Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords
2026-07-18T20:51:51Z•0dfeda4049dbd3ecfc9ecfd3980a40aa2c387bec55dc044e52abed88765b1da8
ai-securitychromedata-breachiotmalicious-extensionsmicrosoftpatch-managementprivacyprompt-injectionransomwareremote-access-trojansocial-engineeringsupply-chainthreat-intelvulnerabilityzero-day
What happened
A batch of Malwarebytes posts (July 2026) highlights multiple high-impact issues: an IoT flaw in Shark robot vacuums that can expose cameras, home maps and Wi‑Fi credentials; Claude for Chrome ("ClaudeBleed") allowing rogue extensions to access Gmail; proof‑of‑concept Ghostcommit prompt‑injection hidden in PNGs; a record Microsoft Patch Tuesday fixing 622 CVEs including three zero‑days and a separate RoguePlanet zero‑day fix; rapid critical Chrome updates; a new Windows RAT called GigaWiper capable of spying and destructive wipes; a CrashStealer fake Apple app stealing passwords and wallets; a
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- 0dfeda4049dbd3ecfc9ecfd3980a40aa2c387bec55dc044e52abed88765b1da8
- Enrichment time
- 2026-07-18T20:51:51Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.