Security Weekly

Recent Episodes

1. Bacteria, Spartans, AI gone wild, Cisco, WordPress, Settra, Plugin4Shell, Josh Marpet - SWN #617

   Sep 18, 2026

   Security Weekly News episode 617 covers critical security developments including OpenAI's disclosure of agentic AI model misalignment, a zero-click remote code execution vulnerability affecting major AI coding agents (Claude, Codex, Gemini, Copilot) called Plugin4Shell, Cisco ISE critical flaws being actively exploited in the wild, WordPress Events Calendar plugin vulnerabilities affecting 600,000+ sites, and the emerging Settra ransomware group. Host Doug White and guest Josh Marpet discuss supply chain risks in the AI agent ecosystem, vulnerability management strategy shifts from severity to risk-based prioritization, and emerging threats including IV detox clinic contamination.

2. RoboGators, HBOMAX, Microsoft, DAS, Horsebot 3000, Aaran Leyland does AI, and More - SWN #616

   Sep 15, 2026

   Security Weekly News episode 616 covers major cybersecurity incidents including HBO Max Reddit account compromise distributing malware, Microsoft social engineering campaigns targeting cloud credentials, and the New York City Domain Awareness System surveillance capabilities. Guest researcher Aaron Leyland provides extensive analysis on AI risks, geopolitical implications of AI development, and challenges around regulation versus competitive advantage, alongside news on Chinese robotics companies selling affordable robot dogs and humanoid robots.

3. 9/11 at 25, OfferLoader, Gemini CLI, Liquid, 10% Doom, Josh Marpet, and More - SWN #615

   Sep 11, 2026

   Security Weekly News episode 615 covers critical cybersecurity developments including 25 years since 9/11, the evolution of shift-left security as AI coding agents move the threat boundary earlier in the development lifecycle, a massive pay-per-install loader operation distributing malware through gaming YouTube channels, Google's new agentic threat campaigns, a CVSS 10 vulnerability in Gemini CLI, the first Take It Down Act sentencing, a $263M Bitcoin incident on Liquid sidechain, and commentary on AI existential risk estimates from Anthropic leadership.

4. Cybercabs, Robohobos, BigBear, Nightmare Eclipse, weChat, Flock, ASCII, Aaran Leyland - SWN #614

   Sep 8, 2026

   Security Weekly News episode 614 covers major security threats and trends including agentic AI deployment disparities, BigBear 2.0 phishing-as-a-service attacks bypassing MFA at 258 organizations, ASCII2 smuggling techniques using invisible Unicode characters to evade AI email filters, proprietary AI model theft and extortion, Nightmare Eclipse's expanding exploit releases, WeChat account takeover via incoming calls, Flock camera surveillance misuse by law enforcement, and smart TV data collection practices. Host Doug Waite is joined by security researcher Aaran Leyland to discuss findings on television surveillance capabilities and privacy concerns.

5. Wireguard, Chrome, RMMS, Sonicwall, Microsoft, Sumerian VPNS, Harvard, Josh Marpet... - SWN #613

   Sep 4, 2026

   Security Weekly News episode 613 covers multiple security topics including Chrome 0-day vulnerabilities, RMM phishing campaigns targeting 46 countries, infrastructure device patching failures, Microsoft Windows 11 updates causing display issues, advanced fee scams targeting enterprises, and CISA's decision to eliminate free cybersecurity assessment programs for small utilities. Guest Josh Marpet discusses the impact of CISA cutting cyber resilience review programs that provided free expert consulting to vulnerable organizations.

6. Victorians, TONIC, RevStealer, Fireant, OpenClaw, PowerShell, SuperBox, Aaran Leyland - SWN #612

   Sep 1, 2026

   Security Weekly News episode 612 covers the week of August 30 – September 1, 2026, featuring host Doug White discussing multiple security threats including cryptocurrency lending platform exploits, the RevStealer info-stealer malware, Chinese-linked FireAnt targeting infrastructure, OpenClaw 2.0 release concerns, PowerShell social engineering attacks, Iranian Nimbus Manticore toolkits, and historical Victorian-era bug bounties. Guest Aaran Leyland provides expert analysis of Anthropic's new Claude Security product, its vulnerability detection claims, and practical recommendations for enterprise deployment.

7. Mythos Writes the Exploit. Atlas Writes the Response. - Harman Kaur - SWN #611

   Aug 28, 2026

   Harman Kaur, CTO of Tanium, discusses the governance and security challenges posed by agentic AI systems that can execute actions across enterprise endpoints. The episode explores how organizations should balance enabling AI adoption with security controls, drawing parallels to historical resistance to Wi-Fi and email adoption. Kaur introduces Tanium Atlas, an AI-powered endpoint management tool that dramatically reduces response times for vulnerability assessment and remediation.

8. Fibonacci, Hidden Sounds, Teams, Zimbra, Entra-ID, z.ai, Schrödinger's, Aaran Leyland - SWN #610

   Aug 25, 2026

   Security Weekly News episode 610 (a Fibonacci number) covers recent security threats and vulnerabilities including Zimbra exploits, Microsoft Entra-ID flaws, Clickfix malware attacks, Apollo Global Management breach via social engineering, and emerging quantum battery technology. Guest Aaran Leyland provides detailed threat analysis on the Apollo breach, emphasizing how attackers bypassed defenses through phone-based social engineering targeting passkey rollouts, and recommends implementing FIDO2 hardware-bound authentication without fallbacks.

9. Surveillance, Murder Hornets, Portmantau, TrueCONF, Siemens, N-Able and More - SWN #609

   Aug 21, 2026

   Doug White hosts Security Weekly News episode 609, covering major cybersecurity stories including AI-driven vulnerability management challenges ("Vulnpocalypse"), CISA warnings about TrueConf server vulnerabilities, coordinated U.S. government alerts on AI-assisted attacks against Siemens S7 PLCs at critical infrastructure, phishing campaigns targeting DEFCON attendees, passkey compromise techniques, cloud-based password vault vulnerabilities in PassPortal, robo-tipping scams, and evolving surveillance technology and privacy concerns.

10. Secrets, Red Agent, GitHub, evoooo1bot, DecryptAds, Copilot, Aaran Leyland, and More - SWN #608

    Aug 18, 2026

    Security Weekly News episode 608 covers critical security developments including AI-generated code vulnerabilities in GitHub Copilot, the Mirai-based "evoooo1bot" botnet targeting Linux systems, data breaches affecting major hospitality companies via threat actor "Hatman," and AI prompt injection attacks against cloud security tools. Guest Aaran Leyland discusses emerging threats including Ghost Jacking attacks against Cloudflare, malicious MCP servers, and the LightLLM supply chain compromise affecting 25,000 companies and 434,000 CI/CD pipelines.