232 articles on IoT security, smart devices, and protecting your connected home.
The Aisuru botnet — a TurboMirai-class network assembled from consumer broadband routers, CCTV cameras, and DVRs — drove a record 29.7 Tbps DDoS attac...
Beginning September 11, 2026, every manufacturer that sells a connected device into the EU must report any actively exploited vulnerability within 24 ...
CVE-2026-4377, disclosed May 28 by CERT Polska, reveals that D-Link DWR-X1820 cellular routers generate their default administrative password directly...
On May 17, 2026, a botnet called RondoDox began exploiting CVE-2018-5999 — a critical unauthenticated vulnerability in ASUS routers that was patched i...
Hunt.io researchers discovered a new Mirai-based botnet called xlabs_v1 in early May 2026, targeting Android TV boxes, smart TVs, set-top boxes, and r...
On May 12, 2026, threat actors began mass-exploiting CVE-2024-9643 in Four-Faith F3x36 routers — a critical flaw involving hard-coded administrative c...
After UL Solutions abruptly withdrew as lead administrator amid a federal probe into its China ties, the FCC appointed ioXt Alliance to run the U.S. C...
Since August 2025, a botnet called KadNap has quietly infected 14,000+ ASUS routers and edge devices, turning them into residential proxies sold throu...
Flock Safety's 80,000-camera license plate reader network performs 20 billion vehicle scans per month, quietly feeding data to police, federal agencie...
A wave of critical CVSS 9.8 command injection vulnerabilities hit Totolink routers in late April 2026, with exploits publicly available for the A8000R...
A critical flaw in GeoVision's IP camera management software broadcasts admin credentials over UDP — and includes the decryption key in the same packe...
ShinyHunters breached ADT through a single phone call to an employee, then walked out with 5.5 million customers' personal data. It's the third ADT br...