iot-security

Shark Vacuum AWS Cert Flaw Lets One Key Hijack an Entire Fleet's Root Shell

A stolen AWS certificate lets attackers run root commands on any Shark robot vacuum in the same cloud region, exposing cameras and Wi-Fi credentials.