This advisory details a significant tactical shift by China-nexus cyber actors toward using large-scale networks of compromised devices, known as covert networks or botnets, to route malicious activity. These networks primarily consist of vulnerable Small Office Home Office (SOHO) routers and Internet of Things (IoT) devices, allowing threat actors to disguise their origins and conduct reconnaissance, malware delivery, and data exfiltration with high deniability.
Key points include:
- The transition from individually procured infrastructure to externally provisioned botnets managed by Chinese information security companies.
- Use of compromised edge devices like Cisco and NetGear routers that are often end-of-life or unpatched.
- Challenges for defenders due to indicator of compromise (IOC) extinction, making static IP block lists less effective.
- Recommended defensive strategies ranging from basic asset mapping and multi-factor authentication to advanced zero trust policies and active threat hunting.
Key points include:
- The transition from individually procured infrastructure to externally provisioned botnets managed by Chinese information security companies.
- Use of compromised edge devices like Cisco and NetGear routers that are often end-of-life or unpatched.
- Challenges for defenders due to indicator of compromise (IOC) extinction, making static IP block lists less effective.
- Recommended defensive strategies ranging from basic asset mapping and multi-factor authentication to advanced zero trust policies and active threat hunting.
The Orange Pi Zero 3W is a new compact single-board computer measuring 65 x 32 mm. It features the Allwinner A733 octa-core processor, combining Cortex-A76 and Cortex-A55 cores with an integrated NPU for AI workloads and a RISC-V coprocessor for real-time tasks. The board supports up to 16GB of LPDDR5 memory and offers versatile display options including Mini HDMI, MIPI-DSI, and DisplayPort via USB-C.
* Allwinner A733 SoC with octa-core CPU and 3 TOPS NPU
* Up to 16GB LPDDR5 RAM support
* Connectivity includes Wi-Fi 6, Bluetooth 5.4, and PCIe 3.0
* Multiple display outputs supporting up to 4K resolution
* Support for Android, Debian, Ubuntu, and OpenHarmony
* Allwinner A733 SoC with octa-core CPU and 3 TOPS NPU
* Up to 16GB LPDDR5 RAM support
* Connectivity includes Wi-Fi 6, Bluetooth 5.4, and PCIe 3.0
* Multiple display outputs supporting up to 4K resolution
* Support for Android, Debian, Ubuntu, and OpenHarmony
This project transforms the LILYGO T-Display-P4 development board into a multifunctional portable device capable of acting as a 1090 MHz ADS-B receiver and a Meshtastic-compatible mesh radio. By using an RTL-SDR USB dongle for RF reception and an onboard SX1262 LoRa radio, the system provides real-time aircraft tracking via a touchscreen interface and off-grid messaging capabilities. The device also features integrated MP3 playback, GPS time synchronization, and a companion web application called ADS-B Scope for live map viewing through WebSerial.
Main features include:
* Real-time ADS-B decoding and radar scope visualization with aircraft database enrichment.
* Meshtastic-compatible LoRa mesh networking with encrypted messaging and node discovery.
* Integrated MP3 music player with ID3 tag parsing and cover art display.
* Adaptive RTL-SDR gain control and USB hot-plug support.
* Comprehensive SD card logging for both ADS-B flight data and mesh messages.
* Dual-core ESP32-P4 architecture optimized via a 6-tier FreeRTOS priority scheme.
* WebSerial-based companion app for live mapping, firmware flashing, and file management.
Main features include:
* Real-time ADS-B decoding and radar scope visualization with aircraft database enrichment.
* Meshtastic-compatible LoRa mesh networking with encrypted messaging and node discovery.
* Integrated MP3 music player with ID3 tag parsing and cover art display.
* Adaptive RTL-SDR gain control and USB hot-plug support.
* Comprehensive SD card logging for both ADS-B flight data and mesh messages.
* Dual-core ESP32-P4 architecture optimized via a 6-tier FreeRTOS priority scheme.
* WebSerial-based companion app for live mapping, firmware flashing, and file management.
A clean-room, header-only C/C++ implementation of the Meshtastic LoRa mesh protocol designed for embedded systems. This standalone library allows devices to interoperate with the Meshtastic network without requiring heavy dependencies like Arduino, RadioLib, or FreeRTOS. It handles everything from raw LoRa byte processing to decoded messages including text, position, and telemetry data.
Key features include:
- Packet parsing and AES-256-CTR encryption/decryption
- PKI direct messages using x25519 key exchange
- Channel management and PSK expansion
- Protobuf decoding for various message types without Nanopb dependency
- Radio configuration including regional settings and modem presets
- CSMA/CA implementation for MAC protocol compliance
Key features include:
- Packet parsing and AES-256-CTR encryption/decryption
- PKI direct messages using x25519 key exchange
- Channel management and PSK expansion
- Protobuf decoding for various message types without Nanopb dependency
- Radio configuration including regional settings and modem presets
- CSMA/CA implementation for MAC protocol compliance
The Orange Pi Zero 2W is a compact and powerful single-board computer designed for efficiency and versatility in IoT, smart home, and media applications. Powered by the Allwinner H618 quad-core Cortex-A53 processor, it offers high performance with low power consumption and supports various memory configurations to suit different project needs.
Key features include:
- Quad-core Cortex-A53 processor up to 1.5GHz with Mali G31 MP2 graphics.
- LPDDR4 memory options of 1GB, 1.5GB, 2GB, or 4GB.
- Integrated Wi-Fi 5 and Bluetooth 5.0 for seamless connectivity.
- Compact PCB size of 30mm x 65mm.
