Loading story…
Organizations face significant data leakage risks when recycling or refurbishing IT equipment if proper sanitization is not enforced. Certified erasure, chain of custody, and audit trails are essential controls, especially as sustainability initiatives increase device turnover. Regulatory compliance requires verifiable documentation of secure disposal to prevent breaches and regulatory penalties.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
3 references tracked. Mallory keeps watching after this page renders.
lawfaremedia.org
Open sourcesecuritysenses.com
Open sourcesecuritysenses.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Researchers reported that second-hand enterprise routers sold without proper sanitization still contained sensitive corporate data, exposing a broad operational security failure in hardware disposal practices. Devices acquired from the resale market reportedly held recoverable configuration files, VPN credentials, network diagrams, hashed or plaintext administrative details, and other internal information that could give an attacker insight into enterprise environments and remote-access infrastructure. The findings show that organizations are retiring networking equipment without securely wiping storage or destroying components, creating a low-cost path for intrusion through leaked secrets embedded in old hardware. The exposed data could enable follow-on attacks such as unauthorized network access, credential abuse, and targeted reconnaissance, underscoring the need for verified decommissioning procedures, secure erasure, and asset disposal controls for routers and other infrastructure devices.
Jul 12, 2026
The proliferation of smart devices, including wearables, tablets, and medical equipment, has significantly increased the potential attack surface for both individuals and organizations. As the adoption of these devices accelerates, users often overlook the security implications associated with their daily use. Many smart devices operate with outdated firmware, which can harbor known vulnerabilities that attackers actively exploit. Unlike operating system updates, firmware updates are frequently manual and neglected, making these devices attractive targets for cybercriminals. Default passwords and unsecured network connections further exacerbate the risk, as they provide easy entry points for unauthorized access. Compromised personal devices can serve as gateways for attackers to infiltrate sensitive corporate networks, especially in environments where remote work is prevalent. Even seemingly innocuous devices like fitness trackers or smartwatches can be leveraged to harvest data or hijack Bluetooth connections. The lack of user awareness regarding the security settings and update requirements of their devices contributes to the persistence of these threats. Security experts emphasize the importance of vigilance and proactive management of device security, including regular firmware updates and the use of strong, unique passwords. Organizations are encouraged to educate employees about the risks posed by personal devices and to implement policies that mitigate potential exposures. Cybersecurity Awareness Month serves as a timely reminder for both individuals and businesses to reassess their device security practices. By understanding the vulnerabilities inherent in smart devices and adopting recommended security measures, users can significantly reduce the likelihood of compromise. The integration of smart devices into daily life and work routines necessitates a heightened focus on cybersecurity hygiene. Security professionals recommend regular audits of device settings and network connections to identify and address weaknesses. The growing interconnectivity of personal and corporate systems underscores the need for comprehensive security strategies that encompass all endpoints. Ultimately, maintaining the security of smart devices is a shared responsibility that requires ongoing attention and education.
Jun 29, 2026
Security experts and technology journalists have published a range of practical advice and strategies to help users protect their mobile devices and digital privacy. These resources emphasize the importance of operations security (opsec) for all users, including teenagers, and provide step-by-step recommendations for securing smartphones against theft, surveillance, and data compromise. Key measures include recording device identifiers like IMEI numbers, enabling tracking features such as 'Find My' on iOS and Android, using strong screen locks, and tightening lock screen access to prevent unauthorized use. The guidance also highlights the risks associated with default device configurations, the prevalence of tracking by major vendors, and the need for deliberate hardware and software choices to maximize privacy. In addition to technical setup advice, the content addresses broader privacy concerns, such as minimizing digital footprints on social media and streaming platforms, and making informed decisions about device brands and operating systems. Recommendations include opting for devices with long-term security support and unlockable bootloaders, avoiding brands with poor update policies or preinstalled telemetry, and considering privacy-focused alternatives like GrapheneOS or Linux-based phones for advanced users. The overall message is that while perfect privacy is challenging, users can significantly reduce their exposure to threats and surveillance through proactive configuration and awareness of evolving risks in the mobile ecosystem.
Jun 29, 2026