Cyberattacks
325 episodes · Page 7 of 14
#2698: How Hackers Hide C2 Servers in Plain Sight
Bulletproof hosts, hijacked routers, and Discord channels — how command and control infrastructure stays up despite takedown attempts.
#2696: How Pegasus Silently Hijacks Your Phone's Microphone
How NSO's Pegasus achieves silent mic access on Android through zero-click exploits, kernel privilege escalation, and DMA buffer reading.
#2695: Self-Hosting Tailscale Exit Nodes Safely
How to safely route traffic through your home from anywhere using Tailscale exit nodes — without exposing your network.
#2691: The Usability Tax of Least Privilege
Is it time to let AI agents handle your API key creation and rotation? We explore the real security tradeoffs.
#2683: MCP vs Agent Skills: Context Wars
When 12M token windows arrive, do MCP servers or agent skills win? Plus: federated access for agent teams.
#2679: Can a VPN Protect You from SS7 Phone Spying?
SS7 is the hidden backbone of global phone networks—and it's wide open to spies. Here's what a VPN does and doesn't fix.
#2678: How IMSI Catchers Actually Track Your Phone
How fake cell towers intercept your phone, from GSM flaws to 5G fixes. Separating spy-thriller hype from real engineering.
#2620: How Atomic Clocks Actually Keep Time
Why the second is defined by a cesium atom, not the Earth's rotation — and why leap seconds are causing chaos.
#2604: Self-Hosted Screen Recording: Tools Beyond Loom
Practical tools and trade-offs for async video documentation with real data control across platforms including Linux.
#2594: The Hierarchy of Immutable Code
From mask ROM to e-fuses: how hardware enforces a hierarchy of mutability in every computing device.
#2587: Where to Draw the Line on DNS Blocking
DNS-level ad and tracker blocking compared — where each tool shines, where they fall short, and the real tradeoffs.
#2586: Pseudo-Personalized Emails: The New Spam Uncanny Valley
How to detect and filter AI-generated outreach emails that fake personal connection without nuking legitimate messages.
#2541: Agent-to-Agent Scheduling: Building the Calendly for AI
How Google's A2A protocol and Anthropic's Remote MCP could power a new kind of agent handoff for scheduling meetings.
#2508: Why CORS Doesn't Protect Your Server
Why browsers block cross-origin requests, how CORS actually works, and the common pitfalls that trip up developers.
#2505: How Self-Hosted Search Actually Works for AI Agents
SearXNG isn't a crawler — it's a metasearch router. Here's how it works and why AI agents change everything.
#2500: What Actually Counts as Hacking?
The CFAA, web scraping, and the messy line between curious URL-poking and federal crime.
#2496: Are Hidden API Endpoints Leaks or Just Plumbing?
When LLM agents discover unauthenticated JSON endpoints in browser DevTools, is it a security breach or just reading the page?
#2482: When AI Chatbots Leak Your PDFs via Public S3 Buckets
A user uploaded a sensitive PDF to an AI chatbot. The chatbot stored it in a public S3 bucket with zero authentication.
#2481: How to Ask Cloud Vendors About Security (Without Sounding Clueless)
What to ask cloud vendors about security practices — and the technical red flags that actually matter.
#2472: When Guardrails Break: The Hidden Costs of AI Gateway Filtering
PII detection at the gateway layer can block legitimate invoices. Here's how guardrails actually work and where they fail.
#2446: Why Airport Flight Displays Still Run Windows XP
The surprising tech stack behind airport departure boards, Times Square screens, and the Windows XP systems still running them.
#2442: Why Enterprises Choose AWS Bedrock Over Direct AI APIs
The real reasons behind the cloud intermediary's dominance in enterprise AI inference.
#2391: When Anti-Bot Defenses Break Accessibility
How browser automation hits a wall with Israel's strict geo-restrictions and anti-bot measures—and what practical workarounds exist.
#2390: The Low-Grade Digital Arms Race
Discover how browser automation is reshaping web interaction, from job applications to navigating geo-restrictions and anti-bot measures.