Cybersecurity lags behind as IoT devices proliferate, according to a new report

Image: GettyImages/Andrey Suslov

The modern astute location is brimming with a immense array of interconnected devices to assistance humans preheat ovens, acceptable the ambiance astir the location and adjacent remotely provender the household pet. However, these internet-enabled devices besides contiguous caller information risks and introduction points into the location for cybercriminals. On Wednesday, NordVPN released a study outlining the proliferation of astute devices and user sentiments regarding work for protecting these devices.

SEE: Security incidental effect policy (TechRepublic Premium)

"As the probe shows, the much devices radical own, the much susceptible they usually are. Manufacturers surely person to instrumentality work for the information of their products, but users play a large portion successful their ain cybersecurity," said integer privateness adept astatine NordVPN Daniel Markuson successful a property release.

Proliferation of IoT devices and information gaps

The NordVPN study is based connected a planetary survey involving 7,000 people. A information of the survey asked respondents which IoT and astute devices they had successful their homes. Unsurprisingly, Wi-Fi routers/internet hubs topped this database for 63% of respondents, followed by internet-connected televisions (57%) and gaming consoles (36%).

In order, astute speakers a la Echo (featuring Alexa (28%), "fitness oregon wellbeing devices" specified arsenic smartwatches and fittingness trackers (24%) and information devices (16%) including doorway cameras and astute locks circular up the apical six astute oregon IoT devices respondents had astatine home. While 89% of U.S. respondents said they usage "some benignant of IoT device" astatine home, 17% said they instrumentality "no enactment to protect" these devices, according to NordVPN. 

On the aforesaid token, the immense bulk of respondents are taking astatine slightest immoderate measures to support these devices. The apical information measures taken see adding "antivirus oregon VPN to smartphone, laptop, and/or tablet connected the aforesaid web arsenic IoT devices" (42%), changing the default password for Wi-Fi routers (35%) and astute devices (32%) and adding a Wi-Fi router VPN (19%), according to the report.

Interestingly, astir one-quarter of respondents (24%) said they bash not incorporated immoderate of the listed measures to support these devices and galore consciousness arsenic though consumers are not liable for astute and IoT instrumentality security.

More than fractional of respondents judge users and consumers (55%) are liable for the information extortion of these devices, followed by net work providers (45%) and instrumentality manufacturers (41%), according to the report, and a akin fig of respondents judge instrumentality sellers (19%) and governments (18%) are liable for instrumentality information protection.

"IoT devices, by their precise nature, cod and nonstop information. This mightiness beryllium done securely and for a circumstantial purpose, specified arsenic an encrypted connection to archer your heating to crook off. But it mightiness besides beryllium leaky, either done atrocious encryption (or nary astatine all) oregon done giving distant other information," reads a information of the property release.

SEE: How to negociate passwords: Best practices and information tips (free PDF) (TechRepublic)

As we antecedently reported, smart homes could beryllium ripe for a caller benignant of cyberattack, based connected the findings of a Georgia Tech survey that illustrated the assorted ways inferior companies and nation-states tin usage IoT devices en masse to manipulate vigor markets. The NordVPN merchandise made enactment of information risks associated with compromised IoT devices, specifically noting a drawstring of hacked Ring doorbells successful 2020. (In January, Ring announced that it was launching end-to-end encryption to eligible devices.)

"IoT instrumentality makers are successful a unreserved to merchantability the gadgets arsenic rapidly arsenic possible. This means that they are shipping them retired with the minimum features required for them to function, shortening the improvement process and cutting costs arsenic overmuch arsenic possible. This is large for instrumentality makers, but horrible quality for consumers. When things are rushed, they permission immense gaps successful security," said Markuson.

Also spot

• How to go a cybersecurity pro: A cheat sheet (TechRepublic)
• Security threats connected the horizon: What IT pro's request to cognize (free PDF) (TechRepublic)
• Checklist: Securing integer information (TechRepublic Premium)
• Online information 101: Tips for protecting your privateness from hackers and spies (ZDNet)
• Cybersecurity and cyberwar: More must-read coverage (TechRepublic connected Flipboard)