Curated cybersecurity video content, discussions, interviews, presentations, and educational material from YouTube.
328 articles
Security Now examines OpenSSL's Hollow Bite denial-of-service flaw, password-manager controls for AI agents, and research on agent data injection. Later excerpts discuss AI use in ransomware negotiations.
Darknet Diaries traces the reported National Public Data breach to exposed admin credentials and password reuse, describing 2.9 billion stolen records, identity theft risks and USDoD’s subsequent arrest in Brazil.
The panel discusses an AI-assisted WordPress exploit, defensive prompt injection research, AI guardrails in incident response and uncertainty around the Gold Eagle cybersecurity initiative.
John Strand argues that AI can accelerate penetration testing but cannot replace human judgment, verification and remediation. He describes AI-assisted API testing, expanding application attack surfaces and the need for compensating controls.
Security Now examines the UK's proposed Cyber Shield, EU measures addressing AI-driven cyber risk, and Reuters reporting that CISA is using Anthropic's Mythos to audit government code.
A security panel discusses copyright takedowns exposing compromised government sites, vishing targeting passkey enrollment, prompt injection against a GitHub agent, and challenges monitoring AI systems.
The hosts discuss two proof-of-concept attacks on AI coding agents, a ransomware variant using a malicious signed rootkit to evade EDR, and an NPM supply-chain compromise that reportedly exposed developer credentials.
Matthew Eidelberg demonstrates how writable WebView2 DLL dependencies can enable code execution in Windows apps. He says Microsoft reclassified the issue and had no plans to fix it at the time of its last communication.
A Black Hills Information Security researcher demonstrates how malicious VS Code extensions can execute code and impersonate legitimate extensions, and discusses detection and prevention measures.
The video says Anthropic Mythos did not hack all of the NSA’s highly classified systems. The Economist author acknowledged that coverage of the tests was misleading and lacked context about the specific conditions and other tools involved.
Nick Merrill and Cindy Cohn describe legal battles over FBI national security letters, changes to secrecy requirements, and privacy-by-design services intended to reduce the customer data available for disclosure.
A security podcast discusses a deceptive home warranty mailer, authentication trade-offs and Layer X research on game-themed prompt injection against AI browsers.
A cybersecurity engineer discusses career development, the foundations of detection engineering and cloud security, and how AI could change offensive security and vulnerability remediation.
The panel discusses an AI-agent skill experiment that collected 26,000 user emails in an hour, web-agent retrieval poisoning through user-edited content, and Operation Endgame’s disruption of SteelC infrastructure.
The workshop demonstrates how ConfuserEx protections complicate .NET binary analysis, how to inspect obfuscation clues with dnSpy and Detect It Easy, and how de4dotEx can help continue analysis through staged binaries.
A reverse-engineering workshop explains how control flow flattening obscures program logic and demonstrates manual analysis, breakpoint use, and deobfuscation with de4dot.
The video argues that Claude Mythos and autonomous agents may compress vulnerability discovery-to-exploitation timelines. It examines exposed OpenClaw instances, agent manipulation, attacker scaling and defenses including isolation, least privilege and deception.
A red team lab walkthrough combines password spraying, Active Directory certificate abuse and custom command-and-control infrastructure. The speakers also discuss AI-generated implants and defensive monitoring.
A workshop demonstrates how string obfuscation removes the .NET user string stream, and how analysts can recover strings using DE4dot or by tracing execution with breakpoints.
A panel discusses reported physical intrusions targeting US law firms, World Cup ticket and job scams, and the safety implications of an experiment involving interacting AI agents.
Darknet Diaries recounts how researchers and the FBI investigated Bayrob, using proxy infiltration, unencrypted attachments and phone forensics to connect operators to auction fraud and a botnet of roughly 400,000 systems.
Dr Josh Stroschein demonstrates how ConfuserEx 2 obfuscates .NET binaries by renaming symbols, flattening namespaces, and modifying metadata strings, then shows how DE4Dot can make the output more readable.
The panel discusses FragNetsia, a Linux kernel flaw enabling local privilege escalation and cache persistence; the Shai-Hulud supply-chain worm and its variants; and two former Opexus employees reportedly convicted after deleting 96 federal databases.
A workshop demonstrates how ConfuserEx 2 adds .NET anti-debugging logic to a module constructor, how DE4 helps make obfuscated code easier to inspect, and how repeated debugger checks complicate analysis.
