Researchers find serious security flaws in cheap video door bells sold by a Chinese company under various brands names on Amazon, Shein, and other sites
The devices are also sold by Walmart, Sears, and other retailers—and big platforms have faced few consequences for shipping flawed products
Context & Ripple Effects
This report extends a recurring consumer-IoT security pattern: earlier coverage found actively exploited backdoors in low-cost routers sold through major marketplaces, while a separate investigation described a long-running backdoor in chips used across smart devices.
It matters because the sales path spans Amazon, Shein, Walmart, Sears, and other retailers, yet the reported accountability gap sits with the platforms as well as the company selling under multiple brands.
First-order effects
- Buyers of the affected doorbells face an immediate security-risk review, while the seller and its brand listings face scrutiny from marketplaces and retailers.
- Amazon, Shein, Walmart, Sears, and other distributors are directly exposed to questions over whether flawed connected devices can remain available through their channels.
Second-order effects
- Multi-brand, low-cost device sellers may face more pressure to demonstrate security practices, because a flaw tied to one supplier can affect listings carrying several names.
- Retailers and marketplaces may need to reassess how they screen connected-device vendors; prior findings involving low-cost marketplace routers with exploited backdoors make this a broader category issue rather than an isolated storefront problem.
Third-order effects
- If repeated findings continue without meaningful consequences for distributors, consumer IoT security will remain governed by fragmented vendor accountability rather than by the retail channels that aggregate demand.
- The pattern points toward ecosystem-level cyber defense becoming a competitive and policy concern, though the available coverage does not establish what enforcement response, if any, will follow.
The trend: Cheap, rebranded connected devices are testing whether large online retail ecosystems will take responsibility for baseline security across their third-party supply chains.