Tags: cybersecurity iot android networksecurity infosec

We usually think of cyberattacks as something that begins with a suspicious email, a malicious download, or a compromised password.

But what if the device responsible for your next cyberattack is already sitting in your living room?

In November 2026, Google and several cybersecurity partners announced the disruption of XCPE, a botnet that had compromised more than 1.3 million Android TV set-top boxes across the world.

The concerning part wasn't simply the scale of the attack. It was how these devices became compromised in the first place: malicious software was embedded into devices before they even reached consumers.

This incident highlights a growing cybersecurity problem that deserves more attention: the security of connected devices begins long before users switch them on.

1. What Happened?…