Do Son PoC exploit code is public for CVE-2026-61515, an unauthenticated command injection in Puwell IP Camera firmware. CVSS 9.3. Details inside.
IOT
CVE-2026-66747: a Zbtlink router backdoor named ENDLESSDOORS gives unauthenticated remote code execution as root. No fix exists. CVSS 9.8.
The JDY botnet, a China-nexus IoT network tied to Volt Typhoon, now spans 1,500+ devices and scans for new bugs like CVE-2026-35616 within hours.
Microsoft confirms KB5073455 causes Windows 11 23H2 Enterprise PCs to restart instead of shutting down. Use the shutdown /s /t 0 workaround now.
MediaTek's Filogic 8000 brings Wi-Fi 8 to life at CES 2026. Focused on reliability and AI, it cuts latency and interference for the next-gen smart home.
Sekoia details PolarEdge, a Rust-based backdoor using a custom mbedTLS server for C2 on Cisco, QNAP, and Synology devices. The backdoor uses XOR 0x11 for config obfuscation and attempts to delete system utilities to block rivals.
MediaTek's October Security Bulletin discloses multiple High-severity flaws in its WLAN and GNSS chipsets, including buffer and stack overflows that risk RCE via memory corruption.
Qualcomm acquired open-source hardware platform Arduino to accelerate its Edge AI strategy. The partnership debuts the UNO Q dual-brain dev board for industrial and maker applications.
A new Morte botnet campaign is exploiting command injection flaws to hijack SOHO routers and enterprise apps. The Loader-as-a-Service model saw a 230% spike this summer.
A critical flaw (CVE-2025-57808) in ESPHome allows an attacker on the local network to bypass authentication entirely, gaining control of smart home devices.
A critical flaw (CVE-2025-41702) in Welotec egOS allows unauthenticated attackers to impersonate administrators, gain full control, and disrupt industrial systems.
TP-Link has patched a high-severity flaw (CVE-2025-8627) in its KP303 Smart Plug. The vulnerability allows remote attackers to issue unauthenticated commands.
A new report reveals the return of Gayfemboy, a Mirai-based IoT malware strain. It now uses advanced evasion techniques and targets multiple vendors to launch attacks.
CISA warns of critical flaws in Tigo Energy's Cloud Connect Advanced devices, including hard-coded credentials and command injection, that could allow remote attackers to take full control of solar systems.
MediaTek has patched out-of-bounds write vulnerabilities in its chipsets, exposing smartphones and IoT devices to local privilege escalation. Update firmware immediately.
Qualcomm's Q2 fiscal results exceeded expectations despite Apple's in-house modem. The company's strategic pivot to automotive, IoT, and data center markets is fueling growth.
Qualcomm unveils Wi-Fi 8 (802.11bn), focusing on "Ultra High Reliability" to deliver wired-like stability, with 25% lower latency and packet loss for AI, IoT, and enterprise automation.
vivo launches BlueOS, a new open-source OS kernel written in Rust, emphasizing security, minimalism, and broad support for Arm and RISC-V architectures in various terminal devices.
wolfSSL 5.8.2 patches four vulnerabilities, including a critical Apple trust store bypass (CVE-2025-7395) and predictable randomness after fork(), impacting secure communications.
MediaTek's July 2025 bulletin reveals critical flaws in chipsets, enabling local EoP, remote RCE, and info disclosure in smartphones, AIoT devices, and smart TVs.
Raspberry Pi launched a $4 Radio Module 2, offering Wi-Fi 4 and Bluetooth 5.2 to custom boards. It's pre-certified and ideal for low-cost IoT projects.
NFC Release 15 extends the sensing range to 2 cm, dramatically improving convenience, speed, and reliability for mobile payments, smart keys, and wireless charging.