Can AI be stopped from going rogue? In this recent Security Ledger Conversation, @paulfroberts and @jhirshon of the newly-launched startup #Kihan (kihan.ai) talk about how better controls and parameters could have stopped recent breaches like the @OpenAI autonomous ingface 🤖💻 #TechTalks #AIEthics #CyberProtection

When @paulfroberts sat down to interview the CEO of a newly launched start-up he realized something very unusual was happening: he was getting someone who had kept his personal likeness off the Internet for 4 decades to... sit for a video interview?!? Check out this outtake from horn of the startup #Kihan explains why he’s ready for his close-up. youtu.be/fPVu8SstY9Q?si… and read the news here: securityledger.com/2026/11/an-ai-…

A student researcher at @Northeastern gained root access to an @LGUS LB70 24” smart television during a hackathon earlier this month, exposing LG’s extensive digital fingerprinting of smart TVs as part of “Automatic Content Recognition” (ACR). That included the apparent transmission of street address, geographic coordinates and designated market areas, according to a report published by the @FuluFoundation on Thursday. Read our coverage here: securityledger.com/2026/10/colleg…
#SmartHome #CyberSecurity #DataPrivacy #surveillance

In this clip from our latest podcast
@silascutler of @censysio talks about what #php2shell attacks exploiting newly disclosed flaws might look like from the targeted organization’s POV. #mustwatch. Check out the full interview here: securityledger.com/2026/10/script…

In our latest Security Ledger podcast, host @paulfroberts interviews @silascutler of @censysio on both the #php2shell attacks and the hack of refrigeration control systems in France earlier this mont (and - maybe - on U.S. military bases back in August?!). Check out the full post anCp4L

Justin Moore from @AWNetworks talks to @paulfroberts about an analysis of 400 incidents in which attackers used mail bomb spam campaigns combined with exploits of @MicrosoftTeams default-enabled “external access” feature to carry out phishing attacks using fake IT support ictims into downloading and executing malicious payloads. Check out the story here: securityledger.com/2026/10/fake-h…

‼️ UPDATE - Tailscale confirms the Tailworm SSH flaws are real.

Its new investigation page says most of what it found is privilege escalation and calls the issues “serious.” Fix targeted within 24 hours — no CVE or patched version out yet.

Mitigate now:
→ Set NG=1 in the tailscaled service and restart
→ Tighten SSH access rules to the users/devices that need them

Read: thehackernews.com/2026/10/unpatc…

Is China already inside our growing surveillance infrastructure? 🤔 In this clip from our latest podcast, @paulfroberts asks @Gainsec to weigh in. Jon uses it to call out the bigger problem: that the security bar is so low that China isn’t even the biggest concern. Instead, its os” with an axe to grind. #CyberSecurity #TechTalk #Infosec

AI powered surveillance cameras have a lot of potential...for good and bad. In this clip from our recent podcast, @GainSec explores the untapped potential of @Flock cameras: from image- and facial recognition --as well as rooting and manipulated detection. The risks and ss! 🌐🚀 #surveillance #FlockCameras #EmbeddedSystems
Check out the full interview here: securityledger.com/2026/10/bird-h…

Is @Flock practicing security through obscurity with its surveillance cameras? You bet. In this clip from @paulfroberts recent interview with @GainSec on his work exploring security risks in Flock devices, Jon says that Flock cameras are best thought of as dressed up @Android security debt that comes with that. #surveillance #internetofthings Then check out the full interview here: securityledger.com/2026/10/bird-h…

Are tech products rushed out the door with security an afterthought? 🤔 @GainSec’s talk with @paulfroberts about @flocksafety cameras calls out the larger issue facing our society: security is a low priority. #CyberSecurity #Surveillance securityledger.com/2026/10/bird-h…

Full episode here: securityledger.com/2026/10/bird-h…

CFP is OPEN! 🎉

If you've broken (or built) something interesting or learned a hard lesson while working in the field, we want to hear about it.

20-min lightning talks / 45-min full talks. Accepted speakers get free admission.

#MinuteCon #CFP #Infosec #Boston

What Are the Latest Internet-Facing Edge Device posing a Security Risk? You got it ... #AI! 🫠 Check out this clip with @GreyNoiseIO’s Nishawn Smagh on the threats posed by #edgedevices youtube.com/shorts/_oNWs9I… via @YouTube

Listen to the full podcast here: securityledger.com/2026/07/edge-d…

⚡️ NEW: Our team at @BlackLotusLabs just published new research on the JDY botnet, a covert network linked to Volt Typhoon.

Hackers are targeting developers...and the AI that writes their code. A malicious campaign by North Korea's Famous Chollima #APT saw a malicious npm package dependency slipped into a crypto trading agent by @claudeai Opus AI coding agent. securityledger.com/2026/04/how-cl… @ReversingLabs

The @Stranger_Things concept of the “Upside Down” is a useful way to think about the risks lurking in the software we all rely on. A new report from @ReversingLabs shines a light into that dark world. securityledger.com/2026/01/techno… #appsec #cybersecurity

Report: Epidemic of Flaws in Commercial and Open Source Code Fuels Attacks @ReversingLabs #OSS #softwaresupplychain #cybersecurity #appsec #report securityledger.com/2025/03/report… via @securityledger