[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJ8jfb3TcO0dH75MBSx1c-oyRz2GtxoL1pdWtedwtVC4":3},{"article":4,"iocs":54,"watch_terms":55,"solutions":56,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"08690ed6-69a4-43f9-8fc4-42e461559cc6","Hackers Stalked Me by Hijacking a Smartwatch for Kids","hackers-stalked-me-by-hijacking-a-smartwatch-for-kids-691f0d","Security researchers tracked and eavesdropped on a WIRED reporter using vulnerabilities in a pink plastic smartwatch. It’s just one piece of a deeply insecure supply chain of GPS-enabled gadgets.","Security researchers demonstrated how a cheap children's smartwatch, and potentially dozens of other similar devices from the same supply chain, can be easily hacked. Vulnerabilities allowed attackers to track the wearer's location, take photos, and eavesdrop on audio without the user's knowledge. This highlights significant security flaws in the supply chain of many GPS-enabled gadgets.","Hackers exploited vulnerabilities in a kids' smartwatch to track and eavesdrop on a reporter.","https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fhackers-stalked-me-by-hijacking-a-smartwatch-for-kids\u002F","https:\u002F\u002Fmedia.wired.com\u002Fphotos\u002F6a749b1facdf56f645ad1aef\u002Fmaster\u002Fpass\u002FSecurity_DeviceHacked4Kids.gif","2026-08-06T21:35:00+00:00","2026-08-06T22:00:08.683568+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"smartwatch","product",{"name":21,"type":22},"CJC","vendor",{"name":24,"type":22},"YiQingTeng Electronics",{"name":26,"type":22},"Wonlex",{"name":28,"type":19},"SETracker",{"name":30,"type":19},"NewGPS2012","d6f63bb8-0801-486a-be7f-171400700454",{"id":31,"icon":33,"name":34,"slug":35},null,"IoT\u002FOT","iot-ot",[37,42,47,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":48},{"id":31,"icon":33,"name":34,"slug":35},{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,24,26],{"controls":57,"vendors":134},[58,87,108],{"slug":59,"name":60,"problem":61,"products":62},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":88,"name":89,"problem":90,"products":91},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[92,100],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":109,"name":110,"problem":111,"products":112},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[113,121,126],{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","ciphertrust","CipherTrust Data Security Platform","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fdata-security-platform","Data discovery, encryption and central key management across on-premises and cloud.",{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":122,"product_name":123,"url":124,"description":125},"luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",[],{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":151},"childrens-smartwatch-hijacked-to-track-spy-on-kids","Children's Smartwatch Hijacked to Track, Spy on Kids","Cheap GPS-enabled smartwatches marketed for children were found to contain serious security vulnerabilities rooted in a shared, insecure supply chain — meaning dozens of device models were affected by the same flaws simultaneously. Attackers could exploit these weaknesses to silently track real-time location, capture photos, and eavesdrop on audio, turning a safety device into a surveillance tool against its intended user. The root cause lies in manufacturers prioritizing cost over security, shipping devices with default credentials, unencrypted communications, and no secure development lifecycle. This matters because vulnerable IoT devices targeting children represent both a physical safety risk and a serious privacy violation, often with no viable patch path for consumers. Parents and caregivers are rarely equipped to assess the security posture of these devices before purchase.",[140,141,142,143,144,145,146,147,148,149,150],"CIS Control 1 – Inventory and Control of Enterprise Assets","CIS Control 4 – Secure Configuration of Enterprise Assets and Software","CIS Control 16 – Application Software Security","NIST SP 800-213 – IoT Device Cybersecurity Guidance","NIST IR 8259 – Foundational Cybersecurity Activities for IoT Device Manufacturers","NIST CSF PR.SC-1 – Supply Chain Risk Management","GDPR Article 25 – Data Protection by Design and by Default","GDPR Article 5(1)(f) – Integrity and Confidentiality","EU Cyber Resilience Act – Essential Cybersecurity Requirements for Connected Products","ETSI EN 303 645 – Cybersecurity for Consumer IoT","NIST SP 800-171 – Protecting Controlled Unclassified Information",{}]