@compass-security.comFrom an unauthenticated music add-on to root on the host. At #Pwn2Own Ireland 2025, our team chained their way through the Home Assistant Green and walked away with $20k. Emanuele Barbeno shows the full chain, and how it nearly failed on stage: blog.compass-security.com/2026/10/pwn2...
@securityonline.bsky.socialCISA warns the Viidure dashcam app leaks hardcoded cloud credentials (CVE-2026-96587) and public storage (CVE-2026-94204). The vendor has not responded.
#Viidure #Dashcam #CISA #CVE202696587 #HardcodedCredentials #CloudSecurity #AndroidSecurity #IoTSecurity
@offseq.bsky.socialZiroom ZHOME A0101 v1.0.1.0 hit by CRITICAL command injection (CVE-2026-102794). Exploit is public, vendor silent. Assess your exposure and segment devices if possible. https://radar.offseq.com/threat/cve-2026-102794-command-injection-in-ziroom-zhome-a0101-70f3389000d03735 #OffSeq #IoTSecurity #C...
@securityonline.bsky.socialwolfSSL 5.9.4 patches 10 wolfSSL vulnerabilities, including TLS authentication bypass flaws CVE-2026-93302 and CVE-2026-89136. Upgrade now.
#wolfSSL #wolfSSLVulnerabilities #TLS #AuthenticationBypass #EmbeddedSecurity #Cryptography #IoTSecurity #PatchNow
@offseq.bsky.socialCRITICAL: Ziroom ZHOME A0101 v1.0.1.0 has a command injection risk (CVE-2026-101264). No patch — limit API access & watch for updates. Full system compromise possible. https://radar.offseq.com/threat/cve-2026-101264-command-injection-in-ziroom-zhome-a0101-06a3a86bcb9501aa #OffSeq #IoTSecurity #CV...
@finite-state.bsky.socialA license plate camera in public service ran a 2018 Android patch level, with plaintext credentials and its encryption key beside the data it protected.
Larry Pesce on why the firmware pattern reaches past one vendor. #IoTSecurity #FirmwareSecurity
@cyberupdates365.bsky.socialThree unauthenticated ViewSonic vCast flaws can reportedly be chained to compromise ViewBoard smart displays.
Attackers on the same network could capture screen content, install APKs and execute arbitrary code.
@helpnetsecurity.comAbandoned IoT apps keep sending sensitive data to broken servers
📖 Read more: www.helpnetsecurity.com/2026/09/18/a...
#Android #IoT #IoTsecurity #datasecurity #cybersecurity #cybersecuritynews #securitynews @umasspress.bsky.social @umassamherst.bsky.social
@novoitltd.bsky.socialIs your home Wi-Fi as secure as you think? 🏠🔐
Our latest blog explains how to protect your home network, smart devices, and remote work setup from common cyber risks.
Read more 👇
novoit.uk/cybersecurit...
#CyberSecurity #HomeCybersecurity #RemoteWorking #IoTSecurity #NovoIT
@securityonline.bsky.socialCVE-2026-87827 (CVSS 10) is a KGUARD DVR vulnerability exploited by the Mirai botnet for unauthenticated RCE and complete device compromise.
#KGUARD #DVR #CVE202687827 #Mirai #Botnet #IoTSecurity #RCE #DDoS #ExploitedInTheWild #InfoSec
@offseq.bsky.socialEFM ipTIME C200E 1.094 faces a CRITICAL OS command injection flaw (CVE-2026-90847, CVSS 9.4). Public exploit exists — restrict access and monitor devices. https://radar.offseq.com/threat/cve-2026-90847-os-command-injection-in-efm-iptime-c200e-1c30057b126bbbf4 #OffSeq #Vulnerability #IoTSecurity
@etechinvest.bsky.socialInfographic: 5 quick wins to harden your smart home - passwords, updates, network segmentation. Which step will you do today? #IoTSecurity
@etechinvest.bsky.socialInfographic: 6 quick fixes to secure your smart home—passwords, updates, network isolation, and 2FA. Save the checklist. #IoTSecurity #SmartHome
@etechinvest.bsky.socialQuick checklist for securing smart homes: change defaults, update firmware, segment networks. Image shows 7 steps you can do today. #IoTSecurity
@bryleysys.bsky.socialComing soon to a Mass road near you? There's arguments about reduced collisions and about privacy. But these are IoT devices – the least patched so highly vulnerable to security compromise ... bryl.us/qe6o #iotsecurity #newenglandit
@thedailytechfeed.comKATARU IoT malware blends Linux exploit chains with encrypted C2 and Mirai-style DDoS—rooted devices are just the beginning. #IoTSecurity #Malware #Linux #KATARU #DDoS #Cybersecurity thedailytechfeed.com/kataru-malwa...
@helpnetsecurity.comGetting a stranger’s phone kicked off the cellular network costs a few dollars
📖 Read more: www.helpnetsecurity.com/2026/09/11/c...
#cybersecurity #cybersecuritynews #infosec #IoTsecurity #mobilesecurity #5G
@thothtrustcom.bsky.socialDeploying 100s of #IOT devices? Attach #CodeWav #NFC stickers w #PKI certs 2 each sensor. Tap 2 provision cryptographically verified onboarding. Zero manual key entry. Scale securely.
Visit us at: thothtrust.com/products.htm...
@connectedgeek.bsky.social🚨 A hacked baby monitor gives attackers a live feed of your home AND a foothold into your network. It's not paranoia — it's happened thousands of times. connectedgeek.net #IoTSecurity
@finite-state.bsky.socialThere’s still time to ask Larry anything. 💬
Larry Pesce is live on Reddit discussing IoT, wireless and product security.
Join the AMA: https://www.reddit.com/r/cybersecurity/comments/1wanu96/ama_im_larry_pesce_20_years_of_iot_and_wireless/
