This advisory details a significant tactical shift by China-nexus cyber actors toward using large-scale networks of compromised devices, known as covert networks or botnets, to route malicious activity. These networks primarily consist of vulnerable Small Office Home Office (SOHO) routers and Internet of Things (IoT) devices, allowing threat actors to disguise their origins and conduct reconnaissance, malware delivery, and data exfiltration with high deniability.
Key points include:
- The transition from individually procured infrastructure to externally provisioned botnets managed by Chinese information security companies.
- Use of compromised edge devices like Cisco and NetGear routers that are often end-of-life or unpatched.
- Challenges for defenders due to indicator of compromise (IOC) extinction, making static IP block lists less effective.
- Recommended defensive strategies ranging from basic asset mapping and multi-factor authentication to advanced zero trust policies and active threat hunting.
Key points include:
- The transition from individually procured infrastructure to externally provisioned botnets managed by Chinese information security companies.
- Use of compromised edge devices like Cisco and NetGear routers that are often end-of-life or unpatched.
- Challenges for defenders due to indicator of compromise (IOC) extinction, making static IP block lists less effective.
- Recommended defensive strategies ranging from basic asset mapping and multi-factor authentication to advanced zero trust policies and active threat hunting.
The Orange Pi Zero 3W is a new compact single-board computer measuring 65 x 32 mm. It features the Allwinner A733 octa-core processor, combining Cortex-A76 and Cortex-A55 cores with an integrated NPU for AI workloads and a RISC-V coprocessor for real-time tasks. The board supports up to 16GB of LPDDR5 memory and offers versatile display options including Mini HDMI, MIPI-DSI, and DisplayPort via USB-C.
* Allwinner A733 SoC with octa-core CPU and 3 TOPS NPU
* Up to 16GB LPDDR5 RAM support
* Connectivity includes Wi-Fi 6, Bluetooth 5.4, and PCIe 3.0
* Multiple display outputs supporting up to 4K resolution
* Support for Android, Debian, Ubuntu, and OpenHarmony
* Allwinner A733 SoC with octa-core CPU and 3 TOPS NPU
* Up to 16GB LPDDR5 RAM support
* Connectivity includes Wi-Fi 6, Bluetooth 5.4, and PCIe 3.0
* Multiple display outputs supporting up to 4K resolution
* Support for Android, Debian, Ubuntu, and OpenHarmony
A clean-room, header-only C/C++ implementation of the Meshtastic LoRa mesh protocol designed for embedded systems. This standalone library allows devices to interoperate with the Meshtastic network without requiring heavy dependencies like Arduino, RadioLib, or FreeRTOS. It handles everything from raw LoRa byte processing to decoded messages including text, position, and telemetry data.
Key features include:
- Packet parsing and AES-256-CTR encryption/decryption
- PKI direct messages using x25519 key exchange
- Channel management and PSK expansion
- Protobuf decoding for various message types without Nanopb dependency
- Radio configuration including regional settings and modem presets
- CSMA/CA implementation for MAC protocol compliance
Key features include:
- Packet parsing and AES-256-CTR encryption/decryption
- PKI direct messages using x25519 key exchange
- Channel management and PSK expansion
- Protobuf decoding for various message types without Nanopb dependency
- Radio configuration including regional settings and modem presets
- CSMA/CA implementation for MAC protocol compliance
The Orange Pi Zero 2W is a compact and powerful single-board computer designed for efficiency and versatility in IoT, smart home, and media applications. Powered by the Allwinner H618 quad-core Cortex-A53 processor, it offers high performance with low power consumption and supports various memory configurations to suit different project needs.
Key features include:
- Quad-core Cortex-A53 processor up to 1.5GHz with Mali G31 MP2 graphics.
- LPDDR4 memory options of 1GB, 1.5GB, 2GB, or 4GB.
- Integrated Wi-Fi 5 and Bluetooth 5.0 for seamless connectivity.
- Compact PCB size of 30mm x 65mm.
- Extensive expansion capabilities via a 24-pin connector and a 40-pin GPIO port.
- Support for multiple operating systems including Android 12 TV, Debian, Ubuntu, and Orange Pi OS (Arch).
Key features include:
- Quad-core Cortex-A53 processor up to 1.5GHz with Mali G31 MP2 graphics.
- LPDDR4 memory options of 1GB, 1.5GB, 2GB, or 4GB.
- Integrated Wi-Fi 5 and Bluetooth 5.0 for seamless connectivity.
- Compact PCB size of 30mm x 65mm.
- Extensive expansion capabilities via a 24-pin connector and a 40-pin GPIO port.
- Support for multiple operating systems including Android 12 TV, Debian, Ubuntu, and Orange Pi OS (Arch).
Banana Pi has announced the BPI-SM10, a compact computing system powered by the SpacemiT K3 RISC-V processor. This hardware is designed for users interested in exploring RISC-V architecture and high-performance AI tasks at the edge. The system features an 8-core AI accelerator capable of delivering up to 60 TOPS, which is sufficient to run 30 billion parameter AI models.
