IoT Research

CVE-2025-55182 Exploitation Hits the Smart Home 2025-12-09 at 14:09 By Ioan Alexandru MELNICIUC Shortly after details of CVE-2025-55182 became public, we began noticing large volumes of exploitation attempts across our endpoint and network sensors. The vulnerability, informally referred to as React2Shell, affects Node.js applications that allow user-supplied JSON data to influence internal JavaScript object structures. […]

Notes on ThroughTek Kalay Vulnerabilities and Their Impact on the IoT Ecosystem 2024-05-15 at 16:01 By Bitdefender Since 2014, Bitdefender IoT researchers have been looking into the world’s most popular IoT devices, hunting for vulnerabilities and undocumented attack avenues. This report documents four vulnerabilities affecting devices powered by the ThroughTek Kalay Platform. Due to the

Vulnerabilities Identified in LG WebOS 2024-04-09 at 16:46 By Bitdefender As the creator of the world’s first smart home cybersecurity hub, Bitdefender regularly audits popular IoT hardware for vulnerabilities. This research paper is part of a broader program that aims to shed light on the security of the world’s best-sellers in the IoT space. This

Vulnerabilities identified in Bosch BCC100 Thermostat 2024-01-11 at 16:32 By Bitdefender Several factors underscore the importance of smart thermostats: energy efficiency, environmental sustainability, and the spread of smart home technologies. These devices have a major impact on energy conservation and its associated cost savings, while making homes noticeably more comfortable. This combination of energy efficiency,