Cloud Break: IoT Devices Open to Silent Takeover Via Firewalls

Researchers demonstrated a novel proof-of-concept attack that impersonates IoT devices to their cloud management services by abusing static identifiers (serial numbers or MAC addresses) and reverse-engineering how vendors derive device credentials; this enables remote administrative commands and mass takeover of devices even when they are behind firewalls or isolated on intranets, and is difficult to detect or trace. The report recommends moving to randomized device credentials (UUIDs) and adding cloud-side checks (e.g., IP-change authentication) to mitigate the risk.