Loading feed…
Latest Hacking News0 Hot0 comments5 min read
Shark Vacuum Vulnerability Lets Attackers Hijack Cameras Across an Entire AWS Region
A security researcher (tokay0) discovered a critical vulnerability in Shark robot vacuums stemming from overly permissive AWS IoT certificate policies. By physically opening a single Shark vacuum and extracting its certificate via an unauthenticated U-Boot console, an attacker can subscribe to wildcard MQTT topics and publish to AWS IoT Shadow states for all Shark vacuums in an entire AWS region. The shadow's Exec_Command field passes up to 1,000 bytes to a shell with high privileges, enabling access to live camera feeds, movement controls, home maps, and Wi-Fi passwords in plaintext. Monitoring MQTT traffic for 24 hours revealed ~1.52 million unique device serial numbers, with ~674K confirmed vulnerable. The flaw is a cloud-side policy misconfiguration, not a firmware bug, meaning SharkNinja can fix it server-side without touching devices. Despite disclosure starting in March 2026, no patch exists four months later. The researcher published after the 90-day window expired with no fix committed.
Source: https://latesthackingnews.com/2026/07/26/shark-vacuum-vulnerability-aws-region. 8sync News only summarizes and links out; content copyright belongs to the authors and original sources.
