5 dispatches · latest 15 SEP 2026 · all keywords →
CISA advisory ICSA-26-251-01: CareCam Pro / ANJIA AJL33PC0801 cameras ship with a hard-coded credential that authenticates the U-Boot bootloader — physical access means full device compromise, and the vendor hasn't answered CISA's calls.
Yesterday the DOJ bricked QTFY's botnet. Today: one afternoon of grep against your own DNS logs tells you whether your cameras and plugs were quietly routing a Chinese state actor's traffic. Here's the exact pipeline, verified against the live IOC CSVs.
A ~$63 Chinese wireless USB print server whose entire job is to sit on your LAN and share a dumb printer just got a CISA ICS advisory: three CVEs, two of them CVSS 9.8 with no authentication required. All fixed in firmware 2.1.240. If you own one, patch it and VLAN it.
ICSA-26-239-05 rates the under-$40 Ebyte NA111-M RS485-to-Ethernet gateway with 13 CVEs on firmware 9013-2-17 — six of them CVSS 9.8, including an unauthenticated admin interface and cleartext MQTT. If you bolt one onto a PLC, a printer, or an e-bike, read this.
DOJ and FBI seized the domains that QTFY's QScan and QTRouter platforms hard-code — which bricked the whole toolset. Named targets include NASA, the Federal Reserve, and the U.S. Senate.