Video from The Security of Things Forum: Hacking the Belkin WEMO with Invincea

In a 2016 Security of Things Forum presentation, Scott Tenaglia of Invincea demonstrated multiple security flaws in Belkin WeMo smart home products—building on earlier research that exposed insecurely stored encryption keys and weak SSL validation. Tenaglia showed that malformed updates and SQL injection flaws could be used to create and execute malicious binaries on devices, enabling remote takeover of affected WeMo units.