Episode 200: Sakura Samurai Wants To Make Hacking Groups Cool Again. And: Automating Our Way Out of PKI Chaos

This Security Ledger podcast transcript covers vulnerability research and real incidents: researchers discovered backdoor-like functionality and insecure update/firmware behavior in TCL smart TVs, a critical SSRF bypass (zero-day) in the widely used NPM package private-ip that required coordinated patching, and government data exposures (on the order of ~500,000 citizen records and many leaked credentials/files). The episode also highlights broader supply‑chain and PKI risks (including stolen/compromised certificates, SolarWinds-style concerns) and urges better automation and security-by-design for IoT and certificate management.