Bruised by Internet of Things Attacks? Get Used to It.

Executive summary: The report describes the Mirai botnet’s large-scale DDoS attacks that leveraged insecure IoT devices (notably cameras and DVRs) with hard-coded/default credentials and firmware flaws—implicating vendor Xiongmai—and highlights high-impact outages (Dyn, Krebs) and the practical and regulatory challenges of remediation and device recalls, arguing the incident underscores systemic IoT security debt that will likely produce more such attacks.