A critical USR-W610 vulnerability exposes hardcoded administrative credentials. Learn how to secure your PUSR IoT converters from exploitation.

CISA warns of 7 Naxclow IoT vulnerabilities, including a hard-coded key (CVE-2026-28742) enabling device takeover of doorbells and cameras.

A critical Yarbo robot vulnerability lets attackers extract hard-coded MQTT credentials and command the global fleet via CVE-2026-10557.

Introduction

Hello everyone! I’m satej come up here with another blog about hacking Fire TV stick with ADB (sounds cheesy and cool), in todays writeup…

Yoosee YS-HPC01 Pentest Series — Part 2: Live Traffic, Open Ports, and 423 Requests to Beijing

A Beginner friendly Guide to solving the Bugged Room on TryHackMe

A compact library for managing memory cards and USB drives has become a shared risk point. Researchers at runZero have shown it puts an entire class of embedded devices at risk. Specifically, they…

At a Glance Malware family RustDuck Threat actor Unattributed Targets / victims IoT devices, web apps, and enterprise servers; 59 victim IPs and 203 attack incidents in XLab telemetry Delivery vec…

Yoosee YS-HPC01 Pentest Series — Part 3: Port Exploitation, Protocol Fingerprinting, and a Camera That Throttles Back