Cybersecurity Videos

Microsoft Wants To Throw Researcher In Jail
VideoMay 29, 2026

Microsoft Wants To Throw Researcher In Jail

In April 2026 a researcher using the handles Nightmare/Chaos Eclipse published a string of zero‑day vulnerabilities — Blue Hammer, Red Sun, Undefeated, Yellow Key, Green Plasma and Mini Plasma — mostly local privilege escalations and one BitLocker bypass, allegedly after...

By MalwareTech
Still Getting Cloud Wrong. Here’s What to Fix. With Simon Vernon
VideoMay 29, 2026

Still Getting Cloud Wrong. Here’s What to Fix. With Simon Vernon

The latest episode of Cyber Leaders features Simon Vernon, a veteran SANS instructor, CTF architect, and chief security officer for a data‑center firm. Vernon’s résumé spans early hobbyist hacking, automotive electronics, and a decade of designing hands‑on cloud‑security curricula. Vernon stresses...

By SANS Institute
OMB Update Federal Cyber Logging Tactics
VideoMay 28, 2026

OMB Update Federal Cyber Logging Tactics

The Office of Management and Budget issued a new memorandum that rescinds the Biden‑era cyber‑logging directive and adopts a risk‑based, priority‑driven logging framework for federal agencies. The change aims to curb the costly, unwieldy data‑retention requirements that have hampered operational...

By FedScoop
Black Hat Europe 2025 | Unveiling System Management Mode Memory Corruption Vulnerability Via Fuzzing
VideoMay 28, 2026

Black Hat Europe 2025 | Unveiling System Management Mode Memory Corruption Vulnerability Via Fuzzing

At Black Hat Europe 2025, researcher Wen Chang presented work on uncovering System Management Mode (SMM) memory corruption vulnerabilities using fuzzing techniques. The talk reviewed SMM’s ring–2 (ring −2) privileged execution model, how SMM is entered via SMIs, and how...

By Black Hat
MITRE Couldn’t Scale Caldera Alone
VideoMay 28, 2026

MITRE Couldn’t Scale Caldera Alone

MITRE has transferred its Caldera adversary-emulation platform to the Apache Software Foundation to enlist broader open-source collaboration and resources after struggling to scale the project internally. The move aims to tap Apache’s stewardship and contributor base to revitalize development and...

By Paul Asadoorian
Half the Web Is Bots — Inside Fastly's Threat Report and the New AI Crawler Problem
VideoMay 28, 2026

Half the Web Is Bots — Inside Fastly's Threat Report and the New AI Crawler Problem

The interview with Fastly CISO Marshall Irwin centers on the company’s latest threat report, which reveals that nearly half of all web requests now originate from bots, and almost all of that traffic is unwanted. Irwin explains how Fastly’s position...

By Techstrong TV (DevOps.com)
📱 Defending GitHub Actions: Security Analysis with GASA
VideoMay 28, 2026

📱 Defending GitHub Actions: Security Analysis with GASA

A developer has built GASA, a Golang-based GitHub Actions Security Analyzer that inspects repository, organization, enterprise and personal admin settings to identify risky Actions configurations. Unlike typical linters, GASA focuses on admin permissions and settings—flagging issues such as use of...

By Bret Fisher Docker and DevOps
Defending GitHub Actions: Security Analysis with GASA
VideoMay 28, 2026

Defending GitHub Actions: Security Analysis with GASA

The video introduces GASA (GitHub Actions Security Analyzer), a Go‑based utility that audits GitHub Actions configurations across repositories. Its primary goal is to surface insecure admin settings—such as permissive pull‑request‑target events, missing hash pinning, and overly broad workflow permissions—so teams...

By Bret Fisher Docker and DevOps
Stanford CS153 Frontier Systems | The Road Ahead: Resilience Required
VideoMay 28, 2026

Stanford CS153 Frontier Systems | The Road Ahead: Resilience Required

The talk chronicles a veteran security executive’s journey from a 1990s DOJ internet gatekeeper to leading security at eBay, Facebook, Uber and Cloudflare, emphasizing the evolving nexus of government, tech, and resilience. He highlights how he repeatedly started with three...

By Stanford Online
Does Encrypted DNS Keep Your Traffic Private?
VideoMay 27, 2026

Does Encrypted DNS Keep Your Traffic Private?

