Cybersecurity considerations to have when shopping for holiday gifts
Summary: Cisco Talos examined cheap connected gifts sold through legitimate marketplaces, finding a $29.99 smartwatch from an obscure seller called "Nerunsa" whose supporting GloryFit app's privacy policy states users consent to sharing personal, health, and location data with affiliated companies and third-party providers. A $15.98 Bluetooth tracker from "AILIUTOP" on Walmart ranked ahead of Apple's Air Tags, and neither vendor has public contact information, a disclosure history, or evidence of security testing.
What you should know: These devices handle health data and physical location, yet the sellers behind them have no reachable contact and no track record of disclosing or patching vulnerabilities - so when something fails, there is no one to call and no fix coming.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026