How a $20 Smart Device Gave Me Access to Your Home
bishopfox.com | blog | #zero-day | #session-management | #iot-security | #smart-home | #yolink | #authorization-bypass
Summary
The story behind the YoLink research: an authorization bypass lets attackers control other users' devices, Wi-Fi credentials travel in cleartext, and long-lived tokens permit persistent hub access.
- Published
- Collected
--- id: 3863 title: "How a $20 Smart Device Gave Me Access to Your Home" source_domain: bishopfox.com source_url: "https://bishopfox.com/blog/how-a-20-smart-device-gave-me-access-to-your-home" published_at: "2025-10-02 00:00" tags: ["zero-day", "session-management", "iot-security", "smart-home", "yolink", "authorization-bypass"] phying_url: "https://phying.com/item/3863" lang: en --- # How a $20 Smart Device Gave Me Access to Your Home ## Summary The story behind the YoLink research: an authorization bypass lets attackers control other users' devices, Wi-Fi credentials travel in cleartext, and long-lived tokens permit persistent hub access. ## Intelligence Metadata - **Sources:** bishopfox.com - **Published:** 2025-10-02 00:00 - **Original:** https://bishopfox.com/blog/how-a-20-smart-device-gave-me-access-to-your-home - **Phying News:** https://phying.com/item/3863