The video tests the popular claim that using DNS‑over‑HTTPS (DoH) together with HTTPS makes all of your internet traffic private, eliminating the need for a VPN. The presenter sets up two PCs, taps the network traffic, and captures packets with...

By David Bombal
Behavioral Detection Replaces IOC Whac-A-Mole
VideoMay 27, 2026

Behavioral Detection Replaces IOC Whac-A-Mole

Security veteran Nicole Beckwith argues that traditional indicator-of-compromise (IoC) and signature-based detection is fundamentally broken after two decades of use. She says AI-driven polymorphic malware, mass-produced phishing, and easily crafted bespoke tooling have made hashes, IPs and domains ephemeral, relegating...

By Techstrong TV (DevOps.com)
UK Visa Portal Data Leak Exposed, Over 1 Lakh Records Online | WION News
VideoMay 27, 2026

UK Visa Portal Data Leak Exposed, Over 1 Lakh Records Online | WION News

A third-party website called UK Visa Portal reportedly left more than 100,000 visa applicants’ documents — including passport scans, selfie photos, email addresses and other personal details — publicly accessible online, creating a significant data-exposure incident. The site is not...

By WION
Taiwan Warns Against Use of High-Risk Chinese Apps|TaiwanPlus News
VideoMay 27, 2026

Taiwan Warns Against Use of High-Risk Chinese Apps|TaiwanPlus News

Taiwan’s digital ministry announced that four popular Chinese applications pose significant security risks, urging citizens to avoid them. The flagged apps include a map service, a video platform, and two messaging tools that, according to officials, harvest far more personal data...

By TaiwanPlus News
Why There Are Concerns over the NHS Partnership with Palantir | FT #shorts
VideoMay 27, 2026

Why There Are Concerns over the NHS Partnership with Palantir | FT #shorts

The Financial Times reports that NHS England is expanding its £330 million Federated Data Platform (FDP) to give a handful of external contractors, including those from Palantir, direct access to identifiable patient information. Under the new arrangement a single administrative role will...

By Financial Times
AI Isn’t Creating Better Hackers
VideoMay 26, 2026

AI Isn’t Creating Better Hackers

The video argues that generative AI isn’t creating significantly better hackers but is enabling less experienced operators to produce and ship more exploit variants faster. In stressed environments—such as failing regimes or wartime—senior oversight is absent, so juniors rely on...

By Paul Asadoorian
SecTor 2025 | Grand Finale: Cutting Through the Cyber Noise
VideoMay 26, 2026

SecTor 2025 | Grand Finale: Cutting Through the Cyber Noise

The SecTor 2025 Grand Finale panel wrapped up the conference by reflecting on the dominant themes that emerged over the past two days. Speakers from Quick Intelligence, Ontario’s government, and Citizen Lab highlighted how AI has become the headline topic,...

By Black Hat
How Wyebot Utilizes MCP Servers to Protect Corporate AI Data Privacy
VideoMay 26, 2026

How Wyebot Utilizes MCP Servers to Protect Corporate AI Data Privacy

Wyebot introduced a Managed Compute Platform (MCP) server solution that lets enterprises run large language models without exposing their proprietary data to cloud‑based AI services. The offering requires customers to supply their own API tokens and keys, while Wyebot supplies...

By Tech Field Day
Ubiquiti $79 Travel Router: Secure Public Wi-Fi & WireGuard VPN Deployment
VideoMay 26, 2026

Ubiquiti $79 Travel Router: Secure Public Wi-Fi & WireGuard VPN Deployment

Ubiquiti Networks has rolled out a $79.99 travel router that is quickly becoming a staple at trade shows and among frequent flyers. The compact device is marketed as a plug‑and‑play solution for connecting multiple personal devices to public Wi‑Fi without...

By Tech Field Day
New HPE Mist Features Validate NAC Changes, Enable Inline Microsegmentation (Sponsored)
VideoMay 26, 2026

New HPE Mist Features Validate NAC Changes, Enable Inline Microsegmentation (Sponsored)

HPE’s Juniper Mist team detailed enhancements to its cloud-managed Access Assurance NAC that let customers test and refine access policies and deploy inline microsegmentation at branches and retail sites without requiring an EVPN fabric. Mist Edge — available as an...

