

40K IoT cameras stream secrets to browsers, Marks & Spencer taking online orders post-cyberattack, PoC Code escalates Roundcube Vuln threat
15 snips Jun 11, 2025
A shocking revelation as 40,000 IoT cameras are found streaming secrets accessible to anyone online. Major concerns arise from a Windows zero-day vulnerability targeting a significant Turkish defense organization. Marks & Spencer makes a comeback after a cyberattack sidelined their online orders for weeks. The episode also dives into webmail vulnerabilities and the troubling resurgence of stolen Ticketmaster data. This whirlwind of cyber threats highlights the pressing need for better security measures.
AI Snips
Chapters
Transcript
Episode notes
Mass Exposure of IoT Cameras
- Over 40,000 IoT cameras worldwide stream sensitive data openly to anyone with a browser.
- Most operate using insecure protocols and expose critical infrastructure and personal spaces.
Cyberattack Speeds M&S IT Overhaul
- Marks & Spencer's cyberattack caused a costly seven-week online outage.
- The incident is accelerating their IT overhaul timeline from three years to eighteen months.
Urgent Roundcube Patch Needed
- Patch Roundcube immediately to defend against a critical remote code execution vulnerability.
- Monitor networks for suspicious authentication activity due to public availability of exploit code.