Blog - Internet of Things (IoT) and Online Shopping

Have you ever seen cybersecurity-related news headlines talk about “IoT” devices and think there must be a typo? What do this mean?

It’s actually an acronym for “Internet of Things,” with the first letter being a capital “I.” Internet of Things is a term used to describe devices or objects that exchange data with other devices and systems over the internet. 

You know the two most common IoT devices very well: computers and smartphones. 🖥️ 📱 Collectively, they make up around 62% of all connected devices. But the world of IoT is broad, extending to anything from smart televisions and watches to security cameras and printers. When in doubt, remember that IoT devices include anything connected to the internet. Every time you say, “Hey, Google. What’s the weather?” you’re asking a smart device to pull data from the web.

The IoT Market is Growing—Well—a Lot

While IoT devices can no doubt be incredibly helpful, some worry about the implications of having devices that are always listening or ever-connected to the internet. 👂

IoT devices are only becoming more complex and “smarter,” expanding in availability like never before. Today, we have things like smart refrigerators with tablet-sized screens and smart home thermostats—just to name a few of the latest and greatest IoT inventions. These internet-connected devices currently command a market of around $50 billion in the United States alone and are expected to grow to $140 billion by 2025. 💲

It makes you think … With so much of our everyday household and business technology directly connected to the internet, are we really safe? Virtually anything connected to the world wide web can be hacked and IoT devices can come with a fair share of security vulnerability concerns.

Security Weaknesses of IoT Devices

IoT devices have a number of security vulnerabilities that can lead to invasion of privacy. With the smart tech always listening for voice commands, they collect a lot of auditory information about our daily lives. Then there are IoT devices with video—which have the possibility of capturing visual data about us too! 🎥

Beyond invading your privacy, breached IoT devices can lead to loss of money when cybercriminals demand a ransom for their hacked data or use it to break into your financial accounts. Recorded audio or video files, user behaviors and patterns, and other data can even be used for blackmail…

Here are a few ways threat actors breach IoT devices and abuse their data:

Weak Passwords

Like any piece of technology, IoT devices are often protected by passwords or passcodes. Your smart home alarm system, for example, is accessed through a username and password via a software application. Once your profile is breached, cybercriminals have access to more than just your data. They could unlock your home or business to steal personal property!

The preset passwords that come with IoT devices aren’t always the most secure, so it’s up to you to create personalized, hard-to-guess credentials and keep them safeguarded.

Lack of Security Updates

Behind every IoT device is software that helps it run. Just like the applications on your smartphone and computer need to be routinely updated to patch newly discovered software vulnerabilities, so do your IoT devices. Because not all loT devices have a screen or keyboard, it can be easy to overlook or know how to perform these updates.

Cybercriminals are always looking for new security holes to exploit and compromise IoT devices, yet, less than a third of users update their connected devices as soon as updates become available, according to a survey conducted by Ubuntu. Get in the habit of checking for updates regularly or enable automatic updates to stay on top of your security both at home and at work.

Insecure Networks

While the first two vulnerabilities involve the security of IoT applications themselves, you must also consider the way you connect these devices to the internet. Cybercriminals can scrape sensitive or confidential information exchanged between the device and a server, often finding user credentials here and authenticating endpoints via weak routers, modems, and other network connections.

Remember that your Wi-Fi connection is a direct line between your smart device and the web, so your routers, modems, and servers need just as much protection. Create strong, hard-to-guess passwords and be sure to update these devices as security patches become available.

Transfer and Storage

Behind our IoT devices, we house lots of data. Think of all the photos and notes you have on your smartphone or tablet. Or all the recordings of your family interacting caught on your doggy camera. 🐕  If this data is not properly stored in a safe place, it can be breached. That’s why it’s always wise when uploading to the cloud to add multi-factor authentication on your account to verify your identity before accessing your private data.

Let’s not forget how your files are transferred. While those pictures or videos are uploading to the cloud, they could be intercepted via insecure networks and connections. That’s why sometimes strong passwords aren’t enough. Protect your most sensitive personal and professional data with encryption.

Insufficient Privacy Protection

Most IoT devices often allow you to control their privacy settings, or at the very least, publicly access their privacy policy. Instead of blindly clicking “Acknowledge” on the policy during installation, give the terms a proper readthrough. Should you not like how the device uses your private information and are unable to modify it, consider a more trusted product instead.

If your device has modifiable security or privacy settings, be selective about what you allow the device to access. For example, you may choose not to link bank accounts, credit cards, and debit cards to the Google device to strengthen its security. Or, you may manually mute your Google Home when not in use. Remember—security settings can be modified every time you update the device, so be sure to frequently confirm your permissions.

Be the Master of Your IoT Devices

While IoT devices can undoubtedly make our work and home lives a little easier, they come at a price. It’s important to remember, you hold great power! By diligently managing your devices, you can control your privacy and security—and become the master of your device kingdom. Rule over your IoT devices with pride 👑