Hikvision RCE surge in Ukraine warns of serious risks to exposed camera systems. #Cybersecurity #Hikvision #RCE #CVE2021-36260 #Ukraine #IoTSecurity #NetworkSecurity https://thedailytechfeed.com/old-hikvision-flaw-sees-spike-in-rce-scanning-in-ukraine/

Router device list shows "Espressif"? Often a smart plug or bulb, named for the chip inside, not the brand on the box. Can't match every line to a real object? Start there. Free scan, code FREE: https://cybersecuritypa.com?utm_source=bluesky&utm_medium=social&utm_campaign=growth-agent #IoTSecurity

The ClingSTUN Linux backdoor hides in public STUN traffic and turns old routers into proxy nodes. See the exploited CVEs and how to detect it.

#ClingSTUN #LinuxMalware #Backdoor #STUN #FortiGuard #Fortinet #RouterSecurity #IoTSecurity

Qiui Cellmate IoT chastity cage: API flaws let anyone remotely lock all devices. No manual override or physical key. The same API gave access to location data and passwords. #IoTSecurity #IoT #APIsecurity https://is.gd/lmjiZY

SPEAKER SPOTLIGHT ⚡

Kolja Grassmann from @neodyme.io presents "Keyless Entry: Hacking SwitchBot Smartlocks" at #BSidesBerlin!

See how smart lock flaws & weak encryption allow silent door unlocks without physical tampering.

👉 bsides.berlin

#IoTSecurity #InfoSec

Cling botnet hijacks Realtek Jungle SDK using STUN protocol as stealth C2 channel—firmware updates and STUN traffic monitoring are critical. #IoTSecurity #Botnet #Realtek #STUN #Cling #CyberThreat https://thedailytechfeed.com/cling-botnet-misuses-realtek-jungle-sdk-rce-via-stun-based-c2/

Digi DAL OS vulnerability CVE-2026-75937 (CVSS 9.4) lets attackers run root commands on Digi Accelerated Linux devices. Patch now.

#Digi #DALOS #CVE202675937 #CommandInjection #IoTSecurity #OTSecurity #Vulnerability

TP-Link vulnerabilities include Tapo camera vulnerabilities like CVE-2026-102369 (CVSS 8.7) plus router and Deco flaws. Update firmware now.

#TPLink #Tapo #CVE2026102369 #CVE2026102294 #CVE202684682 #IoTSecurity #RouterSecurity #Vulnerability

From an unauthenticated music add-on to root on the host. At #Pwn2Own Ireland 2025, our team chained their way through the Home Assistant Green and walked away with $20k. Emanuele Barbeno shows the full chain, and how it nearly failed on stage: blog.compass-security.com/2026/10/pwn2...

#IoTSecurity

CISA warns the Viidure dashcam app leaks hardcoded cloud credentials (CVE-2026-96587) and public storage (CVE-2026-94204). The vendor has not responded.

#Viidure #Dashcam #CISA #CVE202696587 #HardcodedCredentials #CloudSecurity #AndroidSecurity #IoTSecurity

Ziroom ZHOME A0101 v1.0.1.0 hit by CRITICAL command injection (CVE-2026-102794). Exploit is public, vendor silent. Assess your exposure and segment devices if possible. https://radar.offseq.com/threat/cve-2026-102794-command-injection-in-ziroom-zhome-a0101-70f3389000d03735 #OffSeq #IoTSecurity #C...

wolfSSL 5.9.4 patches 10 wolfSSL vulnerabilities, including TLS authentication bypass flaws CVE-2026-93302 and CVE-2026-89136. Upgrade now.

#wolfSSL #wolfSSLVulnerabilities #TLS #AuthenticationBypass #EmbeddedSecurity #Cryptography #IoTSecurity #PatchNow

CRITICAL: Ziroom ZHOME A0101 v1.0.1.0 has a command injection risk (CVE-2026-101264). No patch — limit API access & watch for updates. Full system compromise possible. https://radar.offseq.com/threat/cve-2026-101264-command-injection-in-ziroom-zhome-a0101-06a3a86bcb9501aa #OffSeq #IoTSecurity #CV...

A license plate camera in public service ran a 2018 Android patch level, with plaintext credentials and its encryption key beside the data it protected.

Larry Pesce on why the firmware pattern reaches past one vendor. #IoTSecurity #FirmwareSecurity

https://bit.ly/4yYpb9V

Three unauthenticated ViewSonic vCast flaws can reportedly be chained to compromise ViewBoard smart displays.

Attackers on the same network could capture screen content, install APKs and execute arbitrary code.

cyberupdates365.com/viewsonic-vc...

#Cybersecurity #IoTSecurity #ViewSonic

Abandoned IoT apps keep sending sensitive data to broken servers

📖 Read more: www.helpnetsecurity.com/2026/09/18/a...

#Android #IoT #IoTsecurity #datasecurity #cybersecurity #cybersecuritynews #securitynews @umasspress.bsky.social @umassamherst.bsky.social

Is your home Wi-Fi as secure as you think? 🏠🔐

Our latest blog explains how to protect your home network, smart devices, and remote work setup from common cyber risks.

Read more 👇
novoit.uk/cybersecurit...

#CyberSecurity #HomeCybersecurity #RemoteWorking #IoTSecurity #NovoIT

CVE-2026-87827 (CVSS 10) is a KGUARD DVR vulnerability exploited by the Mirai botnet for unauthenticated RCE and complete device compromise.

#KGUARD #DVR #CVE202687827 #Mirai #Botnet #IoTSecurity #RCE #DDoS #ExploitedInTheWild #InfoSec

EFM ipTIME C200E 1.094 faces a CRITICAL OS command injection flaw (CVE-2026-90847, CVSS 9.4). Public exploit exists — restrict access and monitor devices. https://radar.offseq.com/threat/cve-2026-90847-os-command-injection-in-efm-iptime-c200e-1c30057b126bbbf4 #OffSeq #Vulnerability #IoTSecurity

Infographic: 5 quick wins to harden your smart home - passwords, updates, network segmentation. Which step will you do today? #IoTSecurity