Shark vacuum robots have an unpatched flaw that could let attackers access cameras, WiFi passwords, and home maps, researcher claims.

Researcher Tokay0 says SharkNinja failed to fix the issue more than 90 days after private disclosure.

The flaw involves AWS IoT certificates, with 673,000 exposed SharkNinja devices observed in one AWS region.

you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 3 months ago (2 children)

https://valetudo.cloud/

Don’t buy IOT devices you can’t control. If it’s not usable via valetudo or is offline capable don’t get it. Tell your friends and family the same. Own your technology, limit your attack surfaces.

  • source
  • hideshow 2 child comments