Security Circus Thread - Post your security news here

Turns out Flock is storing the encryption key on the device.

The hackers were able to copy the camera’s storage and recover an encryption key stored on the device, which unlocked videos of thousands of vehicle detections

:rofl:

3 Likes

Here’s an interesting look at a malicious NPM package:

I like this because the surface area for bugs is not infinite.

Eventually we’ll get formally verified compilers.

I worry that rowhammer and out of order execution and other technologies we’ve come to depend on will be fundamentally broken, however, but other than that danger, I’m pretty excited for the prospect of nation-states having a much harder time inserting back doors that remain undetected for years.

also, dont give LG tvs network access.

5 Likes

Or any TV for that matter.

2 Likes
1 Like

https://forum.level1techs.com/t/news-story-dump-thread-stories-only/136458/7513?u=daemond

https://www.axios.com/2026/09/26/openai-anthropic-thousands-ai-security-incidents

https://www.darkreading.com/identity-access-management-security/carbonato-botnet-ai-agent-hacked-docker-hosts

Say it with me: Access Control, Access Control Access Control
Also: Dataloss prevention Which will be struck down for the management types

https://www.darkreading.com/insider-threats/blame-rogue-ai-security-failures

https://www.darkreading.com/cybersecurity-operations/swift-banking-govt-middleware-rce