Flaws in connected devices go beyond passwords | CSMonitor.com

The article reports that cybercriminals and script kiddies assembled large Mirai botnets by exploiting default and weak passwords (and hidden admin accounts) in Internet-connected cameras and DVRs—many sourced from a single Chinese supplier—then used those botnets to mount large DDoS attacks that impacted sites like Krebs on Security and the DNS provider Dyn; it warns that weak passwords are only one of many IoT security issues including manufacturing and deployment flaws.