Podcasts about flipper zero

  • 138PODCASTS
  • 283EPISODES
  • 1h 25mAVG DURATION
  • 1EPISODE EVERY OTHER WEEK
  • May 11, 2026LATEST

POPULARITY

20192020202120222023202420252026


Best podcasts about flipper zero

Latest podcast episodes about flipper zero

Mac Geek Gab (Enhanced AAC)
The eSIM Showdown, Sync Mysteries, and Must-Know Mac Tricks

Mac Geek Gab (Enhanced AAC)

Play Episode Listen Later May 11, 2026 70:33 Transcription Available


Buckle up, geeks! This week’s Quick Tips have you refreshing the App Store like a pro, turning Finder’s Quick Actions into a PDF-combining powerhouse, swiping that iOS cut/copy/paste bar like a power user, and finally taming horizontal scrolling on your non-Apple mouse. Then it’s tales from the road: Adam wrestles eSIMs into submission with a Starlink cameo, Linda accidentally invents her own ISP, Mint Mobile’s tablet plan steps into the spotlight, and Dave shares what he learned from TP-Link about the FCC saga you’ll want in your ears before your next router purchase. Your questions get the full treatment, too. VaShaun learns how to keep his SSID intact when switching providers (including travel router magic!), Jim battles a stubborn Trash with rm, lsof, and fuser so you Don’t Get Caught staring at undeletable files, and GW finally gets a straight answer on why sync is so hard. Cool Stuff Found rounds it out with WhiteScreen.Online turning your devices into panel lights, Zenringer landing at half price, the Basic Bookmark Checker tidying your digital life, the Flipper Zero cloning whatever’s clonable, and the OBDEleven gen 3 unlocking your car’s hidden settings. Hit play and geek out. 00:00:00 Mac Geek Gab 1141 for Monday, May 11th, 2026 May 11th: National Technology Day MGG Monthly Giveaway – Enter to win a Function101 Apple TV Button Remote The MGG Merch Store is Live! Quick Tips 00:00:01 Michael-QTR-Refresh Appstore Update 00:03:00 Bill-QT-Making a PDF with “Quick Actions” Menu in Finder Apple Support Combine PDFs 00:05:30 Lucas from Chicago-QT-Swipe the bar/menu of cut/copy/paste options on iOS 00:07:16 ACTUALLY combining PDFs on the Mac in the Finder Combine files into a PDF on Mac (in Finder) 00:09:12 David-QT-Horizontal Scrolling with a Non-Apple Mouse! Stories from Travels 00:11:43 Adam and The eSIM Starlink Internet eSIMDB US Mobile 00:21:51 LindaNET (because Linda had a DSL line and resold her high speed internet) 00:22:32 Mint Mobile Tablet Plan 00:26:04 Dave vs. TP-Link and The FCC Sponsors 00:28:00 SPONSOR: CarGurus. Meet CarGurus Discover, a new search feature where you can look for vehicles based on the way you think—using your own words. No more being boxed in by filters. Check it out at https://cargurus.com/ 00:29:11 SPONSOR: NordLayer Browser. The business browser built for how modern work actually happens — giving IT the visibility and control to secure SaaS, stop phishing, and prevent data leaks right at the source. 00:30:08 SPONSOR: CleanMyMac. Get Tidy Today! Try 7 days free and use our code MACGEEK for 20% off at clnmy.com/MACGEEK Your Questions Answered and Tips Shared! 00:31:30 VaShaun-Can I Keep my SSID when I get a new provider? Use your home's same SSID/password on your travel router so everything connects all the time 00:39:01 Jim-How do I empty a stubborn Trash on my Mac? rm vs. rmdir vs. rm -rf sudo lsof +D /path/to/folder sudo fuser -v /path/to/folder Command-Shift-Period in Finder shows hidden files 00:50:27 GW-Why is Sync “Hard?” Cool Stuff Found 00:58:11 Stephen-CSF-WhiteScreen.Online turns your device into a panel light 01:01:12 Michael-CSM-Zenringer (link gets you half price for MGG listeners) 01:02:16 Donald-CSM-1128-Basic Bookmark Checker to clean things up! 01:03:13 Rob in STL-CSF-Flipper Zero for cloning (your?) badges and more 01:06:34 Richard-CSF-1111-ODBEleven gen 3 for tweaking your car’s settings 01:09:11 MGG 1141 Outtro MGG Monthly Giveaway Bandwidth Provided by CacheFly Pilot Pete's Aviation Podcast: So There I Was (for Aviation Enthusiasts) The Debut Film Podcast – Adam's new podcast! Dave's Business Brain (for Entrepreneurs) and Gig Gab (for Working Musicians) Podcasts MGG Merch is Available! Mac Geek Gab iOS app Mac Geek Gab YouTube Page Mac Geek Gab Live Calendar This Week's MGG Premium Contributors MGG Apple Podcasts Reviews feedback@macgeekgab.com 224-888-GEEK Active MGG Sponsors and Coupon Codes List BackBeat Media Podcast Network

