Cyber Risks · Cisco Talos

This Holiday Season - Buy One IoT Device, Get Free CVEs

Summary: Cisco Talos reports that criminals have recruited vulnerable IoT devices into the Mirai botnet, which launched the largest denial of service attack in history, and that further IoT botnets of many thousands of infected devices have since emerged. Talos has published reports on vulnerabilities it resolved in home security cameras, a Disney-branded home IoT device, and embedded systems software, many of which allow attackers to execute unauthorized code, read data, launch attacks on other systems, or render the device inoperable.

Why it matters: Every one of those vulnerabilities is a device someone deployed because it was cheap, and Talos notes that applying patches in the field is not always easy or even possible - so the fix often has to come from network-level detection rather than the device itself.

Read the original at Cisco Talos ↗

Topics
Endpoint & Network Security
Related