- Extensive expansion capabilities via a 24-pin connector and a 40-pin GPIO port.
- Support for multiple operating systems including Android 12 TV, Debian, Ubuntu, and Orange Pi OS (Arch).
Key features include:
- Quad-core Cortex-A53 processor up to 1.5GHz with Mali G31 MP2 graphics.
- LPDDR4 memory options of 1GB, 1.5GB, 2GB, or 4GB.
- Integrated Wi-Fi 5 and Bluetooth 5.0 for seamless connectivity.
- Compact PCB size of 30mm x 65mm.
- Extensive expansion capabilities via a 24-pin connector and a 40-pin GPIO port.
- Support for multiple operating systems including Android 12 TV, Debian, Ubuntu, and Orange Pi OS (Arch).
A specialized ADS-B Software Defined Radio (SDR) kit designed for aircraft tracking using a Raspberry Pi. This blue R820T2 RTL2832U model features high stability with 0.5 PPM TCXO to prevent frequency drift and includes an onboard 1090 MHz filter and amplifier for enhanced signal range. The package comes with a purpose-built 8 inch 5 dBi antenna, an aluminum heat-dissipating case, and industrial-grade microSD software pre-loaded for easy setup via web browser without command line work.
Key features:
- Plug-and-play configuration via WiFi/web browser
- Integrated 1090 MHz filter and amplifier
- High-reliability industrial grade microSD card
- Aluminum case for heat dissipation and interference reduction
- Drop-in replacement for FlightAware Pro Stick Plus
Key features:
- Plug-and-play configuration via WiFi/web browser
- Integrated 1090 MHz filter and amplifier
- High-reliability industrial grade microSD card
- Aluminum case for heat dissipation and interference reduction
- Drop-in replacement for FlightAware Pro Stick Plus
An improved web interface designed for use with ADS-B decoders such as readsb and dump1090-fa. This tool provides an enhanced visual experience for tracking aircraft, featuring adjustable history, faster performance when displaying many planes, multiple map options, and the ability to select multiple aircraft simultaneously.
Key features and capabilities:
- Improved adjustable track history
- Fast "Show All Tracks" functionality
- Map dimming/darkening options
- Aircraft selection and callsign label toggling
- Support for UAT (978 MHz) display integration
- Integration with AIS-catcher for maritime tracking
- Capability to host multiple instances and custom webroots
- Heatmap visualization support when used with compatible readsb forks
Key features and capabilities:
- Improved adjustable track history
- Fast "Show All Tracks" functionality
- Map dimming/darkening options
- Aircraft selection and callsign label toggling
- Support for UAT (978 MHz) display integration
- Integration with AIS-catcher for maritime tracking
- Capability to host multiple instances and custom webroots
- Heatmap visualization support when used with compatible readsb forks
Termius is a modern, full-featured SSH client designed to enhance productivity and collaboration for engineers. It provides a seamless terminal experience across multiple platforms including macOS, Windows, Linux, iOS, and Android. The platform features secure synchronization through encrypted vaults, allowing teams to share infrastructure data safely.
- IDE-style autocomplete for faster command entry
- Encrypted Vaults for secure host and credential sharin
- Real-time terminal multiplayer sessions for team collaboration
Integrated SFTP for easy file transfers
- Centralized Keychain for managing SSH keys, passwords, and certificates
- Support for hardware security keys (FIDO2) and biometric authentication
- Cross-device synchronization to keep workflows consistent anywhere
- IDE-style autocomplete for faster command entry
- Encrypted Vaults for secure host and credential sharin
- Real-time terminal multiplayer sessions for team collaboration
Integrated SFTP for easy file transfers
- Centralized Keychain for managing SSH keys, passwords, and certificates
- Support for hardware security keys (FIDO2) and biometric authentication
- Cross-device synchronization to keep workflows consistent anywhere
Banana Pi has announced the BPI-SM10, a compact computing system powered by the SpacemiT K3 RISC-V processor. This hardware is designed for users interested in exploring RISC-V architecture and high-performance AI tasks at the edge. The system features an 8-core AI accelerator capable of delivering up to 60 TOPS, which is sufficient to run 30 billion parameter AI models.
Key details include:
* BPI-SM10 consists of a SpacemiT K3 compute module and a versatile carrier board.
* The processor features an octa-core design at 2.4 GHz with support for up to 32GB LPDDR5 RAM.
* Carrier board I/O includes M.2 PCIe Gen 4 slots, USB 3.2 ports, DisplayPort, and Gigabit Ethernet.
* A forthcoming K3 Pico-ITX single-unit mini PC will also be released featuring a 10-gigabit Ethernet port.
Key details include:
* BPI-SM10 consists of a SpacemiT K3 compute module and a versatile carrier board.
* The processor features an octa-core design at 2.4 GHz with support for up to 32GB LPDDR5 RAM.
* Carrier board I/O includes M.2 PCIe Gen 4 slots, USB 3.2 ports, DisplayPort, and Gigabit Ethernet.
* A forthcoming K3 Pico-ITX single-unit mini PC will also be released featuring a 10-gigabit Ethernet port.
An exploration of Technitium DNS Server, a powerful free and open-source tool that serves as an all-in-one solution for home network management. Unlike traditional setups that require multiple separate tools like Pi-hole for ad-blocking, Unbound for recursive resolution, and a dedicated DHCP server, Technitium integrates these functions into a single, easy-to-manage platform. It offers advanced features such as encrypted DNS, internal DNS zone creation for local devices, split horizon support, and native clustering for redundancy.
