Vulnpocalypse Continues Until Defense Improves - PSW #950

In the security news this week:

In the security news this week:

• Cisco says patch faster, then sells you time
• Turning AI refusals into vulnerability signals
• Brotli's are hiding
• WordPress image upload exploit
• Fortinet ships fixes before details
• PHP2Shell still claiming victims, including firewalls
• Uncoordinated disclosure
• Claude finds vulns, go figure
• PXE strikes again!
• Sony's PS5 bounty drama
• Apple's October patches reach older devices
• CISA looks ahead to 2030
• ArubaOS gets a pile of critical fixes
• New UK rules for protecting undersea infrastructure
• PortaPack Mayhem goes mobile
• Can AI agents police other AI agents?
• DHS bans DeepSeek
• A Chinese model writes riskier code for a US contractor
• eMudhra exits the TLS business
• BlackX bootkit exploits Secure Boot
• Signal makes hanging up harder than it should be
• Is AI solving math, or making it harder to trust?

Show Notes: https://securityweekly.com/psw-950