<body>First up: a technical segment on Linux threat hunting. We'll start this series by covering the best places to look for IoCs on Linux systems and devices, starting with startup services and scheduled tasks. Then, in the security news this week:</body>

<body>First up: a technical segment on Linux threat hunting. We'll start this series by covering the best places to look for IoCs on Linux systems and devices, starting with startup services and scheduled tasks. Then, in the security news this week:</body>

<ul class="wp-block-list">
<li>SonicWall zero-days, again</li>


<li>AI finds a pile of Cisco bugs, and a root RCE</li>


<li>Claude Code Auto Mode dangers</li>


<li>BGP hijacks your unsigned software update</li>


<li>California, Linux and age verification</li>


<li>Free movies, complimentary malware</li>


<li>Citrix puts Linux alongside Windows</li>


<li>Signal's "secure" enclave</li>


<li>An expired domain answers military phone calls</li>


<li>MORE Cheap Android TV boxes arrive pre-pwned</li>


<li>CISA red teams meet critical infrastructure</li>


<li>PaperCut vulnerability cuts both ways</li>


<li>Big Tech asks everyone to secure its AI future</li>


<li>Pacemaker monitoring</li>


<li>DOJ files on a criminal leak site</li>


<li>Water utility security, right after the breaches</li>
</ul>

<body><ul><li>SonicWall zero-days, again</li><li>AI finds a pile of Cisco bugs, and a root RCE</li><li>Claude Code Auto Mode dangers</li><li>BGP hijacks your unsigned software update</li><li>California, Linux and age verification</li><li>Free movies, complimentary malware</li><li>Citrix puts Linux alongside Windows</li><li>Signal's "secure" enclave</li><li>An expired domain answers military phone calls</li><li>MORE Cheap Android TV boxes arrive pre-pwned</li><li>CISA red teams meet critical infrastructure</li><li>PaperCut vulnerability cuts both ways</li><li>Big Tech asks everyone to secure its AI future</li><li>Pacemaker monitoring</li><li>DOJ files on a criminal leak site</li><li>Water utility security, right after the breaches</li></ul></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15238″} podcast from PPWorks

AI/ML

AI benefits/risks

Linux Threat Hunting – PSW #942

Cybersecurity Alert Critical System Vulnerability Detected

Brief

Two root remote code execution flaws found in Unitree G1 EDU robot

<body>Rob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access controls to limit what agents can access and do.</body>

<body>Rob Allen from ThreatLocker joins us to discuss securing agentic AI with zero-trust controls, least privilege, and access controls to limit what agents can access and do.</body>

<body>This segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlocker">https://securityweekly.com/threatlocker</a> to learn more about them!</body>

<body>This segment is sponsored by ThreatLocker. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/threatlocker">https://securityweekly.com/threatlocker</a> to learn more about them!</body>

