Free Daily Podcast Summary
Below the Surface (Audio) - The Supply Chain Security Podcast: Daily Summaries Delivered
by Eclypsium
A lively discussion of the threats affecting supply chain, specifically focused on firmware and low-level code that is a blind spot for many organizations. This podcast will feature guests from the cybersecurity industry discussing the problems surrounding supply chain-related issues and potential solutions.
Latest Episodes
The most recent episodes — sign up to get AI-powered summaries of each one.
- 2 weeks ago52 min
Memory Safety, AI security, Auth Challenges - BTS #84
summary In this episode, the hosts discuss various cybersecurity vulnerabilities, focusing on a recent remote code execution vulnerability in Nginx, the role of AI in discovering vulnerabilities, and the importance of memory safety in programming languages. They also explore the challenges of authentication in IoT devices and the need for better secure development practices. The conversation highlights the fragility of IoT infrastructure and the ongoing threat posed by attackers leveraging AI for malicious purposes. In this conversation, the speakers delve into the complexities of cybersecurity, focusing on the challenges posed by AI models, regulatory capture, and the implications of public firmware for critical infrastructure. They discuss how attackers are often better positioned due to fewer restrictions, leading to market manipulation and exploitation of vulnerabilities. The conversation emphasizes the need for a balanced approach to security that does not hinder defenders while addressing the evolving threat landscape. https://securityaffairs.com/201106/security/f5-addressed-critical-rce-flaws-in-nginx.html https://www.streetinsider.com/Investing/Palo+Alto+Networks+drops+on+zero-day+security+flaw+concerns/27196703.html https://www.streetinsider.com/Investing/Palo+Alto+Networks+drops+on+zero-day+security+flaw+concerns/27196703.html https://www.greynoise.io/blog/proxyjacking-edge-devices-residential-proxies https://securityaffairs.com/201106/security/f5-addressed-critical-rce-flaws-in-nginx.html https://unit42.paloaltonetworks.com/ai-campaign-targets-linux-infrastructure/ https://thehackernews.com/2026/10/researchers-demonstrate-openbsd-root.html
- Oct 7, 202650 min
AI's Impact on Cybersecurity - BTS #83
summary In this episode, Paul and Vlad discuss the increasing role of AI in cybersecurity, particularly in vulnerability discovery and exploit creation. They explore the implications of AI on the speed and efficiency of attacks, the state of network edge appliances, and the necessity for device hardening. The conversation also touches on the challenges of monitoring and forensics in network devices, emphasizing the ongoing cat-and-mouse game between attackers and defenders. In this conversation, Vlad and Paul delve into various aspects of cybersecurity, focusing on network appliances, AI safety, and the challenges posed by vulnerabilities in management platforms. They discuss the importance of anomaly detection in network appliances, the implications of NVIDIA's new safety platform, and the ongoing issues with AI sandboxing. The conversation also highlights the difficulties in accessing advanced AI tools for cybersecurity professionals, the trust issues surrounding network appliances, and the risks associated with VPNs. Additionally, they explore the proliferation of Linux privilege escalation vulnerabilities and the novel attack vectors presented by file notification systems. Chapters 00:00 Audio Setup and Technical Issues 02:03 Introduction to AI in Cybersecurity 04:08 AI's Role in Vulnerability Discovery 08:02 Speed vs. Sophistication in Attacks 12:05 The State of Network Edge Appliances 15:45 The Need for Device Hardening 19:52 Challenges with eBPF and Monitoring 23:57 Forensics and Anomaly Detection 25:10 Understanding Network Appliances and Anomaly Detection 28:10 NVIDIA's Open Agent Safety Platform 29:56 AI Safety and Sandboxing Challenges 33:03 Access to AI Tools for Cybersecurity 35:00 Vulnerabilities in Management Platforms 38:58 Trust Issues with Network Appliances 40:03 VPN Appliances and Their Attack Surface 44:00 Proliferation of Linux Privilege Escalation Vulnerabilities 47:03 File Notification System Attacks
- Sep 16, 202659 min
Firmware Analysis, Linux Malware, Future of AI - BTS #82
