weekly News episode 623 to discuss a week of security stories, including Microsoft's end of support for unsupported Windows versions, four states' lawsuits against TP-Link, and the AgentCorruption flaw in AWS Bedrock agents. Marpet, who says he was teaching a cloud and AI class to FDIC bank examiners in Dallas, focuses on the CSBS AI supervisory framework and on who is accountable for agentic AI systems. The episode also covers Anthropic's OSS Scanner, a $17,600 Azure/Claude billing overrun, and scraping of watermarked school picture proofs.

9. Typing, textGrain, NetScaler, Fortinet, Copilot, LibreOffice, Dots, Aaran Leyland - SWN #622

   Oct 6, 2026

   Security Weekly News episode 622 covers critical vulnerabilities in NetScaler, Fortinet, and LibreOffice; AI-assisted attacks in South Korea; GitHub Copilot CLI prompt injection risks; and emerging threats like Chinese spies impersonating Anthropic employees to phish AI policy experts. Guest Aaran Leyland provides detailed analysis of a sophisticated phishing campaign targeting US and international AI policy makers, demonstrating how reputation exploitation and multi-stage social engineering defeat standard MFA controls.

10. RAM, Muse, CloudSyncD, Springsteen, Software, Persistence, Michael Jenkins, CTO and.. - Michael Jenkins - SWN #621

    Oct 2, 2026

    Michael Jenkins, CTO of ThreatLocker, discusses the emerging threat of agentic AI being used to attack online retailers and exploit vulnerabilities at scale. The episode covers real-world AI-powered attacks that compromised over 600,000 credit cards, the economics of AI-driven exploitation ($25 per attack), and how zero trust architecture with ring-fencing and least-privilege access is critical to defending against both malicious and legitimately-deployed but uncontrolled AI agents.