<body>In the security news this week:</body>

<body>In the security news this week:</body>

<ul class="wp-block-list">
<li>Sixteen-year-old Linux LPEs still work</li>


<li>Ubiquiti UniFi, patch it, also light on details</li>


<li>If you remember magicJack, you too are old</li>


<li>Slovakia doesn't trust its own speed cameras</li>


<li>More homework on NIST's vulnerability database</li>


<li>Your webcam, mic, and key light, all owned</li>


<li>Printer moonlights as Minecraft server</li>


<li>Zombie credit cards</li>


<li>Your car's infotainment system fuels botnets</li>


<li>Feds warn about AI-powered PLC attacks</li>


<li>Can an AI actually reverse engineer its way out?</li>


<li>Denver International's security breach, volume six</li>


<li>Charlotte's breach and a parking company</li>


<li>Why your ancient tech might be the safe one</li>


<li>Microsoft counts billions of phishing emails</li>


<li>A password vault that leaked to any website</li>


<li>Australia sells password books at the post office</li>


<li>Another perfect ten, this time in Entra ID</li>


<li>Cisco's bug scores read like Olympic gymnastics</li>
</ul>

<body><ul><li>Sixteen-year-old Linux LPEs still work</li><li>Ubiquiti UniFi, patch it, also light on details</li><li>If you remember magicJack, you too are old</li><li>Slovakia doesn't trust its own speed cameras</li><li>More homework on NIST's vulnerability database</li><li>Your webcam, mic, and key light, all owned</li><li>Printer moonlights as Minecraft server</li><li>Zombie credit cards</li><li>Your car's infotainment system fuels botnets</li><li>Feds warn about AI-powered PLC attacks</li><li>Can an AI actually reverse engineer its way out?</li><li>Denver International's security breach, volume six</li><li>Charlotte's breach and a parking company</li><li>Why your ancient tech might be the safe one</li><li>Microsoft counts billions of phishing emails</li><li>A password vault that leaked to any website</li><li>Australia sells password books at the post office</li><li>Another perfect ten, this time in Entra ID</li><li>Cisco's bug scores read like Olympic gymnastics</li></ul></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14982″} podcast from PPWorks

Hacking All The Devices, with AI? – Rob Allen – PSW #941

botnet virus at a computer screen skull

New malware targets Android car head units for ad fraud and botnet creation

<ul class="wp-block-list">
<li>Cursor opens your repo, the repo opens you</li>


<li>If you want the good model I'm going to need to see your ID</li>


<li>Flock's a Flocking mess</li>


<li>Defender was supposed to be the chosen one</li>


<li>Side stepping Secure boot - twice</li>


<li>SonicWall: a LAMP stack in a fancy case</li>


<li>Macs don't get viruses, part infinity</li>


<li>Flipper One, but why not Nix?</li>


<li>NetScaler is back in the room</li>


<li>Borrowing phone's good reputation</li>


<li>USB and how to make Windows download stuff</li>


<li>A KVM with the expensive letters removed</li>


<li>Five steps to stop the webcam creeps</li>


<li>PlexTrac acquired</li>


<li>NIST asks the internet to fix the NVD</li>


<li>Poland's health software has a very bad week</li>


<li>If Apple pings you about spyware, believe it</li>


<li>A macOS stealer that drives your browser for you</li>


<li>T-Mobile's incident response tool of choice may suprise you, or not...</li>
</ul>

<body><ul><li>Cursor opens your repo, the repo opens you</li><li>If you want the good model I'm going to need to see your ID</li><li>Flock's a Flocking mess</li><li>Defender was supposed to be the chosen one</li><li>Side stepping Secure boot - twice</li><li>SonicWall: a LAMP stack in a fancy case</li><li>Macs don't get viruses, part infinity</li><li>Flipper One, but why not Nix?</li><li>NetScaler is back in the room</li><li>Borrowing phone's good reputation</li><li>USB and how to make Windows download stuff</li><li>A KVM with the expensive letters removed</li><li>Five steps to stop the webcam creeps</li><li>PlexTrac acquired</li><li>NIST asks the internet to fix the NVD</li><li>Poland's health software has a very bad week</li><li>If Apple pings you about spyware, believe it</li><li>A macOS stealer that drives your browser for you</li><li>T-Mobile's incident response tool of choice may suprise you, or not...</li></ul></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”14980″} podcast from PPWorks

Rejoice In The Nostalgia – PSW #940

Operation CameraSwarm compromises over 14,500 Dahua devices

Hand holding sim card, select focus, color effect

IoT

Linux Threat Hunting – PSW #942

Two root remote code execution flaws found in Unitree G1 EDU robot

Hacking All The Devices, with AI? – Rob Allen – PSW #941

New malware targets Android car head units for ad fraud and botnet creation

Rejoice In The Nostalgia – PSW #940

Operation CameraSwarm compromises over 14,500 Dahua devices

Malicious SIM cards can take over cellular-connected devices

Zbtlink denies backdoor claims amid firmware download pause

Fast Five

Selected by the SC Media Editorial team every Tuesday.