The latest iteration of thePwn2Ownhacking contest just underscored an all-too-common flaw with smart home devices. The security research team Fluoroacetatehackedinto an AmazonEcho Show 5by taking advantage of its “patch gap “- that is, its use of older software that had been patched on other platforms. Brian Gorenc, the director of contest host Zero Day Initiative,explainedtoTechCrunchthat the smart screen uses a not-so-current version of Google’s Chromium browser engine that leaves it vulnerable to attacks. Fluoroacetate exploited this out-of-date code by using an integer overflow JavaScript bug to hijack the device while it was connected to a malicious WiFi network.
GIPHY App Key not set. Please check settings