In the security news this week:
- BPFDoor
- OpenSSH compresses a little too much
- AI can find bugs. Who gets them fixed?
- TP-Link and the courts
- Cisco NX-API
- ClingSTUN
- LineageOS, Android TV, and a Raspberry PI
- Dell's updater has a privilege problem
- SonicWall SSRF
- U-Boot's LogoFAIL like
- Exploit-DB isn't dead
- MFA passes. The attacker still gets in.
- LakeShark and cool gadgets
- Kasa cameras and an exposed debug interface
- SharePoint hardening is back on the checklist
- Google pauses open-source bug bounty submissions
- NetScaler's latest vulnerability needs a closer look
- Kiteworks tells customers to shut it down
- Exchange gets an unexpected security update
- Do LLMs actually reason?
- disagree on AI risk?
- Anthropic, AI consciousness and the Vatican
- Grok gets involved in foreign policy
- WordPress malware that survives cleanup
- Can spyware vendors stop their own tools?
- When an AI chatbot conversation reaches the police
- Open-weight AI models enter the cyber debate
- AI agents take their attacks shopping
Show Notes: https://securityweekly.com/psw-947
