Smashing Security #486: vibe-coded NZ shop site exposed, Flock ALPR cameras hacked, plus Base44, Odido and North Korea fake-interview links
Episode 486 of the Smashing Security podcast (host Graham Cluley, guest Dave Bittner) covers two main stories. An Auckland store's vibe-coded website reportedly let the public edit its inventory, and bogus listings appeared within hours, including socks, an $850 banana and New Zealand's national parks. A hacker collective also physically accessed a Flock Safety license-plate-reading camera in the US and examined its internals. The show notes link to related coverage: a critical vulnerability in the AI vibe-coding platform Base44 (Wiz), chained flaws said to have enabled takeover of OpenAI staff accounts (The Hacker News), the Odido hackers threatening another Netherlands hack (Cybernews), and North Korean fake job interviews said to have infected 30,000 devices (The Register). The article is a podcast summary with links and gives no technical detail of its own.
Technical Details
- The show notes cite researcher reporting that Flock cameras have security vulnerabilities and hard-coded credentials.
- The Auckland incident involved an openly editable website, apparently produced with AI-assisted ("vibe") coding.
- Other items are only headlines with links. The article gives no CVEs, IOCs or attribution.
Linha do tempo
-
Smashing Security #486: vibe-coded NZ shop site exposed, Flock ALPR cameras hacked, plus Base44, Odido and North Korea fake-interview links
ler a análise desta fonte ocultar
Episode 486 of the Smashing Security podcast (host Graham Cluley, guest Dave Bittner) covers two main stories. An Auckland store's vibe-coded website reportedly let the public edit its inventory, and bogus listings appeared within hours, including socks, an $850 banana and New Zealand's national parks. A hacker collective also physically accessed a Flock Safety license-plate-reading camera in the US and examined its internals. The show notes link to related coverage: a critical vulnerability in the AI vibe-coding platform Base44 (Wiz), chained flaws said to have enabled takeover of OpenAI staff accounts (The Hacker News), the Odido hackers threatening another Netherlands hack (Cybernews), and North Korean fake job interviews said to have infected 30,000 devices (The Register). The article is a podcast summary with links and gives no technical detail of its own.
Technical Details
- The show notes cite researcher reporting that Flock cameras have security vulnerabilities and hard-coded credentials.
- The Auckland incident involved an openly editable website, apparently produced with AI-assisted ("vibe") coding.
- Other items are only headlines with links. The article gives no CVEs, IOCs or attribution.