loader from loading.io

390: Scammer's Paradise

Mostly Security

Release Date: 05/31/2025

414: Fig Wasp Redux show art 414: Fig Wasp Redux

Mostly Security

Eric goes to Nateland and Jon goes flying. Another javascript worm, and automatic license plate reader records declared public in Washington. For fun we have a repo of annual security reports and Jon suffering memory loss and search ineptitude, but fig wasps are still cool. 0:00 - Intro 17:20 - 21:50 - 28:55 - 29:26 - 30:43 -

info_outline 413: Sidekick, not Primarykick show art 413: Sidekick, not Primarykick

Mostly Security

Eric drills a door and Jon disagrees and commits to an electrical fix. Aisuru makes the Cloudflare Top 10. The Louvre had a bad week, while furniture trucks had a good one. Gemini used to write malware. Rivers in Alaska are orange. 0:00 - Introduction 14:11 - 16:25 - 20:03 - 24:12 - 26:45 - 28:26 -

info_outline 412: Precondition Failed show art 412: Precondition Failed

Mostly Security

Remote Eric Assist and Jon enjoys ... hockey(??). More prompt injections, the most damaging UK cyber event (so far), and residential proxy use for fun and training data. Will Agentic AI bring back micropayments, and how is Costco's pumpkin pie so good? 0:00 - Intro 10:47 - 16:56 - 19:32 - 24:34 - 29:49 -

info_outline 411: Fantastic Turn Of Phrase show art 411: Fantastic Turn Of Phrase

Mostly Security

Travel Adventures, AI Advancements (and Challenges), Satellite Security Concerns, Machine Learning Insights, and De-Extinction Efforts for the Giant Moa. 0:00 - Introduction 4:49 - 9:15 - 14:41 - 20:02 -

info_outline 410: Gone show art 410: Gone

Mostly Security

Family weekends for Eric and Jon. A new side channel for pixel sniffing on Android, malware abusing github + steganography for configuration, and Apple doubles many of its security bounties. For fun, long live(d) the naked mole rat, and warp drives move from the irrational (negative energy ftw!) to the theoretically possible. 0:00 - Intro 8:55 - 12:59 - 16:16 - 23:08 - 27:15 -

info_outline 409: Menacing Missives show art 409: Menacing Missives

Mostly Security

This was almost "The Quiet Episode" after some audio challenges, amazing what technology can hide... Eric gets back in town just in time to leave town. Jon goes to a bookstore. The UK is still trying to get Apple to create a backdoor. OpenAI talked about malicious use of AI. ShinyHunters are back. Pristine Stars are a thing and Powell's City of Books is cool. 0:00 - Introduction 3:04 - 5:51 - 15:32 - 22:59 - 26:00 -

info_outline 408: Request Timeout show art 408: Request Timeout

Mostly Security

Eric is traveling and Jon is repairing. Coordinated arrests of scammers across Africa, the world's first malicious MCP server (is super simple), the release of the Sony CD player 43 years ago, and CRISPR modified yeast to create pollen substitute for the bees. 0:00 - Intro 10:27 - 17:13 - 23:02 - 27:02 -

info_outline 407: Vampires show art 407: Vampires

Mostly Security

This past weekend, Eric was forgetfully productive. Meanwhile, Jon moved a child into the dorms and battled some radiator problems. On other fronts, AI agents got duped, and self-replicating worms made their way through NPM. Good news: Entra ID tenants dodged a major security event. For a bit of nostalgia, Eric whipped up some lemon bars, and Jon chowed down on pizza. 0:00 - Introduction 9:05 - 13:56 - 18:01 - 22:55 - 25:10 -

info_outline 406: Triple Square show art 406: Triple Square

Mostly Security

Eric paints and Jon does something I'm sure. Void proxy tackles the complexity of breaking MFA, and Bitcoin ATMs for Scammers. How about a bit of neuromodulation on Pythagorean Triple Square Day. 0:00 - Intro 13:19 - 16:54 - 21:24 - 24:33 -

info_outline 405: Method Not Allowed show art 405: Method Not Allowed

Mostly Security

Eric updates the mostlysecurity.com vibe. Jon jars honey. Plex asks users to change their passwords. iPhone 17 has new security features. Not to be outdone numerically, 18 Javascript packages were compromised. Eric plays with epoxy and glitter, while Jon reminisces of Perl. 0:00 - Introduction 15:33 - 20:09 - 25:58 - 30:04 - Epoxy and Glitter 33:04 -

info_outline
 
More Episodes

Springtime work and bathroom 'renovations'. Why prompts are the new IOCs and a tool to detect malicious prompts, a guilty plea in the PowerSchool breach from last year, and sanctions against a Philippines based company involved in pig butchering scams. For fun we have the Tianwen-2 launch to collect asteroid samples, and a desktop UV printer on kickstarter that looks amazing.