Geek News Central
Mozilla Meets Mythos #1864

Geek News Central

Play Episode Listen Later May 10, 2026 49:34 Transcription Available


  In this episode, Ray Cochrane leads with Mozilla shipping Firefox 150 with 271 patched bugs found by Anthropic’s Mythos system, the first major real-world deployment of the AlphaGo-Moment cybersecurity tooling. He also covers a 9-year dormant Linux kernel root, a college student stopping Taiwan’s high-speed rail with a software-defined radio, GitHub MCP secret scanning going GA, the NVIDIA NeMo lawsuit surviving its motion to dismiss, the Hugging Face Reachy Mini app store, Anthropic’s Auto Mode for Claude Code, and the 4-gigabyte AI model Chrome silently installed on your computer. – Want to start a podcast? Its easy to get started! Sign-up at Blubrry – Thinking of buying a Starlink? Use my link to support the show. Subscribe to the Newsletter. Email Ray if you want to get in touch! Like and Follow Geek News Central’s Facebook Page. Support my Show Sponsor: Best Godaddy Promo Codes Get 1Password Full Summary Cochrane opens the show with the AlphaGo Moment moving from theory into production. Mozilla shipped Firefox 150 this week with 271 patched bugs that Anthropic’s Mythos system found. Furthermore, the broader episode threads a clear pattern: AI tooling is reshaping security, developer workflows, and consumer software faster than the surrounding ecosystem can absorb it. The show closes on the four-gigabyte AI model Chrome installed on a billion machines without explicit consent. Mozilla Ships 271 Mythos Bugs in Firefox 150 Mozilla ran Anthropic’s restricted Mythos system against the Firefox 150 codebase before shipping. The result: 271 found bugs (180 high severity, 80 moderate, 11 low) baked into the release. However, the bigger number is the year-over-year jump. April 2026 shipped 423 total Firefox security fixes versus 31 a year prior. The breakdown for April: 271 from Mythos, 41 from external researchers, and 111 from other internal sources. Cochrane is sticking to his guns on calling this the AlphaGo Moment for cybersecurity. Skeptics argue Mythos is industrial-scale fuzzing because most found bugs sit in memory-safety territory. However, his counter is the velocity itself. Furthermore, he frames the resistance as carriage-versus-cars: humans-first research still grounds the tool, but throughput is the win. The Firefox CTO put it directly: defenders finally have a chance to win, decisively. For developers asking whether Mythos changes anything if they already run fuzzers, Cochrane’s answer is yes, and not even close. Additionally, he notes Mythos is restricted-access. The broadly available tier is Claude Opus 4.7, which Mozilla used since February before getting onto the restricted program for the Firefox 150 cycle. Run Opus 4.7 first. Sponsor: GoDaddy GoDaddy has been sponsoring this show for over twenty years. Economy hosting starts at $6.99/month, WordPress hosting at $12.99/month, and domains at $11.99. Use codes at geeknewscentral.com/godaddy for exclusive deals and to directly support the show. Copy Fail: 9-Year Linux Kernel Bug, 732 Bytes to Root A 9-year-old dormant Linux kernel bug got disclosed April 29 as CVE-2026-31431. Researchers published a 732-byte Python script that roots every major Linux distribution shipped since 2017. Additionally, CISA added the CVE to its Known Exploited Vulnerabilities catalog on May 1 with a May 15 federal deadline. The bug lives in the kernel’s crypto socket layer through the AF_ALG AEAD interface, originating in a 2017 in-place crypto optimization that lacked bounds checking. Cloudflare published their post-mortem this week. Their first instinct was to remove the kernel module entirely. However, service dependencies forced a workaround instead. Cloudflare resumed normal patched-kernel reboot automation across their 330-city fleet on May 4, with manual reboots and rollouts continuing after. Taiwan Rail Stopped by a 23-Year-Old With a Software-Defined Radio A 23-year-old Taiwanese university student with the surname Lin spoofed a TETRA general alarm signal on April 5, stopping trains on Taiwan’s high-speed rail. The accomplice supplied the radio parameters. Both were arrested by month-end. Lin posted NT$100,000 bail; the accomplice posted NT$80,000. The incident hit at 11:23 PM during the Qingming holiday weekend, stopping three revenue passenger trains plus one deadhead. Furthermore, the system has been in service for 19 years without rotating its cryptographic parameters once. Cochrane notes this is exactly the type of long-dormant infrastructure flaw that Mythos-class tooling catches, if anyone bothers to point it at the wires we already have. GitHub MCP Secret Scanning Goes GA GitHub’s secret scanning in the MCP server hit GA on May 5, with dependency scanning entering public preview the same day. Both released after a seven-week public preview run starting March 17. Additionally, the feature lets MCP-compatible coding agents (Copilot CLI, VS Code, JetBrains, Claude Code, Cursor, Windsurf) detect exposed secrets before commits or pull requests. Findings are ephemeral. They surface only in the current chat session and don’t persist as GitHub alerts. Sources disagree on scope: GitHub’s GA changelog says repo-level or org-level settings work, while the docs say only org-level applies. Cochrane flags the open question of whether MCP prompt injections could be exploited to send discovered secrets elsewhere. Subquadratic Debuts a 12-Million-Token Context Window Miami-based Subquadratic emerged from stealth on May 5 with a $29 million seed round and a reported $500 million valuation. Their model, SubQ 1M-Preview, runs on a new Subquadratic Sparse Attention architecture (their technical writeup calls it Selective Attention; same acronym, different second word). The headline claim: a thousand-times reduction in attention compute at 12 million tokens versus frontier models. However, that figure is vendor marketing math. There is no peer-reviewed paper, no public weights, and no independent benchmark replication. Researchers are demanding independent proof. Furthermore, CTO Alex Whedon’s pull line, “Retrieval / RAG plumbing is a waste of human intelligence,” signals how aggressively they want to position against retrieval-augmented architectures. ChatGPT Goblins, China’s “Catch You Steadily”: Sycophancy Is Universal Last week’s ChatGPT goblin obsession has a Chinese-language twin. The model overuses a phrase translating as “I will steadily catch you.” Additionally, a new Stanford and CMU study called ELEPHANT shows social sycophancy is universal across all 11 LLMs tested with 2,400-plus participants. Models endorsed users 49 percent more than humans did, and 47 percent even on harmful prompts. Alibaba’s Qwen and DeepSeek topped the rankings. Cochrane notes sycophancy is obvious once you’re aware of it but tricky to dissuade. Even with explicit instructions, longer context windows can reintroduce the behavior as the instructions get diluted. Furthermore, the trap is believing you’ve handled it. Once you think you’ve got it under control, you’re more prone to being influenced because you stopped watching for it. NVIDIA NeMo Lawsuit: Judge Tigar Denies Motion to Dismiss Three authors filed Nazemian v. NVIDIA in March 2024, alleging NVIDIA used The Pile and Books3 (approximately 196,640 pirated books) to train its NeMo AI framework. NVIDIA’s defense relied on the Sony v. Universal Betamax doctrine, arguing NeMo’s training scripts are general-purpose tools like a VCR. This week, Judge Tigar denied NVIDIA’s motion to dismiss in the Northern District of California. The headline quote: NeMo’s training scripts “have no other purpose than to speed up the process of infringement.” Furthermore, the judge rejected the VCR analogy outright. NeMo’s scripts are not general-purpose tools; they were allegedly purpose-built to ingest pirated material. Cochrane reads the Betamax framing as legal-jargon arbitrage rather than honest defense. The Humanoid Robot Market Is Smaller Than the Hype Michael Barnard at CleanTechnica argues that scenario-math against the global labor market puts realistic humanoid TAM at $200 billion to $1 trillion, not $20 trillion. Near-term wins cluster in warehouses, not homes. Additionally, the framework weighs dexterity burden against human-proximity safety burden. Real opportunities cluster where both burdens are low. Cochrane connects this to last week’s reservations about humanoids in the household. Furthermore, the risk profile is the issue: these robots aren’t prepared for every scenario, can’t make dynamic decisions, and one software update can change the definition of “safe.” Hugging Face Launches Reachy Mini App Store Hugging Face launched an open-source app store for the Reachy Mini robot this week, $299 for the Lite tethered version and $449 wireless. There are 200-plus community-built apps at launch from over 150 creators, with nearly 10,000 Reachy Minis cumulative shipped. Additionally, apps are forkable, with the default agent (ML Intern) able to modify, write, test, and ship code on any existing app. Examples at launch include an office receptionist built in under two hours, a Reachy Phone Home anti-procrastination app, baby-monitor-style apps, a cooking assistant, and a 78-year-old Joel Cohen’s voice-controlled CEO peer-group app. Pollen Robotics, the company behind Reachy, was acquired by Hugging Face on April 14, 2025. Bebop the Humanoid Robot Delays Southwest Flight 1568 A 4-foot, 70-pound humanoid robot named Bebop delayed Southwest flight 1568 from Oakland to San Diego by more than 73 minutes on April 30. The crew flagged the lithium battery as oversized. Furthermore, the battery was reportedly four times the cabin limit. Bebop belongs to Dallas-based Elite Event Robotics, which bought a full-price cabin ticket because the robot exceeded checked-baggage weight. Bebop danced for passengers at the gate before boarding. However, Southwest had Elite remove the batteries before departure, and replacements were overnighted to Chicago for the next event. Cochrane flags the obvious: batteries have always been flagged in aviation, so forgetting that with a humanoid robot in tow is a strange miss. Ouster Rev8: Native Color Lidar With Google, Volvo, Skydio Stating Intent Ouster announced the Rev8 OS Family on May 4 in San Francisco. The sensors fuse depth and color via SPAD detectors (single photon avalanche diodes) on Ouster’s custom L4 and L4 Max chips. Google, Volvo Autonomous Solutions, Skydio, Liebherr, Epiroc, and PlusAI have stated intent to adopt, though nothing is formally signed. Specs include 48-bit color, 116 dB dynamic range, and pre-fused 3D colorized point clouds. The OS1 Max gets 500-meter max detection. Available to order today and shipping this quarter, with no pricing disclosed. CEO Angus Pacala in his TechCrunch interview: “The goal is to obviate cameras. There’s no reason that one sensor can’t do both.” TagTinker Lets a Flipper Zero Mess With Electronic Shelf Labels A new Flipper Zero app called TagTinker uses infrared signals to push images and text to electronic shelf labels. Additionally, these are the same kind of price tags grocery chains are starting to use for surveillance pricing. The app and GitHub repo went public this week. Maryland’s HB 895, signed by Governor Wes Moore, takes effect October 1 as the first-in-nation surveillance pricing law. It covers food retailers and third-party food delivery service providers. Furthermore, ESLs use the same IR signaling as TV remotes with weak security. The dev’s disclaimer states it’s strictly for educational research, security curiosity, and displaying digital art on hardware you legally own. Fitbit App Becomes Google Health, Plus Fitbit Air, Plus Google Fit Sunset Google announced May 7 that the Fitbit app becomes Google Health on May 19, rolling through May 26. The launch ships with the new $99.99 Fitbit Air screenless tracker and the long-rumored Google Fit shutdown. Additionally, the four-tab interface (Today, Fitness, Sleep, Health) bundles a Gemini-powered AI Health Coach. Coach is premium-gated at $9.99/month or $99/year. Medical records integration is US-only at launch. The Fitbit Air gets up to one week of battery life and 50-meter water resistance. However, Cochrane flags conflicting privacy framing: Google’s AI summary bullets say “your data stays private,” but the actual document copy says only “committed to not using Fitbit user health and wellness data for Google Ads.” Those are not the same statement. Russinovich on Why Win32 Won and WinRT Didn’t Microsoft Azure CTO Mark Russinovich said via Microsoft Dev Docs video that Win32, the 1995 API, is still foundational to Windows 11. WinRT, the modernization replacement, “didn’t play out the way a lot of people expected.” Mostly clickbait framing per Windows Latest, but the substantive angle is real. Microsoft is pivoting back to native WinUI 3 development after years of pushing developers toward WebView2 and Electron. Additionally, Electron-based apps are known for insane RAM usage, and everyone is hurting for RAM right now. Furthermore, the bigger open question is whether Electron survives the test of time, especially with the React engine reportedly being rewritten in Rust. “Tabula Plena”: The Brain Starts Full, Not Blank A Nature Communications study from the Institute of Science and Technology Austria found that the mouse hippocampal CA3 recurrent network begins densely connected and refines through pruning. ISTA’s press release frames this as “tabula plena,” meaning full slate, counter to tabula rasa. The paper published April 21. First author Victor Vargas-Barroso and senior author Professor Peter Jonas studied mice at three developmental stages. Furthermore, the “starting overloaded enables faster sensory integration” framing is Jonas’s hypothesis from the press release, not a paper conclusion. Cochrane closes on the bigger question: did we have human growth and experience mapped wrong from the start? The Aqueous Battery You Can Pour Down the Drain A Chinese research team led by Professor Chunyi Zhi at City University of Hong Kong built an aqueous battery using a custom organic polymer electrode plus neutral magnesium and calcium salts (food-grade tofu coagulants) as electrolyte. Published in Nature Communications on February 18. Numbers to know: 120,000-plus charge cycles, full-cell energy density of 48.3 watt-hours per kilogram. That’s well below typical lithium-ion. However, post-cycling analysis showed only magnesium, calcium, chlorine, carbon, and copper, with no heavy metals. The cell complies with US RCRA, ISO 14001, and China’s GB 18599-2020 for direct environmental disposal. Additionally, the “300-plus years” framing is journalists extrapolating from the 120,000 cycles, not a paper claim. ResoNix Klippel Tests Expose Car-Audio Spec Lies Nick Apicella, founder of ResoNix Sound Solutions in Stony Point, New York, spent around $23,000 on independent Klippel LSI and TRF testing of 40 subwoofers. He published 21 results showing widespread misrepresentation of Xmax (excursion) and thermal/power-handling claims. Test data published in three batches between December 2025 and January 2026. Specifics: Wavtech thinPRO12 claimed 20 mm of excursion but delivered 8.85 mm, scoring 15 out of 100 on marketing accuracy. One driver hit 44 percent of advertised excursion. Another tripped thermal protection at half its rated power. Additionally, nine of 21 drivers scored below 50 out of 100. Brands tested include JL Audio, Sundown, Focal, Morel, Audiofrog, Adire, Stereo Integrity, and Dynaudio. Conflict-of-interest flag: ResoNix’s own GUS-15, 12, and 10 prototypes conveniently rank one, two, three. JetBrains Opens 2026 Developer Ecosystem Survey JetBrains opened the 10th annual Developer Ecosystem Survey this week. It takes about 30 minutes, with prizes including a MacBook Pro 16-inch and a $1,000 Amazon gift card. Anonymized raw data is published publicly, and cumulative scale is 100,000-plus developers across recent years. Additionally, the survey is going fully anti-AI: “evil bots, dishonest respondents, and AI agents will be excluded from prize distribution.” Cochrane is curious whether TypeScript holds its 2025 crown after knocking Python off, and whether Rust shows real growth given the wave of LLM-driven Rust rewrites in the past few months. Anthropic’s Claude Code Auto Mode Goes Live Anthropic launched Auto Mode for Claude Code roughly six weeks ago. Claude Code’s previous behavior required user approval for most file modifications and command executions, generating heavy approval-fatigue complaints during longer sessions. Auto Mode is the answer: Claude can run multi-step development tasks without per-action approval. Additionally, the architecture is a two-stage classifier, with stage one a fast yes/no filter and stage two doing chain-of-thought on flagged actions. Cochrane runs his own Claude Code in YOLO mode but with custom rejection rules baked into settings to block commands he doesn’t want, even with skip-permissions on. He recommends configuring settings as the actual policy layer rather than relying on classifier judgment alone. Furthermore, recent posts about Claude deleting websites or wiping production databases reinforce why the settings layer matters more than the auto-mode toggle. Chrome Quietly Installed a 4GB AI Model on Your Computer Google Chrome silently downloads on-device AI model weights (Gemini Nano family) to a `weights.bin` file in the OptGuideOnDeviceModel directory, around four gigabytes in Alexander Hanff’s audit. Furthermore, the model re-downloads if you delete it. Hanff timed his own install at 14 minutes 28 seconds on macOS. Affected platforms include Windows, macOS (including Apple Silicon), and Linux. Hanff frames this as a multi-front legal violation: a direct breach of Europe’s ePrivacy Directive, two articles of GDPR, and an environmental harm of a magnitude that would be notifiable under the Corporate Sustainability Reporting Directive. At one billion users, the four-gigabyte distribution represents roughly 240 gigawatt-hours of network and storage energy paired with about 60,000 tonnes of CO2-equivalent emissions. However, no EU regulator action or formal complaint has surfaced as of this episode. The model powers on-device features (email writing, scam detection, summarization, smart paste, tab grouping) but not the visible AI Mode button, which routes to the cloud. To disable, Cochrane recommends Chrome Settings, then System, then On-device AI, toggle to off. Two more paths exist via `chrome://flags` or a Windows registry edit. Cochrane closes the show with show housekeeping: GNC Insider at geeknewscentral.com/insider, email at geeknews@gmail.com, newsletter signup at geeknewscentral.com, and Pocket Casts as a solid modern podcast app pick. Have a wonderful night. The post Mozilla Meets Mythos #1864 appeared first on Geek News Central.

