It’s Thursday!
News
- EU Cyber Resiliance Act : Orgs operating in Europe, will now have to report the product security issues quickly and diligently otherwise face heavy penalties. Orgs with their product having network connectivity, makes the org to comply under CRA.
- China AI Vendors (including Alibaba, Deepseek etc.) are accused of industrial-scale distilling campaigns against USA. The Distiallation is a common practice in which mature “teacher” AI models are used to train “student” AI models. On its own, distillation is a widely accepted practice used for academic research, making models more efficient, and improving models with specialized use cases.
- CVE-2025-20701: (Pairing Without Consent) Skullcandy Dime 3 unauthorized Bluetooth pairing behavior was reported in Airoha Bluetooth Audio SDK where firmware version 1.0.0.28 was affected. Skull Candy said it was fixed in v1.0.0.30 however there is no way to patch the version in the earbuds.
Ideas / Research
- I should start looking into firmware vulnerabilities.