Researchers Find More Connected Sex Toys Face Hacking Risk

Researchers found multiple critical vulnerabilities in Vibratissimo smart sex toys and their cloud backend that allow attackers to guess predictable 'quick control' IDs to remotely operate devices (even without consent) and to access an unprotected database exposing usernames, plaintext passwords, chat logs, sexual orientation, explicit image galleries, real names and home addresses; the Android app has an estimated 50,000–100,000 users and researchers recommend updating apps, changing passwords, and firmware/returns for remediation.