Trusted Enclaves Research: Hardware Attack Risks

On this week’s show Patrick Gray is on holiday so Amberleigh Jack and Adam Boileau hijack the studio to discuss the week’s cybersecurity news, including:

• Hackers learn that trying to coerce a journalist just makes for … a great story?
• A man in his 40s gets arrested over the European airport chaos. Yep, we’re surprised, too.
• Adam fanboys over Watchtowr Labs while bemoaning Fortra.
• Academics pick apart Tile trackers and find them lacking
• CISA tells agencies to patch their damn Cisco gear

This episode is also available on YouTube.

Show notes

• 'You'll never need to work again': Criminals offer reporter money to hack BBC
• Government to guarantee £1.5bn Jaguar Land Rover loan after cyber shutdown
• Feds Tie ‘Scattered Spider’ Duo to $115M in Ransoms – Krebs on Security
• UK authorities arrest man in connection with cyberattack against aviation vendor | Cybersecurity Dive
• Chinese scammer pleads guilty after UK seizes nearly $7 billion in bitcoin
• Cyberattack on Japanese beer giant Asahi limits shipping, call center operations | The Record from Recorded Future News
• Afghanistan plunged into nationwide internet blackout, disrupting air travel, medical care | The Record from Recorded Future News
• Tile trackers are a stalker's dream, say Georgia Tech researchers
• Intel and AMD trusted enclaves, the backbone of network security, fall to physical attacks - Ars Technica
• Supermicro server motherboards can be infected with unremovable malware - Ars Technica
• China-linked hackers use ‘BRICKSTORM’ backdoor to steal IP | The Record from Recorded Future News
• Another BRICKSTORM: Stealthy Backdoor Enabling Espionage into Tech and Legal Sectors
• Federal agencies given one day to patch exploited Cisco firewall bugs | The Record from Recorded Future News
• Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
• Is This Bad? This Feels Bad. (Fortra GoAnywhere CVE-2025-10035)
• It Is Bad (Exploitation of Fortra GoAnywhere MFT CVE-2025-10035) - Part 2