In this episode of Below the Surface, the hosts discuss cybersecurity topics, including vulnerabilities in UEFI shells, vendor trust issues, Citrix's new dual-boot solution, and techniques for bypassing Windows Defender. They also explore the implications of AI in Linux environments and the ongoing controversy surrounding AI math theft. In this conversation, Vlad and Paul discuss OpenAI's recent controversial achievement in solving a significant mathematical problem, raising ethical concerns about data usage and the implications for the AI community. They explore the future of local AI models, innovations in firmware analysis tools, and techniques attackers use on Linux systems. The discussion emphasizes the importance of cybersecurity practices and the need to stay vigilant about potential vulnerabilities. Articles: https://nerds.xyz/2026/08/citrix-uniconos-linux-dual-boot-windows-recovery/ https://ipurple.team/2026/09/09/windows-security-center/ https://x.com/rynorhn/status/2097223532438487463 https://brownfinesecurity.com/blog/introducing-moria-and-mithril https://sansec.io/research/stylesmuggler-0day Chapters 00:00 Introduction to Below the Surface Podcast 02:06 Vulnerability in UEFI Shells 14:16 Trust Issues with Vendors 15:46 Citrix's Unicon OS: A Dual Boot Solution 21:28 Windows Defender Bypass Techniques 26:54 AI and Linux: New Developments 32:06 The Controversy Over AI Math Theft 32:10 OpenAI's Controversial AI Achievement 35:13 The Ethics of AI and Data Usage 38:12 The Future of Local AI Models 39:19 Innovations in Firmware Analysis Tools 44:58 Understanding Linux Malware Techniques 52:05 Best Practices for Securing Linux Systems
- Sep 3, 202651 min
Infratrust Pulse, AI's Role in Security - BTS #81
In this episode, Paul and Vlad discuss the latest Infratrust Pulse report, highlighting vulnerability trends, the role of AI in cybersecurity, and the importance of visibility and control in network security. They delve into threats posed by BMCs and management planes, the challenges of persistence mechanisms, and the need for better vendor responsiveness and API practices to strengthen security. In this conversation, Vlad and Paul discuss the evolving role of AI in cybersecurity, particularly its use by threat actors to exploit vulnerabilities. They explore the implications of AI in vulnerability discovery, the importance of secure software development practices, and the risks associated with backdoors in surveillance technology. The discussion emphasizes the need for organizations to adopt better security measures and the potential of AI to enhance software quality and security. Articles: * https://pulse.infra-trust.org/august-2026/ * https://blog.quarkslab.com/defeating-ai-assisted-reverse-engineering-or-at-least-trying-to.html * https://securityaffairs.com/197764/hacking/slovakia-warns-of-cyber-risks-in-road-speed-cameras.html * https://cyberscoop.com/ubiquiti-unifi-critical-vulnerabilities-patched/ * https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/ * https://blog.trailofbits.com/2026/08/26/vms-wont-contain-cyber-capable-agents/ Chapters 00:00 Introduction to Infratrust Pulse and AI in Cybersecurity 05:56 Trends in Vulnerabilities and AI's Role 09:36 The Threat Landscape: BMCs and Management Planes 13:52 Persistence Mechanisms and Forensic Challenges 18:34 Visibility and Control in Network Security 23:41 Vendor Responsiveness and API Best Practices 26:08 AI in Cybersecurity: Threats and Opportunities 30:00 The Role of AI in Vulnerability Discovery 34:00 AI's Impact on Software Development and Security 39:06 Best Practices for Secure Software Development 44:14 Addressing Backdoors in Surveillance Technology
- Aug 13, 202659 min
Exploring BMC Vulnerabilities - BTS #80
Summary In this episode, the hosts discuss various cybersecurity topics, including the lack of media coverage from the Black Hat conference, the implications of AI in cybersecurity, and the vulnerabilities associated with Baseboard Management Controllers (BMCs). They explore the challenges of patch management, the role of embedded Linux in security vulnerabilities, and the emerging trends in threat actor behavior. The conversation emphasizes the need for better awareness and action regarding BMC vulnerabilities and the importance of understanding the risks associated with AI in security. In this conversation, the speakers delve into the complexities of operational risks associated with AI models, particularly in the context of patch management and firmware security. They discuss the challenges of relying on AI for code reviews and the implications of backdoors found in firmware. The conversation also highlights the critical importance of true randomness in cryptographic applications and the ongoing risks posed by speculative execution attacks. Chapters 00:00 Introduction and Technical Setup 03:01 Black Hat Conference Coverage and Media Silence 06:00 AI and Cybersecurity: Responsibility and Ethics 08:51 BMC Vulnerabilities: Research and Findings 11:57 Scanning Techniques and Tools for BMCs 15:02 Cisco Vulnerabilities and Patch Management Challenges 17:54 The Role of AI in Vulnerability Discovery and Management 21:13 Emerging Threats and Trends in Cybersecurity 24:00 Conclusion and Future Considerations 34:03 Understanding Operational Risks in AI Models 37:10 The Challenges of Patch Management and Configuration 41:26 The Dangers of AI in Code Review 43:00 Backdoors in Firmware: A Growing Concern 49:13 The Importance of True Randomness in Cryptography 58:08 The Implications of Speculative Execution Attacks
