IoT Gone Wild: From Roombas to Regime Change

Send us Fan Mail

From accidentally hacking 7,000 robot vacuums with a PS5 controller to nation-states using traffic cameras to conduct assassinations—this episode covers the full spectrum of IoT security in 2026.
We start light with the story of a Spanish engineer who just wanted to control his DJI Romo vacuum with his PlayStation controller. Using Claude Code, he accidentally discovered that his device key worked for every vacuum globally, giving him access to cameras, microphones, floor plans, and IP addresses from 7,000 homes. It wasn't even hacking—just catastrophically bad architecture from DJI.
But the conversation gets progressively more serious. We explore Tesla's 37 zero-day vulnerabilities discovered at Pwn2Own, the terrifying prospect of cars being remotely disabled during warfare, and China's hidden wireless transmitters in solar panels and smart buses.
Then we dive into the geopolitical deep end: Israel's multi-year operation hacking nearly every traffic camera in Tehran, using AI to build "patterns of life" for Iranian leadership, culminating in the precision strikes that killed Iran's Supreme Leader and senior military command. It's a masterclass in modern intelligence gathering—and absolutely terrifying in its implications for surveillance everywhere.
We also cover Anthropic's legal battle with the US government (they're suing after refusing to provide unrestricted Claude access for mass surveillance and autonomous weapons), the reality check on AGI timelines, and research proving that AI can now de-anonymize anyone based on their writing patterns with 96% accuracy.
Topics Covered:

DJI Romo vacuum security disaster (7,000 devices compromised)
IoT security fundamentals and why manufacturers don't care
Tesla vulnerabilities and automotive hacking
Supply chain risks in smart devices
Israel's Tehran surveillance operation and targeted assassinations
Anthropic vs. US Government legal battle
AGI timeline reality check and compute limitations
The death of online anonymity

Why Listen:
This isn't just news commentary—it's practitioners discussing what these security failures actually mean, from your smart home to geopolitical warfare. We bridge the gap between the absurdly funny and the deadly serious, showing how the same fundamental IoT vulnerabilities affect everything from vacuum cleaners to regime change.
Hosts: Matt, Alex - Azure experts, security practitioners who actually implement this stuff.

Chapters:
0:00 - Introduction: IoT Gone Wild
0:48 - DJI Romo Hacked with PS5 Controller
14:27 - Tesla's 37 Zero-Days
23:56 - Operation Epic Fury
31:30 - Anthropic vs. US Government Legal Battle
36:25 - AGI Timeline Reality Check
44:14 - The Death of Online Anonymity

Content Warning: This episode discusses an active military conflict, including civilian casualties. We cover the technical cyber aspects from a practitioner perspective, not political positions on the conflict itself.

About Synextra

We're your new favourite cloud provider.

Based in the North-West of England, our team of experts help organisations like yours thrive in the new era of cloud tech.

Visit https://www.synextra.co.uk/ to find out more and book a chat with one of our cloud specialists. We'd love to show you just how good a cloud-powered work life can be.

Connect with us:
• Twitter: https://twitter.com/Synextra
• Facebook: https://www.facebook.com/synextra
• LinkedIn: https://uk.linkedin.com/company/synextra-ltd-
• YouTube: / @synextra
• Linktree: https://linktr.ee/synextra