Security Now (Video) SN 1049: DNS Cache Poisoning Returns - Ransomware Payments Plummet
Oct 29, 2025
The resurgence of DNS cache poisoning is explored, revealing ongoing vulnerabilities in DNS resolvers. A Linux-based vacuum is showcased for its surprising privacy risks, while Russia considers implementing China's vulnerability reporting laws. Two teens from the Scattered Spider group face arrest, highlighting the consequences of cybercrime. Meanwhile, a report shows a shocking drop in ransomware payments and discusses how attackers gain access. Listener insights on password practices add depth to the conversation, emphasizing the critical need for security improvements.
AI Snips
Chapters
Transcript
Episode notes
Smart Vacuum Turned Off Its Owner
- Harish Narayanan reverse-engineered an iLife A11 vacuum and found it phone home with 3D maps and unencrypted Wi-Fi credentials.
- After blocking telemetry the manufacturer remotely disabled his device, revealing a built-in kill switch.
IoT Devices Are Networked Attack Vectors
- Any networked IoT device implicitly gains access to the internal home network once it joins Wi‑Fi.
- That access can be weaponized intentionally or inadvertently, so network isolation matters.
Teen Hackers Arrested After TFL Attack
- Two teenagers allegedly linked to Scattered Spider were arrested over a TFL hack that disrupted services and cost millions.
- They face trial and long-term criminal records despite their young ages.