Uploaded August 2026 | Updated September 2026, 2 weeks ago

---

In the security news this week:

• North Carolina ports and contingency plans
• Back to paper and pencils
• Midnight Blizzard compromises hotel Wi-Fi
• DNS strikes again
• Captive portals, stolen credentials, and nation-state scale
• Phishing-resistant MFA
• Goodbye SMS and voice authentication
• Cornflake RAT and Chaco Shell
• The NPM worm
• Hundreds of compromised packages
• AI lowers the barrier to mass exploitation
• Rethinking “secure enough”
• Back to basics: know what's on your network
• Get off my PCI lawn

Visit securityweekly.com/psw for all the latest episodes!

Show Notes: securityweekly.com/psw-939

00:00:00 Welcome to Paul's Security Weekly
00:03:32 Hacker Summer Camp: LVCC Venue & Logistics
00:17:46 Goons, Pool Parties, and Locked Doors
00:27:48 Defcon Attendees Cause In-Flight Wi-Fi Chaos
00:34:22 Securing Rural Water Systems with Defcon Franklin
00:39:35 Disconnecting Third-Party Systems to Mitigate Risk
00:43:37 Framework Laptops Affected by Metabase SQLi
00:46:53 Navigating AI Governance and Secure Code Generation
01:05:40 Evading AI Detection with Anti-Surveillance Patterns
01:18:18 The Return of Bug Track for Vulnerability Disclosure
01:31:17 Zoom RCE and TLDV Meeting Data Exposure
01:40:50 Coast Guard Monitors Disrupted North Carolina Ports
01:46:52 Nation-State Actors Target Hotel Wi-Fi Captive Portals
01:56:50 Mass Exploitation and Rethinking 'Secure Enough'