A critical vulnerability affecting millions of internet-connected Shark robot vacuums allows attackers to remotely execute arbitrary code, hijack onboard cameras, and take control of motors. The flaw stems from misconfigured AWS IoT Core access policies and remains unpatched despite months of coordinated disclosure attempts with manufacturer SharkNinja. The vulnerability was discovered through hardware-level analysis of […]
The post Shark Vacuum RCE Flaw Lets Attackers Remotely Control Cameras and Motors appeared first on Cyber Security News.