Category: security Episodes

Most recent episodes from podcasts in the security category.

Back to category podcasts

Open Source Security

Packagist and Composer security with Jordi Boggiano

22 Jun 2026

Strategies for securing open-source ecosystems include malware detection via third-party feeds, transparency logs, rapid incident response, blocking malicious downloads, private registry controls, immutable package releases, standardized workflows, MFA enforcement, and technical proposals like artifact validation and build attestation, while addressing challenges like maintainer hacking, AI risks, usability trade-offs, and the need for ecosystem-wide alignment and human verification.

Open episode

The Secure Disclosure

Your Microphone Became a Keylogger w/ David vonThenen

16 Jun 2026

Machine learning analyzes keystroke acoustic signatures to infer typed characters over remote platforms, highlighting high accuracy with known keyboards, privacy risks from surveillance, and challenges in noise and variability, while proposing defenses and noting AI's dual-use implications.

Open episode

Open Source Security

Sustaining Open VSX with Mike and Thabang

15 Jun 2026

Eclipse Foundation's OpenVSX, a VS Code extension repository, surged to 600M monthly downloads, evolved to a commercial model with enterprise SLAs and security teams, while addressing scalability, open-source balance, and funding challenges for AI expansion.

Open episode

The Secure Disclosure

Understand the Software Supply Chain Chaos w/ Roeland Delrue

9 Jun 2026

Rapidly evolving supply chain security threats, including malicious open-source components and AI-driven malware, demand advanced AI-powered solutions like Akito Securitys self-securing software and tailored tools to address vulnerabilities in developer environments and package repositories.

Open episode

Open Source Security

Hacking your CI/CD with Francois Proulx

8 Jun 2026

Critical vulnerabilities in open source CI/CD pipelines, including hijacking and supply chain attacks via social engineering or compromised builds, are highlighted through incidents like TJ Actions and Ultralytics, with mitigation strategies emphasizing secure credentials, externalized workflows, threat modeling, and tools like *Smoked Meat* and *Bagel* to enhance incident response and supply chain security.

Open episode

Risky Business

Soap Box: Detection and response in the AI age

5 Jun 2026

The text explores the growing threat of zero-day exploits and vulnerabilities, emphasizing the need for advanced detection/response strategies, AI-driven automation in SOC tasks, collaborative AI systems for faster threat mitigation, and the evolving balance between AI capabilities and human oversight in security operations.

Open episode

Darknet Diaries

Bayrob

2 Jun 2026

Sophisticated cybercriminals exploit legitimate tools like PowerShell to evade detection, as seen in the Bayrob malware's eBay fraud case, which required decrypting encrypted data, navigating geofencing, and dismantling a global botnet of 400,000 systems through international law enforcement collaboration.

Open episode

Open Source Security

Open source verification with Sal Kimmich

1 Jun 2026

Cybersecurity challenges include complex application ecosystems, overlooked kernel vulnerabilities, supply chain risks, and systemic risks from under-resourced organizations prioritizing surface-level controls, alongside calls for regulatory reforms, proactive threat modeling, secure development practices, and addressing tribal nations' unique legal and sovereignty concerns.

Open episode

The Secure Disclosure

Prompt Injection Might Never Be Solved w/ Paul Vann

28 May 2026

The text details AI security threats like prompt injection, jailbreak attacks, and distillation attacks, along with vulnerabilities such as AI bias and autonomous agent risks, highlighting detection challenges, emerging malware, supply chain exploits, and the industry's struggle to keep pace with rapidly evolving AI technologies.

Open episode

Risky Business

Risky Business #839 -- TeamPCP stole GitHub's internal repos

27 May 2026

A GitHub breach by "Team PCP" via a compromised VS Code extension exposed 3,800 internal repositories, underscoring supply chain risks, corporate underreporting, AI-driven threats, outdated dependencies, and systemic gaps in open-source and cybersecurity practices.

Open episode