- Mistaken assumptions about smart home cybersecurity lead to more problems
- We put much trust in a particular IoT device, but we don't secure it enough
- There's always a solution, no matter the security issue
- Bitdefender's telemetry shows a huge disparity in the number of culpable operating systems
- Learning from available security-related data is a necessary step to strengthen the IoT industry
- The current state of IoT security requires an outside security solution that acts an equalizer
A year ago, we would step into the office each morning, swipe our badge at reception, pass the security cameras, and sit down at our desks beside our colleagues. The safety-savvy IT department -- home to complex security technologies, bottomless coffee cups and handy tips -- was mere steps away.
People’s homes are full of cameras and microphones, which in theory allow attackers to do more than just hijack your IoT devices for a DDoS attack. The extent of IoT security problems should worry everyone, especially since many homes lack essential protection. And few service providers can offer this kind of protection.
- IoT manufacturers often favor speed of rollout over security
- Attackers don’t have to work too hard to compromise smart devices
- It’s up to users and ISPs to protect homes and network infrastructure
- To fix a problem you first need to know of its existence
- IoT devices are often the target of malware botnets and campaigns
- ISPs need to deal with IoT security from a much broader perspective
- Advertisers usually use gathered data to better target customers
- Most companies allow some sort of user tracking
- The more money companies makes from ad revenue, the laxer the rules governing data gathering
- Companies need bug bounty platforms now more than ever
- The increase in the number of threats in 2020 pushed companies to secure their products better
- Human error is a main source of cyber risk
- Organizations don’t want to be caught off-guard again by a COVID-like crisis
- Most industries believe work-from-home is here to stay and are prearing to invest accordingly in security
- Some industries will invest way over 100 percent in their IT departments
- Attackers spoof the Microsoft.com domain
- Lookalike websites used to steal credentials
- Microsoft doesn’t implement the DMARC protocol
- People are not always the weakest link
- Trickbot was hit, but it’s operators are trying to make a comeback
- ISP’s devices are oftentimes unwilling participants in massive botnet networks
- Data loss is one of the issues most companies fear
- Many organizations continue to implement legacy solutions to secure modern cloud environments
- Privacy is also a challenge for more organizations that deal with private data
