// iot vulnerability

All signals tagged with this topic

Nov 2

Pentagon investigates coordinated freezer sabotage at U.S. military bases

French supermarket chains suffered synchronized freezer failures in July that security researchers attributed to compromised IoT devices. The Pentagon's Criminal Investigation Service is now examining whether identical attacks hit American military commissaries in August, suggesting a shift from retail supply chain disruption to defense infrastructure targeting. If confirmed, military bases would face material risk: commissaries support both personnel morale and operational readiness, and the coordination required across distributed facilities implies either sophisticated state-level capability or a widely proliferated attack toolkit accessible to multiple threat actors. The timing—French incidents in July, U.S. military facilities in August—indicates either deliberate signal-sending or a proof-of-concept already in active circulation.

theme-connected automotive security iot vulnerability malware threat landscape

Sep 18

Android Car Malware Marks Vehicles as Primary Attack Target

Source: Featured Blogs - Forrester

Researchers discovered the first malware explicitly targeting Android Automotive OS, moving car hacking from theoretical vulnerability research into active exploitation. Vehicles are no longer collateral damage in broader Android compromises—attackers have developed car-specific code, signaling a large enough installed base and economic incentive to justify dedicated development. As automakers ship millions of Android-powered dashboards and infotainment systems, similar threats are likely to follow.

theme-connected hardware security iot vulnerability physical attack surface

Jul 30

How Keyboard Backlights Become a Data Exfiltration Channel

Source: Hackaday

Researchers have demonstrated that LED keyboard backlights can be modulated to encode and transmit data from air-gapped systems—machines intentionally isolated from networks to prevent breaches. The attack exploits a genuine security blind spot: while IT teams lock down network interfaces and USB ports, peripheral LEDs remain largely unmonitored and controllable through standard operating system drivers, creating an invisible exfiltration path that existing detection tools don't flag. The attack expands the attack surface from intentional data channels (USB, network) to any device with visible light output, forcing security teams to either disable hardware features wholesale or implement far more granular peripheral controls.

theme-connected infrastructure security iot vulnerability critical systems

May 17

Student halted Taiwan trains using unchanged 19-year-old crypto keys

Source: The Next Web

A university student used static cryptographic credentials to falsify safety signals across Taiwan's high-speed rail network. The operator had never rotated authentication keys in two decades. The breach shows that networked systems with poor credential management create vast attack surface—one person with basic technical knowledge can trigger cascading failures affecting millions of passengers. Legacy systems pose active danger when they inherit authentication practices predating modern threat modeling.