Now on Demand Ransomware Resilience & Recovery Summit - All Sessions Available
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

IoT Security

Google Blocks Xiaomi Integrations Over Privacy Concerns

Google last week disabled all Xiaomi integrations on Nest Hub after learning that some users could access other people’s camera feeds. 

Google last week disabled all Xiaomi integrations on Nest Hub after learning that some users could access other people’s camera feeds. 

The issue was initially reported on January 1, 2020, when a user posted on Reddit, revealing that their Nest Hub was able to access feeds from other people’s Xiaomi cameras. The user also posted screenshots to prove the discovery. 

Although the Mi Home Security Camera Basic 1080p was found at fault, Google decided to disable all Xiaomi integrations on its devices. As it turned out, only the Mi Home Security Camera Basic 1080p was found to be at fault.

“We’ve been working with Xiaomi and we’re comfortable that the issue was limited to their camera technology platform,” a Google employee posted in a thread on the company’s support website. 

After a thorough investigation, Google decided to re-enable Xiaomi device integrations, but left camera streaming disabled. 

“We will not reinstate camera functionality for Xiaomi devices until we are confident that the issue has been fully resolved. We’ll keep you updated with information as more becomes available to share,” Google said. 

The issue was apparently caused by a cache update on December 26, 2019, and only occurred in specific conditions. Around 1000 users are believed to have been affected by the bug. 

Although Google has re-enabled Xiaomi integration on Nest Hub, many users are still complaining of failed attempts to reconnect their devices, comments on Google’s support website reveal. 

Advertisement. Scroll to continue reading.

Related: Google’s Nest Hub Has a Microphone It Forgot to Mention

Related: Bug Hunters Earn $195,000 for Hacking TVs, Routers, Phones at Pwn2Own

Related: Zero-Day Exploits Earn Hackers Over $500K at Chinese Competition

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

MSSP Dataprise has appointed Nima Khamooshi as Vice President of Cybersecurity.

Backup and recovery firm Keepit has hired Kim Larsen as CISO.

Professional services company Slalom has appointed Christopher Burger as its first CISO.

More People On The Move

Expert Insights

Related Content

IoT Security

A group of seven security researchers have discovered numerous vulnerabilities in vehicles from 16 car makers, including bugs that allowed them to control car...

IoT Security

A vulnerability affecting Dahua cameras and video recorders can be exploited by threat actors to modify a device’s system time.

IoT Security

An innocent-looking portable speaker can hide a hacking device that launches CAN injection attacks, which have been used to steal cars.

IoT Security

Lexmark warns of a remote code execution (RCE) vulnerability impacting over 120 printer models, for which PoC code has been published.

ICS/OT

As smart cities evolve with more and more integrated connected services, cybersecurity concerns will increase dramatically.

IoT Security

Hikvision patches CVE-2023-28808, a critical authentication bypass vulnerability that exposes video data stored on its Hybrid SAN and cluster storage products.

IoT Security

Researchers at offensive hacking shop Synacktiv demonstrated successful exploit chains and were able to “fully compromise” Tesla’s newest electric car and take top billing...

Cybersecurity Funding

Internet of Things (IoT) and Industrial IoT security provider Shield-IoT this week announced that it has closed a $7.4 million Series A funding round,...