Security Researchers Are Threat Actors - PSW #929

About this episode

This episode discusses various security news topics, including the classification of security researchers as threat actors and recent vulnerabilities.

This week in the security news: Security Researchers Are Threat Actors according to Microsoft Hands-free malicious firmware If you've ever typed "ls" in Windows, this is for you Cisco makes more patches, wants you to pay Ambiguous Secure Boot bypass Threat actors love network edge devices, and I have the chat logs and leaks to prove it The downside of chip sanctions Your VoIP phone is hacked Vulnerability disclosure and incentives Claude reccovers Bitcoin wallet an Instagram "Exploit" Turn the plane around The worms will continue PAN-OS global protect vulnerability The 1-Click Github token stealer Data-nuking prompt injection Turning Buses into spies SymJack NIST NVD mistakes, and how CNAs need to up their game Show Notes: https://securityweekly.com/psw-929

People in this episode

Host: Paul Asadoorian

Topics covered

• security news
• vulnerability disclosure
• malicious firmware
• network edge devices
• VoIP security
• chip sanctions
• exploit techniques

Keywords

• security researchers
• malicious firmware
• Cisco patches
• VoIP phone hack
• vulnerability disclosure
• Bitcoin wallet recovery
• PAN-OS vulnerability
• Github token stealer
• network edge devices

Mentioned in this episode

Organizations: Microsoft, Cisco

Products: PAN-OS

More episodes of Paul's Security Weekly (Video)

• Trolling Microsoft With Vulnerabilities - PSW #930 · June 11, 2026 · 2h 3m
• Linux Supply Chain How-To - PSW #928 · May 28, 2026 · 2h 4m
• FCC, Github, MiniShai-hulud, Stated of Supply Chain, Itron, CRA, NIS2, and more!! - PSW #927 · May 21, 2026 · 2h 2m
• You're not going to patch your way out of this - PSW #926 · May 14, 2026 · 2h 3m
• Getting Rid of Your VPN - Rob Allen - PSW #925 · May 7, 2026 · 2h 5m
• FIRESTARTER - PSW #924 · April 30, 2026 · 2h 2m