IoT supply chain hit by ThroughTek P2P SDK vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) announced on Tuesday the presence of a security vulnerability in ThroughTek P2P (Peer-to-Peer) SDK that allows cleartext transmission of sensitive information, such as camera audio/video feeds. The vulnerability affects a software component, part…