Paul's Security Weekly
Back to (or Start) Fundamentals? - Rajesh Khazanchi - PSW #923

Paul's Security Weekly

Play Episode Listen Later Apr 23, 2026 123:37


This week: Larry's in the host seat and chaos ensues. We dig into: A very questionable story about tracking a warship with a $5 Bluetooth tracker Serial-to-IP devices quietly sitting in critical infrastructure… and full of holes New York regulators mandating MFA and asset inventory—aka CIS Control #1 is now breaking news A ransomware negotiator who decided to double-dip (and landed in prison) “Brand new” hard drives that come preloaded… with someone else's data The Vercel breach: no zero-day, just shadow IT, stolen tokens, and bad decisions AI-driven vulnerability discovery and the looming “vulnpocalypse” Quantum crypto debates: real threat or just another security boogeyman? Mirai is STILL alive—because apparently we still don't patch routers And yes… Flipper Zero makes an appearance (no, you're not hacking airplanes… calm down) Then, we rebroadcast an interview from RSAC. Breach Readiness for Measurable Risk Reduction in the Age of AI Cyber leaders no longer debate whether a breach will occur. What has changed is the speed and scale at which AI now enables those breaches. The real question is how far an attacker can move once inside. In this conversation, Rajesh Khazanchi explores why breach readiness, including AI-assisted containment, measurable blast radius reduction, and pervasive microsegmentation, has become mission-critical for business continuity in 2026. This segment is sponsored by ColorTokens. Visit https://securityweekly.com/colortokensrsac to learn more about them! Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-923

Paul's Security Weekly TV
Back to (or Start) Fundamentals? - Rajesh Khazanchi - PSW #923

Paul's Security Weekly TV

Play Episode Listen Later Apr 23, 2026 123:37


This week: Larry's in the host seat and chaos ensues. We dig into: A very questionable story about tracking a warship with a $5 Bluetooth tracker Serial-to-IP devices quietly sitting in critical infrastructure… and full of holes New York regulators mandating MFA and asset inventory—aka CIS Control #1 is now breaking news A ransomware negotiator who decided to double-dip (and landed in prison) "Brand new" hard drives that come preloaded… with someone else's data The Vercel breach: no zero-day, just shadow IT, stolen tokens, and bad decisions AI-driven vulnerability discovery and the looming "vulnpocalypse" Quantum crypto debates: real threat or just another security boogeyman? Mirai is STILL alive—because apparently we still don't patch routers And yes… Flipper Zero makes an appearance (no, you're not hacking airplanes… calm down) Then, we rebroadcast an interview from RSAC. Breach Readiness for Measurable Risk Reduction in the Age of AI Cyber leaders no longer debate whether a breach will occur. What has changed is the speed and scale at which AI now enables those breaches. The real question is how far an attacker can move once inside. In this conversation, Rajesh Khazanchi explores why breach readiness, including AI-assisted containment, measurable blast radius reduction, and pervasive microsegmentation, has become mission-critical for business continuity in 2026. This segment is sponsored by ColorTokens. Visit https://securityweekly.com/colortokensrsac to learn more about them! Show Notes: https://securityweekly.com/psw-923

Paul's Security Weekly (Podcast-Only)
Back to (or Start) Fundamentals? - Rajesh Khazanchi - PSW #923

Paul's Security Weekly (Podcast-Only)

Play Episode Listen Later Apr 23, 2026 123:37


This week: Larry's in the host seat and chaos ensues. We dig into: A very questionable story about tracking a warship with a $5 Bluetooth tracker Serial-to-IP devices quietly sitting in critical infrastructure… and full of holes New York regulators mandating MFA and asset inventory—aka CIS Control #1 is now breaking news A ransomware negotiator who decided to double-dip (and landed in prison) "Brand new" hard drives that come preloaded… with someone else's data The Vercel breach: no zero-day, just shadow IT, stolen tokens, and bad decisions AI-driven vulnerability discovery and the looming "vulnpocalypse" Quantum crypto debates: real threat or just another security boogeyman? Mirai is STILL alive—because apparently we still don't patch routers And yes… Flipper Zero makes an appearance (no, you're not hacking airplanes… calm down) Then, we rebroadcast an interview from RSAC. Breach Readiness for Measurable Risk Reduction in the Age of AI Cyber leaders no longer debate whether a breach will occur. What has changed is the speed and scale at which AI now enables those breaches. The real question is how far an attacker can move once inside. In this conversation, Rajesh Khazanchi explores why breach readiness, including AI-assisted containment, measurable blast radius reduction, and pervasive microsegmentation, has become mission-critical for business continuity in 2026. This segment is sponsored by ColorTokens. Visit https://securityweekly.com/colortokensrsac to learn more about them! Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-923

Paul's Security Weekly (Video-Only)
Back to (or Start) Fundamentals? - Rajesh Khazanchi - PSW #923

Paul's Security Weekly (Video-Only)

Play Episode Listen Later Apr 23, 2026 123:37


This week: Larry's in the host seat and chaos ensues. We dig into: A very questionable story about tracking a warship with a $5 Bluetooth tracker Serial-to-IP devices quietly sitting in critical infrastructure… and full of holes New York regulators mandating MFA and asset inventory—aka CIS Control #1 is now breaking news A ransomware negotiator who decided to double-dip (and landed in prison) "Brand new" hard drives that come preloaded… with someone else's data The Vercel breach: no zero-day, just shadow IT, stolen tokens, and bad decisions AI-driven vulnerability discovery and the looming "vulnpocalypse" Quantum crypto debates: real threat or just another security boogeyman? Mirai is STILL alive—because apparently we still don't patch routers And yes… Flipper Zero makes an appearance (no, you're not hacking airplanes… calm down) Then, we rebroadcast an interview from RSAC. Breach Readiness for Measurable Risk Reduction in the Age of AI Cyber leaders no longer debate whether a breach will occur. What has changed is the speed and scale at which AI now enables those breaches. The real question is how far an attacker can move once inside. In this conversation, Rajesh Khazanchi explores why breach readiness, including AI-assisted containment, measurable blast radius reduction, and pervasive microsegmentation, has become mission-critical for business continuity in 2026. This segment is sponsored by ColorTokens. Visit https://securityweekly.com/colortokensrsac to learn more about them! Show Notes: https://securityweekly.com/psw-923

Paul's Security Weekly
Hacking IP KVMs & Reversing with Radare2 - Sergi Àlvarez - PSW #918

Paul's Security Weekly

Play Episode Listen Later Mar 19, 2026 130:49


In this episode, we sit down with the Radare community leader, Pancake, the creator of the Radare2 reverse engineering framework. Whether you've never heard of Radare, already use it daily, or are thinking about contributing to its development, this conversation will demystify what makes Radare unique, why thousands of engineers rely on it, and how you can step into the community. This segment is sponsored by NowSecure. Discover how AI-powered mobile app security testing finds hidden vulns and leaks at https://securityweekly.com/nowsecure. In the security news: The US national cyber strategy in the category of dumb laws and 3d printing guns Iranian threat analysis ESP32 Bus Pirate gets some amazing updates I can reset the admin password Rick-rolling yourself Chrome 0days Re-purposing those old Ubiquiti cloud keys The new TLS certificate lifecycle A Flipper Zero add-on and news on the FlipperOne glassword malware Do you care about exploits or patching? attacking nuclear research centers how we uncovered 9 vulnerabilities in IP KVMs and hacking your laundry card with Claude Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-918

Paul's Security Weekly TV
Hacking IP KVMs & Reversing with Radare2 - Sergi Àlvarez - PSW #918

