June 15, 2026

The Trade-offs of Access Point-Driven RF Scanning

The Trade-offs of Access Point-Driven RF Scanning


When a wireless access point is used to perform an RF (radio frequency) scan of its surrounding environment, it must temporarily or partially shift its radio hardware away from its primary role of serving client traffic. Most enterprise-grade access points operate in what is called "channel scanning mode" or leverage an integrated spectrum analysis engine, but in either case the radio must sweep across channels it is not currently serving. This creates an inherent tension: the same radio that is listening for interference on channel 11 is not, at that moment, beaconing or acknowledging frames on channel 6. For single-radio APs, this means client associations drop or degrade during the scan window. Even on dual- or tri-radio platforms, dedicating one radio to scanning reduces the available capacity for client load balancing or band steering, and the scanning radio's physical placement — fixed to a ceiling or wall — limits its ability to capture a spatially accurate picture of the RF environment from the perspectives that matter most, such as where a user is seated or where a device is roaming.

June 12, 2026

C0XMO: The Router Botnet That Doesn't Just Infect—It Eliminates the Competition

C0XMO: The Router Botnet That Doesn't Just Infect—It Eliminates the Competition

A newly discovered botnet called C0XMO is raising concerns across the cybersecurity community after researchers uncovered its ability to exploit vulnerable DD-WRT routers, spread across multiple device types, and aggressively remove competing malware from infected systems. Based on the well-known Gafgyt malware family, C0XMO targets a wide range of processor architectures, making it highly adaptable and capable of compromising routers, DVRs, Android-based devices, and other internet-connected equipment.

June 08, 2026

Wifi Auto Doesn't Mean Optimal - Things to look out for

1

Channel chaos: your AP is fighting neighbors it can't see

Wifi Auto Doesn't Mean Optimal - Things to look out for

Auto channel selection sounds smart, but most vendors run a quick scan at boot time and picks a channel based on what's visible in that moment. It doesn't continuously adapt, and it can't account for non-Wi-Fi interference sources like baby monitors, microwaves, or Bluetooth clusters. In a dense apartment building or office, every AP is probably also running Auto — meaning everyone lands on the same "least busy" channel simultaneously. The result is coordinated co-channel interference that degrades throughput for everyone. A manually chosen, spectrum-

June 07, 2026

The Battle for Your Android: Why “Open” Still Matters


KeepAndroidOpen.org is a grassroots campaign focused on defending one of the core promises Android was built on: the ability for users to freely install and run the apps they choose. The site highlights proposed changes to Android’s developer verification system that could centralize control over app distribution under a single authority. According to the campaign, this shift risks turning an open ecosystem into a tightly controlled environment where even sideloaded or independently distributed apps would require prior approval. 

June 01, 2026

AVOID the malicious openew.app website

 

malicious openew.app website


Based on current threat intelligence, I would treat openew.app as malicious and unsafe.

Several independent indicators point to it being a phishing/malware site:

  • A recent security scan classified openew.app as a phishing site with a very low trust score and noted that 16 security engines flagged it. The domain was also only a few days old when analyzed, which is a common characteristic of malicious campaigns.
  • Researchers at Malwarebytes reported that openew.app impersonates the official ChatGPT download page and delivers malware to both Windows and macOS users. According to their analysis, Windows users receive credential-stealing malware, while macOS users are served Atomic Stealer (AMOS), which targets passwords, browser data, and cryptocurrency wallets.
  • Multiple malware sandbox analyses observed malicious behavior associated with downloads from the site and classified activity from the domain as malicious.

Popular post in the past 30 days