Supernetworks, Inc

iOS 26.5 dropped today with a fix for CVE-2026-28994 — a Wi-Fi use-after-free Alex Radocea discovered via automated Wi-Fi fuzzing. The bug is preauth and requires no user interaction.

Read "AirSnitch: How Wi-Fi Client Isolation Gets Broken", wherein Wi-Fi network isolation is a security bug swamp, that we solved with the original design of SPR https://lnkd.in/dJCjcBiw

Read "AirSnitch: How Wi-Fi Client Isolation Gets Broken", wherein Wi-Fi network isolation is a security bug swamp, that we solved with the original design of SPR https://lnkd.in/dJCjcBiw

We're proud to unveil our latest hardware - a self-hosted WiFi 6 router for your home network. For those tired of cloud-dependent routers that phone home with your data, here's your answer. Your network, your terms, your hardware. Built on the Raspberry Pi Compute Module 5, it delivers 2.5Gbps throughput with PoE+ or USB-PD on a modular carrier board, with a dual-band WiFi 6-e card that can reach true WiFi 6 speeds. The hardware is put together for our flagship software, SPR, which makes secure networking strong with ease of use. The software enables policy-driven firewall rules instead of asking users to contemplate VLAN ID puzzles for their network topology (SPR enables people to think in graphs, not subnets). We're the first to support multi-pass WPA3. For die-hard pfsense and openwrt fans, the CM5 is shipped unlocked, and can happily run these as well! No cloud dependencies. No data mining. No monthly fees. Your network runs entirely on your hardware, under your control. Available now at https://lnkd.in/g8Nm9Y4N #NetworkEngineering #RaspberryPi #SelfHosted #NetworkSecurity #3DPrinting #OpenSource #HomeLab #WPA3

Alex Radocea spoke with TechCrunch about Bitchat, a "secure" p2p messenger that runs over bluetooth. The trust mechanism is misleading and allows full impersonation letting an adversary intercept messages and fool users into thinking they're talking to a legitimate contact. Article in the comments

We posted about bitchat. A MITM attacker can pretend to be a "favorited" peer which has been marked as trusted. This lets an attacker inject themselves into trusted conversations The post some general thoughts about vibe coding and cryptography The key takeaways: 1. Start with security fundamentals—identity/trust isn't optional with encryption. 2. Reuse proven protocols—don't reinvent the cryptographic wheel 3. Think like an attacker https://lnkd.in/gZ-YAvzG

We uncovered a number of vulnerabilities within the macOS SMB client implementation, including a remote kernel heap overflow. Don’t worry, they were fixed in 15.4, we’re just too busy working on building and shipping routers to post on time! Learn more in the advisory below:

We’re pleased to announce the beta release of spr-vaultwarden, a plugin allowing you to run vaultwarden on your SPR. Vaultwarden is a Bitwarden compatible server written in Rust. Some folks just don't trust the cloud with stored credentials, and who are we to judge! https://lnkd.in/gpMKE_X7