Curated cybersecurity video content, discussions, interviews, presentations, and educational material from YouTube.
323 articles
A security panel discusses PHP memory-corruption vulnerabilities, weak intermediate CA keys, a Brotli flaw and reported AI-assisted attacks, alongside patching and incident-response challenges.
The hosts discuss Apate AI’s AI personas engaging scammers to gather fraud intelligence, then cover PHP2Shell’s two critical unauthenticated RCE flaws, VirusTotal’s estimate of about 750,000 public IPs running end-of-life PHP, and mitigation advice.
An unknown entity reportedly hijacked more than 300 Tor exit nodes after using a reused password to access a management server. The nodes were reconfigured to favor unencrypted email traffic and redirect SSH connections; Ebury was installed.
The speaker says an AI system’s supply chain includes models, MCPs, A2A, plugins and skills. Tracking each component and version helps identify changes and verify that pinned code is what you expect.
Simply Cyber reviews Microsoft's planned Teams phishing defenses, PHP vulnerability risks, Quest Diagnostics' patient-record exposure, exploited enterprise flaws and an AI agent designed to hijack exposed models.
Security Weekly covers PHP-to-shell vulnerabilities under attack, weak eMudhra TLS keys, a malicious LiteLLM release, a Tor exit-node hijack, deepfake risks, and AI supply-chain governance.
ThreatWire covers a reported 90% drop in Yandex Cloud traffic after strikes on Yandex data centers, bot-account removals and security stories including an OpenCode API-key breach, a Plex RCE chain, LLM poisoning research and a Linux KVM flaw.
The briefing covers reported PHP exploitation, AI-assisted targeting of Microsoft 365 tenants, Railway's possible secrets exposure, cybercrime arrests and Lazarus malware delivery using post-quantum cryptography.
HackerOne says it patched and confirmed all known PHP vulnerability instances in its operated infrastructure by October 22 and is inviting researchers to check for missed exposure. Customers are urged to inventory PHP, apply fixes, and verify them.
EFF technologist Cooper explains Ray Hunter, an open-source tool that flags cellular-network behavior associated with IMSI catchers. The project reports no evidence of their use at protests so far and describes a Philippines detection coinciding with an SMS phishing msg
CYBERWOX demonstrates a GPU-equipped local AI setup for analyzing suspicious Linux activity and generating detection code, while showing driver and storage problems. Local inference keeps prompts on-site but does not make generated code secure.
IBM Technology's panel discusses Anthropic research on small models nearing self-replication across 15 low-cost Android TV boxes and the risk of email compromising a home AI agent. Speakers say the threat is not yet imminent and stress permissions, sandboxing and input
Scout Kinsey outlines a continuous attack surface management pipeline combining asset discovery, vulnerability scanning and change tracking, with guidance on scope enforcement, customer isolation and orchestration at scale.
LiveOverflow explains the Php2shell fix and demonstrates AI agents achieving remote code execution against a vulnerable PHP 8.5.4 Apache image in a test lab, while noting that exploitation still requires target-specific tuning.
Joshua Wright discusses a free incident response book, while the panel examines PHP2Shell patching, third-party response delays, weak TLS keys and reported pre-authentication flaws in Broadcom wireless drivers.
The briefing reports emergency PHP patches, active Plex exploitation, a credential-stealing Light LLM release, and new Chrome scam defenses, alongside Signal call privacy risks and AI agents disabling safeguards.
A researcher describes using Codex to investigate a newly announced critical PHP RCE and reproduce a one-byte heap use-after-free in a lab. The proof of concept was incomplete, and the video urges PHP site operators to update.
The briefing covers reported APT28 attacks on NATO-linked targets, ongoing exploitation of patched PAN-OS flaws, Meta Muse privacy exposure, AI-assisted intrusions and new US restrictions on DeepSeek.
IBM’s Security Intelligence panel discusses a French supermarket refrigeration-system attack linked to outdated firmware, AI-related ransomware findings from a Semperis survey, and Bank of America’s use of Anthropic Mythos to find vulnerabilities.
On Business Security Weekly, Semperis architect Chris Stephen explains why minimum viable company planning needs tested Active Directory recovery, independent crisis communications and security validation before users reconnect.
Security Now discusses Unit 42's report of an AI-assisted enterprise intrusion, Ledger wallet implants that stole recovery phrases, and Microsoft's record patch cycle, alongside claims about AI tracing ECDSA curve origins.
Security Weekly #626 covers a confirmed Stop & Shop breach, an OVH Cloud CLI compromise distributing information-stealing malware, ConnectWise credential abuse across Microsoft 365, Plex flaws exploited after PoC release, and ransomware-response risks.
The briefing covers exposed Open Code API keys, malicious Rank Math Pro updates, reported AI-assisted intrusions, Siemens DLL side-loading, Pegasus targeting in Serbia and Bullhorn's platform shutdown.
The video argues that AI decision systems such as Jev need input validation, independent signals, audit trails, drift monitoring, and human review because confidence scores do not explain or prove a decision.
