Wyze Labs is currently immersed in addressing a security concern concurrent with a service outage causing connectivity disruptions. The company, attributing the camera and login issues to an AWS connectivity problem, issued an incident report at 6:31 AM PT. While Wyze diligently works to bring all cameras back online, an added layer of complexity emerges as the “Events” tab in the Wyze app is temporarily disabled due to a suspected security issue. Wyze CMO and cofounder, Dave Crosby, acknowledges the inconvenience in a forum post, reassuring users of efforts to fully recover cameras and promising transparency in sharing investigation results.
Despite the lack of specifics surrounding the security issue, users reported viewing others’ video feeds under the “Events” tab in the app. Some users expressed concern, advising fellow users to turn off cameras until the ongoing issues are resolved. Wyze, yet to provide an explanation for the investigation, faces challenges as customers encounter potential breaches in privacy. The company’s spokesperson was not immediately available for comment when contacted by BleepingComputer. In a subsequent update on February 17, Wyze acknowledged a security flaw where users could see thumbnails of cameras not their own in the “Events” tab, emphasizing that live streams or video viewing was not compromised. With 14 reported incidents, Wyze is actively identifying affected users, implementing additional verification measures, and force logging out users to reset tokens for added security.