- Aug 7, 202654 min
InfraTrust - Understanding Infrastructure Vulnerabilities & Risk - BTS #79
Check out our free and no-registration-required site for understanding and tracking infrastructure vulnerabilities and advisories: https://infra-trust.org In this episode, the hosts discuss the challenges of collecting and aggregating vulnerability data, the introduction of Infratrust and Infratrust Pulse, and the importance of actionable data for cybersecurity teams. They explore the differences between vendor advisories and CVEs, the role of Eclipsium in data aggregation, and the ongoing challenges in vulnerability management and patching. The conversation highlights the need for a centralized source of truth for infrastructure vulnerabilities and the evolving landscape of cybersecurity threats. In this conversation, the speakers delve into the complexities of vulnerability management, particularly in the context of AI's rapid evolution in vulnerability discovery. They discuss the biases affecting vulnerability prioritization, the implications of AI on both offensive and defensive capabilities, and the critical risks associated with exposing Baseboard Management Controllers (BMCs) to the internet. The conversation emphasizes the need for better security practices and awareness in the face of evolving threats. Chapters 00:00 Technical Challenges in Data Collection 02:58 Introduction to Infratrust and Infratrust Pulse 05:57 The Evolution of Infrastructure Pulse 09:02 Understanding Vendor Advisories vs CVEs 11:49 The Importance of Actionable Data 14:46 Navigating Vendor Advisory Inconsistencies 17:51 The Role of Eclipsium in Data Aggregation 20:46 Patching Challenges and Vulnerability Management 24:09 Interpreting Risk Scores and Vulnerability Impact 30:34 Understanding Vulnerability Management Challenges 32:43 The Impact of AI on Vulnerability Discovery 35:24 The Arms Race: Offensive vs Defensive Capabilities 38:41 The Dangers of Exposing BMCs to the Internet 41:31 BMC Vulnerabilities: A Deep Dive 49:29 Mitigating Risks: Best Practices for BMC Security
- Jul 16, 202656 min
Patching: The Race Against Time - BTS #78
In this episode, the hosts discuss various vulnerabilities affecting network devices, the importance of timely patching in enterprises, and the implications of AI on security. They explore the challenges of compliance programs, the significance of dependency management in software, and the need for better privilege separation in network devices. The conversation also touches on the risks of supply chain attacks and the detection of orphaned packages in software ecosystems. Chapters 00:00 Introduction to Vulnerabilities and Security Trends 02:49 Router Choices and Security Implications 10:41 The Need for Faster Patching in Enterprises 12:22 The Impact of AI on Security and Exploits 18:31 Challenges with Compliance and Vulnerability Management 24:17 The Importance of Dependency Management in Software 30:54 Supply Chain Attacks and Their Consequences 35:34 Privilege Separation and Device Security 40:40 The Role of AI in Exploit Development 53:43 Detecting Orphaned Packages and Security Risks
- Jun 30, 202654 min
FortiBleed Uncovered: How Attackers Harvest Credentials from Fortinet Devices - BTS #77
In this episode, we delve into the recent FortiBleed campaign, exploring how attackers harvest credentials from Fortinet devices, the vulnerabilities in password management, and best practices for defenders to mitigate such threats. Key topics FortiBleed campaign details and impact Password hash vulnerabilities in FortiOS AI's role in analyzing large security breaches Credential harvesting techniques and defenses Importance of layered security and best practices Chapters 00:00 Introduction and Initial Thoughts on AI Models 10:04 Credential Harvesting and Security Weaknesses 19:58 Hash Management and Security Appliances 30:15 Incident Response and Vulnerability Management 39:46 The Future of Security in the Age of AI
Get Below the Surface (Audio) - The Supply Chain Security Podcast summaries in your inbox
Free AI-powered daily recaps. Key takeaways, quotes, and mentions — in a 5-minute read.
