Vulmon
Four unpatched bugs remain after nine found
Nine security holes, four of them still unpatched, have been found in the Osram smart light bulb system, potentially giving attackers access to a home or corporate network. The issues in the Lightify Home and Pro systems range from cross-site scripting (XSS) to problems with the ZigBee and SSL protocols to insecure encryption key handling. They were discovered by security company Rapid7. Some of the programming bugs are pretty amateurish, raising the larger question of what kind of security revi...