Senator Prods Federal Agencies on IoT Mess
Summary: Senator Mark Warner, co-founder of the newly launched Senate Cybersecurity Caucus, sent letters to the FCC, FTC and DHS calling insecure IoT devices a threat to Internet resiliency and asking what the agencies can do to vet device security before and after they connect to networks. The letters followed the Dyn outage, which was launched at least in part by the Mirai malware scanning the Internet for routers, cameras and DVRs protected only by factory-default passwords, including a root/xc3511 credential embedded in white-labeled DVR and IP camera boards made by China's XiongMai Technologies.
Why it matters: Warner's own framing is that security for these devices is 'the responsibility of none' - and the Mirai botnet built on default passwords took down Netflix, PayPal, Reddit and Twitter through a single DNS provider, which is the blast radius one insecure camera can now reach.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026