Finite State raises $27 million for device security platform
The Series C, led by The O.H.I.O. Fund, will fund international expansion and more autonomous firmware analysis.
1
Stories per day · 30 days
31 RSS
Relatedanthropic7self-replication6botnet5gemma5refrigeration5ai-safety4post-quantum4smart-tv4eiliko3energize-lab3firmware3node-red3ot3ot-security3qwen3supply-chain3tls3ai-worm2
131 stories, newest first · one card per story
Stories tagged #iot
Internet refrigerators hit by temperature attacks in Europe and US bases
Widespread attacks on exposed refrigeration controllers raised temperatures in blood banks and supermarkets across Europe and US military bases; systems were quickly detected and no data was altered.
2
FrodoBots EarthRover Mini+ firmware flaws enable remote root control
Hard-coded AWS and MQTT credentials enable fleet-wide root commands; the vendor says fixes are in the latest firmware.
1
Survey reviews post-quantum cryptography for industrial applications
Authors benchmark KEMs and signatures and discuss quantum resources needed to break common schemes.
Coldframe honeypot mimics supermarket fridge controllers
Coldframe is an open-source IoT honeypot presented on Hacker News that impersonates supermarket refrigeration systems.
Lightweight IoT IDS keeps accuracy with three to 15 features
On CICIoT2023, three features reached MCC 0.9622 and 15 preserved 99.97% of a 38-feature baseline.
ESP32-S3 workers share chaotic image encryption over Wi-Fi
Four workers cut runtime from 43.215 to 15.878 seconds, a 2.72 times speed-up, with entropy 7.999940 bits/byte.
Zener Avalanche Noise TRNG Entropy Characterized for NIST Compliance
Paper evaluates op-amp Zener TRNG across gain settings and capacitors, identifying optimal config for NIST SP 800-22/SP 800-90B compliance and low-cost ICS use.
Node-RED authentication hole being exploited in the wild
Attackers are exploiting CVE-2026-58115 to deploy flows that download and run a Linux bot on unpatched Node-RED instances.
1
Attackers exploit Siemens IoT2050 missing authentication flaw
VulnCheck observed in-the-wild exploitation of CVE-2026-58115 on Siemens SIMATIC IoT2050 Advanced devices, deploying Node-RED flows that download and run Linux bots.
European supermarkets hit by identical refrigeration cyberattacks
Multiple European supermarket chains including Carrefour, Spar and Ahold Delhaize suffered similar attacks on refrigeration systems following a French incident.
1
Max-severity Node-RED bug exploited to deploy Linux malware in OT
VulnCheck documented exploitation of CVE-2026-58115 allowing unauthenticated flows to execute commands on Siemens devices.
Supermarket fridge hacks spoil food in four more European countries
Ahold Delhaize and Colruyt confirmed settings were switched to defrost after similar spoilage at French stores last month.
Schneier notes bloatware found in a cheap car head unit
A Civic owner reportedly used Claude to inspect an Amazon head unit and found a call recorder, Baidu location services, and an always-on WebView assistant.
Kairos botnet infects Linux hosts through passwordless Telnet
Nozomi honeypots saw the same Go binary, which holds thousands of TCP sockets open during each attack.
Bitdefender says smart TVs lead home-device vulnerability observations
Across about 10.4 million routers, televisions were 22.7% of observations and port scans 90.1% of attack events.
Progressive physical-layer fingerprinting cuts Ethernet auth data
On held-out days the method cuts waveform data 75.1% and Raspberry Pi 5 CPU time 73.7% without raising error rates.
DNSFilter launches LUMINATE for DNS security and AI controls
The vendor says one agent and console cover shadow AI policy, remote users and devices that cannot run agents.
1
Distributed log parsers tested across 6,720 federated configurations
Five parsers plus aggregation methods were compared so clients can agree on event templates without ground-truth logs.
Researchers propose post-quantum key rotation for edge and physical AI agents
PARS-ESL records key epochs and membership, not operational traffic, so constrained agents can act as lightweight clients.
Energize Lab responds after Eiliko robots expose customer data
The Verge says photos, audio, and SSH access remained reachable after the company claimed external access was closed.
MQTT flow-tool choice changes clustering across public datasets
More than 380,000 flows from four datasets were built with Zeek-flowmeter, Argus, and NTLFlowLyzer, and no tool won every test.
Viral AI repo pitches cloning apps and device software without source
404 Media reports Reverse Engineer Anything passed 342,000 GitHub stars amid TV, IoT and software clone posts.
Forescout says healthcare OT lags on post-quantum cryptography
Of more than 2.5 million devices studied, few IoMT and OT systems run PQC-capable SSH, and many exposed medical systems lack TLS 1.3.
1