Paul's Security Weekly (Audio)

This week:

• Americans Can't Hack It
• Copy and paste to get malware
• Pixel 5 web servers - because you can
• How they got in and why security is hard
• Vulnerability management is failing - is it dead yet?
• Exploiting hacker tools
• Bluetooth spending spree!
• How to defend your car
• IoT security solutions and other such lies
• Exploiting IBM i (formerly AS/400)
• Vibe coding vulnerabilities
• Plex is hacked again
• Bill's emoji
• ICE spies on phones
• Hackers be hackin' FreePBX

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-891

In the secure news:

• Automakers respond to Flipper Zero attacks
• More on the unconfirmed Elastic EDR 0-Day
• When Secure Boot does its job too well
• Crazy authenitcation bypass
• Hacker ultimatums
• AI Slop
• Impatient hackers
• Linux ISOs are malware
• Attackers love drivers
• Hacking Amazon's Eero, the hard way
• Exploits will continue until security improves
• The Salesloft breach
• TP-Link Zero Days
• US DoD using Russian software?
• The Lasagna DoS attack

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-890

Rob Allen joins us to discuss the importance of security research teams, and some cool stuff they've worked on. Then, in the Security News:

• Flipper Zero, unlocking cars: The saga continues
• The one where they stole the vulnerabilities
• ESP32 Bus Pirates
• AI will weaponize everything, maybe
• What are in-the-wild exploits?
• Docker and security boundaries, and other such lies
• AI-powered ransomeware
• BadCAM, BadUSB, and novel defenses
• 5G sniffers
• Jeff breaks down all the breach reports
• AI in your browser is a bad idea
• And How to rob a hotel - a nod to the way hacking used to be

This segment is sponsored by ThreatLocker. Visit https://securityweekly.com/threatlocker to learn more about them!

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-889

This segment is sponsored by Flashpoint. Visit https://securityweekly.com/flashpoint to learn more about them!

Recent leaks tied to LockBit and Black Basta have exposed the inner workings of two of the most notorious ransomware groups—revealing their tactics, negotiation strategies, and operational infrastructure. For defenders, this rare window into adversary behavior offers critical intelligence to strengthen incident response and prevention strategies. In this interview, we'll break down what these leaks reveal and how security teams can use this intelligence to proactively harden their defenses, including:

• Key takeaways from the LockBit and Black Basta leaks—and what they confirm about ransomware operations
• How leaked playbooks, chats, and toolkits can inform detection and response
• Practical steps to defend against modern ransomware tactics in 2025

In the security news:

• Practical exploit code
• Old vulnerabilities, new attackers
• AI and web scraping - the battle continues
• 0-Days: You gotta prove it
• WinRAR 0-Day
• LLM patch diffing
• $20 million bug bounty
• Your APT is showing
• Hacking from the routers
• Its that easy eh?
• NIST guidance on AI
• Words have meaning
• Developers knowingly push vulnerable code
• My Hackberry PI post is live: https://eclypsium.com/blog/build-the-ultimate-cyberdeck-hackberry-pi/

Resources:

• Inside the LockBit Leak: Rare Insights Into Their Operations: https://flashpoint.io/blog/inside-the-lockbit-leak/?utmcampaign=WBHostedSCMedia2025&utmsource=SCMedia&utmmedium=email&sfcampaign_id=701Rc00000S48bZIAR
• 2025 Ransomware Survival Guide: https://flashpoint.io/resources/e-book/2025-ransomware-survival-guide/?utmcampaign=WBHostedSCMedia2025&utmsource=SCMedia&utmmedium=email&sfcampaign_id=701Rc00000S48bZIAR
• AI and Threat Intelligence: The Defenders' Guide https://go.flashpoint.io/ai-and-threat-intelligence-guide?utmcampaign=WBHostedSCMedia2025&utmsource=SCMedia&utmmedium=email&sfcampaign_id=701Rc00000S48bZIAR

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-888

We kick things off with a deep dive into the Hackberry PI and how to build one. Then in the security news:

• Will Perplexity buy Chrome?
• ESP32 Bus Pirates
• Poisoned telemetry
• Docker image security
• Fully Open Source Quantum Sensors
• Securing your car, Flippers, and show me the money
• Bringing your printer and desktop to Starbucks
• Paying a ransom? You need approval
• AI: Shield or Spear?
• No authentication? That's a problem
• Transient Bugs: A realistic threat?
• You can run Linux
• And who still uses AOL dial-up?

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-887

• Why should hate AI
• When firmware attacks
• The 300 second breach
• Old ways still work, AI might help
• And so begins the crawler wars
• Turn off your SonicWall VPN
• Your Pie may be wrapped in PII
• Attackers will find a way
• Signed kernel drivers
• D-Link on the KEV
• Rasperry PIs attack
• Stealthy LoRa
• LLM's don't commit code, people do
• Jame's Bond style rescue with drones
• SRAM has no chill
• In the full view of the public...

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-886

In the security news:

• Hacking washing machines, good clean fun!
• Hacking cars via Bluetooth
• More Bluetooth hacking with Breaktooth
• Making old vulnerabilities great again: exploiting abandoned hardware
• Clorox and Cognizant point fingers
• AI generated Linux malware
• Attacking Russian airports
• When user verification data leaks
• Turns out you CAN steal cars with a Flipper Zero, so we're told
• The UEFI vulnerabilities - the hits keep coming
• Hijacking Discord invites
• The Raspberry PI laptop
• The new Hack RF One Pro
• Security appliances still fail to be secure
• Person Re-Identification via Wi-Fi

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-885

We chat with Material Security about protecting G Suite and MS365. How else are you monitoring the most commonly used cloud environments and applications?

In the security news:

• Google Sues Badbox operators
• Authenticated or Unauthenticated, big difference and my struggle to get LLMs to create exploits for me
• Ring cameras that were not hacked
• Malicous AURs
• Killing solar farms
• Weak passwords are all it takes
• Microsoft's UEFI keys are expiring
• Kali Linux and Raspberry PI Wifi updates
• Use lots of electricity, get a visit from law enforcement
• Sharepoint, vulnerabilities, nuclear weapons, and why you should use the cloud
• The time to next exploit is short
• Sonicwall devices are getting exploited
• How not to vibe code
• SMS blasters

This segment is sponsored by Material Security. Visit https://securityweekly.com/materialsecurity to see purpose-built Google Workspace and Office 365 security in action!

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-884

In the security news:

• The train is leaving the station, or is it?
• The hypervisor will protect you, maybe
• The best thing about Flippers are the clones
• Also, the Flipper Zero as an interrogation tool
• Threats are commercial and open-source
• Who is still down with FTP?
• AI bug hunters
• Firmware for Russian drones
• Merging Android and ChromOS
• Protecting your assets with CVSS?
• Patch Citrixbleed 2
• Rowhammer comes to NVIDIA GPUs
• I hear Microsoft hires Chinese spies
• Gigabyte motherboards and UEFI vulnerabilities
• McDonald's AI hiring bot: you want some PII with that?

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-883

This week in the security news:

• Citrixbleed 2 and so many failures
• Ruckus leads the way on how not to handle vulnerabilities
• When you have no egress
• Applocker bypass
• So you bought earbuds from TikTok
• More gadgets and the crazy radio
• Cheap drones and android apps
• Best Mario Kart controller ever
• VSCode: You're forked
• Bluetooth earbuds and vulnerabilities
• Do you remember Sound blaster cards?
• NFC passport chips
• Whack-a-disk

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-882