<ul class="wp-block-list">
<li>Android catches up to iOS with its own lockdown mode</li>


<li>Just in case, there is a new CVE foundation</li>


<li>Branch privilege injection attacks</li>


<li>My screen is vulnerable</li>


<li>The return of embedded devices to take over the world - 15 years later</li>


<li>Attackers are going after MagicINFO</li>


<li>Hacking Starlink</li>


<li>Mitel SIP phones can be hacked</li>


<li>Reversing with Hopper</li>


<li>Supercharge your Ghidra with AI</li>


<li>Pretending to be an anti-virus to bypass anti-virus</li>


<li>macOS RCE - perfect colors</li>


<li>End of life routers are a hackers dream, and how info sharing sucks</li>


<li>Ransomware in your CPU</li>


<li>Disable ASUS DriverHub</li>


<li>Age verification and privacy concerns</li>
</ul>

<ul><li>Android catches up to iOS with its own lockdown mode</li><li>Just in case, there is a new CVE foundation</li><li>Branch privilege injection attacks</li><li>My screen is vulnerable</li><li>The return of embedded devices to take over the world - 15 years later</li><li>Attackers are going after MagicINFO</li><li>Hacking Starlink</li><li>Mitel SIP phones can be hacked</li><li>Reversing with Hopper</li><li>Supercharge your Ghidra with AI</li><li>Pretending to be an anti-virus to bypass anti-virus</li><li>macOS RCE - perfect colors</li><li>End of life routers are a hackers dream, and how info sharing sucks</li><li>Ransomware in your CPU</li><li>Disable ASUS DriverHub</li><li>Age verification and privacy concerns</li></ul>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”13888″} podcast from PPWorks

Vulnerability Management

Hardware

Ransomware in your CPU – PSW #874

vulnerability_AdobeStock_909297607

Brief

Updated CISA vulnerabilities catalog includes GeoVision IoT bugs

<ul class="wp-block-list">
<li>RDP and credentials that are not really revoked, and some RDP bitmap caching fun</li>


<li>Some magic info on MagicINFO</li>


<li>Vulnerability Management Zombies</li>


<li>There is a backdoor in your e-commerce</li>


<li>Airborne: vulnerabilities in AirPlay</li>


<li>Bring your own installer - crafty EDR bypass</li>


<li>The Signal clone used by US government officials: shocker: has been hacked</li>


<li>AI slop vulnerability reporting</li>


<li>Bricking iPhones with a single line of code</li>


<li>Hacking planet technology</li>


<li>Vibe hacking for the win?</li>


<li>Cybersecurity CEO arrested for deploying malware</li>


<li>Hello my perverted friend</li>


<li>FastCGI - fast, but vulnerable</li>
</ul>

<ul><li>RDP and credentials that are not really revoked, and some RDP bitmap caching fun</li><li>Some magic info on MagicINFO</li><li>Vulnerability Management Zombies</li><li>There is a backdoor in your e-commerce</li><li>Airborne: vulnerabilities in AirPlay</li><li>Bring your own installer - crafty EDR bypass</li><li>The Signal clone used by US government officials: shocker: has been hacked</li><li>AI slop vulnerability reporting</li><li>Bricking iPhones with a single line of code</li><li>Hacking planet technology</li><li>Vibe hacking for the win?</li><li>Cybersecurity CEO arrested for deploying malware</li><li>Hello my perverted friend</li><li>FastCGI - fast, but vulnerable</li></ul>

