Hackers stole 10GB of casino data through an internet-connected fish tank
rickasaurus · x · 2026-10-20
A widely shared IoT security case study: a casino installed a smart lobby fish tank with automated feeding, temperature control, and internet-connected remote monitoring. Hackers exploited it, and even after the casino isolated the tank on its own VPN, they broke through the segregation, pivoted to the main network, and quietly exfiltrated 10GB of the high-roller database over time — disguised as normal audio/video streaming traffic. Nobody monitors fish tank outbound traffic, so it went unnoticed until Darktrace investigated. The poster notes your home likely contains devices with the same weakness.
More from Safety
- 26-author study: a hardwired frontier AI training pause is technically feasible — wfithian · 2026-10-20
- Microsoft says AI agents should be treated like insider threats as 'frontier models can't be trusted' — TechCrunch AI · 2026-10-20
- Studios Want AI to Mint New Franchises, but Pure AI Content Can't Be Copyrighted — WhatTheLJW · 2026-10-20
- French AI-generated novel axed from Goncourt longlist; writers demand AI text watermarking — zetalyrae · 2026-10-20
- NYC to take 15% of QFab IP proceeds and three board seats in landmark startup deal — MJBiercuk · 2026-10-20
- Fake Anthropic employee accounts run a novel X follow-based phishing scheme — edgarpavlovsky · 2026-10-20