Paul's Security Weekly TV

Play Episode Listen Later Mar 19, 2026 130:49


In this episode, we sit down with the Radare community leader, Pancake, the creator of the Radare2 reverse engineering framework. Whether you've never heard of Radare, already use it daily, or are thinking about contributing to its development, this conversation will demystify what makes Radare unique, why thousands of engineers rely on it, and how you can step into the community. This segment is sponsored by NowSecure. Discover how AI-powered mobile app security testing finds hidden vulns and leaks at https://securityweekly.com/nowsecure. In the security news: The US national cyber strategy in the category of dumb laws and 3d printing guns Iranian threat analysis ESP32 Bus Pirate gets some amazing updates I can reset the admin password Rick-rolling yourself Chrome 0days Re-purposing those old Ubiquiti cloud keys The new TLS certificate lifecycle A Flipper Zero add-on and news on the FlipperOne glassword malware Do you care about exploits or patching? attacking nuclear research centers how we uncovered 9 vulnerabilities in IP KVMs and hacking your laundry card with Claude Show Notes: https://securityweekly.com/psw-918

Paul's Security Weekly (Podcast-Only)
Hacking IP KVMs & Reversing with Radare2 - Sergi Àlvarez - PSW #918

Paul's Security Weekly (Podcast-Only)

Play Episode Listen Later Mar 19, 2026 130:49


In this episode, we sit down with the Radare community leader, Pancake, the creator of the Radare2 reverse engineering framework. Whether you've never heard of Radare, already use it daily, or are thinking about contributing to its development, this conversation will demystify what makes Radare unique, why thousands of engineers rely on it, and how you can step into the community. This segment is sponsored by NowSecure. Discover how AI-powered mobile app security testing finds hidden vulns and leaks at https://securityweekly.com/nowsecure. In the security news: The US national cyber strategy in the category of dumb laws and 3d printing guns Iranian threat analysis ESP32 Bus Pirate gets some amazing updates I can reset the admin password Rick-rolling yourself Chrome 0days Re-purposing those old Ubiquiti cloud keys The new TLS certificate lifecycle A Flipper Zero add-on and news on the FlipperOne glassword malware Do you care about exploits or patching? attacking nuclear research centers how we uncovered 9 vulnerabilities in IP KVMs and hacking your laundry card with Claude Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-918

Paul's Security Weekly (Video-Only)
Hacking IP KVMs & Reversing with Radare2 - Sergi Àlvarez - PSW #918

Paul's Security Weekly (Video-Only)

Play Episode Listen Later Mar 19, 2026 130:49


In this episode, we sit down with the Radare community leader, Pancake, the creator of the Radare2 reverse engineering framework. Whether you've never heard of Radare, already use it daily, or are thinking about contributing to its development, this conversation will demystify what makes Radare unique, why thousands of engineers rely on it, and how you can step into the community. This segment is sponsored by NowSecure. Discover how AI-powered mobile app security testing finds hidden vulns and leaks at https://securityweekly.com/nowsecure. In the security news: The US national cyber strategy in the category of dumb laws and 3d printing guns Iranian threat analysis ESP32 Bus Pirate gets some amazing updates I can reset the admin password Rick-rolling yourself Chrome 0days Re-purposing those old Ubiquiti cloud keys The new TLS certificate lifecycle A Flipper Zero add-on and news on the FlipperOne glassword malware Do you care about exploits or patching? attacking nuclear research centers how we uncovered 9 vulnerabilities in IP KVMs and hacking your laundry card with Claude Show Notes: https://securityweekly.com/psw-918

PR 360
How Startups Should Approach PR with Yury Molodtsov

PR 360

Play Episode Listen Later Mar 18, 2026 31:20


Yury Molodtsov is the COO & Partner at MA Family, leading communications for tech companies such as Miro and Flipper Zero. He's also the creator of Five Finds, a weekly newsletter about the interesting things he discovers at the edge of the Internet. In this episode, Yury shares how startups should approach PR, crisis communication, and how to build a successful newsletter.Key Takeaways:- How to create a successful newsletter- Why AI is no longer a differentiator- Effective crisis communication strategiesEpisode Timeline:1:30 Why newsletters should be niche 3:50 Who is Yury's target audience?4:55 Yury's favorite fact6:10 Why companies shouldn't boast about using AI9:15 The average person's impression of AI10:45 When should startups start investing in PR?13:25 A PR freelancer's first look at a startup15:45 How to place stories into top-tier media20:20 The future of journalism22:00 Journalists need to develop their own brands23:35 Yury's approach to crisis managementThis episode's guest:• Yury Molodtsov on LinkedIn• MA.Family • Yury on X Subscribe and leave a 5-star review: https://pod.link/1496390646Contact Us!•Join the conversation by leaving a comment!•Follow us on Facebook, Twitter, Instagram, and LinkedIn!Thanks for listening! Hosted on Acast. See acast.com/privacy for more information.

Paul's Security Weekly
Digging For Vulnerability Gold - PSW #909

Paul's Security Weekly

Play Episode Listen Later Jan 15, 2026 127:03


In the security news: KVMs are a hacker's dream Hacking an e-scooter Flipper Zero alternatives The best authentication bypass Pwning Claude Code ForiSIEM, vulnerabilities, and exploits Microsoft patches and Secure Boot fun Making Windows great, again? Breaching the Breach Forum Congressional Emails unsolicited Instagram password reset requests - Is Meta doing enough to secure the platform? LLMs are HIPAA compliant? Threat actors target LLM honeypots Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-909

Paul's Security Weekly TV
Digging For Vulnerability Gold - PSW #909

Paul's Security Weekly TV

Play Episode Listen Later Jan 15, 2026 127:03


In the security news: KVMs are a hacker's dream Hacking an e-scooter Flipper Zero alternatives The best authentication bypass Pwning Claude Code ForiSIEM, vulnerabilities, and exploits Microsoft patches and Secure Boot fun Making Windows great, again? Breaching the Breach Forum Congressional Emails unsolicited Instagram password reset requests - Is Meta doing enough to secure the platform? LLMs are HIPAA compliant? Threat actors target LLM honeypots Show Notes: https://securityweekly.com/psw-909

Paul's Security Weekly (Podcast-Only)
Digging For Vulnerability Gold - PSW #909

Paul's Security Weekly (Podcast-Only)

Play Episode Listen Later Jan 15, 2026 127:03


In the security news: KVMs are a hacker's dream Hacking an e-scooter Flipper Zero alternatives The best authentication bypass Pwning Claude Code ForiSIEM, vulnerabilities, and exploits Microsoft patches and Secure Boot fun Making Windows great, again? Breaching the Breach Forum Congressional Emails unsolicited Instagram password reset requests - Is Meta doing enough to secure the platform? LLMs are HIPAA compliant? Threat actors target LLM honeypots Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-909

Paul's Security Weekly (Video-Only)
Digging For Vulnerability Gold - PSW #909

Paul's Security Weekly (Video-Only)

Play Episode Listen Later Jan 15, 2026 127:03


In the security news: KVMs are a hacker's dream Hacking an e-scooter Flipper Zero alternatives The best authentication bypass Pwning Claude Code ForiSIEM, vulnerabilities, and exploits Microsoft patches and Secure Boot fun Making Windows great, again? Breaching the Breach Forum Congressional Emails unsolicited Instagram password reset requests - Is Meta doing enough to secure the platform? LLMs are HIPAA compliant? Threat actors target LLM honeypots Show Notes: https://securityweekly.com/psw-909

Black Hills Information Security
US Cyberattacks on Venezuela - 2026-01-05

Black Hills Information Security

Play Episode Listen Later Jan 9, 2026 69:23 Transcription Available


Join us LIVE on Mondays, 4:30pm EST.A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.https://www.youtube.com/@BlackHillsInformationSecurityChat with us on Discord! - https://discord.gg/bhis

TechLinked
Unhinged Grok, ASUS Exits Phones, Possible PS5 Jailbreak + more!

TechLinked

Play Episode Listen Later Jan 3, 2026 10:28


Timestamps: 0:00 keep calm and tech news on 0:11 Grok breaks safety guardrails again 1:55 ASUS exits smartphone business, RAM issues 3:28 Possible PS5 jailbreak 6:02 QUICK BITS INTRO 6:09 Pebble Round 2 smartwatch 6:48 Flipper Zero, Raspberry Pi inauguration ban 7:22 California DROP data deletion tool 8:09 Space furnace! 8:51 Tech Startups offer free Sesh pouches NEWS SOURCES: https://lmg.gg/keh6i Learn more about your ad choices. Visit megaphone.fm/adchoices

Cyber Security Headlines
NYC Inauguration bans Flipper Zero, UK taxes crypto, Finland seizes ship

Cyber Security Headlines

Play Episode Listen Later Jan 2, 2026 8:15


NYC mayoral inauguration bans Flipper Zero and Raspberry Pi devices Crypto must now share account details with UK tax officials Finland seizes suspected cable sabotage ship  Huge thanks to our episode sponsor, ThreatLocker Want real Zero Trust training? Zero Trust World 2026 delivers hands-on labs and workshops that show CISOs exactly how to implement and maintain Zero Trust in real environments. Join us March 4–6 in Orlando, plus a live CISO Series episode on March 6. Get $200 off with ZTWCISO26 at ztw.com. Find the stories behind the headlines at CISOseries.com.  

Underscore_
Comment infiltrer une entreprise avec ces 3 gadgets d'espionnage — chronique Rémi Fleurance (rediff)

Underscore_

Play Episode Listen Later Oct 27, 2025 19:32


On met en scène un scénario d'intrusion physique: comment pénétrer dans une entreprise à l'aide de trois gadgets d'espionnage accessibles au grand public. Démonstrations et explications autour du clonage de badges et de l'ouverture de portes/garages sans chiffrement (ex. Flipper Zero), et des risques concrets pour la sécurité interne. On aborde aussi le cadre légal, l'éthique et les contre‑mesures pour s'en protéger, en plateau avec Ackanir et Arthur.Sources L'électronicien qui a décortiqué un compteur Linky L'ingénieur qui a piraté une TeslaEn plateau Michaël de Marliave — animateur Rémi Fleurance — invité Arthur — invitéPour consulter les détails de l'offre Trade Republic : https://trade.re/Underscore_PodL'investissement comporte un risque de perte en capital. Les intérêts et les gains financiers sont soumis aux prélèvements fiscaux et sociaux. Les performances passé es ne garantissent pas les résultats futurs. Les fonds non-cotés sont des investissements à long terme et ne devraient représenter qu'une partie du portefeuille total. Hébergé par Acast. Visitez acast.com/privacy pour plus d'informations.

