Security incidents in November 2026
The 1 security incident HARD Live recorded that began in November 2026: 1 case of poisoned software. What happened in each, whether it’s fixed, and what to do.
Poisoned software 1
- HighNo fix yetGoogle disrupts XCPE botnet in 1.3 million Android TV boxes; backdoor remains
Google disrupted a botnet in more than 1.3 million Android TV boxes, but infected devices remain backdoored. Videostrong and MECOOL owners should check with their seller, disconnect suspected boxes and seek a replacement or verified clean firmware.
Poisoned software · Videostrong-built Android TV boxes, including an infected MECOOL KM9PRO Max · Since 2 Nov 2026 · Updated