Survey Sounds More Alarms on Internet of Things in the Enterprise

zScaler's ThreatLabZ surveyed enterprise network traffic and found widespread insecure IoT devices—including IP cameras, NVRs, printers and IP phones—communicating using unencrypted HTTP, leaking credentials in URIs, using default weak admin credentials, and performing unauthenticated firmware/update operations; these weaknesses make such devices easy to sniff, tamper with, or recruit into botnets like Mirai, though no Mirai infections were observed in the studied sample.