{"id":3816,"date":"2018-06-21T05:06:50","date_gmt":"2018-06-21T05:06:50","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/"},"modified":"2018-06-21T05:06:50","modified_gmt":"2018-06-21T05:06:50","slug":"are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/","title":{"rendered":"Are your IoT gizmos, music boxes, smart home kit vulnerable to DNS rebinding attacks? Here&#8217;s how to check"},"content":{"rendered":"<p>A technique for attacking computer networks, first disclosed more than a decade ago, has resurfaced as a way to manipulate Internet-of-Things gadgets, smart home equipment, and streaming entertainment gizmos.<\/p>\n<p>Researcher Brannon Dorsey this week <a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/medium.com\/@brannondorsey\/attacking-private-networks-from-the-internet-with-dns-rebinding-ea7098a2d325\">posted an essay<\/a> explaining how smart home hardware can be vulnerable to a trick known as DNS rebinding.<\/p>\n<p>He also crafted <a target=\"_blank\" rel=\"nofollow\" href=\"http:\/\/rebind.network\/\">this website<\/a> that, with your permission, will run JavaScript in your browser to detect whether or not you have any devices vulnerable to DNS rebinding on your network. Try it out if you&#8217;re worried about being at risk.<\/p>\n<p>First disclosed <a target=\"_blank\" href=\"https:\/\/www.theregister.co.uk\/2008\/04\/09\/dns_rebinding_attack\/\">at RSA 2008<\/a> by researcher Dan Kaminsky, a DNS rebinding attack allows a malicious webpage open in a browser to access and potentially commandeer a device on a local network, sidestepping the same-origin policy checks that usually guards against such attacks.<\/p>\n<p>While rebinding attacks have been made more difficult to pull off on modern browsers and networks, some systems remain vulnerable to reliable attacks. Earlier this year, Blizzard had to <a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/www.theregister.co.uk\/2018\/01\/23\/blizzard_games_vulnerability\/\">address the issue<\/a> in its update tool, and exploits targeting cryptocurrency wallets also used the technique.<\/p>\n<p>Now, Dorsey claims, home networks and internet-connected appliances will have to be added to that list. The infosec bod explained that, by connecting users to a compromised DNS server, a web browser can remotely receive and relay commands to devices on their local network.<\/p>\n<div class=\"promo_article\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2018\/06\/01\/shutterstock_facepalm.jpg?x=174&amp;y=115&amp;crop=1\" width=\"174\" height=\"115\" alt=\"Young guy facepalms while holding a laptop\"\/><\/p>\n<h2 title=\"These are not the criminal geniuses you were expecting\">Pwn goal: Hackers used the username root, password root for botnet control database login<\/h2>\n<p><a href=\"https:\/\/www.theregister.co.uk\/2018\/06\/06\/pwn_goal_botnet\/\"><span>READ MORE<\/span><\/a><\/div>\n<p>Among the hardware that could be manipulated by such an attack are WiFi routers, streaming video and music boxes (such as Roku or Google Home gear), and smart thermostats, or other connected appliances.<\/p>\n<p>&#8220;Many of these devices offer limited or non-existent authentication to access and control their services,&#8221; Dorsey explained. &#8220;They inherently trust other machines on the network in the same way that you would inherently trust someone you\u2019ve allowed into your home.&#8221;<\/p>\n<p>In effect, the attack would use the browser as an entry point to infiltrate the local network.<\/p>\n<p>As with previous attack techniques, Dorsey&#8217;s method involves tricking a user into visiting a booby-trapped webpage \u2013 via something like a phishing email or XSS exploit \u2013 that runs scripting code to contact a malicious DNS server to look up a domain name.<\/p>\n<p>Rather than resolve the domain name to an outside server&#8217;s IP address, however, Dorsey&#8217;s technique would have the DNS server return a local network address of a connected appliance, allowing the page to then access the device as if were the user. All the while, the browser that has been fooled into carrying out the attack would present the user with no alert to indicate anything has gone awry.<\/p>\n<p>To demonstrate, Dorsey has produced <a target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/github.com\/brannondorsey\/radio-thermostat\">proof-of-concept code<\/a> showing how the technique can force a home thermostat to raise its own temperature.<\/p>\n<p>Dorsey said he has notified vendors including Roku and Google of the vulnerability, so expect patches to land soon for your equipment. The issue is likely to span thousands of devices, and vendors and will require some time to fully address the security shortcomings.