Vulnpocalypse Continues Until Defense Improves - PSW #950
Shownotes
In the security news this week:
In the security news this week:
- Cisco says patch faster, then sells you time
- Turning AI refusals into vulnerability signals
- Brotli's are hiding
- WordPress image upload exploit
- Fortinet ships fixes before details
- PHP2Shell still claiming victims, including firewalls
- Uncoordinated disclosure
- Claude finds vulns, go figure
- PXE strikes again!
- Sony's PS5 bounty drama
- Apple's October patches reach older devices
- CISA looks ahead to 2030
- ArubaOS gets a pile of critical fixes
- New UK rules for protecting undersea infrastructure
- PortaPack Mayhem goes mobile
- Can AI agents police other AI agents?
- DHS bans DeepSeek
- A Chinese model writes riskier code for a US contractor
- eMudhra exits the TLS business
- BlackX bootkit exploits Secure Boot
- Signal makes hanging up harder than it should be
- Is AI solving math, or making it harder to trust?
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-950