Security Leaders Discuss AI Agent Controls and Cybersecurity Hiring Trends
Security Weekly hosts discuss AI agent permissions, identity oversight and incident preparation, alongside Cyber SN's cybersecurity jobs report through September 2026.
Security Weekly - A CRA Resource
- Total articles
- 17
- Categories
- 1
- Latest article
- Oct 28, 2026
- Category Filter
Articles
17 shown 
Security Weekly News: PHP Exploitation, AI-Agent Risks and Microsoft 365 Token Theft
The episode covers actively exploited PHP flaws, personal data exposed in a University of Copenhagen test environment, malicious files targeting AI agents, Microsoft 365 token theft, and cyber-enabled cargo theft.
Using eBPF Runtime Security to Protect Financial Systems and AI Agents
Rashid Feroze discusses using eBPF-based runtime monitoring to detect suspicious behavior in financial services, its limitations against prompt injection, and practical steps for deployment and vulnerability response.
Parallel Internet Privacy, PHP Vulnerability Risks and Security Industry Deals
Barrett Lyon discusses Doxnet’s privacy-focused network and VPN trust risks. The panel also examines PHP vulnerability remediation, Zeebra’s closure after two breaches, and cybersecurity acquisitions.
Unknown Entity Hijacks More Than 300 Tor Exit Nodes and Deploys Ebury
An unknown entity reportedly hijacked more than 300 Tor exit nodes after using a reused password to access a management server. The nodes were reconfigured to favor unencrypted email traffic and redirect SSH connections; Ebury was installed.
Security Weekly Covers PHP-to-Shell Attacks, LiteLLM Compromise and Tor Exit-Node Hijacking
Security Weekly covers PHP-to-shell vulnerabilities under attack, weak eMudhra TLS keys, a malicious LiteLLM release, a Tor exit-node hijack, deepfake risks, and AI supply-chain governance.
PHP2Shell Patch Risks and Modern Incident Response Discussed on Security Weekly
Joshua Wright discusses a free incident response book, while the panel examines PHP2Shell patching, third-party response delays, weak TLS keys and reported pre-authentication flaws in Broadcom wireless drivers.
Minimum Viable Company Planning Puts Secure Identity Recovery First
On Business Security Weekly, Semperis architect Chris Stephen explains why minimum viable company planning needs tested Active Directory recovery, independent crisis communications and security validation before users reconnect.
Security Weekly #626: Stop & Shop Breach, OVH Cloud Malware, and Plex Exploits
Security Weekly #626 covers a confirmed Stop & Shop breach, an OVH Cloud CLI compromise distributing information-stealing malware, ConnectWise credential abuse across Microsoft 365, Plex flaws exploited after PoC release, and ransomware-response risks.
OWASP Mobile Security Project Updates Guide App Testing and Threat Modeling
Ryan Lloyd and Jan Serdynski discuss updates to the OWASP Mobile Application Security Project, including threat-based testing profiles, mobile storage risks and guidance for consistent security testing.
Sandbox Testing Can Reveal Malicious Connections Before Software Approval
The speakers describe using isolated sandboxes to inspect new software, identify connections to known malicious sites, and decide which files to permit before allowing installation.
Securing Endpoint AI Agents and Assessing Self-Replication Risks
ThreatLocker CTO Michael Jenkins discusses restricting AI agents’ access and execution on endpoints. The hosts also debate the evidence and hardware assumptions behind Anthropic’s theoretical self-replicating AI research.
Security Weekly: Burger King Japan Breach, Linux VM Escape and Exploited Cisco Flaw
The episode reports Burger King Japan’s statement that 11.18 million customer records were stolen and leaked, a Linux kernel VM-to-host flaw, an exploited Cisco email-gateway flaw, and a Meta GitHub repository breach, with advice on patching and service resilience.
Security Leaders Discuss AI Governance and Cyber Resilience
Bill O'Connell discusses AI governance and recovery exercises, while ESET's Ryan Grant offers security guidance for smaller businesses and describes a redesigned security offering.
Security Weekly: OT Exposure, WordPress RCE and AI Agent Risks
Security Weekly discusses reported drone strikes on Yandex data centers, exposed Danfoss refrigeration controllers, an in-the-wild BrickForge WordPress RCE, weak credentials, ad-data privacy, vulnerability economics and risks from AI agents acting without oversight.
AppSec Panel Discusses Vulnerability Prioritization and Secure Design
Application Security Weekly hosts discuss vulnerability prioritization, package security, AI-generated code and the skills needed to build and sustain AppSec programs.
Exposure Management: Measure Risk, Not Just Controls
At Box, Heather Ceylan describes replacing control-completion metrics with exposure-focused risk indicators that assess exposure, remediation and prevention, helping boards prioritize action and see whether security work reduces risk.