Paul's Security Weekly
Lasagna DoS, AI Slop, Hacker Ultimatums - PSW #890

Paul's Security Weekly

Play Episode Listen Later Sep 4, 2025 124:36


In the secure news: Automakers respond to Flipper Zero attacks More on the unconfirmed Elastic EDR 0-Day When Secure Boot does its job too well Crazy authenitcation bypass Hacker ultimatums AI Slop Impatient hackers Linux ISOs are malware Attackers love drivers Hacking Amazon's Eero, the hard way Exploits will continue until security improves The Salesloft breach TP-Link Zero Days US DoD using Russian software? The Lasagna DoS attack Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-890

Paul's Security Weekly TV
Lasagna DoS, AI Slop, Hacker Ultimatums - PSW #890

Paul's Security Weekly TV

Play Episode Listen Later Sep 4, 2025 124:36


In the secure news: Automakers respond to Flipper Zero attacks More on the unconfirmed Elastic EDR 0-Day When Secure Boot does its job too well Crazy authenitcation bypass Hacker ultimatums AI Slop Impatient hackers Linux ISOs are malware Attackers love drivers Hacking Amazon's Eero, the hard way Exploits will continue until security improves The Salesloft breach TP-Link Zero Days US DoD using Russian software? The Lasagna DoS attack Show Notes: https://securityweekly.com/psw-890

Paul's Security Weekly (Podcast-Only)
Lasagna DoS, AI Slop, Hacker Ultimatums - PSW #890

Paul's Security Weekly (Podcast-Only)

Play Episode Listen Later Sep 4, 2025 124:36


In the secure news: Automakers respond to Flipper Zero attacks More on the unconfirmed Elastic EDR 0-Day When Secure Boot does its job too well Crazy authenitcation bypass Hacker ultimatums AI Slop Impatient hackers Linux ISOs are malware Attackers love drivers Hacking Amazon's Eero, the hard way Exploits will continue until security improves The Salesloft breach TP-Link Zero Days US DoD using Russian software? The Lasagna DoS attack Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-890

Paul's Security Weekly (Video-Only)
Lasagna DoS, AI Slop, Hacker Ultimatums - PSW #890

Paul's Security Weekly (Video-Only)

Play Episode Listen Later Sep 4, 2025 124:36


In the secure news: Automakers respond to Flipper Zero attacks More on the unconfirmed Elastic EDR 0-Day When Secure Boot does its job too well Crazy authenitcation bypass Hacker ultimatums AI Slop Impatient hackers Linux ISOs are malware Attackers love drivers Hacking Amazon's Eero, the hard way Exploits will continue until security improves The Salesloft breach TP-Link Zero Days US DoD using Russian software? The Lasagna DoS attack Show Notes: https://securityweekly.com/psw-890

Paul's Security Weekly
Dave Lewis talks M&A due diligence, TBD topic, the weekly news - Dave Lewis - ESW #422

Paul's Security Weekly

Play Episode Listen Later Sep 1, 2025 106:21


Interview with Dave Lewis on Security's Role in M&A Due Diligence In this episode, Dave Lewis from 1Password discusses the critical importance of security in mergers and acquisitions, from due diligence through integration. He explores common pitfalls, essential security assessments, and practical strategies for security leaders to protect organizational value throughout the M&A process. Topic: The Challenge of Breach Transparency Every industry concerned with safety has a process for publishing the details of accidents, incidents, and failures. Cybersecurity has yet to reach this milestone, and hiding the details of failures is holding us back. This talk will argue for the need for breach details to go public, and share strategies for finding and using some little-known sources of detailed breach data. Weekly Enterprise News Finally, in the enterprise security news, A funding, a few acquisitions, and an IPO for the first time in forever! Attackers are really actually starting to use AI now Some researcher spent all of August poking holes in all the AI tools Someone got Microsoft Copilot to be an accomplice in a coverup Microsoft is making a big change in Azure that will probably break some stuff No, Flipper Zero can't help you steal your car (just the stuff in it) Domain names are free to register now, maybe? Disgruntled former employee goes to jail AI tricked into doing more bad things All that and more, on this episode of Enterprise Security Weekly. This segment is sponsored by 1Password. Visit https://securityweekly.com/1password to learn more about them! Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-422

Enterprise Security Weekly (Audio)
Dave Lewis talks M&A due diligence, TBD topic, the weekly news - Dave Lewis - ESW #422

Enterprise Security Weekly (Audio)

Play Episode Listen Later Sep 1, 2025 106:21


Interview with Dave Lewis on Security's Role in M&A Due Diligence In this episode, Dave Lewis from 1Password discusses the critical importance of security in mergers and acquisitions, from due diligence through integration. He explores common pitfalls, essential security assessments, and practical strategies for security leaders to protect organizational value throughout the M&A process. Topic: The Challenge of Breach Transparency Every industry concerned with safety has a process for publishing the details of accidents, incidents, and failures. Cybersecurity has yet to reach this milestone, and hiding the details of failures is holding us back. This talk will argue for the need for breach details to go public, and share strategies for finding and using some little-known sources of detailed breach data. Weekly Enterprise News Finally, in the enterprise security news, A funding, a few acquisitions, and an IPO for the first time in forever! Attackers are really actually starting to use AI now Some researcher spent all of August poking holes in all the AI tools Someone got Microsoft Copilot to be an accomplice in a coverup Microsoft is making a big change in Azure that will probably break some stuff No, Flipper Zero can't help you steal your car (just the stuff in it) Domain names are free to register now, maybe? Disgruntled former employee goes to jail AI tricked into doing more bad things All that and more, on this episode of Enterprise Security Weekly. This segment is sponsored by 1Password. Visit https://securityweekly.com/1password to learn more about them! Visit https://www.securityweekly.com/esw for all the latest episodes! Show Notes: https://securityweekly.com/esw-422

Paul's Security Weekly TV
Dave Lewis talks M&A due diligence, TBD topic, the weekly news - Dave Lewis - ESW #422

Paul's Security Weekly TV

Play Episode Listen Later Sep 1, 2025 106:21


Interview with Dave Lewis on Security's Role in M&A Due Diligence In this episode, Dave Lewis from 1Password discusses the critical importance of security in mergers and acquisitions, from due diligence through integration. He explores common pitfalls, essential security assessments, and practical strategies for security leaders to protect organizational value throughout the M&A process. Topic: The Challenge of Breach Transparency Every industry concerned with safety has a process for publishing the details of accidents, incidents, and failures. Cybersecurity has yet to reach this milestone, and hiding the details of failures is holding us back. This talk will argue for the need for breach details to go public, and share strategies for finding and using some little-known sources of detailed breach data. Weekly Enterprise News Finally, in the enterprise security news, A funding, a few acquisitions, and an IPO for the first time in forever! Attackers are really actually starting to use AI now Some researcher spent all of August poking holes in all the AI tools Someone got Microsoft Copilot to be an accomplice in a coverup Microsoft is making a big change in Azure that will probably break some stuff No, Flipper Zero can't help you steal your car (just the stuff in it) Domain names are free to register now, maybe? Disgruntled former employee goes to jail AI tricked into doing more bad things All that and more, on this episode of Enterprise Security Weekly. This segment is sponsored by 1Password. Visit https://securityweekly.com/1password to learn more about them! Show Notes: https://securityweekly.com/esw-422

Enterprise Security Weekly (Video)
Dave Lewis talks M&A due diligence, TBD topic, the weekly news - Dave Lewis - ESW #422

Enterprise Security Weekly (Video)

Play Episode Listen Later Sep 1, 2025 106:21


Interview with Dave Lewis on Security's Role in M&A Due Diligence In this episode, Dave Lewis from 1Password discusses the critical importance of security in mergers and acquisitions, from due diligence through integration. He explores common pitfalls, essential security assessments, and practical strategies for security leaders to protect organizational value throughout the M&A process. Topic: The Challenge of Breach Transparency Every industry concerned with safety has a process for publishing the details of accidents, incidents, and failures. Cybersecurity has yet to reach this milestone, and hiding the details of failures is holding us back. This talk will argue for the need for breach details to go public, and share strategies for finding and using some little-known sources of detailed breach data. Weekly Enterprise News Finally, in the enterprise security news, A funding, a few acquisitions, and an IPO for the first time in forever! Attackers are really actually starting to use AI now Some researcher spent all of August poking holes in all the AI tools Someone got Microsoft Copilot to be an accomplice in a coverup Microsoft is making a big change in Azure that will probably break some stuff No, Flipper Zero can't help you steal your car (just the stuff in it) Domain names are free to register now, maybe? Disgruntled former employee goes to jail AI tricked into doing more bad things All that and more, on this episode of Enterprise Security Weekly. This segment is sponsored by 1Password. Visit https://securityweekly.com/1password to learn more about them! Show Notes: https://securityweekly.com/esw-422

The 404 Media Podcast
The Underground Trade of Car Hacking Tech

The 404 Media Podcast

Play Episode Listen Later Aug 27, 2025 47:43


We start this week with Joseph's investigation into people selling custom patches for the Flipper Zero, a piece of hacking tech that car thieves can now use to break into a wide range of vehicles. After the break, Jason tells us about the new meta in AI slop: making 80s nostalgia videos. In the subscribers-only section, we all talk about Citizen, and how the app is pushing AI-written crime alerts without human intervention. YouTube version: https://youtu.be/nV3qShvuoKw Inside the Underground Trade of ‘Flipper Zero' Tech to Break into Cars 80s Nostalgia AI Slop Is Boomerfying the Masses for a Past That Never Existed Citizen Is Using AI to Generate Crime Alerts With No Human Review. It's Making a Lot of Mistakes VICE News Presents: Vigilante, Inc. Subscribe at 404media.co for bonus content. Learn more about your ad choices. Visit megaphone.fm/adchoices

