New IoT Security Regulations on Tap in U.S., U.K.

The article outlines legislative efforts in the U.S. and U.K. to tackle pervasive IoT insecurity: U.S. bills would direct NIST to develop minimum security standards and guidance for devices procured by government agencies, while the U.K. proposes consumer-facing security labeling and baseline requirements (unique default passwords, update windows, vulnerability contact). Motivated by incidents such as the Mirai botnet and projections of massive password exposure, the measures aim to force manufacturers to improve device security and inform buyers.