/
← Back to feed
advisories Zero Day Initiative

ZDI-26-558: (Pwn2Own) Amazon Smart Plug OTA Update Process Improper Certificate Validation Vulnerability

Zero Day Initiative • • Amazon

This vulnerability allows network-adjacent attackers to bypass certificate validation for OTA updates on affected installations of Amazon Smart Plug. Authent...

Read the full story Zero Day Initiative →

Related Coverage

advisories Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th) SANS ISC · Aug 25 advisories A Tale of Two SOCs: Insights From Two Red Team Assessments CISA Advisories · Aug 25 advisories CISA Adds One Known Exploited Vulnerability to Catalog CISA Advisories · Aug 25
FreeIntelHub · Open-source CTI platform

All articles belong to their respective owners. FreeIntelHub aggregates publicly available RSS feeds for informational purposes only. DMCA