Hardware

We kick things off with a deep dive into the Hackberry PI and how to build one. Then in the security news:

We kick things off with a deep dive into the Hackberry PI and how to build one. Then in the security news:

<ul class="wp-block-list">
<li>Will Perplexity buy Chrome?</li>


<li>ESP32 Bus Pirates</li>


<li>Poisoned telemetry</li>


<li>Docker image security</li>


<li>Fully Open Source Quantum Sensors</li>


<li>Securing your car, Flippers, and show me the money</li>


<li>Bringing your printer and desktop to Starbucks</li>


<li>Paying a ransom? You need approval</li>


<li>AI: Shield or Spear?</li>


<li>No authentication? That's a problem</li>


<li>Transient Bugs: A realistic threat?</li>


<li>You can run Linux</li>


<li>And who still uses AOL dial-up? </li>
</ul>

<ul><li>Will Perplexity buy Chrome?</li><li>ESP32 Bus Pirates</li><li>Poisoned telemetry</li><li>Docker image security</li><li>Fully Open Source Quantum Sensors</li><li>Securing your car, Flippers, and show me the money</li><li>Bringing your printer and desktop to Starbucks</li><li>Paying a ransom? You need approval</li><li>AI: Shield or Spear?</li><li>No authentication? That's a problem</li><li>Transient Bugs: A realistic threat?</li><li>You can run Linux</li><li>And who still uses AOL dial-up? </li></ul>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14148″} podcast from PPWorks

Breach

AI/ML

Hackberry PIs and Other Hacker Things – PSW #887

We chat with Material Security about protecting G Suite and MS365. How else are you monitoring the most commonly used cloud environments and applications?

We chat with Material Security about protecting G Suite and MS365. How else are you monitoring the most commonly used cloud environments and applications?

<ul class="wp-block-list">
<li>Google Sues Badbox operators</li>


<li>Authenticated or Unauthenticated, big difference and my struggle to get LLMs to create exploits for me</li>


<li>Ring cameras that were not hacked</li>


<li>Malicous AURs</li>


<li>Killing solar farms</li>


<li>Weak passwords are all it takes</li>


<li>Microsoft's UEFI keys are expiring</li>


<li>Kali Linux and Raspberry PI Wifi updates</li>


<li>Use lots of electricity, get a visit from law enforcement</li>


<li>Sharepoint, vulnerabilities, nuclear weapons, and why you should use the cloud</li>


<li>The time to next exploit is short</li>


<li>Sonicwall devices are getting exploited</li>


<li>How not to vibe code</li>


<li>SMS blasters</li>
</ul>

<ul><li>Google Sues Badbox operators</li><li>Authenticated or Unauthenticated, big difference and my struggle to get LLMs to create exploits for me</li><li>Ring cameras that were not hacked</li><li>Malicous AURs</li><li>Killing solar farms</li><li>Weak passwords are all it takes</li><li>Microsoft's UEFI keys are expiring</li><li>Kali Linux and Raspberry PI Wifi updates</li><li>Use lots of electricity, get a visit from law enforcement</li><li>Sharepoint, vulnerabilities, nuclear weapons, and why you should use the cloud</li><li>The time to next exploit is short</li><li>Sonicwall devices are getting exploited</li><li>How not to vibe code</li><li>SMS blasters</li></ul>

This segment is sponsored by Material Security. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/materialsecurity">https://securityweekly.com/materialsecurity</a> to see purpose-built Google Workspace and Office 365 security in action!

This segment is sponsored by Material Security. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/materialsecurity">https://securityweekly.com/materialsecurity</a> to see purpose-built Google Workspace and Office 365 security in action!

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14136″} podcast from PPWorks

Vulnerability Management

Protecting G-Suite/MS365 and Security News – Abhishek Agrawal – PSW #884

<ul class="wp-block-list">
<li>The train is leaving the station, or is it?</li>


<li>The hypervisor will protect you, maybe</li>


<li>The best thing about Flippers are the clones</li>


<li>Also, the Flipper Zero as an interrogation tool</li>


<li>Threats are commercial and open-source</li>


<li>Who is still down with FTP?</li>


<li>AI bug hunters</li>


<li>Firmware for Russian drones</li>


<li>Merging Android and ChromOS</li>


<li>Protecting your assets with CVSS?</li>


<li>Patch Citrixbleed 2</li>


<li>Rowhammer comes to NVIDIA GPUs</li>


<li>I hear Microsoft hires Chinese spies</li>


<li>Gigabyte motherboards and UEFI vulnerabilities</li>


<li>McDonald's AI hiring bot: you want some PII with that?</li>
</ul>

<ul><li>The train is leaving the station, or is it?</li><li>The hypervisor will protect you, maybe</li><li>The best thing about Flippers are the clones</li><li>Also, the Flipper Zero as an interrogation tool</li><li>Threats are commercial and open-source</li><li>Who is still down with FTP?</li><li>AI bug hunters</li><li>Firmware for Russian drones</li><li>Merging Android and ChromOS</li><li>Protecting your assets with CVSS?</li><li>Patch Citrixbleed 2</li><li>Rowhammer comes to NVIDIA GPUs</li><li>I hear Microsoft hires Chinese spies</li><li>Gigabyte motherboards and UEFI vulnerabilities</li><li>McDonald's AI hiring bot: you want some PII with that?</li></ul>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14134″} podcast from PPWorks

Hackers On A Train – PSW #883

AI meltdowns, Gigabyte, NCSC, Rowhammer, Gravity Form, Grok, AsyncRat, Josh Marpet and more on the Security Weekly News.

