🎙️ We’re back with another exciting episode of our podcast, where we dive into the latest trends and stories in the world of security! In this episode, Travis McPeak and Will Bengtson welcome our special guest, Misha Kuenstner, a Security Engineering Manager at Semgrep.
Show notes:
- Check out Misha + Leif @ BSides Seattle - April 18/19
- https://trufflesecurity.com/blog/removing-jeff-bezos-from-my-bed
- Hugging Face models susceptible to local execution https://www.reversinglabs.com/blog/rl-identifies-malware-ml-model-hosted-on-hugging-face (H/T Daniel Miessler)
- (wanted to highlight) https://www.anvilogic.com/report/2025-state-of-detection-engineering?utm_source=tldrsec.com&utm_medium=newsletter&utm_campaign=tl-dr-sec-268-ai-powered-burp-suite-oauth-vulnerabilities-subtle-llm-backdoors&_bhlid=f7e619f54d06946760565b8ebce8d87191a60b6c
- https://rhinosecuritylabs.com/research/unauthenticated-username-enumeration-in-aws/
- Sandworm shifting focus: https://cyberscoop.com/russian-state-threat-group-shifts-focus
- https://www.theverge.com/news/618303/google-replacing-sms-codes-qr-gmail-security-two-factor-authentication (via Daniel Miessler)
Tune in to hear our thoughts, insights, and recommendations on these pressing security issues.