0:00 Opening and introductions 
2:43 Panel introductions and conference recaps 
4:46 Conference announcements and Corncon discussion 
8:05 RSAC 2025 recap and vulnerability management trends 
15:44 RDP credential revocation flaw in Windows 11 
34:57 Apple AirPlay "wormable" vulnerabilities and third-party device risks 
44:10 Signal clone breach used by US officials (TeleMessage incident) 
55:38 Supply chain attack: Magento extensions backdoor 
66:12 "Hello my perverted friend": Sextortion scam analysis 
72:10 Security culture and phishing awareness at home 
75:25 Digital signage vulnerabilities: Samsung MagicInfo 
81:41 Threat hunting tradecraft and blue team operations 
88:38 AI slop in vulnerability reporting and vibe hacking 
98:59 Apple notification DoS and sandbox bypass 
101:24 VMware licensing controversy and alternatives 
107:14 CEO arrested for planting malware in hospital systems 
116:06 FastCGI vulnerabilities in embedded/IoT systems 
122:12 Rooting Android phones and device locking 
124:08 Closing and outro

0:00 Opening and introductions 
2:43 Panel introductions and conference recaps 
4:46 Conference announcements and Corncon discussion 
8:05 RSAC 2025 recap and vulnerability management trends 
15:44 RDP credential revocation flaw in Windows 11 
34:57 Apple AirPlay "wormable" vulnerabilities and third-party device risks 
44:10 Signal clone breach used by US officials (TeleMessage incident) 
55:38 Supply chain attack: Magento extensions backdoor 
66:12 "Hello my perverted friend": Sextortion scam analysis 
72:10 Security culture and phishing awareness at home 
75:25 Digital signage vulnerabilities: Samsung MagicInfo 
81:41 Threat hunting tradecraft and blue team operations 
88:38 AI slop in vulnerability reporting and vibe hacking 
98:59 Apple notification DoS and sandbox bypass 
101:24 VMware licensing controversy and alternatives 
107:14 CEO arrested for planting malware in hospital systems 
116:06 FastCGI vulnerabilities in embedded/IoT systems 
122:12 Rooting Android phones and device locking 
124:08 Closing and outro

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”13886″} podcast from PPWorks

AI/ML

Active Directory

Are You Down With RDP? – PSW #873

botnet virus at a computer screen skull

Malware

Network Security

Mirai botnet spread via GeoVision IoT, Samsung MagicINFO exploits

Communication network concept. Smart city.

Zero trust

RSAC

Endpoint/Device Security

News

RSAC 2025: 5G connectivity will force adoption of zero trust

The crosswalk is talking to me man!, don't block my website without due process, Florida is demanding encryption backdoors, attacking boilers and banning HackRF Ones, time to update your flipper zero, using AI to create working exploits, what happens when you combine an RP2350 and an ESP32? Hopefully good hackery things!, more evidence that patching is not enough, auditing the PHP source code, reading the MEGA advisories, threat actors lie about data breaches (you don't say?), the data breach that Hertz, CISA warns of ransomware, some can't get Ahold of data breaches, please don't let people take control of your PC over Zoom and Paul's hot takes on: 4chan hack, the CVE program, and Microsoft Recall!

The crosswalk is talking to me man!, don't block my website without due process, Florida is demanding encryption backdoors, attacking boilers and banning HackRF Ones, time to update your flipper zero, using AI to create working exploits, what happens when you combine an RP2350 and an ESP32? Hopefully good hackery things!, more evidence that patching is not enough, auditing the PHP source code, reading the MEGA advisories, threat actors lie about data breaches (you don't say?), the data breach that Hertz, CISA warns of ransomware, some can't get Ahold of data breaches, please don't let people take control of your PC over Zoom and Paul's hot takes on: 4chan hack, the CVE program, and Microsoft Recall!

IoT

Ransomware in your CPU – PSW #874

Updated CISA vulnerabilities catalog includes GeoVision IoT bugs

Are You Down With RDP? – PSW #873

Mirai botnet spread via GeoVision IoT, Samsung MagicINFO exploits

RSAC 2025: 5G connectivity will force adoption of zero trust

Hacking Crosswalks and Attacking Boilers – PSW #871

AI, automation, and the future of IoT security: Meeting compliance without sacrificing speed

Fast Five

Selected by the SC Media Editorial team every Tuesday.