If one device is compromised, all devices with that password are also compromised. New standards and upcoming regulatory change mean organisations need to assess how their IoT products use passwords and ensure universal default passwords are eliminated.

Security software updates are vital because every IoT product is susceptible to vulnerabilities. If updates cannot be provisioned, the security of the product will diminish over time.

Without mechanisms to report, manage and resolve vulnerabilities, the security of consumer IoT products will diminish over time – and the likelihood of attack or abuse will increase.