I got a Roomba added to our cybersecurity asset inventory. This happened because Facilities bought one for the executive floor. It was one of the expensive models with cameras, mapping, Wi-Fi, cloud connectivity, and enough sensors to perform a small military recon mission. They connected it to the corporate network. I noticed it during a device scan. Unknown Linux endpoint. A camera, microphone, constant outbound traffic. I asked Facilities what it was. They said: “The vacuum.” Security did not like this answer. The CISO asked whether the device could map executive offices. Yes. Could it store images? Probably. Could the vendor remotely access it? Technically. Within an hour, the Roomba had been unplugged and placed in a conference room like a detained suspect. Legal asked for the privacy policy. Procurement asked for the vendor contract. Security asked whether we could inspect the firmware. Facilities just wanted the floor cleaned. After two weeks of review, we approved it for use on an isolated IoT network with restricted outbound traffic. It now has an asset tag, a quarterly access review, and a documented decommissioning procedure. Last month it got stuck under the CFO's credenza and went offline. Our monitoring platform opened an alert. The ticket was assigned to me. Severity: Medium. I walked upstairs and rescued it. This is what digital transformation looks like.

‼️ BREAKING: Nightmare-Eclipse just released another zeroday, this time a proof-of-concept called FalconFlank, which claims a local privilege-escalation flaw in CrowdStrike Falcon — abusing the sensor's own malicious-Office-macro remediation to reach SYSTEM on fully updated Windows 11 25H2 and Server 2025. github.com/MSNightmare/Falco…