Mostly Security Podcast
@mostlysecurity.com
Mostly Security is a podcast about security (mostly). We chat about what's going on around us, things we find interesting, and other random stuff.
Episode 414: Fig Wasp Redux
Mostly Security: 414: Fig Wasp Redux
Eric goes to Nateland and Jon goes flying. Another javascript worm, and automatic license plate reader records declared public in Washington. For fun we have a repo of annual security reports and Jon suffering memory loss and search ineptitude, but fig wasps are still cool. 0:00 - Intro 17:20 - 21:50 - 28:55 - 29:26 - 30:43 -
podcast.mostlysecurity.com
November 15, 2025 at 4:54 PM
Episode 414: Fig Wasp Redux
Shy figs
Are There Dead Wasps in Figs? Are There?
If we love figs, we must learn to love the fig wasp.
www.bonappetit.com
November 15, 2025 at 4:54 PM
Shy figs
Annual Security Repo(rts)
GitHub - jacobdjwilson/awesome-annual-security-reports: A curated list of annual cyber security reports
A curated list of annual cyber security reports. Contribute to jacobdjwilson/awesome-annual-security-reports development by creating an account on GitHub.
github.com
November 15, 2025 at 4:54 PM
Annual Security Repo(rts)
Nate Bargatze - https://nateland.com/
November 15, 2025 at 4:53 PM
Nate Bargatze - https://nateland.com/
Conclusions of Law - https://www.404media.co/judge-rules-flock-surveillance-images-are-public-records-that-can-be-requested-by-anyone/
November 15, 2025 at 4:53 PM
Glassworm
How GlassWorm wormed its way back into developers’ code — and what it says about open source security
Weeks after being declared eradicated, GlassWorm is again infesting open source extensions using the same invisible Unicode and blockchain C2 tricks.
www.csoonline.com
November 15, 2025 at 4:53 PM
Glassworm
Episode 412: Precondition Failed
Mostly Security: 412: Precondition Failed
Remote Eric Assist and Jon enjoys ... hockey(??). More prompt injections, the most damaging UK cyber event (so far), and residential proxy use for fun and training data. Will Agentic AI bring back micropayments, and how is Costco's pumpkin pie so good? 0:00 - Intro 10:47 - 16:56 - 19:32 - 24:34 - 29:49 -
podcast.mostlysecurity.com
November 1, 2025 at 3:52 PM
Episode 412: Precondition Failed
Six Million Pies
The Secret to Costco's Best-Selling Pumpkin Pie
In the book "The Joy of Costco: A Treasure Hunt from A to Z" authors David and Susan Schwartz reveal the secret to Costco's delicious, top-selling pumpkin pie: Dickinson pumpkins. Here's what sets the gourd apart.
www.allrecipes.com
November 1, 2025 at 3:52 PM
Six Million Pies
Original Sin (??)
HTTP 402’s Modern Makeover | Pantera
panteracapital.com
November 1, 2025 at 3:52 PM
Original Sin (??)
Economically Damaging
JLR hack 'is costliest cyber attack in UK history', experts say
The cyber attack on Jaguar Land Rover is estimated to cost £2.1bn, the Cyber Monitoring Centre says.
www.bbc.com
November 1, 2025 at 3:52 PM
Economically Damaging
Death, Taxes, and Prompt Injections
AI browsers wide open to attack via prompt injection
Feature: Agentic features open the door to data exfiltration or worse
www.theregister.com
November 1, 2025 at 3:52 PM
Death, Taxes, and Prompt Injections
Episode 408: Request Timeout
Mostly Security: 408: Request Timeout
Eric is traveling and Jon is repairing. Coordinated arrests of scammers across Africa, the world's first malicious MCP server (is super simple), the release of the Sony CD player 43 years ago, and CRISPR modified yeast to create pollen substitute for the bees. 0:00 - Intro 10:27 - 17:13 - 23:02 - 27:02 -
podcast.mostlysecurity.com
October 4, 2025 at 4:26 PM
Episode 408: Request Timeout
Y. Lipolytica Sterols - https://www.ox.ac.uk/news/2025-08-20-saving-bees-superfoods-new-engineered-supplement-found-boost-colony-reproduction
October 4, 2025 at 4:26 PM
October 4, 2025 at 4:26 PM
Operation Contender 3.0
Interpol operation disrupts romance scam and sextortion networks in Africa
Authorities said the cybercrime rings impacted almost 1,500 victims, resulting in about $2.8 million in combined losses.
cyberscoop.com
October 4, 2025 at 4:26 PM
Operation Contender 3.0
Episode 406: Triple Square
Mostly Security: 406: Triple Square
Eric paints and Jon does something I'm sure. Void proxy tackles the complexity of breaking MFA, and Bitcoin ATMs for Scammers. How about a bit of neuromodulation on Pythagorean Triple Square Day. 0:00 - Intro 13:19 - 16:54 - 21:24 - 24:33 -
podcast.mostlysecurity.com
September 20, 2025 at 4:03 PM
Episode 406: Triple Square
Pythagorean Triple Square Day - https://www.npr.org/2025/09/16/nx-s1-5535545/pythagorean-triple-square-day-9-16-25
September 20, 2025 at 4:03 PM
Pythagorean Triple Square Day - https://www.npr.org/2025/09/16/nx-s1-5535545/pythagorean-triple-square-day-9-16-25
Neuromodulation (?)
New Ultrasound Helmet Reaches Deep Inside The Brain Without Surgery
Deep-brain structures like the basal ganglia or the thalamus wield major influence on our behavior.
www.sciencealert.com
September 20, 2025 at 4:03 PM
Neuromodulation (?)
Episode 404: Not Found
Mostly Security: 404: Not Found
Eric returns and Jon has a flat tire. Kuiper achieves a gigabit, Google releases fixes for 84 vulns in android, and prompt injection in Comet, Perplexity's AI browser. The Pixel 10 has a crazy good camera, and the third interstellar object ever discovered. 0:00 - Intro 10:02 - 13:13 - 16:00 - 25:57 - 33:04 -
podcast.mostlysecurity.com
September 6, 2025 at 5:15 PM
Episode 404: Not Found
Interstellar Object 3I - https://www.smithsonianmag.com/science-nature/telescopes-reveal-surprising-chemistry-of-a-rare-interstellar-object-passing-through-our-solar-system-180987262/
September 6, 2025 at 5:14 PM