Scanner weakness opens warehouse doors
Kaspersky has uncovered a fresh attack route through a popular barcode scanner model used in warehouses and retail. The research, shown at the Security Analyst Summit 2026 in Bali, shows how the lack of authentication between handheld scanners and their base stations lets nearby attackers inject keystrokes and run code on connected PCs.
Modern warehouses rely on these wireless links to keep goods moving. With global e-commerce sales now above $6 trillion, any successful breach can slow deliveries and raise costs that eventually reach shoppers.
How the attack works
An attacker within Bluetooth range can eavesdrop on the base station address, then send fake keyboard commands that the connected computer treats as normal input. The scanner itself is only the entry point; once inside, the foothold sits on a machine trusted by wider warehouse systems.
The same pattern could affect other devices such as portable data terminals or thermal printers that link to Warehouse Management Systems.
What businesses and shoppers should watch
Kaspersky recommends checking every new device before it joins the network, turning off unused Bluetooth, segmenting systems, and applying updates quickly. The firm also offers on-site assessments of industrial setups.
Sergey Sidorov, Head of Industrial Security Services at Kaspersky, said: “Modern retail and logistics are profoundly digital, from enterprise-wide management platforms down to every device in a worker’s hands. This pervasive connectivity means that any technology at any tier can become an entry point for a cyberattack capable of destabilizing the entire ecosystem — as our research shows, even a single barcode scanner. The warehouse sector, and the broader retail industry, should treat cybersecurity as a top priority across every layer of their operations.”
We cover similar security findings from the same researchers on our VPN hub.
