Skip to content
NewA calmer, faster ZeroHour

Weekly Update 522: Live From Oslo with Scott Helme

Troy Hunt ()1 min read1 · 1 read
AI summary · glm-5.3Summaries by Vani AI

Troy Hunt and Scott Helme discuss detecting malware-infected machines via CSP reporting and a surge of malicious browser extensions found with a local LLM.

Weekly Update 522, recorded live in Oslo with Scott Helme, covers how Report URI uses Content Security Policy reporting to identify malware-infected machines inside organizations. Helme also describes catching malicious browser extensions at a high rate using 'Rory', his local OpenClaw LLM instance.

Key facts
  • CSP report-uri data reveals malware-infected endpoints within organizations.
  • Local OpenClaw LLM flags high volumes of malicious browser extensions.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

1 min read at troyhunt.com

Heads up: the first 7 mins is a bit quiet until we worked out the external mic was misbehaving - sorry! But get through that and have a listen to Scott's experiences with how Report URI is identifying malware-infected machines within orgs, all due to CSP reporting. It&

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.