Security Weekly - A CRA Resource: It's More Secure When It's Disabled - PSW #943

In the security news this week:

- Microsoft patches all the things
- Commissary freezers enter cyberwar
- Fake AV, real Defender nap
- Rowhammer comes for the GPU
- BIOS updates are no longer optional
- CVSS is not a crystal ball
- Kworker, but make it malware
- FortiGate gets a post-exploitation RAT
- CERN goes Debian underground
- UEFI shells strike again
- Australia loses the plot, and phones
- Cisco routers become covert gateways
- MikroTik patches the takeover chain
- WeWorm wriggles through mobile
- The year of Linux television
- Browsers become backdoors
- Fake IT calls, real data theft
- CVE attribution gets weird
- Boston Scientific keeps talking
- Security tools misconfigure themselves
- AI circuit breakers for rogue agents
- Passkeys meet the real world
- Vibe coding, vibe vulnerabilities
- AI loss of control keeps climbing
- AI agents report themselves to Schneier

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-943