Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

A new critical vulnerability—CVE-2025-32433, also known as the Erlang SSH Chainbreaker—allows attackers to execute commands without authentication. This video breaks down what the flaw is, how the exploit works, why it’s dangerous, and which systems are at risk. In Part 1, you’ll learn: Severity: CVSS 10.0 — Exploited in the wild Risk: Full host compromise, data theft, operational disruption.

GPT 5.1 Built a FULLY FUNCTIONING App!

GPT 5.1 Impressed me with this...

CVE-2025-55752 exposes a dangerous path traversal flaw in Apache Tomcat caused by a rewrite and decoding regression. This video breaks down how the bug works, why it becomes severe when combined with HTTP PUT, which versions are affected, and what teams must do to patch or mitigate it. We also show how WAAP protection blocks exploitation attempts even before servers are updated.

The GPT 5.1 Codex Max Announcement...

For years, security lists focused on technology (Cloud , Mobile , Serverless ). We desperately needed a list that focused on the core problem: flawed application logic, regardless of the stack. The OWASP Top 10 Business Logic Abuse (BLA) list fills that critical, architectural gap. Why? Because exploitation often happens between technologies, not within them. We must be able to categorize and talk about these intricate logic threats in a technology-agnostic way.

This week on the podcast, we cover OWASP’s update to the top 10 web application security weaknesses and its changes from the 2021 list. We also cover a recently uncovered adversary-in-the-middle campaign that’s pushing malicious software updates to targeted systems. We conclude with our opinions on Microsoft’s latest AI features, which are coming to Windows.

Look out for this when using AI Coding Tools...

Nucleus Manager of Channel Enablement and Training, Tony Ramirez, talks about his recent recognition in CRN's 100 people to know for the channel. During this conversation, he also discusses the evolving role of channel leaders in cybersecurity, the importance of continuous threat exposure management (CTEM) as a process rather than a tool, and the need for contextual understanding in vulnerability management. Tony emphasizes the significance of engaging non-security stakeholders and the opportunities for the channel to educate clients on security posture and vulnerability management.

Windsurf's NEW Model Built This App...

The Django Software Foundation has released critical security fixes for CVE-2025-64459 (SQL Injection) and CVE-2025-64458 (Denial of Service) vulnerabilities. These vulnerabilities affect query construction and redirect handling in Django, putting applications and data at risk. See how AI-powered AppTrana stops these attacks from Day 0.

Be Careful Using AI Coding Tools.

Cursor 2.0 Composer Flaw...

SessionReaper (CVE-2025-54236) is one of the most dangerous vulnerabilities discovered in Adobe Commerce and Magento Open Source. This pre-authentication flaw enables attackers to hijack customer sessions and, in many real-world setups, escalate to remote code execution (RCE), allowing them to drop persistent PHP web shells on your servers.

AI is changing everything—but with innovation comes new risks. In this episode of AI on the Edge, we dive deep into OWASP's Top 10 for Large Language Models with security leader Steve Wilson (Exabeam). Discover why every tech company is suddenly talking about LLM security and how you can stay ahead. Inside this episode: Why traditional security doesn’t work for AI Learn from Steve’s new book The Developer’s Playbook for LLM Security and get actionable tips to protect your AI systems.

In this episode of The Cybersecurity Defenders Podcast, we discuss some intel being shared in the LimaCharlie community. Support our show by sharing your favorite episodes with a friend, subscribe, give us a rating or leave a comment on your podcast platform. This podcast is brought to you by LimaCharlie, maker of the SecOps Cloud Platform, infrastructure for SecOps where everything is built API first. Scale with confidence as your business grows.

CrowdStrike Falcon Exposure Management simplifies network security with its Network Vulnerability Assessment, offering a modern way to secure network infrastructure without complex legacy tools. Learn how the system utilizes your existing Falcon sensors to provide unmatched continuous visibility-instantly correlating new threats against your assets—and leverage authenticated scanning for deeper, more complete vulnerability inspection.

In this video, we dive into Cursor 2.0 and Composer. Watch as we write, refine, and analyze code in real time, then test how secure the generated code really is...

Meet Clarity, the first of Seemplicity’s four new AI Agents transforming how security teams understand and act on vulnerabilities. Instead of cryptic scanner outputs and confusing CVE text, Clarity turns dense technical data into clear, actionable narratives — explaining what happened, why it matters, and how to fix it. With Clarity, you can: Translate vulnerability data into plain language Improve collaboration between security, IT, and engineering Accelerate remediation and reduce exposure fatigue.

Want to code faster and smarter using AI? In this video, we dive into how to use OpenAI Codex efficiently. Whether you’re a beginner or a seasoned developer, you’ll learn practical strategies to get the most out of Codex and level up your workflow.

Ready to take your Codex skills to the next level? In Part 2 of our OpenAI Codex series, we dive deep into advanced techniques and real-world workflows that help you maximize efficiency and creativity when coding with AI.