Loading story…
A recent study highlights significant privacy risks associated with the use of IoT devices in shared environments such as aircraft cabins. While data is typically protected during transmission between devices, sensitive information often becomes exposed once it reaches its intended recipient device. Authorized devices on the network can access more data than necessary for their function, potentially revealing passenger patterns and vendor-sensitive information. This internal exposure is considered a greater risk than external interception, as trusted devices with valid credentials can infer details from messages that were not intended for them, raising concerns about data sharing and trust among suppliers.
The broader issue of message security across devices and platforms is also underscored by the vulnerabilities introduced when data moves between different systems. End-to-end encryption may protect messages within a single platform, but this protection can be lost when messages cross into other platforms or protocols, such as from iMessage to SMS, leaving data unencrypted and accessible to carriers or third parties. These findings emphasize the need for robust privacy controls not only during data transit but also at the endpoints and across platform boundaries to prevent unintended data exposure.
See affected versions and whether adversaries are exploiting it.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Multiple disclosures highlighted privacy and safety risks stemming from insecure data handling in connected devices and services. A server-side storage weakness in **DJI Romo robot vacuums** allowed a researcher to obtain access tokens for more than **6,700** other vacuums and view sensitive user data such as **home floor plans**, **live video feeds**, and **microphone input**; reporting indicated some issues were patched, but residual risk remained (e.g., the ability to stream video without a security PIN). Separately, the game *Dungeon Crusher* exposed user information after a **misconfigured Elasticsearch** instance leaked **24.5 million** in-game chat records and purchase-related data, including **IP addresses**, **email addresses**, and **partial payment card details**, creating downstream risk for fraud and targeted phishing. Academic research also demonstrated how everyday systems can leak exploitable signals or be manipulated in the physical world. UC Irvine researchers presented **FlyTrap**, a physical-world attack against **autonomous target-tracking drones** in which AI-generated umbrella patterns can cause drones to approach an attacker closely enough to be captured or crashed, raising concerns for deployments in surveillance and security contexts. IMDEA Networks and partners showed that **Tire Pressure Monitoring System (TPMS)** sensors broadcast a fixed **unique ID** in cleartext radio signals, enabling low-cost receiver networks to track vehicles over time without line-of-sight, based on signals collected from **20,000+ vehicles** during a multi-week study.
Jun 29, 2026
A recent attempted cyberattack on a French ferry highlighted the growing threat posed by physical access to enterprise networks through small, easily concealed devices such as Raspberry Pi computers. The attacker attempted to compromise the vessel’s operations by plugging a Raspberry Pi paired with a cellular modem into the network, but was thwarted due to effective network segregation and the absence of remote access to critical controls. Security analysts warn that many enterprises are vulnerable to similar attacks, as their physical security measures often lag behind their digital defenses, leaving them exposed to threats from rogue devices introduced onsite. This incident underscores the broader issue of IoT and connected device security in enterprise settings, where digital signage, smart displays, and other networked endpoints are frequently overlooked as potential attack vectors. As organizations deploy increasing numbers of such devices across distributed locations, the attack surface expands, and the risk of compromise grows. Experts emphasize the need for robust physical security controls, network segmentation, and heightened awareness of the risks posed by seemingly innocuous devices that can provide attackers with a foothold inside corporate networks.
Jun 29, 2026
Enterprises are rapidly adopting new Wi-Fi standards such as Wi-Fi 7, driven by the need for higher throughput, lower latency, and improved spectrum utilization to support dense device environments. This evolution is reshaping security priorities, with a heightened focus on access control, visibility, and telemetry as organizations manage mixed generations of devices and increased encrypted traffic. The expansion into the 6 GHz band further complicates network management, requiring robust authentication and session continuity to maintain security in public venues, multi-dwelling units, and industrial sites. Simultaneously, the proliferation of rugged IoT devices in mission-critical environments such as defense, utilities, and public safety introduces unique cybersecurity challenges. These devices often operate outside traditional secure perimeters and in harsh, disconnected conditions, making conventional security models inadequate. The risks associated with compromised edge IoT devices include operational paralysis, data leaks, and disruption of essential services, with the financial and reputational impact of breaches continuing to rise. Organizations must rethink their security strategies to address the distinct requirements of both advanced Wi-Fi networks and rugged IoT deployments.
Jul 12, 2026