Threat Watch
Cybersecurity news and analysis for the big screen.
Android TV, Google TV, Fire OS, streaming boxes, and the platforms behind them — in plain language, with primary sources, and without the scare tactics.
Articles
-
The TV-box botnet problem: from BadBox to Kimwolf
Cheap TV boxes keep ending up inside botnets. We trace one of the most persistent malware stories in consumer tech — preinstalled backdoors, residential proxies, and the boxes that are still on sale today.
-
Is your TV box certified? How to check, and why it matters
Two devices can both say “Android TV” while sharing almost nothing else. A two-minute check tells you which one you own — and what the answer means for updates, Google apps, and malware risk.
-
Consumer sideloading is ending on new Fire TV Sticks
Amazon’s Vega OS drops Android app support — and with it, the consumer sideloading that defined Fire OS for a decade. A developer-only path technically remains. What changed, why Amazon says it did it, and what it means for the stick already plugged into your TV.
About this section
Threat Watch covers security on big-screen devices: Android TV and Google TV, Fire OS and the new Vega OS, streaming boxes, and the operating systems that power them. The focus is practical — what happened, what it means for a household, and what you can actually do about it.
We publish when there is something worth saying, and every article links to its sources. Threat Watch is published by CYBERTVLAB, the company behind Deltavant — the app featured on this site. Articles are research summaries and analysis rather than original reporting, and they are corrected openly when they are wrong.