By Packet Pushers
Approaching Zero…Trust (Sponsored)
VideoMay 26, 2026

Approaching Zero…Trust (Sponsored)

ThreatLocker, founded in 2017, promotes a ‘‘deny-by-default’’ zero-trust approach that blocks all unapproved applications and services rather than relying on detection of known threats. CEO/CTO anecdotes trace the product’s origin to school IT problems and ransomware recovery work, and the...

By Packet Pushers
Gartner's Top Cybersecurity Trends for 2026
VideoMay 26, 2026

Gartner's Top Cybersecurity Trends for 2026

Gartner’s 2026 cyber‑security outlook groups eight trends into three themes—normalize AI adoption, transform governance, and secure new frontiers—highlighting how accelerated AI use, a volatile threat landscape and tightening regulations are reshaping security priorities. The firm warns that generative AI is turning...

By Gartner
SecTor 2025 | Chasing Shadows: Chronicles of Counter-Intelligence From the Citizen Lab
VideoMay 26, 2026

SecTor 2025 | Chasing Shadows: Chronicles of Counter-Intelligence From the Citizen Lab

The SecTor 2025 talk highlighted the Citizen Lab’s role as a counter‑intelligence hub exposing the worldwide misuse of commercial spyware, especially NSO Group’s Pegasus. Founded in 2001, the Toronto‑based academic team blends political‑science insight with technical forensics to document how...

By Black Hat
Inside the Containment Era — Doug Merritt on Why Cloud Security Has to Get Back to First Principles
VideoMay 26, 2026

Inside the Containment Era — Doug Merritt on Why Cloud Security Has to Get Back to First Principles

Doug Merritt, former Splunk CEO and now Aviatrix chief, frames the current security landscape as entering a "containment era." After chronicling Splunk’s growth from a $200 million ARR startup to a $3.2 billion enterprise, he argues that the industry’s focus has shifted...

By Techstrong TV (DevOps.com)
🔴 May 26's Top Cyber News NOW! - Ep 1139
VideoMay 26, 2026

🔴 May 26's Top Cyber News NOW! - Ep 1139

Dr. Gerald Oer opened Simply Cyber’s May 26 daily threat brief with community updates, CPE instructions, and sponsor announcements, emphasizing the show’s role in upskilling practitioners. He highlighted upcoming training and events including a free Flare webinar on May 28...

By Simply Cyber
Being Tracked in Exile? | DW Documentary
VideoMay 26, 2026

Being Tracked in Exile? | DW Documentary

Basma Mustafa, an Egyptian investigative journalist who was arrested in 2020 while pregnant, fled to Berlin in 2021 but says she continues to be followed, harassed and threatened by agents she believes are tracking her. The documentary shows how everyday...

By DW Documentary
Travelers on the Future of Cyber Insurance
VideoMay 26, 2026

Travelers on the Future of Cyber Insurance

Travelers Europe’s cyber chief Chris McMurray framed the insurer’s renewed five‑star status around deep underwriting experience, a full suite of pre‑loss risk services and a 24/7 market‑leading breach response. He said the firm uses long‑run data, Corvus‑sourced outside‑to‑in tooling and...

By Insurance Business TV World
Keeping Your Data Personal: The Apps and Products that Protect Privacy by Design | V&A
VideoMay 26, 2026

Keeping Your Data Personal: The Apps and Products that Protect Privacy by Design | V&A

Speakers trace the shift from hidden data practices and surveillance capitalism to a ‘privacy by design’ movement that prioritizes users’ rights from a product’s inception. They highlight historical and contemporary privacy tools—from Faraday-style phone pouches and Wi‑Fi signal blockers to...

By Victoria and Albert Museum (V&A)
SecTor 2025 | Security Is Easier Before PCB Assembly: Easy Threat Modeling for Hardware
VideoMay 25, 2026

SecTor 2025 | Security Is Easier Before PCB Assembly: Easy Threat Modeling for Hardware

Speakers from Tetral Security and collaborators argued that threat modeling for hardware is most effective when done before PCB assembly, presenting a practical four-question framework—what are we building, what can go wrong, what will we do, and did we do...

By Black Hat
Why 75% Face API ATTACKS
VideoMay 25, 2026

Why 75% Face API ATTACKS

Radware’s new CISO’s Guide to API Security warns that APIs have become a primary attack vector: 75% of organizations face API attacks quarterly or more, 84% of credential‑stuffing scripts now target API endpoints, and usage is rapidly accelerating with 70%...

