Security Weekly - A CRA Resource: It's More Secure When It's Disabled - PSW #943

In the security news this week:

- Microsoft patches all the things
- Commissary freezers enter cyberwar
- Fake AV, real Defender nap
- Rowhammer comes for the GPU
- BIOS updates are no longer optional
- CVSS is not a crystal ball
- Kworker, but make it malware
- FortiGate gets a post-exploitation RAT
- CERN goes Debian underground
- UEFI shells strike again
- Australia loses the plot, and phones
- Cisco routers become covert gateways
- MikroTik patches the takeover chain
- WeWorm wriggles through mobile
- The year of Linux television
- Browsers become backdoors
- Fake IT calls, real data theft
- CVE attribution gets weird
- Boston Scientific keeps talking
- Security tools misconfigure themselves
- AI circuit breakers for rogue agents
- Passkeys meet the real world
- Vibe coding, vibe vulnerabilities
- AI loss of control keeps climbing
- AI agents report themselves to Schneier

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-943

00:00:00 Quick Look at This Week's Security News
00:02:02 Important Cybersecurity Summits and Sandwich Hats
00:04:24 Commissary Freezers Hacked: A Supply Chain Attack
00:09:11 Why BIOS and Firmware Updates Are No Longer Optional
00:16:59 The Dangers of Shipping Signed UEFI Shells
00:25:14 Vibe Coding, AI Models, and VMware Escapes
00:33:09 AI Agents Reporting Vulnerabilities to Bruce Schneier
00:41:00 Back to Basics: AI Agents and RBAC Security
00:44:25 39 New Methods to Compromise Passkey Authentication
00:47:01 Linux on TVs, LG Spying, and DRM Challenges
00:54:08 Linux Powers Particle Accelerators: CERN Goes Debian
01:06:32 GPS Time Server Failure Causes National Outage
01:12:34 Record-Breaking Patch Tuesday Driven by AI Discovery
01:17:29 Cybersecurity Shifts from Vulnerability to Threat Detection
01:24:16 The Role of Prevention in Modern Cybersecurity Strategies
01:27:47 Jeffrey Epstein's Data Exposed by Shiny Hunters
01:29:59 Australia's Bill to Opt Out of Social Media Algorithms
01:34:31 From Signal Intrusion to Rocky Mountain Oysters
01:39:22 GPU Thor: Advanced Rowhammer on NVIDIA GPUs
01:45:07 Simple Process Naming for Malware Evasion
01:53:05 Critical RCE in Cisco Firewall Management Center
01:59:29 Proving K Worker Stealth and Show Wrap-up