Tag: iot security
47 articles
Danfoss Controllers Disappear After Cyber-Attack
A massive 71% of internet-exposed Danfoss StoreView control panels in France vanished within just three days following a cyber-attack that crippled hundreds of supermarkets, suggesting a frantic effort to pull systems offline rather than fix them. This sudden disappearance was tracked by Censys researchers, who monitored the dramatic decline from 1,825 exposed hosts on October 11 to just 537 by October 14.
OpenAI Engineer Charged with Planting Secret Recording Device
An OpenAI engineer allegedly planted a sneaky recording device in the company's executive conference room to capture sensitive chats about its top-secret super intelligence tech. The shocking discovery was made when staff stumbled upon the hidden gadget concealed in toilet paper.
LG Smart TVs Exposed to Local Network Takeover via WebOS Flaws
Your LG Smart TV may be vulnerable to a local network takeover due to three critical flaws in webOS, allowing hackers to gain root access without needing a PIN or your interaction. This startling exploit begins with a simple connection to the TV's pairing service on port 3001, typically used by the LG ThinQ app.
Flock Assumes CVE Issuance Role Amid Trust Concerns
By becoming a CVE Numbering Authority, Flock can now swiftly respond to vulnerability reports, providing customers with a single, trusted source for security information and eliminating confusion from duplicate or conflicting entries. This move enables Flock to enhance its security offerings and strengthen trust with its customers.
States Expose TP-Link's Router Security Risks, China Ties
TP-Link is pushing back against a wave of lawsuits from five US states that claim the company misled consumers about its router security and ties to its former Chinese affiliate, allegations that TP-Link vehemently denies. The company vows to fight the suits in court, calling the claims false and unfair.
ClingSTUN Malware Exploits IoT Flaws to Create Proxy Networks
Meet ClingSTUN, a sneaky Linux proxy backdoor that's exploiting known flaws in unpatched IoT devices to turn them into remotely controlled proxy nodes, allowing hackers to hijack your network. FortiGuard Labs has tracked 24 vulnerabilities so far, and it's crucial to stay ahead of this threat.
Flock Camera Hack Exposes Surveillance Risks
A shocking security breach revealed that a Flock Safety camera, meant to enhance public safety, was hacked, exposing a treasure trove of sensitive data, including 1.6 million images and 50,200 vehicle logs collected over just three weeks. The alarming hack highlights the dark side of surveillance technology and the importance of robust security measures.
Securing the Individual Takes Center Stage in National Resilience Efforts
We pour billions into safeguarding networks, only to send our most critical personnel home, vulnerable and exposed. The everyday devices we rely on - from cars to smartwatches - are creating a detailed blueprint of our lives, putting sensitive information and national security at risk.
D-Link Routers Expose Zero-Day Flaw to Remote Attacks
D-Link routers are under threat from a zero-day flaw that lets hackers launch remote attacks without needing login credentials, simply by sending specially crafted DHCP packets. This vulnerability can cause the device's DHCP daemon to crash or allow attackers to execute malicious code, putting your data at risk.
Network Segmentation Flaws Expose Corporate Attack Surface
Flat networks are a hacker's dream, allowing breaches to spread freely to critical systems that should be off-limits - and a recent analysis of 47,700 real-world network segments reveals that device mixing is a widespread problem. The average network segment contains 54 devices from four different categories, increasing the risk of a security breach.
Hackers Reverse-Engineer Flock Cameras, Expose Surveillance Capabilities
In a fascinating hack, experts got their hands on a Flock camera and uncovered a treasure trove of data, including over a million images captured over several weeks, revealing the surprising extent of its surveillance capabilities. The recovered data showed that the camera's software can detect not just license plates, but also people, vehicles, and bicycles.
TP-Link Cameras Expose Users to Eavesdropping Risk via Zero-Day Flaw
Millions of TP-Link camera users may be vulnerable to eavesdropping due to a zero-day flaw that lets hackers gain admin access without a password. This critical vulnerability affects popular models like the TP-Link Tapo C200, commonly used for baby and pet monitoring, home security, and small business protection.
