BadHost, Dead CTFs, Exploding NPMs, and the Verizon DBIR - ASW #385

BadHost, Dead CTFs, Exploding NPMs, and the Verizon DBIR - ASW #385

Author: Security Weekly Productions June 2, 2026 Duration: 45:22
Security Weekly Podcast Network (Video)
TechnologyNews

We dedicate an episode to catching up on appsec news with Kalyani Pawar. We see parsing problems that led to the BadHost vuln, which exposed lots of LLMs, MCPs, and agents to potential compromise. We wonder where to look for security education and practice as the camaraderie of the CTF community becomes infiltrated by LLMs. We talk about the tradeoffs in trust between using public packages vs. having agents write replacements from scratch. And we examine some of the appsec details that the Verizon DBIR reveals about how orgs are being attacked -- and how orgs might use that information to protect themselves.

Show Notes: https://securityweekly.com/asw-385


Dive into the ever-evolving world of digital defense with the Security Weekly Podcast Network (Video). Produced by Security Weekly Productions, this network isn't a single perspective but a comprehensive hub where different facets of cybersecurity come into focus through distinct, dedicated shows. You'll find episodes from series like Application Security Weekly, Business Security Weekly, Paul's Security Weekly, Enterprise Security Weekly, and Security Weekly News, all curated in one feed. This structure means that whether you're analyzing code, shaping corporate policy, or managing infrastructure, there's relevant content for you. The discussions move beyond headlines, offering practical analysis and expert insights that help make sense of complex threats and solutions. By blending technology deep dives with timely news commentary, this video podcast provides a multi-dimensional view of the field, suitable for professionals who need to stay informed and enthusiasts curious about how security shapes our digital lives. It’s a consistent resource for anyone looking to understand not just what is happening in cybersecurity, but why it matters and how to respond.
Author: Language: English Episodes: 100

Official website RSS
instagramyoutubediscordlinkedinspotifygithub
Security Weekly Podcast Network (Video)
Podcast Episodes
Firmware Backdoors Be Spying On You - PSW #914 [not-audio_url] [/not-audio_url]

Duration: 2:06:14
AI says that this is the show where we turn coffee into threat intelligence and cigar smoke into packet captures. This week: a firmware backdoor living its best life inside Android tablets a fresh BeyondTrust RCE that al…
Security Money: The Index and NASDAQ Diverge - BSW #435 [not-audio_url] [/not-audio_url]

Duration: 32:13
The Security Weekly 25 index and the NASDAQ diverge. Funding and acquisitions continue shift to AI. Are security stocks out of favor? Netskope enters the index, but does not replace CyberArk, as Thoma Bravo buys Verint.…
Conducting Secure Code Analysis with LLMs - ASW #370 [not-audio_url] [/not-audio_url]

Duration: 46:26
A major premise of appsec is figuring out effective ways to answer the question, "What security flaws are in this code?" The nature of the question doesn't really change depending on who or what wrote the code. In other…
AI Vulnerability Hunting - PSW #913 [not-audio_url] [/not-audio_url]

Duration: 2:04:05
In the security news: Viral AI prompts Things to do in your home security lab I can open your garage door They call me DKnife Beyondtrust RCE Cool AI device Robots need your body Meta is just full of scams, phishing, and…

«1...678910