Curated cybersecurity video content, discussions, interviews, presentations, and educational material from YouTube.
323 articles
Ryan Montgomery demonstrates facial-search investigations with NetworkChuck, discusses digital-footprint exposure and 764's online extortion, and explains why child-safety investigations should involve law enforcement.
The hosts discuss hypothetical cyber-physical risks in Tesla’s planned Roadster, a reported attack on outdated Danfoss supermarket refrigeration controllers in France, and a controlled test in which small AI models reportedly self-replicated across IoT devices.
In Darknet Diaries, Ricky Handschumacher describes using support impersonation and SIM-swapping to steal usernames and cryptocurrency. The episode reports his four-year prison sentence and $7.6 million restitution order.
BHIS panelists discuss the reported SkyKick compromise, stolen application credentials and persistence risks across customer cloud tenants. They urge log reviews and warn that disabling affected apps may not remove attacker access.
Gerald Auger describes how cybersecurity work changes from junior alert triage to mid-career ownership and senior strategy, emphasizing communication, humility and continual learning. He predicts AI may bring these career shifts earlier.
Penetration tester Fabian Faessler argues that AI can extend researchers’ capabilities but not replace expertise built through practice. He illustrates the point with mixed results from his AI-assisted browser vulnerability research.
A longtime bug bounty researcher criticizes HackerOne’s three-trial-report limit for researchers below program signal thresholds, arguing it may penalize veterans and newcomers while addressing surging low-quality, AI-generated submissions.
A campaign used compromised GitHub accounts to deploy workflows that sent secrets to attacker servers, affecting 376 users and organizations across 772 repositories. The roundup also covers AI-agent activity, policy and product updates, and other security news.
The speakers discuss the Wi-Fi Pineapple Pager and USB Rubber Ducky, describing community-created Wi-Fi payloads, limits on payloads without a legitimate penetration-testing use, and how writing or examining payloads can teach Linux, Bash and PowerShell.
At Splunk.conf16, demos and interviews show how telemetry, observability and AI agents can support security investigations and response. Speakers stress validating AI outputs, managing costs and keeping people responsible for consequential decisions.
A recent Wi-Fi Pineapple Pager firmware update adds a PROMPT_QR command, letting payloads display a QR code alongside text. The presenter demonstrates it in a LAN scanner payload for documentation.
The video explains how indirect prompt injection in emails or malicious tools can misuse an AI agent’s legitimate permissions, and describes monitoring and controls Radware says its AI security offering provides.
The speaker describes Skutari, a custom automated discovery pipeline running in AWS that sends findings through Discord to an AI agent for triage and potential HackerOne reporting.
Crypto scammers gained unauthorized access to Microsoft’s X account for about 30 minutes, using Clippy-themed posts to promote a token. Microsoft confirmed the access, removed unauthorized posts, secured the account, and said it was investigating.
A hands-on tutorial uses Ghidra and x64dbg to analyze SteelBit and BlackMatter, demonstrating anti-debugging checks, runtime string decryption and Sysmon-based detection opportunities.
Ashish Rajan discusses securing AI agents through network isolation, configuration enforcement and deterministic evaluations, and previews Charlie, an open-source tool intended to help practitioners assess coding-agent settings.
A Black Hills Information Security webcast examines social engineering, rapport building and physical penetration testing, emphasizing identity verification, ethical assessments and employee support for challenging suspicious requests.
The video demonstrates the DuckyScript PROMPT_IMAGE command, which displays a PNG on the WiFi Pineapple Pager screen. Images smaller than 480×222 are centered, and any button dismisses the display.
A survey found business logic vulnerabilities were the hardest for AI tools to identify, cited by 62.1% of respondents. A speaker said multi-step exploit chains may be more addressable through better prompting.
The transcript describes Open Shell as an isolation system for AI agents, using zero trust, minimum privileges, policy monitoring and formal verification to support safer deployment.
The video demonstrates a Windows batch payload staged in browser cache and retrieved through a Run-dialog command. Network requests to cloudrecycled[.]com include the user agent, which may help determine which payload to serve.
The discussion cites a survey rating creative manual research that finds issues missed by automation at 6.3 out of 10. It argues that application context helps researchers and AI agents assess which vulnerabilities matter most.
The podcast discusses Google pausing its open-source bug bounty amid AI-generated false reports, FortiGuard’s account of Cling stun Linux malware targeting IoT devices, and Wikimedia’s concerns about resource-intensive AI-agent activity.
Security Now discusses Anthropic's restrictions on internal AI testing, its free OSS Scanner service, and CrowdStrike's findings on AI-assisted intrusions targeting South Korean financial institutions.
