Do Son Smart TV ACR tracking survives opt-out on Samsung and Vizio, and an open server exposed smart TV viewing data from over one million TVs.
MQTT
A new DragonForce backdoor hides in Microsoft Teams TURN relays and falls back to MQTT. See how it works and how defenders can spot it.
A critical Yarbo robot vulnerability lets attackers extract hard-coded MQTT credentials and command the global fleet via CVE-2026-10557.
Apache ActiveMQ patches critical TLSv1.3 memory exhaustion (CVE-2026-39304) and an MQTT regression. Upgrade to 6.2.4 or 5.19.5 to secure your broker!
ASEC exposed a VPN supply chain attack deploying NKNShell, a Go-based backdoor that uses P2P NKN and MQTT for stealthy C2. The installer bypasses AMSI using AI-generated code and grants full remote access (MeshAgent, gs-netcat).
CVE-2023-6248 could allow attackers to remotely take control of fleets of vehicles, potentially leading to widespread chaos
WailingCrab, also known as WikiLoader, is a sophisticated malware that primarily targets organizations through email campaigns