#sharkninja — Public Fediverse posts on home.social

Bernhard Biedermann @[email protected] · 2026-07-20 · 20:16 UTC

#SharkNinja und die #IoT Sicherheit. 😨

Um was geht es?

♦️ Shark vacuum robots have an unpatched flaw that could let attackers access cameras, WiFi passwords, and home maps, researcher claims.

♦️ Researcher Tokay0 says SharkNinja failed to fix the issue more than 90 days after private disclosure.

♦️ The flaw involves AWS IoT certificates, with 673,000 exposed SharkNinja devices observed in one AWS region.

♦️ Attackers need physical device access first, limiting the risk mainly to technically skilled people with a Shark device.

Was ist das #security Problem?

"The problem lies with an unpatched AWS Internet of Things (IoT) policy flaw within the Shark vacuums. The researcher discovered the problem after disassembling a Shark RV2320EDUS robot vacuum.!

Wie viele Geräte sind betroffen?

"At the same time, over 1.5 million unique SharkNinja devices were observed in the same AWS region. If a similar proportion of affected devices existed across all 39 AWS Cloud regions, the number of exposed devices could reach into the millions."

Das ist der Grund warum #IoT immer einen sehr guten Schutz haben sollten. Die Anbieter handeln aus meiner Sicht grob fahrlässig wenn sie keine Abhilfe schaffen. 🔥

Ob die #EU einmal zeigen könnte, so geht es nicht? Eine angemessen hohe Strafe dürfte die Sicherheit deutlich verbessern. 🙂

Noch besser, keinen #IoT-Mist kaufen der die Sicherheit untergräbt. 👍

https://cybernews.com/security/sharkninja-vacuum-security-flaw-researcher/

#IoT #EU #security

#sharkninja #iot #security #eu

Daily CyberSecurity @[email protected] · 2026-07-20 · 06:40 UTC

A Shark robot vacuum vulnerability lets attackers run code remotely, hijack movement, and access cameras. Over 673,000 devices confirmed exposed, unpatched.

#Shark #SharkNinja #RCE #IoTSecurity #RobotVacuum #Vulnerability

https://meterpreter.org/shark-vacuum-rce/?utm_source=mastodon&utm_medium=jetpack_social

#shark #sharkninja #rce #iotsecurity #robotvacuum #vulnerability

Daily CyberSecurity @[email protected] · 2026-07-20 · 06:40 UTC

A Shark robot vacuum vulnerability lets attackers run code remotely, hijack movement, and access cameras. Over 673,000 devices confirmed exposed, unpatched.

#Shark #SharkNinja #RCE #IoTSecurity #RobotVacuum #Vulnerability

https://meterpreter.org/shark-vacuum-rce/?utm_source=mastodon&utm_medium=jetpack_social

#vulnerability #robotvacuum #iotsecurity #rce #sharkninja #shark