While the Internet of Things represents a constantly widening collection of devices, this category of research is intended to focus primarily on network-connected products with "mart" features, especially those targeted towards consumers. This may be anything from doorbells to cameras, ovens to thermostats, locks to watches and much more.
The decreasing cost of hardware components and an increasing demand for more automation and remote access have driven manufacturers to develop new features and capabilities for products that consumers have relied on for decades. With this all-too-familiar trend comes the security cost; these features promote efficiency, ease of access and automation, but too often overlook critical security fundamentals and can be compromised by malicious actors. McAfee's Advanced Threat Research team regularly studies products in this domain and works with vendors and manufacturers to uncover and disclose vulnerabilities, as well as promote the development of more secure consumer products.
Blogs
- Microsoft Azure Sphere Bug Bounty – October 2020
- Call an Exorcist My Robot’s Possessed! – August 2020
- McAfee Researchers Expose Insights into Netwalker Ransomware – August 2020
- My Adventures Hacking the iParcelBox – June 2020
- What’s in the Box? Part II: Hacking the iParcelBox – June 2020
- The Tradeoff Between Convenience and Security – A Balancing Act for Consumers and Manufacturers – January 2020
- The Cloning of The Ring – Who Can Unlock Your Door? – January 2020
- We Be Jammin’ – Bypassing Chamberlain myQ Garage Doors – January 2020
- Trivial Software Flaws Continue to Plague Networked Devices – January 2020
- Avaya Deskphone: Decade-Old Vulnerability Found in Phone’s Firmware – August 2019
- Mr. Coffee with WeMo: Double Roast – May 2019
- McAfee ATR Team Discovers New IoT Vulnerability in Wemo Insight Smart Plugs – April 2019
- IoT Zero-Days – Is Belkin WeMo Smart Plug the Next Malware Target? – April 2019
- Your Smart Coffee Maker is Brewing Up Trouble – February 2019
- What’s in the Box? – February 2019
- ‘Insight’ into Home Automation Reveals Vulnerability in Simple IoT Product – August 2018
Videos & Demos
- Temi Robot Hack – Impact –August 2020
- Temi Robot Hack –August 2020
- WeMo Smart Plug – January 2020
- NFCring and Smart Lock – January 2020
- Avaya VoIP Deskphone – August 2019
- Mr. Coffee Coffee Maker with WeMo – May 2019
- BoxLock – February 2019