Đang tải bảng tin…
Latest Hacking News0 Hot0 bình luận5 phút đọc
Shark Vacuum Vulnerability Lets Attackers Hijack Cameras Across an Entire AWS Region
A security researcher (tokay0) discovered a critical vulnerability in Shark robot vacuums stemming from overly permissive AWS IoT certificate policies. By physically opening a single Shark vacuum and extracting its certificate via an unauthenticated U-Boot console, an attacker can subscribe to wildcard MQTT topics and publish to AWS IoT Shadow states for all Shark vacuums in an entire AWS region. The shadow's Exec_Command field passes up to 1,000 bytes to a shell with high privileges, enabling access to live camera feeds, movement controls, home maps, and Wi-Fi passwords in plaintext. Monitoring MQTT traffic for 24 hours revealed ~1.52 million unique device serial numbers, with ~674K confirmed vulnerable. The flaw is a cloud-side policy misconfiguration, not a firmware bug, meaning SharkNinja can fix it server-side without touching devices. Despite disclosure starting in March 2026, no patch exists four months later. The researcher published after the 90-day window expired with no fix committed.
Nguồn: https://latesthackingnews.com/2026/07/26/shark-vacuum-vulnerability-aws-region. 8sync News chỉ tóm tắt và dẫn link; bản quyền nội dung thuộc tác giả và nguồn gốc.
