Security Now (Audio) SN 1049: DNS Cache Poisoning Returns - Ransomware Payments Plummet
Oct 29, 2025
A classic security threat, DNS cache poisoning, is making a comeback, revealing vulnerabilities in DNS resolvers that struggle with random number generation. In a surprising twist, a Linux-based vacuum is found to be sending homeowner data back to its manufacturer. The podcast discusses Russia’s new vulnerability reporting laws reminiscent of China’s, while teens tied to Scattered Spider are arrested. Ransomware payments have plummeted, raising questions about recovery confidence and the tactics attackers use to breach systems.
AI Snips
Chapters
Transcript
Episode notes
Smart Vacuum Weaponized Against Owner
- Harish Narayanan monitored his iLife A11 vacuum and found it streaming maps and credentials to remote servers.
- After blocking telemetry the manufacturer remotely disabled his device using a kill command he discovered in the firmware.
Isolate IoT Devices On Guest Networks
- Put IoT devices on isolated guest networks with network isolation enabled.
- Assume consumer IoT phones home and avoid giving those devices access to your primary network.
Teen Hackers Arrested After Major Transport Hack
- Two teenagers (18 and 19) were arrested in the UK for a Scattered Spider attack on Transport for London.
- The breach caused three months of disruption and cost TfL £39 million, with potential lifelong consequences for the teens.