If one device is compromised, all devices with that password are also compromised. New standards and upcoming regulatory change mean organisations need to assess how their IoT products use passwords and ensure universal default passwords are eliminated.