Your Zoom and Your Vacuum Are Both Watching You 👀🧹

Two very different devices made headlines today for the same reason: they can be hijacked by attackers you'll never see. One is the video app you probably used this week. The other might be cleaning your floors right now.

📞 Zoom's "9.8-out-of-10" Flaw Could Hand Over Your Account

Zoom is warning about a critical security hole in its Windows desktop app and SDK, rated a near-worst-case 9.8 out of 10 in severity. Because of a flaw in how the app checks incoming data, a remote attacker doesn't need your password or any login at all to potentially take over your account. That matters because Zoom sits at the center of how millions of people and businesses meet, share screens, and swap sensitive files every day. The good news: Zoom has already released an update that fixes it, and says it hasn't seen anyone exploit it yet. The fix is simple but urgent — open Zoom and update to the latest version today, before someone else beats you to it.

Read more

🧹 Millions of Shark Robot Vacuums Can Be Turned Into Roving Spies

A researcher discovered that every internet-connected Shark robot vacuum can be remotely controlled by attackers — and there are millions of them. By pulling secret keys from a single vacuum, an attacker could snoop on traffic from over a million devices and send commands to hundreds of thousands of them. Even creepier, these vacuums can leak the map of your home, your Wi-Fi password in plain text, and even a live camera feed, effectively turning a cleaning robot into a mobile surveillance camera rolling around your house. SharkNinja was warned months ago, but the flaw still hasn't been patched. Until it is, it's worth keeping smart home gadgets on a separate guest Wi-Fi network and thinking twice about which "smart" devices really need internet access.

Read more

Stay ahead of threats with GOCO Security at gocosecurity.com.