CISA published advisory ICSA-26-286-02 on 13 October 2026 for the Swann SWIFI-SE2KIC, which ISSSource identifies as the Swann EVO 2K Indoor Wi-Fi Camera. Firmware 2.0.22 and every earlier version contain three missing-authentication flaws (CWE-306). Someone on the same local network can watch the camera without a password. There is no fixed firmwar
Anthropic published research on 12 October 2026 arguing that small AI models may be months away from self-replicating on commercial IoT devices such as off-brand Android TV boxes and other weakly defended home gadgets. The work is a controlled evaluation, not a report of an active worm in the wild.
Three vulnerabilities in LG's webOS can be chained so that an attacker on the same local network gets root on the TV, with no PIN and no action from the owner. SSD Secure Disclosure published the details on 12 October 2026, together with complete proof-of-concept code. LG has released a fix, listed in its security bulletin for TVs.