"That's Not Supposed to Happen" - PSW #951
Shownotes
In the security news:
- Supermarket refrigeration attacks, again!
- Rapid7's Ivanti findings and why we can't have "nice" things
- Google's massive Android TV botnet takedown
- Linux TCP kernel flaw that no one is patching
- The Binance theft
- APT flaw gives out root
- PHP security debt
- The porn and Digital billboard problem
- Your own phone system to pwn
- From PoC to weaponized exploit
- Hacking to change time
- Rooting an Echo Dot
- Firmware should just work
- AI chained bugs into working exploits
- USB power states leak data across an air gap
- AI-assisted vulnerability finding
- GoAhead's TLS handling
- Hackers hijack emergency alert apps
- Taiwan's emergency services become an AI-agent target
- CUI exposed through GSA's Google Drive
- GCHQ can't account for thousands of storage devices
- Railway employee blames an attempted intrusion on AI
- VulnCheck opens its initial-access playground to the public
Visit https://www.securityweekly.com/psw for all the latest episodes!
Show Notes: https://securityweekly.com/psw-951