Paul F. Roberts

In this episode of the podcast (#266) we welcome back Jon “Gainsec” Gaines to discuss “Bird Hunting” - a multi-year research project analyzing AI-powered surveillance products including automated license plate readers (ALPRs) and other products made by Flock Safety that culminated in his recent DEF CON 34 presentation. Jon talks about the risks of manipulation of surveillance technologies and broader surveillance/privacy concerns, and argues for stronger standards and incentives for secure desig

Google says a growing underground market for stolen AI credentials is allowing cybercriminals to hijack cloud accounts and AI infrastructure to automate attacks and avoid the cost of high-performance computing.

Kaspersky researchers uncovered the first malware infection chain designed for auto head units, turning connected cars into nodes in a criminal botnet.

A quarter million commercial vehicles in India and sensitive data on tens of thousands of drivers were vulnerable to attacks because of flaws in widely used fleet management software maintained by a VE Commercial Vehicles, a joint venture between the Volvo Group and Eicher Motors, a security researcher has revealed.

Cisco Talos's latest threat report finds evolving phishing attacks targeting healthcare, manufacturing and local governments.

A security researcher writing under the name tokay0 disclosed a flaw that could allow an attacker to access and control more than 600,000 deployed Shark model robot vacuums.

In this episode of the podcast, host Paul Roberts interviews Nishawn Smagh of the firm GreyNoise Intelligence about the findings of their State of the Edge report, an analysis of GreyNoise data on risks stemming from compromised edge devices such as broadband routers, VPN gateways, smart home devices and more. Shawn and Paul talk about how attackers are turning edge devices into their favorite entry point, and strategies for organizations to counter the growing risk of compromised edge devices.

Google announced that it helped take down NetNut, a 2 million strong malicious residential proxy network. The incident highlights the growing risks posed by residential proxy networks that quietly conscript consumer devices into services used by cybercriminals and nation-state actors alike.

A new report from ReversingLabs identified a new tactic by North Korean hackers: feeding malicious code to the AI systems that write code.

AI-driven development fueled a surge in developer secrets leaks last year, with nearly 29m credentials discovered on public GitHub repos.

Researchers at QED Secure show how a connected wheelchair could be remotely hijacked, highlighting growing cyber risks in medical devices.

The concept of an “Upside Down” is a good way to think about software risks, as the latest Software Supply Chain Security Report makes clear.

Explore Flock Safety’s surveillance technology and its impact on public safety and privacy with experts Jon Gaines and Benn Jordan.

Cyber attacks on water infrastructure are growing. Josh Corman of IAmTheCavalry joins us to discuss efforts to secure critical water systems.

ReversingLabs researcher Lucija Valentić discovered malicious packages on the Node Package Manager (npm) open source repository that abused Ethereum smart contracts to facilitate malicious command and control.

Cybersecurity researcher Noam Moshe of Claroty joins The Security Ledger Podcast to reveal critical Axis IP camera vulnerabilities that could let hackers spy, manipulate video feeds, and pivot into sensitive networks.

Tungsten Automation, a provider of workplace automation software was the victim of a cyber attack that resulted in the theft of data on more than 5,000 customers, the company disclosed on Friday.

Security flaws in commercial and open source supply chains are epidemic as hackers target software supply chains, ReversingLabs reports.

In our latest podcast, Tanya dives deep into her new book, "Alice and Bob Learn Secure Coding," a guide to secure coding for developers.

A flaw in Subaru's STARLINK connected vehicle service exposed location and driver data for millions of vehicles, a new report finds.