Security Weekly

Security Weekly Information security news, hacking, interviews, podcasts, live Internet TV, cocktails, webcasts and

The Security Weekly mission is to provide free content within the subject matter of IT security news, vulnerabilities, hacking, and research. We strive to use new technologies to reach a wider audience across the globe to teach people how to grow, learn, and be security ninjas. The mixture of technical content and entertainment will continue to set a new standard for podcasting and Internet TV.

10/15/2026

AI can help catch authentication bypasses before vulnerable code ships.

Smokes Ci**rs explains how he built an AI testing harness using OWASP guidance and documented vulnerabilities in IoT devices. It isn't foolproof, but the goal is straightforward: flag security flaws before they reach production. He argues these tools shouldn't be kept to yourself when developers could use them to improve their own security testing.

Should AI-assisted security testing become standard practice?

10/15/2026

A security priority should have a reason to exist.

If a security team's priorities don't map to the organization's top risks, it's worth asking why they're priorities in the first place. And implementing a new control isn't enough—you need to measure whether it's actually reducing risk.

Is your security program focused on the things that matter most?

10/14/2026

Getting a foothold in an organization may cost less than you think.

Ransomware payment totals tell only part of the story. Victim counts, median payments, and dark-web access prices reveal a more complicated picture. Basic access may be getting cheaper, but privileged enterprise access remains a different proposition. The real challenge is what happens after an attacker gets inside. How well does your architecture limit what they can do next?

10/14/2026

In cybersecurity, getting knocked down is sometimes part of the job.

Bill O’Connell explains why CISOs need the mindset of resilient boxers: strong defenses matter, but they aren't enough on their own. Even excellent security teams can experience serious incidents. Organizations also need to think about availability, recovery, and what happens after prevention fails. Is your security strategy built only to block the punch—or to get back up?

10/13/2026

That old account from 2007 might still be a security problem.

Weak passwords and forgotten accounts can leave organizations exposed long after the systems that created them have been replaced—or forgotten. The tools to audit password security aren't necessarily expensive. The harder part is making account reviews, password remediation, and deprovisioning routine. How many forgotten accounts are still active in your environment?

10/13/2026

Vulnerability prioritization without context is guesswork.

Knowing a vulnerability exists is not enough. Security teams need to understand how it applies to their own environments before deciding what deserves attention.

AI could help bring that context into the decision-making process, allowing teams to focus on meaningful risks instead of getting buried in metrics. The technology is still evolving, but the goal is clear: reduce risk faster by prioritizing what matters.

How much better could security teams prioritize with the right context?

10/12/2026

Not every step of security testing needs the most powerful AI model.

Finding a potential SSRF vulnerability can require strong reasoning and hypothesis-building. But once that hypothesis exists, the actual hunting process can be far more deterministic.

Where should organizations use advanced AI, and where is simpler automation enough?

10/12/2026

Finding sensitive data isn't the same as understanding a security risk.

Security teams need to know where data came from, what it means, and whether an employee's actions make sense for their role. A product employee accessing source code might be normal—or a sign that something deserves a closer look.

Without context, how can security teams distinguish normal work from suspicious activity?

10/10/2026

What if AI could find open-source vulnerabilities before attackers do?

Anthropic's OSS Scanner aims to use AI to identify security weaknesses in open-source AI projects. Continuous repository scanning could help catch newly introduced bugs or malicious code as projects change.

The goal is to find vulnerabilities before someone else discovers and exploits them.

Can continuous AI scanning give open-source maintainers a meaningful defensive advantage?

10/09/2026

An AI chatbot gives away millions of dollars in merchandise. Who's responsible?

As AI agents become capable of taking actions rather than simply answering prompts, questions of ownership, liability, and accountability get complicated. What happens when an agent makes an unexpected decision, its creator has left the company, and nobody knows who should be held responsible?

Who should be accountable when autonomous AI makes an expensive mistake?

Address

Warwick, RI

Opening Hours

Monday 10am - 5pm
Tuesday 10am - 5pm
Wednesday 10am - 5pm
Thursday 10am - 10pm
Friday 10am - 5pm

Website

Alerts

Be the first to know and let us send you an email when Security Weekly posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Shortcuts

Share

Category