GoKawiil
Tech News
Two major companies with over 15 years of experience plan to launch innovative solutions in 2026: autonomous robot fleets for construction projects and an open-source platform for real-time IoT data analysis. These initiatives aim to modernize traditional industries and expand technological capabilities.
Researchers have identified a new Linux-based malware called ClingSTUN that exploits at least 24 known security flaws across various IoT devices, including routers and surveillance systems from multiple manufacturers. The malware leverages legitimate public STUN servers to maintain covert communication with infected devices, avoiding detection by traditional command-and-control infrastructure. The attacks target vulnerabilities dating from 2021 to earlier this year, indicating a broad and ongoing exploitation effort.
Ridge Security disclosed CVE-2026-42542, a high-severity flaw in the open-source TDengine time-series database used across manufacturing, energy, automotive and IoT sectors. The bug lets an unauthenticated attacker crash a vulnerable server with a single crafted network packet; TDengine has released version 3.4.1.6 to fix versions 3.4.0.0 through 3.4.1.5.
Weber, which acquired June Systems in January 2021 and stopped manufacturing the June Oven in 2022, has now disabled the smart oven's app and cloud connectivity. Owners lose remote control, software updates, and the AI-driven food recognition features that once distinguished the device, though the appliance still functions as a basic oven. Weber said it considered open-sourcing the technology but declined because June's IP is tied to its Weber Connect platform.
Italian startup Exein raised $270 million led by Headline, valuing the Rome-based cybersecurity firm at $1.7 billion. The company, which secures over 2 billion connected devices across sectors like aerospace, automotive and healthcare, is expanding its focus from IoT to protecting physical AI systems such as robots, drones and self-driving cars.
A hobbyist blogger purchased a WiFi-enabled Lidl Smart Kettle and began probing its network behavior after setting it up through the companion Lidl Smart Home App. Using nmap and netcat, they found the kettle opens a single TCP port (6668) that responds to connections but returns no identifiable banner or HTTP response, leaving its underlying protocol a mystery for further investigation.
Tado has unveiled its Smart Thermostat X, a 17.8mm-thick device priced at £159.99-£199.99 depending on wired or battery-powered versions. The company says Google's decision to shut down servers for older Nest thermostats has already driven a surge in sales, and it's betting more Nest owners will switch as support for older generations lapses.
The Justice Department seized domains tied to two tools, QTRouter and QScan, that a Chinese hacking group called QTFY used to route attacks through hijacked IoT devices and commercial proxy services. Prosecutors say the network, allegedly linked to Nanjing Xinjiuwei Network Technology Company and used by China's Ministry of State Security and PLA, enabled breaches at NASA, the Senate, the Federal Reserve, HHS, NIH, and the DOJ itself since at least 2018.