New Bill Seeks Basic IoT Security Standards
Summary: Sens. Steve Daines, Cory Gardner, Mark Warner and Ron Wyden introduced the IoT Cybersecurity Improvement Act of 2017, which would set baseline security standards for Internet-connected devices bought by the federal government, including computers, routers and security cameras. The bill would require vendors to ensure devices can be patched, do not use hard-coded passwords, and are free of known vulnerabilities when sold, and it would direct OMB to develop alternative network-level requirements and each executive agency to inventory its connected devices.
Bottom line: The bill was written in response to the 2016 attacks powered largely by hacked cheap cameras and routers whose accounts could not be removed and were remotely accessible, and it would also exempt good-faith security researchers from CFAA and DMCA liability under coordinated disclosure guidelines.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026