Get Free Summaries →Free forever for up to 3 podcasts. No credit card required.
You Might Also Like
Listeners also like.
The Low Down
A podcast about hacking.
Cyberside Chats: Cybersecurity Insights from the Experts
Cybersecurity experts discuss emerging threats, AI-driven attacks, and defense strategies for professionals and executives.
Security Now (Audio)
A weekly deep dive into cybersecurity news, hacking trends, and digital defense strategies for professionals and individuals.
Cyber Focus: Cybersecurity, National Security, and Critical Infrastructure
Expert discussions on cybersecurity, national security, and threats to critical infrastructure like energy and water systems.
Ahead of the Threat: The FBI Cyber Podcast
FBI officials and experts discuss emerging cyber threats and cybersecurity fundamentals with government and industry guests.
Acquisition Talk
Discusses the management, technology, and political-economy of weapon systems acquisition.
Latent Space: The AI Engineer Podcast
Conversations with AI engineers, researchers, and founders on foundation models, AI agents, infrastructure, and scientific discovery.
Random Access Memories
Conversations with tech professionals reveal the personal stories behind their careers in cybersecurity, AI, startups, and leadership.
Risky Bulletin
Cybersecurity news updates from the Risky Business team.
CISSP Cyber Training Podcast - CISSP Training Program
A weekly podcast delivering practical CISSP exam preparation and cybersecurity strategies from an experienced industry professional.
Intel at the Edge
Experts discuss emerging technologies and their impact on national security and the intelligence community.
The Watchtower
Cybersecurity, data, and AI leaders share candid insights on real-world challenges and innovations beyond the headlines.
About Below the Surface (Audio) - The Supply Chain Security Podcast
A lively discussion of the threats affecting supply chain, specifically focused on firmware and low-level code that is a blind spot for many organizations. This podcast will feature guests from the cybersecurity industry discussing the problems surrounding supply chain-related issues and potential solutions.
Customized Recaps
AI-powered recaps with compact key takeaways, quotes, and insights.
Straight to Your Inbox
Get key takeaways from Below the Surface (Audio) - The Supply Chain Security Podcast in a 5-minute read.
Save Hours Every Week
Stay current on your favorite podcasts without falling behind.
Frequently Asked Questions
What is Podzilla's Below the Surface (Audio) - The Supply Chain Security Podcast daily summary?
It's a free AI-powered email that summarizes new episodes of Below the Surface (Audio) - The Supply Chain Security Podcast as soon as they're published. You get the key takeaways, notable quotes, and links & mentions — all in a quick read.
How does the Below the Surface (Audio) - The Supply Chain Security Podcast podcast summary work?
When a new episode drops, our AI transcribes and analyzes it, then generates a personalized summary tailored to your interests and profession. It's delivered to your inbox every morning.
Is this an official Below the Surface (Audio) - The Supply Chain Security Podcast product?
No. Podzilla is an independent service that summarizes publicly available podcast content. We're not affiliated with or endorsed by Eclypsium.
Can I get summaries of other podcasts too?
Absolutely! The free plan covers up to 3 podcasts, any in the catalog. Basic raises that to 15, Pro to 40 and Max to 100. Browse our full catalog at /podcasts.
How often does Below the Surface (Audio) - The Supply Chain Security Podcast release new episodes?
Below the Surface (Audio) - The Supply Chain Security Podcast publishes biweekly. Our AI generates a summary within hours of each new episode.
What topics does Below the Surface (Audio) - The Supply Chain Security Podcast cover?
Below the Surface (Audio) - The Supply Chain Security Podcast covers topics including Technology, Business. Our AI identifies the specific themes in each episode and highlights what matters most to you.
Start getting Below the Surface (Audio) - The Supply Chain Security Podcast summaries tomorrow morning.
Free forever for up to 3 podcasts. No credit card required.
Free forever for up to 3 podcasts. No credit card required.