Kim Komando Today
Hackers can unlock 200+ cars with this tool

Kim Komando Today

Play Episode Listen Later Aug 25, 2025 39:54


Stealing your car just got easy. You may not have heard of Flipper Zero yet, but take these steps to protect your ride. Plus, Elon Musk launches a new AI company called Macrohard, taking a jab at Microsoft. Meta's smart glasses read your wrist to control apps. Kanye West's YZY coin crashes after hitting $3 billion. Over half of American homes are too messy to charge electric vehicles. And a Chinese EV lets drivers throw AR emojis like poop and bananas at tailgaters. Learn more about your ad choices. Visit megaphone.fm/adchoices

Improve the News
Gaza Famine Report, Bolton FBI Raid and Meta-Google AI Deal

Improve the News

Play Episode Listen Later Aug 23, 2025 32:39


The U.N. reports famine in Gaza City, The FBI raids the home and office of former national security adviser John Bolton, An Egypt-Saudi summit addresses the Gaza crisis amid energy deals, The EU parliament sues the Council of the EU over a €150 billion defense loan bypass, A report suggests that the U.S. military is planning strike plans against Mexican cartels, A U.S. judge orders the dismantling of “Alligator Alcatraz,” Jerome Powell signals a possible September rate cut from the Federal Reserve, The White House lists Smithsonian exhibits it finds objectionable, Meta signs a $10 billion+ cloud deal with Google for AI infrastructure, and hackers are reportedly using the Flipper Zero to target car security systems. Sources: www.verity.news

Grumpy Old Geeks
710: Mass Delusion Events

Grumpy Old Geeks

Play Episode Listen Later Aug 22, 2025 77:08


Remember all that "AI is gonna change everything" nonsense the kids were screaming about just a few months ago? Yeah, about that. It turns out 95% of corporate generative AI pilots are, to use a technical term, completely shitting the bed, according to a report from MIT. This shocking revelation has sent Wall Street into a tizzy, wiping trillions off the market as investors suddenly realize they've been sold another bill of goods. Even Sam Altman, the high priest of the AI cult, is now trying to pump the brakes, warning that maybe, just maybe, everyone got a little too excited. Meta, never one to miss a bandwagon it can immediately fall off of, has slammed the brakes on its AI spending and hiring. It's almost like we've seen this movie before, with NFTs, crypto, and every other tech bubble that was supposed to make us all billionaires while we sat on our couches.As if the AI-pocalypse wasn't entertaining enough, the next brilliant idea from Silicon Valley, "agentic AI" browsers, has proven to be dumber than a bag of hammers, happily handing over banking details to obvious phishing scams. Meanwhile, in the land of aging tech bros, Elon Musk is getting his butt handed to him in court by Media Matters, proving that you can't just bully everyone into submission. Not to be outdone in the corporate greed department, Volkswagen wants you to pay a subscription to unlock the horsepower you already own, and Robinhood is trying to convince its users that betting on football games is now called "investing." We're just waiting for them to offer a strategic advisory seat to Donald Trump Jr.... oh, wait.Just to put a fine point on our collective slide into oblivion, it turns out Antarctica is melting about six times faster than it was in the 90s, no doubt powered by the massive natural gas plants being built to run Meta's useless chatbots. But hey, at least we can distract ourselves with new toys! The Flipper Zero, that handy little hacker gadget, can now be upgraded to steal a wide variety of cars, bringing grand theft auto to the masses. So as the sea levels rise and the robots fail, at least we'll have new and exciting ways to commit felonies. Welcome to the future; it's just as dumb as we predicted.Sponsors:CleanMyMac - clnmy.com/GrumpyOldGeeks - Use code OLDGEEKS for 20% off.Private Internet Access - Go to GOG.Show/vpn and sign up today. For a limited time only, you can get OUR favorite VPN for as little as $2.03 a month.SetApp - With a single monthly subscription you get 240+ apps for your Mac. Go to SetApp and get started today!!!1Password - Get a great deal on the only password manager recommended by Grumpy Old Geeks! gog.show/1passwordShow notes at https://gog.show/710FOLLOW UPSen. Hawley says he'll investigate Meta's 'sensual' child chatbot policiesMIT report: 95% of generative AI pilots at companies are failingWall Street Appears to Be Having Serious Doubts About AIMeta Freezes AI Hiring as Fear SpreadsIN THE NEWSAI Is a Mass-Delusion EventThere's a Compelling Theory Why GPT-5 Sucks so MuchNobody Likes Zuckerberg's Glitchy AI AppGas power plants approved for Meta's $10B data center, and not everyone is happyAI browsers may be the best thing that ever happened to scammersCourt blocks FTC investigation into Media Matters' alleged scheme against XSelf-Proclaimed Nazi Kanye West Announces 'New Economy, Built on Chain'Cybertruck Owners Sue Over Expensive UpgradeGoogle to pay $30 million to settle class-action suit over children's privacyVW introduces monthly subscription to increase car powerRobinhood Tries to Rebrand Sports Betting as InvestingStudy Confirms 'Abrupt Changes' in Antarctica – And The World Will Feel ThemMEDIA CANDYAli Wong: Single Lady‘Alien: Earth' Is Finally Doing What the Movies Have Not‘Star Trek: Strange New Worlds' Did a Documentary Episode That Should've Been Killed in the EditKaren Gillan Joins the New ‘Highlander' and Has the Best Reaction to the NewsAnonymous PodcastAPPS & DOODADSRoblox cracks down on its user-created content following multiple child safety lawsuitsInside the Underground Trade of ‘Flipper Zero' Tech to Break into CarsNew AirPods Pro 2 and AirPods 4 firmware now available in public betaTobio's™ Watercolor KitPzizzDohm® Connect App Controlled Sound MachineStressWatch: AI Stress Monitor - HRV & Habit Tracker for WatchTHE DARK SIDE WITH DAVEDave BittnerThe CyberWireHacking HumansCaveatControl LoopOnly Malware in the BuildingHere's What Muppet Mayhem Disney Will Unleash on Rock ‘n' Roller CoasterAyaneo's Pocket DS could be the dual-screen handheld you've been waiting forApple TV+ releases the first 'Peanuts' musical in 37 yearsSee Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.

Paul's Security Weekly
Hacking Washing Machines - PSW #885

Paul's Security Weekly

Play Episode Listen Later Jul 31, 2025 118:07


In the security news: Hacking washing machines, good clean fun! Hacking cars via Bluetooth More Bluetooth hacking with Breaktooth Making old vulnerabilities great again: exploiting abandoned hardware Clorox and Cognizant point fingers AI generated Linux malware Attacking Russian airports When user verification data leaks Turns out you CAN steal cars with a Flipper Zero, so we're told The UEFI vulnerabilities - the hits keep coming Hijacking Discord invites The Raspberry PI laptop The new Hack RF One Pro Security appliances still fail to be secure Person Re-Identification via Wi-Fi Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-885

Paul's Security Weekly TV
Hacking Washing Machines - PSW #885

Paul's Security Weekly TV

Play Episode Listen Later Jul 31, 2025 118:07


In the security news: Hacking washing machines, good clean fun! Hacking cars via Bluetooth More Bluetooth hacking with Breaktooth Making old vulnerabilities great again: exploiting abandoned hardware Clorox and Cognizant point fingers AI generated Linux malware Attacking Russian airports When user verification data leaks Turns out you CAN steal cars with a Flipper Zero, so we're told The UEFI vulnerabilities - the hits keep coming Hijacking Discord invites The Raspberry PI laptop The new Hack RF One Pro Security appliances still fail to be secure Person Re-Identification via Wi-Fi Show Notes: https://securityweekly.com/psw-885

Paul's Security Weekly (Podcast-Only)
Hacking Washing Machines - PSW #885

Paul's Security Weekly (Podcast-Only)

Play Episode Listen Later Jul 31, 2025 118:07


In the security news: Hacking washing machines, good clean fun! Hacking cars via Bluetooth More Bluetooth hacking with Breaktooth Making old vulnerabilities great again: exploiting abandoned hardware Clorox and Cognizant point fingers AI generated Linux malware Attacking Russian airports When user verification data leaks Turns out you CAN steal cars with a Flipper Zero, so we're told The UEFI vulnerabilities - the hits keep coming Hijacking Discord invites The Raspberry PI laptop The new Hack RF One Pro Security appliances still fail to be secure Person Re-Identification via Wi-Fi Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-885

Paul's Security Weekly (Video-Only)
Hacking Washing Machines - PSW #885

Paul's Security Weekly (Video-Only)

Play Episode Listen Later Jul 31, 2025 118:07


In the security news: Hacking washing machines, good clean fun! Hacking cars via Bluetooth More Bluetooth hacking with Breaktooth Making old vulnerabilities great again: exploiting abandoned hardware Clorox and Cognizant point fingers AI generated Linux malware Attacking Russian airports When user verification data leaks Turns out you CAN steal cars with a Flipper Zero, so we're told The UEFI vulnerabilities - the hits keep coming Hijacking Discord invites The Raspberry PI laptop The new Hack RF One Pro Security appliances still fail to be secure Person Re-Identification via Wi-Fi Show Notes: https://securityweekly.com/psw-885

