Firmware Backdoors Be Spying On You - PSW #914

AI says that this is the show where we turn coffee into threat intelligence and cigar smoke into packet captures. This week:

a firmware backdoor living its best life inside Android tablets
a fresh BeyondTrust RCE that already has scanners circling like seagulls over a french fry.
Lenovo Vantage reminds us that "preinstalled convenience" is just another way to spell "attack surface."
Texas is taking a swing at TP-Link
supercomputers with a 20-year-old Munge bug that still has teeth.
Your AI coding assistant might be quietly squirreling away secrets
macOS gets a visit from an infostealer delivered as helpful add-ons
Chrome extensions allegedly spy on millions
open source maintainers drowning in AI-generated nonsense
Windows flirting with smartphone-style permission prompts.

Put your passwords in a vault, not in a repo, and stay tuned for Paul's Security Weekly!