National Cybersecurity Awareness Month: UPnP and you…PnP

This article explains how UPnP—especially the Internet Gateway Device (IGD) profile—enables automatic port forwarding that can expose internal devices (e.g., IP cameras, printers, consoles) to the Internet, a behavior historically abused by botnets like Conficker. It outlines the security implications of inadvertent exposure and recommends using runZero to discover UPnP-enabled assets, identify externally visible devices, and review detailed UPnP metadata for better network hygiene.