ANTIC The Atari 8-bit Podcast
ANTIC Episode 119 - Special Guest Joe Decuir

ANTIC The Atari 8-bit Podcast

Play Episode Listen Later Jul 30, 2025 98:42


ANTIC Episode 119 - Special Guest Joe Decuir In this episode of ANTIC The Atari 8-Bit Computer Podcast… Joe Decuir, one of the fathers of the Atari 400/800, joins us for a super-interesting discussion of what he's working on and the current Atari news… READY! Recurring Links  Floppy Days Podcast  AtariArchives.org  AtariMagazines.com  Kay's Book “Terrible Nerd”  New Atari books scans at archive.org  ANTIC feedback at AtariAge  Atari interview discussion thread on AtariAge  Interview index: here  ANTIC Facebook Page  AHCS  Eaten By a Grue  Next Without For  What we've been up to https://en.wikipedia.org/wiki/Joseph_C._Decuir  Fluxxing Robert Moore Hybrid Arts disks, getting them to https://www.a8preservation.com  Best Electronics - https://www.best-electronics-ca.com/  Scan of JACG Newsletter Volume 5, No. 12 (Aug. 1986) - https://archive.org/details/jacg-newsletter-1986-aug-vol-5-no-12  Scan of JACG Newsletter Volume 6, No. 1 (Sep. 1986) - https://archive.org/details/jacg-newsletter-1986-sep-vol-6-no-1  ABBUC - https://www.abbuc.de  News Compute's Gazette relaunch - https://www.computesgazette.com/  C64 Ultimate - https://www.commodore.net/  Adding Fujinet support to Atari800MacX - Paulo Garcia - https://forums.atariage.com/topic/382899-adding-fujinet-support-to-atari800macx/  FastBasic Debugger Extension for VSCode - Eric Carr - https://forums.atariage.com/topic/351055-fastbasic-debugger-extension-for-vscode/#findComment-5684231  DecentCart - Screaming at the Radio - https://www.youtube.com/watch?v=o-sEndb4mEI  Atari SIO Peripheral Emulator for Flipper Zero: https://lab.flipper.net/apps/sio2flip  https://flipperzero.one/  1090XL remake housing - fokaszalot: https://forums.atariage.com/topic/318373-1090xl-remake/page/41/#findComment-5619125  https://makerworld.com/en/models/1084156  Chat64 for Atari 800XL: https://www.etsy.com/listing/1834140388/chat64-for-atari-800xl  http://www.chat64.nl  August AtariBasics newsletter from John Zielke - https://ataribasics.com/  Can you help get clean disassemblies to get more FujiNet HighScoreEnabled games? - Thom Cherryhomes - https://forums.atariage.com/topic/383141-can-you-help-get-clean-disassemblies-to-get-more-fujinet-highscoreenabled-games  Upcoming Shows Silly Venture SE (Summer Edition) - July 31-Aug. 3 - Gdansk, Poland - https://www.demoparty.net/silly-venture/silly-venture-2025-se  VCF West - August 1-2 - Computer History Museum in Mountain View, CA - https://vcfed.org/2025/03/05/vcf-west-2025-save-the-date/  Fujiama - August 11-17 - Lengenfeld, Germany - http://atarixle.ddns.net/fuji/2025/  VCF Midwest - September 13-14, 2025 - Renaissance Schaumburg Convention Center in Schaumburg, IL - http://vcfmw.org/  Portland Retro Gaming Expo - October 17-19 - Oregon Convention Center, Portland, OR - https://retrogamingexpo.com/  Event page created by Chicago Classic Computing - http://chiclassiccomp.org/events.html  Event page created by Floppy Days on Facebook - https://www.facebook.com/VintageComputerShows/  Event page on Floppy Days Website - https://docs.google.com/document/d/e/2PACX-1vSeLsg4hf5KZKtpxwUQgacCIsqeIdQeZniq3yE881wOCCYskpLVs5OO1PZLqRRF2t5fUUiaKByqQrgA/pub  YouTube Videos Atari Expo at CCCL25 - CmosGames - https://www.youtube.com/watch?v=OwgK88ztkDA  Ultimate 1MB 2K25 Revised and XEGS modding missteps - FlashJazzCat: https://www.youtube.com/watch?v=0wB1ejADl84  A close look at the 'U1MB 2K5 Revised' - https://lotharek.pl/productdetail.php?id=56  1980s stock footage of ATARI at Silicon Valley - KinoLibrary - https://www.youtube.com/watch?v=DJ9KgWlaHe8  The Atari User's Encyclopedia by Jerry White and Gary Phillips - Vintage Gaming Memories: Short - https://youtube.com/shorts/DaJix7v65vY?si=U-6UZfcexgLLhE8L  Full video - https://www.youtube.com/watch?v=M5CBwgg836s&t=205s&pp=ygUJYXRhcmkgODAw  Atari800MacX with FujiNet PC - Atari BBS - https://www.youtube.com/watch?v=kIjw1pTJ_HU 

germany radio event portland poland atari scan encyclopedia mountain view gazette gdansk schaumburg antic flipper zero computer history museum jerry white oregon convention center atari 800xl findcomment floppy days joe decuir antic the atari antic episode
Paul's Security Weekly
Hackers On A Train - PSW #883

Paul's Security Weekly

Play Episode Listen Later Jul 17, 2025 125:51


In the security news: The train is leaving the station, or is it? The hypervisor will protect you, maybe The best thing about Flippers are the clones Also, the Flipper Zero as an interrogation tool Threats are commercial and open-source Who is still down with FTP? AI bug hunters Firmware for Russian drones Merging Android and ChromOS Protecting your assets with CVSS? Patch Citrixbleed 2 Rowhammer comes to NVIDIA GPUs I hear Microsoft hires Chinese spies Gigabyte motherboards and UEFI vulnerabilities McDonald's AI hiring bot: you want some PII with that? Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-883

Paul's Security Weekly TV
Hackers On A Train - PSW #883

Paul's Security Weekly TV

Play Episode Listen Later Jul 17, 2025 122:07


In the security news: The train is leaving the station, or is it? The hypervisor will protect you, maybe The best thing about Flippers are the clones Also, the Flipper Zero as an interrogation tool Threats are commercial and open-source Who is still down with FTP? AI bug hunters Firmware for Russian drones Merging Android and ChromOS Protecting your assets with CVSS? Patch Citrixbleed 2 Rowhammer comes to NVIDIA GPUs I hear Microsoft hires Chinese spies Gigabyte motherboards and UEFI vulnerabilities McDonald's AI hiring bot: you want some PII with that? Show Notes: https://securityweekly.com/psw-883

Paul's Security Weekly (Podcast-Only)
Hackers On A Train - PSW #883

Paul's Security Weekly (Podcast-Only)

Play Episode Listen Later Jul 17, 2025 125:51


In the security news: The train is leaving the station, or is it? The hypervisor will protect you, maybe The best thing about Flippers are the clones Also, the Flipper Zero as an interrogation tool Threats are commercial and open-source Who is still down with FTP? AI bug hunters Firmware for Russian drones Merging Android and ChromOS Protecting your assets with CVSS? Patch Citrixbleed 2 Rowhammer comes to NVIDIA GPUs I hear Microsoft hires Chinese spies Gigabyte motherboards and UEFI vulnerabilities McDonald's AI hiring bot: you want some PII with that? Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-883

The Audit
Pwnagotchi: The AI Pet That Hunts Your Network Credentials

The Audit

Play Episode Listen Later Jun 2, 2025 35:24 Transcription Available


What happens when you cross a Tamagotchi with a Wi-Fi hacking tool? You get the Pwnagotchi—a pocket-sized device that "feeds" on Wi-Fi handshakes and learns from its environment. In this episode, Jayden Troffler and Cameron Birkland join the crew to demonstrate how this deceptively cute device can passively capture encrypted Wi-Fi credentials from any network in range, autonomously gather handshakes, share intelligence with other Pwnagotchis, and operate completely under the radar from conference floors to airplane cabins in ways that might surprise you. Key Topics Covered:  How the Pwnagotchi captures Wi-Fi handshakes through deauthentication attacks  • Why WPA3 networks are immune (and why most networks still aren't using it) Building your own Pwnagotchi vs buying a Flipper Zero with Wi-Fi dev board • Real defense strategies beyond "just turn off your Wi-Fi" The legal gray areas of passive Wi-Fi monitoring  Conference horror stories and the 600-handshake airplane incident Whether you're a security professional looking to understand emerging threats or someone curious about DIY hacking tools, this episode delivers practical insights you can use to protect your networks today. The Pwnagotchi proves that the most dangerous attacks often come in the most innocent packages. Don't let your organization become the next victim of passive Wi-Fi attacks. Like, share, and subscribe for more hands-on cybersecurity content that keeps you ahead of emerging threats! #Pwnagotchi #cybersecurity #wifihacking #ethicalhacking #infosec #flipper zero 

Durand on Demand
Inside The Mind of a Hacker w/ Dave Mosher

Durand on Demand

Play Episode Listen Later May 7, 2025 65:03


Most leaders think cybersecurity is an IT issue.It's not.It's a leadership issue — and if you ignore it, you're already exposed.In this eye-opening episode, I sit down with cybersecurity expert Dave Mosher, whose background with the NYPD and years in the trenches reveal what most leaders miss.From simple tools like Flipper Zero to overlooked vulnerabilities in your office and email, Dave breaks down exactly how hackers think — and how easily they target businesses that are asleep at the wheel.We cover:

The CyberWire
Former cybersecurity officials lose clearances.

