Organisational use of Enterprise Connected Devices

This report summarizes the widespread security weaknesses in embedded and consumer connected devices (ECDs), highlighting vulnerable device components, insecure communication channels, and software flaws that enable remote code execution and large-scale compromise. It details notable cases including the Ripple20 supply-chain vulnerabilities affecting millions of devices, Mirai-inspired IoT botnet development targeting cameras and recorders, and enterprise printer exploits, and stresses the risks from unpatched devices and supply-chain compromises that can produce large-scale, persistent threats.