Google disrupted the XCPE botnet, a backdoor built into the firmware of more than 1.3 million Android TV set-top boxes by their maker.

San Jose cybersecurity presenters walked attendees through risks tied to voice assistants, robot vacuums and smart cameras and advised steps—separate IoT networks, multifactor authentication and device configuration—to lower exposure.

At a Glance Malware Family Doorway botnet (modular Rust scanning and delivery engine with staged loaders) Threat Actor Unattributed operator group known internally as "the team" (suspected commercial proxy network builder) Target / Victims Routers, IP cameras, digital video recorders, optical network terminals, and enterprise Java servers (4,217 logged IPs and 1,772 mapped victim devices across 75+ territories) Delivery Vector…

TL;DR Kaspersky researchers have disclosed an Intelbras camera vulnerability, a denial-of-service bug that lets anyone on the local Wi-Fi network take IP cameras offline. The flaw sits in an unauthenticated firmware update endpoint. Intelbras fixed it in firmware R.260804, and MITRE scored it 5.1 (Medium) under CVSS 4.0. An attacker on the same network can send one request that forces the camera to reboot and drop offline.

At a Glance Organization VIDAA OS and its ACR partner Unruly (exposure); Samsung Tizen and Vizio SmartCast (opt-out findings) Data exposed ACR detection results with device IDs, app names and content categories such as religion, politics and health Records affected 57 million detection results from more than one million TVs, counted by researchers in a three-hour sample Cause

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste_modules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injecti

Anthropic is warning that small AI models could soon be able to self-replicate across consumer IoT devices, from Android TV boxes to smart ovens, creating distributed botnets capable of running AI wor...

앤스로픽은 소형 AI 모델이 앞으로 IoT 기기에서 스스로 복제하는 멀웨어로 이어질 수 있다고 경고했습니다. 핵심은 값싼 기기 여러 대에 모델을 나눠 올려도 추론이 가능해지면서, 중앙 통제점 없이 퍼지는 AI 웜 가능성이 커진다는 점입니다. 다만 실험 단계에서는 여전히 해결해야 할