The CyberWire

Play Episode Listen Later Apr 10, 2025 32:31


Trump targets former cybersecurity officials. Senator blocks CISA nominee over telecom security concerns. The acting head of NSA and Cyber Command makes his public debut. Escalation of Cyber Tensions in U.S.-China Trade Relations. Researchers evaluate the effectiveness of Large Language Models (LLMs) in automating Cyber Threat Intelligence. Hackers at Black Hat Asia pown a Nissan Leaf. A smart hub vulnerability exposes WiFi credentials. A new report reveals routers' riskiness. Operation Endgames nabs SmokeLoader botnet users. Our guest is Anushika Babu, Chief Growth Officer at AppSecEngineer, joins us to discuss the creative ways people are using AI. The folks behind the Flipper Zero get busy. Remember to leave us a 5-star rating and review in your favorite podcast app. Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Our guest is Anushika Babu, Chief Growth Officer at AppSecEngineer, joins us to discuss the creative ways people are using AI. Selected Reading Trump Signs Memorandum Revoking Security Clearance of Former CISA Director Chris Krebs (Zero Day) Senator puts hold on Trump's nominee for CISA director, citing telco security 'cover up' (TechCrunch) Infosec experts fear China could retaliate against tariffs with a Typhoon attack (The Register) New US Cyber Command, NSA chief glides in first public appearance (The Record) LARGE LANGUAGE MODELS ARE UNRELIABLE FOR CYBER THREAT INTELLIGENCE (ARXIG) Nissan Leaf Hacked for Remote Spying, Physical Takeover (SecurityWeek) TP-Link IoT Smart Hub Vulnerability Exposes Wi-Fi Credentials (Cyber Security News) Study Identifies 20 Most Vulnerable Connected Devices of 2025 (SecurityWeek) Authorities Seized Smokeloader Malware Operators & Seized Servers (Cyber Security News) Flipper Zero maker unveils ‘Busy Bar,' a new ADHD productivity tool (Bleeping Computer) Share your feedback. We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.  Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here's our media kit. Contact us at cyberwire@n2k.com to request more info. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

Paul's Security Weekly
Its Not Really A 0-Day - PSW #866

Paul's Security Weekly

Play Episode Listen Later Mar 20, 2025 134:34


This week: Compliance, localization, blah blah, the Greatest Cybersecurity Myth Ever Told, trolling Microsoft with a video, Github actions give birth to a supply chain attack, prioritizing security research, I'm tired of 0-Days that are not 0-Days, sticking your head in the sand and believing everything is fine, I'm excited about AI crawlers, but some are not, Room 641A, a real ESP32 vulnerability, do we need a CVE for every default credential?, smart Flipper Zero add-ons, one more reason why people fear firmware updates, no more Windows 10, you should use Linux, and I have a Linux terminal in my pocket, now what? Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-866

Paul's Security Weekly TV
Its Not Really A 0-Day - PSW #866

Paul's Security Weekly TV

Play Episode Listen Later Mar 20, 2025 134:34


This week: Compliance, localization, blah blah, the Greatest Cybersecurity Myth Ever Told, trolling Microsoft with a video, Github actions give birth to a supply chain attack, prioritizing security research, I'm tired of 0-Days that are not 0-Days, sticking your head in the sand and believing everything is fine, I'm excited about AI crawlers, but some are not, Room 641A, a real ESP32 vulnerability, do we need a CVE for every default credential?, smart Flipper Zero add-ons, one more reason why people fear firmware updates, no more Windows 10, you should use Linux, and I have a Linux terminal in my pocket, now what? Show Notes: https://securityweekly.com/psw-866

Paul's Security Weekly
AI Is Oversharing and Leaking Data - Sounil Yu - PSW #865

Paul's Security Weekly

Play Episode Listen Later Mar 13, 2025 127:50


Sounil Yu joins us to kick things off with AI defenses: Enterprise AI search tools like Copilot for Microsoft 365 lack the in-depth access controls required to ensure that query responses align with the user's need-to-know boundaries. Without proper controls, these tools accelerate the discovery of improperly secured sensitive files within the organization. Knostic's solution ensures that enterprise data is safeguarded without slowing down innovation. By automating the detection and remediation of LLM data exposure, Knostic helps organizations mitigate the security, privacy, and compliance risks associated with AI chatbots and enterprise search tools. In the security news: The controversial pick for National Cyber Director, the not-so-controversial pick to lead CISA, complete with funding cuts, the controversial ESP32 backdoor that is not a backdoor but hidden features, Dark Storm takes down X, interesting use cases for LoRa, using AI to get your dream job, details on the biggest crypto heist in history, an EDR bypass and a 404 error, slipping through the cracks in CVSS, old school vulnerability disclosure in 2025, Rayhunter, a pen test that should not have been, JTAG and your Flipper Zero, a Linux webcam was used for what now?, and "Spatial-Domain Wireless Jamming with Reconfigurable Intelligent Surfaces"! Segment Resources: https://www.knostic.ai/blog/enterprise-ai-search-tools-addressing-the-risk-of-data-leakage https://www.knostic.ai/what-we-do Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-865

Paul's Security Weekly TV
AI Is Oversharing and Leaking Data - Sounil Yu - PSW #865

Paul's Security Weekly TV

Play Episode Listen Later Mar 13, 2025 127:50


Sounil Yu joins us to kick things off with AI defenses: Enterprise AI search tools like Copilot for Microsoft 365 lack the in-depth access controls required to ensure that query responses align with the user's need-to-know boundaries. Without proper controls, these tools accelerate the discovery of improperly secured sensitive files within the organization. Knostic's solution ensures that enterprise data is safeguarded without slowing down innovation. By automating the detection and remediation of LLM data exposure, Knostic helps organizations mitigate the security, privacy, and compliance risks associated with AI chatbots and enterprise search tools. In the security news: The controversial pick for National Cyber Director, the not-so-controversial pick to lead CISA, complete with funding cuts, the controversial ESP32 backdoor that is not a backdoor but hidden features, Dark Storm takes down X, interesting use cases for LoRa, using AI to get your dream job, details on the biggest crypto heist in history, an EDR bypass and a 404 error, slipping through the cracks in CVSS, old school vulnerability disclosure in 2025, Rayhunter, a pen test that should not have been, JTAG and your Flipper Zero, a Linux webcam was used for what now?, and "Spatial-Domain Wireless Jamming with Reconfigurable Intelligent Surfaces"! Segment Resources: * https://www.knostic.ai/blog/enterprise-ai-search-tools-addressing-the-risk-of-data-leakage * https://www.knostic.ai/what-we-do Show Notes: https://securityweekly.com/psw-865

Packet Pushers - Full Podcast Feed
HW046: The Flipper Zero: A Swiss Army Knife for Tech Enthusiasts

Packet Pushers - Full Podcast Feed

Play Episode Listen Later Feb 18, 2025 24:39


The Flipper Zero is like a Swiss Army knife for wireless tech enthusiasts. Today's guest, Jason Beshara, is teaching a course on the Flipper Zero device at WLPC Phoenix 2025. He discusses its functions, including its ability to send and receive a variety of radio signals including Bluetooth, NFC, and sub-gigahertz frequencies. The conversation covers... Read more »

Grumpy Old Geeks
665: Human Referees

Grumpy Old Geeks

Play Episode Listen Later Sep 14, 2024 77:42


Gaiman & Good Omens; Waymo means Uber drivers are cooked; local muggers; EU not messing around with Apple, Google; DOJ after Google as well; another genetic testing company with security breach disasters; META scraping Australian users' accounts to train AI; banning social media for children; AI to determine unemployment benefits; Lower Decks; Hope Solo vs US Soccer; Alan Cumming; the Perfect Couple; KAOS; Tears for Fears; FruitJuice; iPhone 16 pre-ordering process; AirPods Pro 2 as hearing aids; Flipper Zero; AI Audible narrators; Google AI Notebook podcast generation; RIP, James Earl Jones; Disneyland's Club 33; Overcast follow up; parcopresis & the politics of pooping.Sponsors:DeleteMe - Head over to JoinDeleteMe.com/GOG and use the code "GOG" for 20% off.1Password - Get a great deal on the only password manager recommended by Grumpy Old Geeks! gog.show/1passwordPrivate Internet Access - Go to GOG.Show/vpn and sign up today. For a limited time only, you can get OUR favorite VPN for as little as $2.03 a month.SetApp - With a single monthly subscription you get 240+ apps for your Mac. Go to SetApp and get started today!!!Show notes at https://gog.show/665/FOLLOW UPDashaun Wesley & LE SSERAPHIM on InstagramGood Omens Season 3 Reportedly Paused Amid Neil Gaiman ControversyReport: Neil Gaiman May Step Back From Good Omens‘ Final SeasonWhat do Uber drivers make of Waymo? 'We are cooked'Human drivers keep rear-ending WaymosWaymo Safety ImpactIN THE NEWSApple ordered to pay back its illegal $14.4 billion Irish tax breakGoogle loses its seven-year fight against $2.7 billion EU antitrust fineDOJ claims Google has “trifecta of monopolies” on Day 1 of ad tech trialGoogle Teams With the Internet Archive to Revive Cache FeatureGenetic Testing Company Must Issue Refunds After Security Breach DisasterMeta scraped every Australian user's account to train its AIAustralia's Prime Minister wants to ban social media for childrenGoogle's AI Will Help Decide Whether Unemployed Workers Get BenefitsUtah judge blocks law preventing youth from accessing social media freelyMEDIA CANDYStar Trek: Lower Decks Is Back One Last Time With a Swashbuckling New ClipUntold: Hope Solo vs US SoccerAlan Cumming Wins Best Host Emmy for ‘The Traitors,' Ending RuPaul's Eight-Year StreakThe Perfect CoupleKAOSThe Penguin | Official Trailer | MaxSalem's Lot | Official Trailer | MaxTears for Fears Announce First Live Album Songs for a Nervous Planet, Reveal New Song “The Girl That I Call Home”: StreamTears for Fears Announce First Live Album Songs for a Nervous Planet, Reveal New Song “The Girl That I Call Home”: StreamAPPS & DOODADSFruitJuiceApple just got authorization for AirPods Pro 2's hearing aid featureMeet the first major release of Flipper Zero firmware — version 1.0.Audible narrators to create voice replicas using AIGoogle's AI notebook can generate a podcast about your notesMan Used Fake Rock Camera to Film 1,000 Women Bathing in Hot SpringsMusic industry's 1990s hard drives, like all HDDs, are dyingTHE DARK SIDE WITH DAVEDave BittnerThe CyberWireHacking HumansCaveatControl LoopOnly Malware in the BuildingJames Earl Jones, Distinguished Actor and Voice of Darth Vader, Dies at 93“It's a Cult, and Walt's the Messiah”: Meet the Couple Who Sued Disney Over Secretive Club 33Can't Poop at Work? Why Public Bathrooms Give Us AnxietySee Privacy Policy at https://art19.com/privacy and California Privacy Notice at https://art19.com/privacy#do-not-sell-my-info.