Security Weekly

Security Weekly Information security news, hacking, interviews, podcasts, live Internet TV, cocktails, webcasts and

The Security Weekly mission is to provide free content within the subject matter of IT security news, vulnerabilities, hacking, and research. We strive to use new technologies to reach a wider audience across the globe to teach people how to grow, learn, and be security ninjas. The mixture of technical content and entertainment will continue to set a new standard for podcasting and Internet TV.

10/31/2026

Your AI girlfriend knows your secrets. But what happens when the company holding those conversations goes bankrupt?

AI companion services can collect deeply personal conversations, while some AI personas present themselves as doctors, lawyers, and psychiatrists. The privacy implications go well beyond embarrassing chat histories.

How much would you trust an AI companion with your personal life?

10/30/2026

Who owns a company when nobody has to report it?

A change to FinCEN's beneficial ownership reporting rules removes federal reporting requirements for most U.S.-created companies. That creates new challenges for investigators trying to identify the people and organizations behind corporate entities.

How much corporate ownership transparency is necessary to protect against financial crime?

10/29/2026

A trusted Windows driver can become an attacker's way around security defenses.

Threat actors may abuse vulnerable, already-installed drivers or introduce their own signed drivers to gain privileged access and evade endpoint detection and response (EDR) tools. UEFI-level exploitation can go even deeper, but driver abuse is a recurring concern.

How well can your security tools detect abuse from drivers they already trust?

Early Bird savings are here for RSA Conference 2027! Join us and more than 43,000 of the world's cyber- and AI security ...
10/29/2026

Early Bird savings are here for RSA Conference 2027! Join us and more than 43,000 of the world's cyber- and AI security experts, practitioners, and innovators in San Francisco, April 5–8, for the Power of Community, at scale. Register now during Early Bird pricing to save $800 on a Core Pass. https://bit.ly/4yOLE96

10/29/2026

The vulnerability clock has changed.

Traditional CVE remediation timelines made sense when attackers sometimes needed weeks to find and exploit vulnerabilities. Now, exploitation can happen within minutes—or even before a CVE is published.

How should security teams rethink vulnerability management?

10/28/2026

MFA is not broken—but weaker authentication options can undermine your security.

Passkeys and hardware security keys can resist phishing techniques that defeat some other MFA methods. If users can simply fall back to weaker options, attackers may exploit that flexibility. And protecting the initial login isn't enough: sessions and account changes need attention, too.

Does your organization enforce phishing-resistant authentication, or leave weaker options available?

10/28/2026

A policy isn't the same as operational AI governance.

When AI agents change rapidly, reviewing their controls just once a year can leave governance disconnected from reality. Documentation and checklists may satisfy a process, but effective governance needs to keep pace with how AI systems actually operate.

Is your AI governance program built for continuous change or annual checkboxes?

10/27/2026

A Markdown file in your downloads folder could be more than engineering notes.

A newly reported indirect prompt injection attack uses a malicious agents.md file to influence AI agents, potentially changing their configuration and enabling further malicious activity. Because AI agents regularly work with Markdown, seemingly ordinary files deserve careful scrutiny. The exact attack was not reproduced in the personal experiment discussed here.

How should organizations control which files their AI agents are allowed to trust?

10/27/2026

Your systems can remain exposed while patches are still pending.

Runtime security monitors APIs, servers, and containers for suspicious behavior that may signal exploitation, privilege escalation, lateral movement, or data exfiltration. eBPF-based sensors can provide useful visibility into these activities, helping security teams investigate threats during the gap between discovering a vulnerability and deploying a fix.

But how much protection can runtime monitoring provide before a patch is available?

10/26/2026

AI agents never clock out. Can security teams keep up?

As AI agents operate around the clock, traditional access management and human-led alert triage face new challenges. The discussion explores why organizations need to rethink privileged access for AI agents and how AI-assisted security could help teams respond at the speed these systems operate.

How should organizations balance automated response with human oversight?

Address

Warwick, RI

Opening Hours

Monday 10am - 5pm
Tuesday 10am - 5pm
Wednesday 10am - 5pm
Thursday 10am - 10pm
Friday 10am - 5pm

Alerts

Be the first to know and let us send you an email when Security Weekly posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Shortcuts

Share