Bitdefender says smart TVs lead home-device vulnerability observations
Across about 10.4 million routers, televisions were 22.7% of observations and port scans 90.1% of attack events.
36
Organization
Bitdefender
- Mentions · 7d1
- Mentions · 30d18
- All mentions24
- First seenAug 20, 2026
- Last mentioned19h ago
Timeline
24 articles · newest firstMidnight Mimosa malware ships in Android phone firmware
A platform-signed system app installs ad-fraud plugins after briefly disabling the Play Store; proxy use was not seen.
70
Midnight Mimosa hides ad-fraud malware in cheap Android firmware
Bitdefender saw thousands of infected phones in more than 150 countries over about two years.
74
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Chained webOS flaws allow local-network pre-auth root on some LG smart TVs.
54
Product Walkthrough: Bitdefender AI Visibility and Control
Bitdefender GravityZone AIVC inventories AI tools, agents, and MCP connectors on Windows endpoints without reading prompts.
34
Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies
Preinstalled Midnight Mimosa malware on cheap Android phones enables ad fraud and residential proxies.
76
LG webOS Flaws Let Remote Attackers Execute Commands as Root Without Authentication
Four LG webOS flaws can bypass pairing and run commands as root on exposed smart TVs.
48
Low-cost Android phones are arriving with malware that owners can’t uninstall
Bitdefender found preinstalled Midnight Mimosa malware on budget Android phones that owners cannot uninstall.
74
Android Firmware Malware Uses Ad Fraud and Proxy Botnets to Generate Revenue
Midnight Mimosa, preinstalled Android firmware malware, monetizes thousands of phones in 150 countries through ad fraud and proxies.
74
Midnight Mimosa Infects Android Phones Before Users Even Turn Them On
Midnight Mimosa ships in low-cost Android firmware, silently running ad fraud and proxy modules before first boot.
76
Bitdefender finds preinstalled Android malware you can’t uninstall, seen in 150 countries
Bitdefender found unremovable Midnight Mimosa malware preinstalled on cheap MediaTek Android phones in 150 countries.
78
Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries
Bitdefender found Midnight Mimosa firmware malware preinstalled on budget Android phones in over 150 countries.
72
Low-cost Android phones ship with residential proxy malware
Midnight Mimosa malware preinstalled on cheap Android phones enables ad fraud and residential proxy abuse.
74
Thousands of cheap Android phones shipped with ad-fraud malware
Bitdefender found ad-fraud malware preinstalled in the firmware of thousands of cheap MediaTek-based Android phones sold across more than 150 countries.
58
The phone was compromised before the user turned it on: the rise of Midnight Mimosa
Bitdefender found preinstalled Midnight Mimosa malware on low-cost Android phones, enabling fraud, proxies, and remote control.
76
Police disrupt KillSec ransomware, arrest suspected teenage leader
Spanish police arrested KillSec's suspected 16-year-old leader and seized the ransomware gang's leak site, five servers, and infrastructure across Europe.
65
Police dismantle KillSec ransomware gang allegedly led by 16-year-old
International Operation KillSwitch seized KillSec's servers and leak site, arrested three suspects, and identified a 16-year-old as the ransomware gang's leader.
78
Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader
Europol-led Operation KillSwitch dismantled KillSec ransomware, seizing its leak site and 110TB of stolen data; a 16-year-old alleged leader was identified.
72
SilkParasite Hackers Use SpiceRAT Infrastructure to Target Central Asian Governments and Energy Firms
Hunt.io links SpiceRAT C2 infrastructure to the China-nexus SilkParasite espionage cluster targeting Central Asian governments, telecoms, and energy firms.
55
Google’s Early Access is creating a blind spot for malicious apps
Bitdefender found thousands of Google Play Early Access apps with deceptive behavior, including ad-fraud-capable utilities requesting excessive permissions on Android devices.
45
Deceptive Android Apps Exploit Google Play Early Access to Evade Reviews
Bitdefender reports deceptive Google Play Early Access apps use deepfake celebrity ads and fake rewards to lure users into ad-fraud schemes.
42
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
Check Point details JSCeal, a V8-compiled JavaScript stealer that replays stolen cookies to bypass Google authentication, spread via crypto malvertising.
45
China’s ‘SilkParasite’ espionage operation targeting Central Asia with AI
Bitdefender attributes the SilkParasite espionage campaign to China-linked actors using five new malware strains and AI-assisted development to target Central Asian governments.
74
SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs
Bitdefender reports SilkParasite, a China-nexus espionage cluster targeting Central Asian governments with seven RATs, five newly documented, delivered via spearphished RAR archives.
70
Related CVEs
by mentions- CVE-2023-63171%9.8A prompt bypass exists in the secondscreen.gateway service running on webOS version 4 through 7
- CVE-2023-63185%7.2A command injection vulnerability exists in the processAnalyticsReport method from the com.webos.service.cloudupload service on webOS version 5 through 7
- CVE-2023-63204%7.2A command injection vulnerability exists in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint on webOS versions 5 and 6
- CVE-2023-63196%7.2A command injection vulnerability exists in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service on webOS version 4 through 7
Appears with
- Googlevendor · 11
- Androidproduct · 10
- Bitdefendervendor · 10
- Midnight Mimosamalware · 10
- MediaTekvendor · 9
- Google Playproduct · 8
- Googleorganization · 4
- Shenzhen Zedielorganization · 4
- LGvendor · 3
- Europolorganization · 3
- KillSecthreat actor · 3
- SilkParasitethreat actor · 3
- Group-IBorganization · 3
- Android.Phantommalware · 2
- Cubotvendor · 2
- webOSproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.