Question 1

Why are default passwords on IoT devices such a serious risk?

Accepted Answer

Default credentials for consumer IoT devices are published in manufacturer manuals and indexed in searchable online databases. Automated botnets like Mirai continuously scan the public internet for devices still using these defaults and compromise them within minutes of being exposed. Once a device is taken over, attackers can use it to launch DDoS attacks, pivot to other devices on the same network, or exfiltrate data from its sensors and cameras. The original Mirai outbreak compromised over 600,000 IoT devices using fewer than 60 default credential pairs, and variants of the same attack are still active today.

Question 2

How can a compromised smart camera or thermostat put my work laptop at risk?

Accepted Answer

Most home networks treat every connected device as trusted. A compromised IoT device sits on the same subnet as your work laptop, which means the attacker can scan for open ports, attempt to move laterally to your laptop, and intercept unencrypted traffic. Even when your laptop connects to the corporate VPN, the initial DNS resolution and any local network traffic can pass through the compromised device. Network segmentation solves this by placing IoT devices on a separate guest network or VLAN with no access to your primary network, so a compromised camera cannot reach your work laptop or the corporate resources it connects to.

Beveiliging van IoT en slimme apparaten

Wat is Beveiliging van IoT en slimme apparaten?

Wat je leert in Beveiliging van IoT en slimme apparaten

Beveiliging van IoT en slimme apparaten — Trainingsstappen

Een verbonden thuiskantoor

Het veiligheidsinitiatief

Toegang tot het portaal

Inloggen

Start netwerkscan

Netwerkscan wordt uitgevoerd

Scanresultaten

Het risico begrijpen

Camerabeveiligingsaudit

Herstel starten