Surveillance Under The Tree: Connected Device Audit Turns up Sensors, Security Holes

**Overview:** Security audits by Kaspersky and Context show that many connected toys and consumer devices sold to consumers contain systemic security flaws — default or absent passwords, lack of brute-force protections, unencrypted communications (HTTP, Bluetooth/BLE), and outdated Linux-based software — which can enable easy compromise and turn devices with cameras, microphones, or GPS into surveillance tools; researchers warn these low-cost endpoints pose privacy risks and there is strong consumer support for IoT security regulation.