By David Bombal
WARNING AI Watches Kids
VideoMay 24, 2026

WARNING AI Watches Kids

University of Washington researchers proposed a study in which preschool teachers would wear first‑person cameras — or classrooms would have fixed cameras — to record children’s daily activities for use training AI models, with sessions up to 150 minutes and...

By David Bombal
SecTor 2025 | Scaling the AppSec Program Without Scaling Security Headcount
VideoMay 24, 2026

SecTor 2025 | Scaling the AppSec Program Without Scaling Security Headcount

Speakers detailed a five-year engagement where they scaled an enterprise application-security program to cover every application without materially increasing security headcount. They achieved this by embedding automated tooling and AI-driven workflows into the SDLC—automating threat modeling from requirements, shifting security...

By Black Hat
SecTor 2025 | Invoking Gemini for Workspace Agents with Simple Google Calendar Invite
VideoMay 24, 2026

SecTor 2025 | Invoking Gemini for Workspace Agents with Simple Google Calendar Invite

The SecTor 2025 presentation revealed a novel attack vector: a simple Google Calendar invitation can poison the context of Google’s Gemini for Workspace, turning the assistant into a conduit for malicious actions. Researchers Staf Cohen, Ori Yair, and Ben Sade...

By Black Hat
How Darwinium Is Revolutionising Cyber Fraud Prevention
VideoMay 24, 2026

How Darwinium Is Revolutionising Cyber Fraud Prevention

Darwinium is marketing a cyber-fraud fusion platform that links digital security and fraud prevention across the entire customer journey, from onboarding and login to payments. The system deploys at the CDN/edge layer for rapid rule changes (minutes rather than release...

By FF News | Fintech Finance
SecTor 2025 | Hackers Dropping Mid-Heist Selfies
VideoMay 23, 2026

SecTor 2025 | Hackers Dropping Mid-Heist Selfies

The SecTor 2025 session focused on a growing class of information‑stealer malware that not only exfiltrates credentials, wallets and system data, but also takes a screenshot of the victim’s desktop – a “mid‑heist selfie.” Researchers explained how these images...

By Black Hat
HackTheBox - MonitorsFour
VideoMay 23, 2026

HackTheBox - MonitorsFour

The video walks through the Hack The Box "Monitors4" machine, showing a hands‑on, manual exploitation path rather than relying on pre‑written scripts. The presenter starts with basic reconnaissance, discovers a single HTTP service running Nginx on Windows, and then fuzzes...

By IppSec
First 2026 AI Zero-Day REVEALED
VideoMay 23, 2026

First 2026 AI Zero-Day REVEALED

Google’s Threat Intelligence Group says it disrupted what may be the first real-world zero-day exploit developed with AI assistance before it could be used at scale. The exploit, written in Python, targeted a popular open-source web-based administration tool and could...

By David Bombal
Could Chinese Tech Shut Down Europe? | The Dip Podcast
VideoMay 23, 2026

Could Chinese Tech Shut Down Europe? | The Dip Podcast

Speakers warn that the global shift to connected hardware—much of it manufactured in China—has expanded Europe’s digital attack surface, exposing critical systems from cars to solar inverters and wind turbines to potential remote control or 'kill pill' attacks. Incidents of...

By DW News (Deutsche Welle)
SecTor 2025 | 5 Years of Attack Surface Analysis in Canada
VideoMay 22, 2026

SecTor 2025 | 5 Years of Attack Surface Analysis in Canada

The SecTor 2025 session highlighted five years of systematic attack‑surface mapping across Canada, led by Patrick and his team at ACFES. Using open‑source tools and a volunteer Discord community, they scanned federal, provincial and municipal domains, cataloguing roughly 60,000 subdomains,...

By Black Hat
AI Deleted Production Code
VideoMay 22, 2026

AI Deleted Production Code

A developer on Reddit alleged that Google’s Gemini 3.5 deleted roughly 28,745 lines of production code while modifying a live application, replacing them with about 400 new lines and making unrelated configuration changes. The AI reportedly ignored explicit instructions to...

By Paul Asadoorian
HOW CISA Leaked Public Passwords
VideoMay 22, 2026

HOW CISA Leaked Public Passwords

The video highlights a recent security lapse at the U.S. Cybersecurity and Infrastructure Security Agency (CISA), where the agency inadvertently published a GitHub repository containing unencrypted credentials. The repository held plain‑text passwords, AWS workspace tokens, Firefox login CSVs, and a YAML...

