{"id":24893,"date":"2019-02-02T13:37:12","date_gmt":"2019-02-02T13:37:12","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/"},"modified":"2019-02-02T13:37:12","modified_gmt":"2019-02-02T13:37:12","slug":"bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/","title":{"rendered":"Bug-hunter faces jail for vulnerability reports, DuckDuckPwn (almost), family spied on via Nest gizmo, and more"},"content":{"rendered":"
<\/div>\n

Roundup<\/strong> This was the week we saw GPS grumbles<\/a>, shady speakers<\/a>, and Yahoo!<\/em> Losing!<\/em> Again!<\/em><\/a><\/p>\n

While all that was happening, a few other bits of news that hit our screens…<\/p>\n

DuckDuck D’oh!<\/span><\/h3>\n

Drama in search engine land this week as Google-alternative DuckDuckGo disclosed<\/a> a potentially nasty flaw in its server-side software.<\/p>\n

Bug-hunter Michele Romano took credit for spotting and reporting an information-leaking vulnerability in backend servers that handled some user requests.<\/p>\n

The XML External Entity vulnerability<\/a> would have allowed an attacker to feed maliciously crafted XML files that had local paths embedded within them into DuckDuckGo’s backend servers, causing those systems to cough up internal data. Because the server-side code was not properly examining XML content for things that shouldn’t be there (such as requests for local system files) miscreants could have downloaded sensitive files and documents from the servers using dodgy XML files.<\/p>\n

Fortunately, the flaw has now been patched, and there are no reports of malicious actors targeting it.<\/p>\n

Crook builds massive library of stolen credentials<\/span><\/h3>\n

Someone is making the rounds on cybercrime forums offering a massive collection of personal details built by aggregating a bunch of previous data breaches.<\/p>\n

The collection<\/a> of 2.2 billion records is apparently nothing new, just a fat collection of other data dumps, but you have to admire (and be a little scared by) the commitment of the crook to get so many pilfered pieces of information in one place.<\/p>\n

Now would be a good time to make sure you aren’t re-using any old passwords.<\/p>\n

S(o) S(crewed) 7<\/span><\/h3>\n

UK cyber-snoops are warning, via Vice, that criminals are abusing flaws in the SS7 text message protocol<\/a> to steal two-factor login codes from banking websites, and then break into online bank accounts.<\/p>\n

Apparently, criminals have been abusing the system to re-route messages around phone networks, eventually intercepting the messages. In the UK, this has taken the form of attacks on Metro Bank.<\/p>\n

A criminal gets into the SS7 backbone and then intercepts the text messages of the person they are targeting and, using the intercepted 2FA code along with a username and password obtained by other means (such as fishing) they could get everything they need to access and drain a bank account.<\/p>\n

Chrome and Firefox patched<\/span><\/h3>\n

While they may not get the attention of Microsoft’s Patch Tuesday, security fixes for the Chrome<\/a> and Firefox<\/a> browsers are something everyone should keep an eye on.<\/p>\n

Earlier this week, security fixes were posted for both browsers on Linux, Windows and macOS. Among the vulnerabilities patched were remote code execution flaws, and US-Cert is advising users and admins to make sure the patches are installed and running.<\/p>\n

This should be easy enough to do, as both browsers have built-in update mechanisms that will download and install the fixes, so just make sure you have the latest version installed.<\/p>\n

Hungarian researcher faces jail time for vulnerability disclosure<\/span><\/h3>\n

No good deed goes unpunished, right?<\/p>\n

A researcher in Hungary could be spending as long as eight years in jail simply for discovering and reporting a vulnerability in the network of one of the country’s largest telcos.<\/p>\n

BleepingComputer reports<\/a> that the unnamed researcher spotted and reported a vulnerabulity in the network of Magyar Telekom last April.<\/p>\n

Rather than recognize the bug-hunter or pay out a bounty, the telco instead ratted out the white hat to the police. He could now get as many as eight years in jail if convicted on charges of hacking into the company’s network and database.<\/p>\n

Hopefully cooler heads prevail, and this whole affair gets sorted out without anyone having to spend time behind bars.<\/p>\n

Dumb problem in smart home<\/span><\/h3>\n

A smart home aficionado in Illinois, USA, saw his internet of things house meet the internet of trolls this week after hackers got into his home network and began manipulating both surveillance cameras and thermostats.<\/p>\n

Telly news station NBC Chicago<\/a> reports that for more than a week Arjun Sud and his family have been in a panic over strangers who apparently had access to their network of Nest devices, including two smart thermostats and 16 cameras placed around that home.<\/p>\n

