Iot

The Basics Nobody Implements

This was an authorized internal assessment. I’ve left out vendor names, device models, and anything that identifies where these devices live, on purpose.

Recently I ran an internal assessment on the IoT devices across my organization.

The kind of hardware nobody really thinks about.

CCTV cameras. Fire alarm panels. The quiet boxes on the wall that just work.

Or so we assume.

Here’s what I kept finding:

Most vendors never change the default credentials.