<\/p>\n<p>&#8220;The implications and impact of an attack like this can have far reaching and devastating effects on devices or services running on a private network,&#8221; Dorsey wrote. &#8220;By using a victim\u2019s web browser as a sort of HTTP proxy, DNS rebinding attacks can bypass network firewalls and make every device on your protected intranet available to a remote attacker on the internet.&#8221; \u00ae<\/p>\n<p class=\"wptl btm\"><span>Sponsored:<\/span> <a href=\"https:\/\/go.theregister.co.uk\/tl\/1759\/shttp:\/\/www.mcubed.london\/\">Minds Mastering Machines &#8211; Call for papers now open<\/a><\/p>\n<p>READ MORE <a href=\"http:\/\/go.theregister.com\/feed\/www.theregister.co.uk\/2018\/06\/21\/dns_rebind_attacks_google_roku\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Fancy website, code emitted \u2013 Roku, Google, etc stuff at risk A technique for attacking computer networks, first disclosed more than a decade ago, has resurfaced as a way to manipulate Internet-of-Things gadgets, smart home equipment, and streaming entertainment gizmos.\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":3817,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-3816","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Are your IoT gizmos, music boxes, smart home kit vulnerable to DNS rebinding attacks? Here&#039;s how to check 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Are your IoT gizmos, music boxes, smart home kit vulnerable to DNS rebinding attacks? Here&#039;s how to check 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2018-06-21T05:06:50+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"174\" \/>\n\t<meta property=\"og:image:height\" content=\"115\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Are your IoT gizmos, music boxes, smart home kit vulnerable to DNS rebinding attacks? Here&#8217;s how to check\",\"datePublished\":\"2018-06-21T05:06:50+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\\\/\"},\"wordCount\":605,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/06\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\\\/\",\"name\":\"Are your IoT gizmos, music boxes, smart home kit vulnerable to DNS rebinding attacks? Here's how to check 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/06\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check.jpg\",\"datePublished\":\"2018-06-21T05:06:50+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/06\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/06\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check.jpg\",\"width\":174,\"height\":115},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Are your IoT gizmos, music boxes, smart home kit vulnerable to DNS rebinding attacks? Here&#8217;s how to check\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Are your IoT gizmos, music boxes, smart home kit vulnerable to DNS rebinding attacks? Here's how to check 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/","og_locale":"en_US","og_type":"article","og_title":"Are your IoT gizmos, music boxes, smart home kit vulnerable to DNS rebinding attacks? Here's how to check 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2018-06-21T05:06:50+00:00","og_image":[{"width":174,"height":115,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Are your IoT gizmos, music boxes, smart home kit vulnerable to DNS rebinding attacks? Here&#8217;s how to check","datePublished":"2018-06-21T05:06:50+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/"},"wordCount":605,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/","url":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/","name":"Are your IoT gizmos, music boxes, smart home kit vulnerable to DNS rebinding attacks? Here's how to check 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check.jpg","datePublished":"2018-06-21T05:06:50+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/06\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check.jpg","width":174,"height":115},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/are-your-iot-gizmos-music-boxes-smart-home-kit-vulnerable-to-dns-rebinding-attacks-heres-how-to-check\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Are your IoT gizmos, music boxes, smart home kit vulnerable to DNS rebinding attacks? Here&#8217;s how to check"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/3816","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=3816"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/3816\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/3817"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=3816"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=3816"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=3816"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}