AI meltdowns, Gigabyte, NCSC, Rowhammer, Gravity Form, Grok, AsyncRat, Josh Marpet and more on the Security Weekly News.

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14058″} podcast from PPWorks

AI meltdowns, Gigabyte, NCSC, Rowhammer, Gravity Form, Grok, AsyncRat, Josh Marpet… – SWN #494

<ul class="wp-block-list">
<li>Citrixbleed 2 and so many failures</li>


<li>Ruckus leads the way on how not to handle vulnerabilities</li>


<li>When you have no egress</li>


<li>Applocker bypass</li>


<li>So you bought earbuds from TikTok</li>


<li>More gadgets and the crazy radio</li>


<li>Cheap drones and android apps</li>


<li>Best Mario Kart controller ever</li>


<li>VSCode: You're forked</li>


<li>Bluetooth earbuds and vulnerabilities</li>


<li>Do you remember Sound blaster cards?</li>


<li>NFC passport chips</li>


<li>Whack-a-disk</li>
</ul>

<ul><li>Citrixbleed 2 and so many failures</li><li>Ruckus leads the way on how not to handle vulnerabilities</li><li>When you have no egress</li><li>Applocker bypass</li><li>So you bought earbuds from TikTok</li><li>More gadgets and the crazy radio</li><li>Cheap drones and android apps</li><li>Best Mario Kart controller ever</li><li>VSCode: You're forked</li><li>Bluetooth earbuds and vulnerabilities</li><li>Do you remember Sound blaster cards?</li><li>NFC passport chips</li><li>Whack-a-disk</li></ul>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14130″} podcast from PPWorks

Citrixbleed 2, Hardware Hacking, and Failed Bans – PSW #882

This week, we dive into the world of Meshtastic and LoRa—two technologies empowering secure, long-range, and infrastructure-free communication. We'll talk about the origins of Meshtastic, how LoRa radio works, and why mesh networking is revolutionizing off-grid messaging for adventurers, hackers, emergency responders, and privacy advocates alike. We break down the available hardware, walk you through firmware installation, and share real-world use cases of LoRa to create decentralized, encrypted networks. Whether you’re a hacker, a prepper, or just curious about the future of resilient communication, this episode is packed with insights and practical tips you won’t want to miss!

This week, we dive into the world of Meshtastic and LoRa—two technologies empowering secure, long-range, and infrastructure-free communication. We'll talk about the origins of Meshtastic, how LoRa radio works, and why mesh networking is revolutionizing off-grid messaging for adventurers, hackers, emergency responders, and privacy advocates alike. We break down the available hardware, walk you through firmware installation, and share real-world use cases of LoRa to create decentralized, encrypted networks. Whether you’re a hacker, a prepper, or just curious about the future of resilient communication, this episode is packed with insights and practical tips you won’t want to miss!

This segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://www.securityweekly.com/threatlocker">https://www.securityweekly.com/threatlocker</a> to learn more about them!

This segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://www.securityweekly.com/threatlocker">https://www.securityweekly.com/threatlocker</a> to learn more about them!

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14126″} podcast from PPWorks

Privacy

Wireless Security

Exploring Meshtastic and LoRa Mesh Networks – Rob Allen – PSW #881

This week:
* The true details around Salt Typhoon are still unknown
* The search for a portable pen testing device
* Directories named "hacker2" are suspicious
* Can a $24 cable compete with a $180 cable?
* Hacking Tesla wall chargers
* Old Zyxel exploits are new again
* Hacking Asus drivers
* Stealing KIAs - but not like you may think
* Fake articles
* Just give everything to LLMs, like Nmap
* Retiring Floppy disks
* An intern leaked secrets
* Discord link hijacking
* Cray vs. Raspberry PI
* More car hacking with BMW

This week:
* The true details around Salt Typhoon are still unknown
* The search for a portable pen testing device
* Directories named "hacker2" are suspicious
* Can a $24 cable compete with a $180 cable?
* Hacking Tesla wall chargers
* Old Zyxel exploits are new again
* Hacking Asus drivers
* Stealing KIAs - but not like you may think
* Fake articles
* Just give everything to LLMs, like Nmap
* Retiring Floppy disks
* An intern leaked secrets
* Discord link hijacking
* Cray vs. Raspberry PI
* More car hacking with BMW