IoT Security

Your UniFi Console Is a Server: What Security Bulletin 066 Actually Requires

Ubiquiti disclosed 25 vulnerabilities across UniFi applications and devices. The critical issue is not the headline CVSS score, but which management services an attacker can reach.

Your Headphones Have Firmware: FOTA Is the IoT Attack Surface Nobody Patches

Bluetooth earbuds, speakers, and IoT devices now ship with firmware update paths, microphones, pairing protocols, and cloud-adjacent features. That does not make every headset a network foothold, but it does make the accessory worth threat-modeling.

FBI Seizes NetNut: How a 2-Million-Device Proxy Botnet Hid Inside Smart TVs

The FBI seized hundreds of domains tied to NetNut after Google and security researchers linked the residential proxy network to Popa, a 2-million-device botnet of smart TVs and streaming boxes.

The EDR Dead Zone: How Attackers Pivot Through Cameras and NAS Devices

IoT devices like IP cameras and NAS boxes sit on your network but outside your EDR coverage. Here's how attackers exploit them to pivot — and how defenders can detect it.