Key details include:
* BPI-SM10 consists of a SpacemiT K3 compute module and a versatile carrier board.
* The processor features an octa-core design at 2.4 GHz with support for up to 32GB LPDDR5 RAM.
* Carrier board I/O includes M.2 PCIe Gen 4 slots, USB 3.2 ports, DisplayPort, and Gigabit Ethernet.
* A forthcoming K3 Pico-ITX single-unit mini PC will also be released featuring a 10-gigabit Ethernet port.
Key details include:
* BPI-SM10 consists of a SpacemiT K3 compute module and a versatile carrier board.
* The processor features an octa-core design at 2.4 GHz with support for up to 32GB LPDDR5 RAM.
* Carrier board I/O includes M.2 PCIe Gen 4 slots, USB 3.2 ports, DisplayPort, and Gigabit Ethernet.
* A forthcoming K3 Pico-ITX single-unit mini PC will also be released featuring a 10-gigabit Ethernet port.
The MeshCore development team announces a formal split within the project following internal disputes regarding brand ownership and the use of AI-generated code.
A former team member is accused of attempting to claim the MeshCore trademark and rebranding components using "vibe coded" AI tools without team consensus. The core team clarifies that the only official source of truth remains the GitHub repository and has launched meshcore.io to serve as the new central hub for firmware, documentation, and community engagement.
Main points:
- Internal conflict regarding trademark filings and brand control.
- Dispute over the use of AI-generated code versus human-crafted software.
- Transition of official resources to the meshcore.io domain.
- Introduction of the core development team members responsible for future updates.
A former team member is accused of attempting to claim the MeshCore trademark and rebranding components using "vibe coded" AI tools without team consensus. The core team clarifies that the only official source of truth remains the GitHub repository and has launched meshcore.io to serve as the new central hub for firmware, documentation, and community engagement.
Main points:
- Internal conflict regarding trademark filings and brand control.
- Dispute over the use of AI-generated code versus human-crafted software.
- Transition of official resources to the meshcore.io domain.
- Introduction of the core development team members responsible for future updates.
Espressif Systems has introduced the ESP-Claw framework, designed to enable ESP32 devices to function as local AI agents. The framework allows hardware to interact with Large Language Models (LLMs) to make decisions and execute actions locally without requiring constant cloud connectivity. It supports natural language conversation for defining device behavior through chat coding and utilizes Lua scripts for deterministic execution.
Key features include:
- Local event bus driving millisecond-latency responses via Lua rules.
- MCP Server and Client capabilities for hardware exposure and external service calling.
- On-chip private memory for long-term context retention without data leaving the device.
- Support for various messaging platforms including Telegram, WeChat, and Feishu.
- Compatibility with LLMs such as OpenAI, Qwen, and ChatGPT.
- Current support for ESP32-S3 with upcoming support for ESP32-P4.
Key features include:
- Local event bus driving millisecond-latency responses via Lua rules.
- MCP Server and Client capabilities for hardware exposure and external service calling.
- On-chip private memory for long-term context retention without data leaving the device.
- Support for various messaging platforms including Telegram, WeChat, and Feishu.
- Compatibility with LLMs such as OpenAI, Qwen, and ChatGPT.
- Current support for ESP32-S3 with upcoming support for ESP32-P4.
The author explores the potential of running an AI agent framework on low-cost hardware by testing MimiClaw, an OpenClaw-inspired assistant, on an ESP32-S3 microcontroller. Unlike traditional AI setups, MimiClaw operates without Node.js or Linux, requiring the user to flash custom firmware using the ESP-IDF framework. The setup integrates with Telegram for interaction and utilizes Anthropic and Tavily APIs for intelligence and web searching. Despite the technical hurdles of installation and potential API costs, the project successfully demonstrates a functional, sandboxed, and low-power personal assistant capable of persistent memory and routine tracking.
Monitor air quality with the Fermion BMV080, the world's smallest fanless PM2.5 sensor.
This ultra-compact breakout board utilizes innovative laser-based light scattering and a fanless measurement principle to deliver laboratory-grade precision in a footprint of just 24×20mm.
Capable of simultaneously measuring PM1, PM2.5, and PM10 mass concentrations with an accuracy of ±10μg/m³, the device operates with an ultra-low current consumption of 6μA in sleep mode.
It's perfect for space-constrained applications, ranging from portable air monitors and smart home thermostats to battery-powered IoT nodes.
This ultra-compact breakout board utilizes innovative laser-based light scattering and a fanless measurement principle to deliver laboratory-grade precision in a footprint of just 24×20mm.
Capable of simultaneously measuring PM1, PM2.5, and PM10 mass concentrations with an accuracy of ±10μg/m³, the device operates with an ultra-low current consumption of 6μA in sleep mode.
It's perfect for space-constrained applications, ranging from portable air monitors and smart home thermostats to battery-powered IoT nodes.
zclaw is a personal AI assistant running on an ESP32, backed by Anthropic, OpenAI, or OpenRouter. It allows for monitoring and control of connected devices via Telegram, scheduling tasks, and creating custom tools, all within an 888KB footprint.
