The Trifo Ironpie robot vacuum is designed to do double duty. The fans on the swiveling disc hoover your house, while the camera mounted on it acts as an ankle-high security camera. The idea is to stay tidy while staying safe.
There's just one problem, according to cybersecurity firm Checkmarx. The Ironpie has multiple security vulnerabilities.
The flaws found in Ironpie, which is internet connected so owners can view its camera stream on an app, varied in severity. One of the worst would allow remote attackers to access users' video streams by accessing Trifo's servers. Another would let hackers send a fake software update to the vacuum's app, tricking users into downloading malicious software.
