Connected & Compromised: When IoT Devices Turn Into Threats

Research by digital forensics expert Mattia Epifani documents pervasive insecurity in common IoT devices (Amazon Echo family, Apple TV, Google Home, smart refrigerators, cameras, Roombas, smart bulbs), noting insecure defaults, lack of passcodes, and little or no encryption of data at rest. These shortcomings can expose audio, credentials and other sensitive information, enable lateral movement and network compromise, and allow recovery of data from discarded devices. Epifani recommends enterprise mitigations such as separate IoT accounts and segmented sub‑Wi‑Fi networks while vendors progressively add stronger protections.