The Enduring Terribleness of Home Router Security Matters to IoT

ASUS released an emergency patch for a critical “infosvr” vulnerability in several home routers after proof-of-concept exploit code was published that allowed unauthenticated root command execution; the article warns this highlights widespread insecurity in consumer broadband routers and IoT devices, the potential for attackers to commandeer networks via compromised routers, and the challenges in improving vendor update practices and consumer security behavior.