Three Microsoft Defender Zero-Days Are Being Actively Exploited — Two Still Don't Have Patches
Attackers are actively exploiting three zero-day vulnerabilities in Microsoft Defender. Two of the three remain unpatched as of mid-April 2026. If you...
Smart Home Security Blog
212 articles on IoT security, smart devices, and protecting your connected home.
Critical ESPHome Vulnerability Lets Anyone on Your Wi-Fi Push Malicious Firmware to Your Smart Home Devices
A critical authentication bypass flaw (CVE-2025-57808) in ESPHome's web server component allows anyone on your local network to bypass login entirely ...
Your Router Is Being Rented Out as a Cyberweapon: The Masjesu DDoS-for-Hire Botnet Explained
Masjesu is a commercial DDoS-for-hire botnet sold on Telegram that has quietly infected routers and gateways worldwide, launching floods of up to 290 ...
Russian Military Hackers Hijacked 18,000 Home Routers to Steal Your Passwords — FBI Fights Back With Operation Masquerade
APT28, Russia's GRU-linked hacking unit, quietly compromised thousands of TP-Link home routers and redirected their DNS to Kremlin-controlled servers ...
Six Federal Agencies Just Issued an Emergency Warning: Iranian Hackers Are Attacking Water, Power, and Government PLCs Right Now
FBI, CISA, NSA, EPA, DOE, and Cyber Command issued a rare joint advisory on April 7 warning that Iranian-affiliated threat actors have been actively d...
Burglars Are Hacking Your Smart Doorbell, Lock, and Garage Opener Before They Ever Touch Your Door
Law enforcement is reporting a disturbing new trend: criminals are exploiting security flaws in smart home devices to surveil homes before burglaries,...
Cisco's 2026 Wireless Security Report Is a Wake-Up Call: 85% of Organizations Were Hit, and IoT Devices Are the Weak Link
Cisco's 2026 State of Wireless report surveyed 6,000+ organizations and found that 85% experienced at least one wireless security incident last year. ...
78% of UK Manufacturers Hit by Cyberattacks: Why Your Factory Floor Is the New Cyber Battleground
The ESET report paints a stark picture of an industry caught between two eras. Manufacturing has enthusiastically embraced digital transformation — ER...
Your Streaming Service Got Hacked — And It Wasn't Even Their Fault: The Crunchyroll BPO Breach
A threat actor exfiltrated 100 GB of Crunchyroll user data — credit cards, emails, IPs — by first compromising Telus Digital, Crunchyroll's outsourced...
Poland's Winter Power Grid Attack: Sandworm's DynoWiper Targets 30 Facilities in Coordinated Critical Infrastructure Assault
Poland's Winter Power Grid Attack: Sandworm's DynoWiper Targets 30 Facilities in Coordinated Critical Infrastructure Assault...
The FCC Just Banned All Foreign-Made Routers — And the Chinese Hack That Made It Happen Is Way Worse Than You Think
The FCC's sweeping ban on foreign-manufactured routers isn't just about TP-Link. It's the direct result of three Chinese state-sponsored hacking campa...