ZBT Routers Expose Critical Flaw with Factory-Installed Implants
Millions of ZBT routers are at risk due to a critical flaw caused by factory-installed implants that grant hackers root access to every device connected to them. This severe vulnerability, rated 9.3 out of 10, allows attackers to take full control with just a network connection.
Ubiquiti Patches Three Maximum-Severity Flaws in UniFi Line
Ubiquiti has patched three critical vulnerabilities in its UniFi line, with a severity score of 10 out of 10, that could allow hackers to gain control of affected devices. These flaws, along with 19 others, were disclosed in a security bulletin, highlighting the need for immediate updates.
Ubiquiti Disrupts Three Max-Severity Flaws in UniFi Systems
Ubiquiti has just dropped a critical security update to fix three massive vulnerabilities in its UniFi systems that hackers can exploit remotely without needing any special access. If you're using UniFi, now's the time to patch up and keep your network safe!
Unpatched Calix Routers Expose Internal Devices to Internet Threats
A single, unauthorized request can create a permanent vulnerability in your Calix router's firewall, exposing internal devices to internet threats - no password or prompt required. This shocking flaw, tracked as CVE-2026-75501, leaves devices running EXOS/6.6.47 firmware alarmingly susceptible to attack.
Hackers Compromise 14,500 Dahua Cameras in 35-Day Global Campaign
In just 35 days, hackers compromised a staggering 14,530 Dahua IP cameras worldwide, with a surprising focus on Russian and CIS telecom networks. The massive operation, dubbed CameraSwarm, exposed a vast amount of sensitive data, revealing the intruders' tactics and targets.
Hackers Exploit Dahua Devices via Credential Attacks and Auth Bypasses
Over 14,530 Dahua devices were compromised in a massive cyberattack, dubbed Operation CameraSwarm, which used credential attacks and authentication bypasses to gain control of cameras and other devices. The attackers hit hard in Ukraine and Russia, infiltrating devices via exposed credentials, flaws, and peer-to-peer relay tech.
ETSI Advances 17 Cybersecurity Standards for EU Compliance
The European Telecommunications Standards Institute (ETSI) is pushing forward with 17 crucial cybersecurity standards to help vendors and buyers across the continent meet the EU's Cyber Resilience Act requirements. These draft standards cover 17 major product categories, setting a vital baseline for manufacturers to ensure their products are secure and compliant.
Evooo1Bot Malware Targets Routers in Global Traffic Relay Botnet
Meet Evooo1Bot, a sneaky malware that's turning routers worldwide into unwitting traffic relays, harvesting credentials, and launching devastating DDoS attacks. This modular Linux botnet is packed with powerful tools, including encrypted communication, SSH brute-forcing, and exploit arsenals to take down vulnerable devices.
Kimwolf Botnet Evolves with Enhanced DDoS Capabilities
Meet Kimwolf v7, a highly evolved botnet that's taken DDoS capabilities to the next level with its cutting-edge command-and-control resolution via Ethereum's blockchain naming system, ENS. First discovered in February 2026, this malware has been quietly building its arsenal since August 2024, targeting a range of devices from Linux IoT gadgets to Android TV boxes.
Malicious SIMs Exploit Cellular IoT Devices via Hidden Modem Interface
Researchers uncovered a shocking vulnerability in cellular IoT devices, finding that malicious SIMs can exploit hidden modem interfaces to run code on the device, thanks to a little-known proactive capability defined in cellular communication specs. Nine out of 26 tested devices, including some popular phones, were susceptible to this type of attack.
Zbtlink Routers Expose Unauthenticated Root Shells via Factory-Shipped Backdoor
Meet ENDLESSDOORS, a sneaky backdoor embedded in over 20 Zbtlink router models that lets hackers tap into an unauthenticated root shell, allowing them to remotely control your device. This hidden threat masquerades as a harmless Linux kernel thread, but in reality, it's a powerful tool that can phone home to Chinese command-and-control infrastructure every 35 seconds.
Zbtlink Router Firmware Exposes Potential Backdoor Risks
Some Zbtlink routers have a shocking secret: they come equipped with a built-in backdoor that lets them phone home and wait for orders, all without needing to be hacked. This unsettling feature, dubbed ENDLESSDOORS, was found on twenty models across years of images, sparking concerns about potential security risks.