Connected & Compromised: When IoT Devices Turn Into Threats

The number of Internet of Things (IoT) devices operating in homes and offices continues to balloon, but security awareness is lagging despite the considerable risks the technologies pose.

IoT security is a long-standing topic that continues to evolve as more devices come to market. Devices require Internet connectivity, yet many lack sufficient passcode and encryption features and are shipped with insecure default settings. That means much of the responsibility for protection falls on the user. 

People simply listening to a song through Amazon Alexa or watching a new show on Apple TV are often unaware of the security risks, like credential theft and unauthorized network access, introduced to their home and to their lives. Those risks magnify in an enterprise environment and threat actors notice.

Over the past year, Mattia Epifani, certified instructor at SANS Institute and digital forensic expert, worked on cases ...