Last week, there were some very high profile attacks that utilized insecure Internet Of Things devices such as cameras, DVR’s routers, printers and the like. The quesiton is, how do you know if you own any of these devices? Bullguard Security has created an IoT Scanner to help you to find out. Head to the site, click the scan button, and IoT Scanner will tell you where you stand. I recommend that you do the quick scan and the deep scan to ensure that you’re safe.
Now, if IoT Scanner comes back saying that your network can be breached, that means some device that’s connected to your Wi-Fi network has an open port that makes it accessible from the internet. You should either look to close the open ports if you can, update the firmware of the IoT device in question if you can, or turn if off you can’t.
Remember, this is a starting point to make sure that your network is secure. But you should really make sure that you do simple things such as updating firmware and software to make sure that your network stays secure.
List Of Pwnable IoT Devices Floating In The Wild
Posted in Commentary with tags IoT, Security on August 29, 2017 by itnerdA list of IoT devices and associated telnet credentials has gone viral in the last few days. The list has the IP addresses of over 33,000 IoT devices and associated logins via Telnet which are things like the username and password being root or admin. This would make it trivially easy to create a botnet of IoT devices like the Mirai botnet that hit several sites recently. The list has existed since June, but has become viral when it was Tweeted out in the last few days. Now according to this article on Threat Post, there is an all out effort to stop the exploitation of this list by tracking down the owners of these IoT devices so that they can take remedial action which could include updating firmware, changing passwords, or taking the devices offline among other possibles.
Now, this sort of thing is precisely the reason why I have said for a long time that people who make IoT devices have to seriously step up their game when it comes to securing them. And if they are unable or unwilling to do so, governments should be prepared to force them to. By not making these devices as secure as possible, an event that would be catastrophic in nature is possible. And by then, it would be way too late.
Leave a comment »