McAfee researchers have uncovered two new vulnerabilities within connected devices that allow hackers access to the personal lives of consumers. A vulnerability within BoxLock smart padlock enables hackers to unlock the device within a few seconds, and a vulnerability within the Mr. Coffee brand coffee maker with Wemo grants hackers access to home networks. As the Internet of Things (IoT) grows and smart devices gain popularity, McAfee warns consumers and businesses alike that cybercriminals will continue to find new ways to exploit all connected things. McAfee is committed to threat research and applauds businesses that quickly remediate disclosed vulnerabilities to provide more secure products to their customers.
“Cybercriminals are relentless, and as long as we continue to connect devices to the internet, they will continue to search for ways to exploit them,” said Raj Samani, McAfee fellow and chief scientist. “Vulnerability disclosures can be frightening for both the consumers using connected devices and the organizations that create them, however, the process is an essential component of creating a safer future. Cybersecurity researchers, businesses, and consumers working together to expose and eliminate these vulnerabilities keeps us all a step ahead of the bad guys.”
While there is no way to predict the future of IoT attacks, McAfee offers consumers and businesses tips to ensure devices and data are protected from such vulnerabilities:
3 Steps for Consumers to Protect What Matters
#1 Set-up a secondary network for your IoT devices that doesn’t share access to your primary network and the devices and data connected
#2 Consider getting a router with built-in security features, making it easier to protect all the devices in your home from one access point
#3 Set your device to auto-updates so you always have the latest software and be sure to change all default passwords once you purchase a new device
If you have an interesting article / experience / case study to share, please get in touch with us at email@example.com