#iot-security
16 stories taggediot-security.
ClingSTUN: The Linux Backdoor Hiding in Your Router's Traffic
A newly tracked malware strain is quietly turning home routers, security cameras, and smart-office hardware into a criminal relay network, and it uses the internet's own plumbing to avoid detection.
Botslab G980H Dashcams Ship With 13 Unpatched Flaws and the Vendor Has Gone Quiet
CISA lists authentication and session bugs in a popular Chinese dashcam line. The company hasn't responded.
Skullcandy Dime 3 earbuds let strangers pair over Bluetooth with no PIN, and owners can't patch them
A flaw in the Airoha chip inside Skullcandy's popular Dime 3 earbuds lets anyone nearby connect silently and listen through the microphone. Skullcandy has a fix, but no way for customers to install it.
Italian IoT Security Startup Exein Raises $270 Million and Hits $1.7 Billion Valuation
Exein wants to protect the physical machines that AI is increasingly running on. Its investors just bet $270 million that this is a real problem worth solving.
The US just seized the servers behind China's hacking-for-hire empire
A private Chinese company quietly ran shared attack tools for state hackers targeting NASA, the Federal Reserve, and US hospitals. The FBI just pulled the plug.
Ubiquiti Patches Three Critical Bugs in UniFi Cameras, Phones and Router OS
Flaws in UniFi Protect, UniFi Talk and UniFi OS score the highest possible severity and can be triggered over the network without a login.
Delhi's Electric Rickshaws Are Being Hacked via Bluetooth, and Nobody Has to Be a Programmer to Do It
Scammers with a free app are killing electric rickshaw engines in Delhi traffic, exposing a gap in India's push to clean up one of the world's most polluted cities.
Researchers Say 14,500 Dahua Cameras Fell to a Six-Week Hijack Campaign
Hunt.io traced Operation CameraSwarm through an exposed 407 MB working directory, revealing password guessing, two authentication-bypass flaws, and a peer-to-peer relay trick.
21 Cybersecurity Companies Changed Hands in July 2026
From a billion-dollar identity security deal to a bank buying a British consultancy, July was a busy month for cybersecurity acquisitions. Here is what each deal means in plain English.
Russian spies are hijacking Europe's security cameras to watch weapons move to Ukraine
Dutch intelligence says a Kremlin unit is quietly logging into internet-connected CCTV to track military convoys, aid shipments and troop positions.
One Hacked Shark Robot Vacuum Can Hand an Attacker the Keys to Every Shark Vacuum in the Region
A researcher pulled a security key off a $500 robot vacuum and used it to run commands on other people's Shark vacuums, including reading their Wi-Fi passwords in plaintext.
A Botnet Author Asked an AI for Malware. The AI Left the Warning Label On.
Researchers found TuxBot v3 Evolution, a new IoT botnet whose creator appears to have copy-pasted AI-generated code, safety disclaimer and all.
Six New Bugs in U-Boot Could Let Attackers Hijack Devices at Startup
Binarly researchers found flaws in the tiny program that boots routers, cameras and server chips. Two of them could let intruders run their own code before the device even wakes up.
80,000 Hikvision Security Cameras Left Wide Open — and Criminals Are Selling the Keys
A critical flaw in one of the world's most popular surveillance cameras has sat unpatched for nearly a year on tens of thousands of devices. Hackers are now trading access on underground forums.
CSIS Got a Warrant to Reach Into Canadian Routers and Kill Two Botnets
A Federal Court ruling unsealed June 15 is the first public use of CSIS threat-reduction warrant powers against infected infrastructure on Canadian soil.