Secure Bulletin Navigating the cyber sea with knowledge
Home > Tag > IoT security
#IoT security

Nearly 5,000 Danfoss-Linked Systems Found Exposed Online After Supermarket Refrigeration Attacks

14 October 2026  |  dark6  |  Vulnerability

A fresh scan has identified 4,980 internet-facing hosts referencing Danfoss equipment, with France alone accounting for more than half, days after attackers remotely triggered defrost cycles at French...

>> read more

Nine-Day Scanning Surge Targets Unpatched Hikvision Cameras Across Ukraine

9 October 2026  |  dark6  |  Vulnerability

GreyNoise logged a sharp nine-day spike in scanning and exploitation attempts against internet-exposed Hikvision cameras in Ukraine, almost all aimed at the four-year-old, maximum-severity CVE-2021-36260 command injection flaw....

>> read more

Over 14,000 Dahua Cameras Compromised With Backdoors That Survive Factory Resets

5 September 2026  |  dark6  |  Malware

Researchers at Hunt.io say a 35-day campaign compromised more than 14,000 internet-connected Dahua cameras, planting hidden administrator accounts and abusing cloud recovery codes that persist even through password...

>> read more

FBI Dismantles Chinese State-Sponsored Botnet That Powered a Global Hacking Platform

28 August 2026  |  dark6  |  Cybercrime

The FBI and Department of Justice have seized the domains behind QScan and QTRouter, a pair of linked platforms that a Chinese state-sponsored group allegedly used to hijack...

>> read more

Tenda Router Backdoor (CVE-2026-11405) Lets Attackers Skip Login and Seize Full Admin Control

7 July 2026  |  dark6  |  Vulnerability

A hardcoded authentication backdoor in Tenda FH1201, W15E, AC10, AC5, and AC6 routers (CVE-2026-11405) lets attackers log in as admin with any username. The undocumented flaw sits in...

>> read more

Seven New CVEs in FatFs Filesystem Driver Put Millions of Embedded and IoT Devices at Risk

6 July 2026  |  dark6  |  Vulnerability

runZero has disclosed seven new CVEs in FatFs, the FAT/exFAT filesystem driver used across ESP-IDF, STM32Cube, Zephyr, MicroPython, and countless other embedded platforms. The bugs range from CVSS...

>> read more

Critical wolfSSL Vulnerabilities Expose Billions of Servers and IoT Devices to Certificate Forgery and RCE

1 July 2026  |  dark6  |  Vulnerability

Multiple newly disclosed vulnerabilities in the wolfSSL embedded TLS library — including certificate trust bypasses, heap overflows, and post-quantum cryptography weaknesses — put billions of servers, IoT devices,...

>> read more