Threats Day Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories
Summary: Spur Intelligence scanned 6,038 apps across LG webOS and Samsung Tizen and found 2,058 containing residential proxy software, including clocks, screensavers, games, and fish tanks, with 42.5% of webOS apps and 26.9% of Tizen apps carrying such code. AISLE disclosed six curl vulnerabilities including CVE-2026-8932, the oldest reported curl flaw, shipped since version 7.7 on March 22, 2001, and fixed in version 8.21.0.
Why it matters: More than a third of the smart TV apps reviewed can relay third-party traffic through the owner's internet connection, and Spur notes many sit in office spaces without the responsible owner's awareness or consent.
Read the original at The Hacker News ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2026-50160CVE-2026-8932
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026