Back to (or Start) Fundamentals? - Rajesh Khazanchi - PSW #923

Back to (or Start) Fundamentals? - Rajesh Khazanchi - PSW #923

Author: Security Weekly Productions April 24, 2026 Duration: 2:03:37

This week:

Larry's in the host seat and chaos ensues. We dig into:

  • A very questionable story about tracking a warship with a $5 Bluetooth tracker
  • Serial-to-IP devices quietly sitting in critical infrastructure… and full of holes
  • New York regulators mandating MFA and asset inventory—aka CIS Control #1 is now breaking news
  • A ransomware negotiator who decided to double-dip (and landed in prison)
  • "Brand new" hard drives that come preloaded… with someone else's data
  • The Vercel breach: no zero-day, just shadow IT, stolen tokens, and bad decisions
  • AI-driven vulnerability discovery and the looming "vulnpocalypse"
  • Quantum crypto debates: real threat or just another security boogeyman?
  • Mirai is STILL alive—because apparently we still don't patch routers
  • And yes… Flipper Zero makes an appearance (no, you're not hacking airplanes… calm down)

Then, we rebroadcast an interview from RSAC.

Breach Readiness for Measurable Risk Reduction in the Age of AI Cyber leaders no longer debate whether a breach will occur. What has changed is the speed and scale at which AI now enables those breaches. The real question is how far an attacker can move once inside. In this conversation, Rajesh Khazanchi explores why breach readiness, including AI-assisted containment, measurable blast radius reduction, and pervasive microsegmentation, has become mission-critical for business continuity in 2026.

This segment is sponsored by ColorTokens. Visit https://securityweekly.com/colortokensrsac to learn more about them!

Show Notes: https://securityweekly.com/psw-923


Dive into the ever-evolving world of digital defense with the Security Weekly Podcast Network (Video). Produced by Security Weekly Productions, this network isn't a single perspective but a comprehensive hub where different facets of cybersecurity come into focus through distinct, dedicated shows. You'll find episodes from series like Application Security Weekly, Business Security Weekly, Paul's Security Weekly, Enterprise Security Weekly, and Security Weekly News, all curated in one feed. This structure means that whether you're analyzing code, shaping corporate policy, or managing infrastructure, there's relevant content for you. The discussions move beyond headlines, offering practical analysis and expert insights that help make sense of complex threats and solutions. By blending technology deep dives with timely news commentary, this video podcast provides a multi-dimensional view of the field, suitable for professionals who need to stay informed and enthusiasts curious about how security shapes our digital lives. It’s a consistent resource for anyone looking to understand not just what is happening in cybersecurity, but why it matters and how to respond.
Author: Language: English Episodes: 100

Security Weekly Podcast Network (Video)
Podcast Episodes
Keeping Up With the OWASP GenAI Project - Scott Clinton - ASW #381 [not-audio_url] [/not-audio_url]

Duration: 1:09:11
Speed is the most common theme among developers and appsec teams working with LLMs and agents, from trying to keep up with patterns for deploying agents to dealing with more code faster to how the latest models impact co…
FIRESTARTER - PSW #924 [not-audio_url] [/not-audio_url]

Duration: 2:02:20
This week in the security news: Are you a FIRESTARTER? Eavesdropping via fiber-optic cables Copy Fail - more Linux LPE Github RCE Running Linux on a PS5 BadUSB tricks SilentGlass and HDMI threats Sonicwall and vague deta…