The hackers undertook such creepy activities as talking to Sud’s 7-month old baby while alone in the nursery, cranking the couple’s heating system up to 90 degrees (32C) and shouting obscenities into the family’s living room.<\/p>\n

“The moment I realized what was happening, panic and confusion set in, and my blood truthfully ran cold,” Sud was quoted as saying.<\/p>\n

“We don\u2019t know how long someone was in our Nest account watching us. We don\u2019t know how many private conversations they overheard.”<\/p>\n

Not exactly a ringing endorsement for smart home devices, is it?<\/p>\n

Turbulence ahead for Airbus after mystery data theft disclosure<\/span><\/h3>\n

European plane-builder Airbus is fessing up to a potentially serious hack and data theft. Emphasis on the “potential,” because the biz isn’t revealing much information of use.<\/p>\n

The French air giant says<\/a> an unspecified “cyber incident” hit its commercial airliner operation, resulting in the loss of some employee data. What is that data? Your guess is as good as ours.<\/p>\n

The disclosure was conspicuously short on details, omitting any sort of specifics on how many people were affected, what data was taken, or who might have taken it, but Airbus said the “incident” included unauthorized access to information that included “professional contact and IT identification details” for some of its workers. The number of employees affected is estimated to be somewhere between 1 and 129,000.<\/p>\n

“This incident is being thoroughly investigated by Airbus\u2019 experts who have taken immediate and appropriate actions to reinforce existing security measures and to mitigate its potential impact, as well as determining its origins,” Airbus said.<\/p>\n

“Investigations are ongoing to understand if any specific data was targeted, however we do know some personal data was accessed.”<\/p>\n

How forthcoming.<\/p>\n

Airbus notes it is working with the “relevant regulatory authorities and the data protection authorities pursuant to the GDPR.” We imagine that EU authorities are going to want a slightly more detailed report than “a cyber incident occurred” when they look into the matter.<\/p>\n

The aircraft builder also says it is advising its employees to “take all necessary precautions going forward”, though that might be hard to do if they have no idea what data was taken, who has it, and where they got it from.<\/p>\n

So, to recap, something happened at Airbus. To someone. Resulting in the theft of something. By someone. \u00ae<\/p>\n

READ MORE HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Your rapid-fire guide to all the other infosec news of the week Roundup\u00a0 This was the week we saw GPS grumbles, shady speakers, and Yahoo! Losing! Again!\u2026 READ MORE HERE…<\/p>\n","protected":false},"author":2,"featured_media":24894,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-24893","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"\nBug-hunter faces jail for vulnerability reports, DuckDuckPwn (almost), family spied on via Nest gizmo, and more 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Bug-hunter faces jail for vulnerability reports, DuckDuckPwn (almost), family spied on via Nest gizmo, and more 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2019-02-02T13:37:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"648\" \/>\n\t<meta property=\"og:image:height\" content=\"432\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Bug-hunter faces jail for vulnerability reports, DuckDuckPwn (almost), family spied on via Nest gizmo, and more\",\"datePublished\":\"2019-02-02T13:37:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\\\/\"},\"wordCount\":1096,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/02\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\\\/\",\"name\":\"Bug-hunter faces jail for vulnerability reports, DuckDuckPwn (almost), family spied on via Nest gizmo, and more 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/02\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more.jpg\",\"datePublished\":\"2019-02-02T13:37:12+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/02\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/02\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more.jpg\",\"width\":648,\"height\":432},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Bug-hunter faces jail for vulnerability reports, DuckDuckPwn (almost), family spied on via Nest gizmo, and more\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Bug-hunter faces jail for vulnerability reports, DuckDuckPwn (almost), family spied on via Nest gizmo, and more 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/","og_locale":"en_US","og_type":"article","og_title":"Bug-hunter faces jail for vulnerability reports, DuckDuckPwn (almost), family spied on via Nest gizmo, and more 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2019-02-02T13:37:12+00:00","og_image":[{"width":648,"height":432,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Bug-hunter faces jail for vulnerability reports, DuckDuckPwn (almost), family spied on via Nest gizmo, and more","datePublished":"2019-02-02T13:37:12+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/"},"wordCount":1096,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/","url":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/","name":"Bug-hunter faces jail for vulnerability reports, DuckDuckPwn (almost), family spied on via Nest gizmo, and more 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more.jpg","datePublished":"2019-02-02T13:37:12+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/02\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more.jpg","width":648,"height":432},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/bug-hunter-faces-jail-for-vulnerability-reports-duckduckpwn-almost-family-spied-on-via-nest-gizmo-and-more\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Bug-hunter faces jail for vulnerability reports, DuckDuckPwn (almost), family spied on via Nest gizmo, and more"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/24893","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=24893"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/24893\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/24894"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=24893"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=24893"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=24893"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}