SecurityOT Isolation Gap Leaves Devices Exposed
Forescout's Vedere Labs found most OT and medical devices share network segments with IT and IoT gear, widening potential attack paths.
> Search
17 results for “iot”
Security
TrendingHodak Pitches Post-Screen Future at Disrupt
Science Corporation's Max Hodak will argue brain-computer interfaces could replace screens at TechCrunch Disrupt 2026.
Cyber CrimeMalware Taps MQTT to Run Windows, Linux Bots
Lumen's Black Lotus Labs says BambooToken abuses the IoT messaging protocol and a signed banking token to control compromised hosts across Asia and South America.
SecurityA £3 Wi-Fi Extender Hides Secret Admin Access
Security researcher finds a hardcoded admin account in a Temu-bought Wi-Fi extender, giving remote attackers full control.
SecurityResidential proxies turn media players into attack relays
Plume research shows SuperBox streaming devices open home networks to malware, despite router placement.
SecurityIoT Botnets and Water Systems Top ThreatsDay
A weekly roundup: 296K-device botnet, 100+ water systems targeted, and a SharePoint RCE chain.
Cyber CrimeEvooo1Bot Botnet Weaponizes Edge Device Flaws
A new Mirai-based Linux botnet uses encrypted C2, SOCKS proxies, and exploits in routers to hijack edge devices.
SecurityIndustrial Patch Tuesday: Critical Gaps Closed in Siemens, Schneider, Phoenix
August 2026 ICS Patch Tuesday advisories from Siemens, Schneider Electric, Phoenix Contact address critical vulnerabilities, including a maximum-severity flaw in Siemens IoT devices.
Cyber CrimeKimwolf v7 Evolves to Evade Detection in DDoS Attacks
New Android botnet version uses HTTP/2 floods and ENS to hide command-and-control traffic.
SecurityHostile SIMs exploit spec-compliant commands
Malicious SIM cards can force phones to leak files, drop to 2G, or crash—by abusing standard SIM commands.
SecurityCritical Command Injection Hits Puwell Cameras
Puwell IP cameras running firmware versions 2.x through 4.x are vulnerable to unauthenticated remote code execution via a flaw in the DebugShell interface.
SecurityCritical Path Injection Found in Microsoft Kiota
Microsoft has patched a critical path traversal vulnerability in Kiota that allows malicious OpenAPI descriptions to inject unauthorized file references.
SecurityMicrosoft Kiota Command Injection Flaw
A critical vulnerability in Microsoft Kiota allows attackers to execute arbitrary code via malicious OpenAPI descriptions processed by the tool.
Cyber CrimeRussian Intel Targets NATO Logistics
Intelligence agencies report that Russian actors are hijacking IP cameras to monitor military movements across Europe and Ukraine.
SecurityShark Vacuum Flaw Exposes Root Access
A configuration oversight in SharkNinja's AWS integration allows unauthorized remote commands on connected robot vacuums.
Cyber CrimeAI-Assisted Botnets: TuxBot’s Flaws
Researchers identify how generative AI is accelerating IoT botnet development, despite leaving behind revealing, unpolished code.
SecurityUnpatched Surveillance Networks Face Growing Global Exploitation Risk
Thousands of Hikvision devices remain vulnerable to a critical command injection flaw, drawing attention from global threat actors.