Uploaded June 2026 | Updated September 2026, 2 weeks ago
First up is Sandy Bird from Sonrai discussing how to protect our cloud infrastructure!
This segment is sponsored by Sonrai Security. Visit securityweekly.com/sonrai to learn more about them!
Next up in the security news:
- Help, I am Fortibleeding
- Cisco SD-WAN needs help
- The secret life of probe requests
- Help, I am Squidbleeding
- XSS to RCE and why CVSS isn't the full picture
- TVs spy on you
- Foundational security practices
- Cybersecurity costs money
- Happy "Its too late to update your KEK key" day
- You don't have security flaws if no one can report them
- Rickrolling FIFA
- Domain takeovers
- End of life, out of luck
- The key to Encryption...
Visit securityweekly.com/psw for all the latest episodes!
Show Notes: securityweekly.com/psw-932
00:00:00 Welcome to the Show: Guest and Sponsor Intro
00:03:10 From Q1 Labs to Sonrai: Cloud Identity Focus
00:05:21 Sonrai's Default Deny for Cloud Permissions
00:09:59 High-Fidelity Signals for Cloud Security Exceptions
00:13:07 Securing Cloud Keys from Red Team Attacks
00:16:36 Protecting SageMaker and Public Cloud Exposures
00:21:03 Deny-First Approach for Cloud Application Deployment
00:23:51 Why Identity is Key to Cloud Security
00:26:32 Default Deny for Emerging Cloud Functionality
00:29:46 Reducing Risk with Unused Cloud Identity Management
00:34:53 Security News: Fortinet Flaws and Attacker Tactics
00:43:29 Changing Passwords and Securing Fortinet Interfaces
00:51:01 AI, GPUs, and the Cost of Password Cracking
01:00:58 Why Basics Matter More Than Shiny New Threats
01:17:38 Seven Zero-Days in Cisco SD-WAN Products
01:24:20 A 29-Year-Old Squid Proxy Vulnerability Found
01:27:04 Karma Attack and Default SSID Exploitation
01:39:57 Hidden Residential Proxies in LG Smart TV Apps
01:49:02 Defining Security Fundamentals, Doctrine, and Culture
01:57:56 Test Keys, Lapsed Domains, and Easy Exploits
First up is Sandy Bird from Sonrai discussing how to protect our cloud infrastructure!
This segment is sponsored by Sonrai Security. Visit securityweekly.com/sonrai to learn more about them!
Next up in the security news:
- Help, I am Fortibleeding
- Cisco SD-WAN needs help
- The secret life of probe requests
- Help, I am Squidbleeding
- XSS to RCE and why CVSS isn't the full picture
- TVs spy on you
- Foundational security practices
- Cybersecurity costs money
- Happy "Its too late to update your KEK key" day
- You don't have security flaws if no one can report them
- Rickrolling FIFA
- Domain takeovers
- End of life, out of luck
- The key to Encryption...
Visit securityweekly.com/psw for all the latest episodes!
Show Notes: securityweekly.com/psw-932
00:00:00 Welcome to the Show: Guest and Sponsor Intro
00:03:10 From Q1 Labs to Sonrai: Cloud Identity Focus
00:05:21 Sonrai's Default Deny for Cloud Permissions
00:09:59 High-Fidelity Signals for Cloud Security Exceptions
00:13:07 Securing Cloud Keys from Red Team Attacks
00:16:36 Protecting SageMaker and Public Cloud Exposures
00:21:03 Deny-First Approach for Cloud Application Deployment
00:23:51 Why Identity is Key to Cloud Security
00:26:32 Default Deny for Emerging Cloud Functionality
00:29:46 Reducing Risk with Unused Cloud Identity Management
00:34:53 Security News: Fortinet Flaws and Attacker Tactics
00:43:29 Changing Passwords and Securing Fortinet Interfaces
00:51:01 AI, GPUs, and the Cost of Password Cracking
01:00:58 Why Basics Matter More Than Shiny New Threats
01:17:38 Seven Zero-Days in Cisco SD-WAN Products
01:24:20 A 29-Year-Old Squid Proxy Vulnerability Found
01:27:04 Karma Attack and Default SSID Exploitation
01:39:57 Hidden Residential Proxies in LG Smart TV Apps
01:49:02 Defining Security Fundamentals, Doctrine, and Culture
01:57:56 Test Keys, Lapsed Domains, and Easy Exploits
