Robot vacuum flaw lets one stolen certificate run root commands on other Shark robovacs in the same AWS region — unpatched flaw exposes live camera feeds, stored home maps, and Wi-Fi credentials
The problem is an over-permissive AWS IoT policy.

If you’ve been following our security beat here at Hot Hardware,