By David Bombal
SecTor 2025 | Exploiting Multi Agent Systems
VideoMay 22, 2026

SecTor 2025 | Exploiting Multi Agent Systems

The SecTor 2025 talk focused on the emerging security challenges of multi‑agent AI systems, especially the ways attackers can exploit prompt injection and tool misuse. The speaker, a ServiceNow red‑team veteran, outlined how agents orchestrate tasks, interact with tools, and...

By Black Hat
Cisco Builds AI Defense with Codex
VideoMay 22, 2026

Cisco Builds AI Defense with Codex

Cisco announced that its AI Defense suite is now being written entirely by OpenAI's Codex, turning the large‑language model into a co‑developer for its security products. By leveraging Codex, Cisco reduced feature delivery from multiple quarters to a matter of weeks....

By OpenAI
The Hacker Group Turning Supply Chain Attacks Into a Sport  | Threat Wire
VideoMay 22, 2026

The Hacker Group Turning Supply Chain Attacks Into a Sport | Threat Wire

The episode spotlights a new wave of software supply‑chain abuse centered on the open‑sourced “mini Shai Hulud” worm. Its creators have partnered with Breach Forums to award a $1,000 crypto prize to the attacker who generates the most downstream package downloads,...

By Hak5
AI Agents Expand Enterprise Security Attack Surface
VideoMay 22, 2026

AI Agents Expand Enterprise Security Attack Surface

The conversation with Nomi Security CEO Emanuel Salmon centers on how AI agents are reshaping the enterprise attack surface. While traditional IT, cloud, and IoT have already expanded threat vectors, AI introduces a multi‑layered frontier that spans infrastructure, identity, and...

By Techstrong TV (DevOps.com)
FastAPI + JWT: The Only Way to Build Multi-Tenant AI
VideoMay 22, 2026

FastAPI + JWT: The Only Way to Build Multi-Tenant AI

The video explains how JWTs enable multi-tenant, per-user identity in FastAPI-based AI backends, replacing shared API keys that can’t distinguish callers. It outlines JWT structure (header, payload, signature), the OAuth-style flow where an auth provider issues tokens, and how FastAPI...

By Analytics Vidhya
2026 Threat Landscape Reality Check: Turning Threat Intelligence Into Analytic Advantage
VideoMay 22, 2026

2026 Threat Landscape Reality Check: Turning Threat Intelligence Into Analytic Advantage

The SANS "Threat Analysis Rundown" live stream highlighted a pivotal shift in 2026: identity‑based intrusions have become the primary attack vector, eclipsing traditional malware. Host Sean O'Connor, joined by veterans Rebecca Brown and John Doyle, referenced recent reports—CrowdStrike, Unit 42, Microsoft—showing...

By SANS Digital Forensics and Incident Response
The Weakest Link in a Global Life Sciences Company? People. With Dr. Kevin Jones
VideoMay 22, 2026

The Weakest Link in a Global Life Sciences Company? People. With Dr. Kevin Jones

On the Cyber Leaders podcast, Dr. Kevin Jones, a seasoned cyber leader and group CISO for a global life‑sciences conglomerate, discussed the acute cyber risks facing large, distributed organizations—notably pharmaceuticals, healthcare and agriculture—where 90,000 employees across 80 countries magnify exposure....

By SANS Institute
EU’s 24-Hour Security Deadline
VideoMay 21, 2026

EU’s 24-Hour Security Deadline

The European Union will enforce a new cybersecurity rule starting September 11, 2026, requiring any vendor selling hardware that connects to EU networks—whether wired or wireless—to report actively exploited vulnerabilities within 24 hours. The regulation, overseen by ENISA, expands the...

By Paul Asadoorian
AI Dev 26 X SF | Matthew Xu: The 4-Legged Identity Challenge
VideoMay 21, 2026

AI Dev 26 X SF | Matthew Xu: The 4-Legged Identity Challenge

In a recent AI Dev 26 session, Matthew Xu, CTO of Agent Fabric, warned that the “four‑legged identity challenge” – where a user, an agent, an MCP server and a downstream API each act in a chain – is becoming...

By Andrew Ng