IoT and Smart Devices: Staying Safe

Types of Smart Devices and IoT Systems

Smart devices and Internet of Things (IoT) systems cover a wide range of connected technologies used at home, at work, and in public spaces. These are physical devices that connect to the internet or local networks to send, receive, or act on data.

Common examples include:

Network Devices

• Routers and home hubs: Connect homes and offices to the internet. Because all other connected devices rely on them, a compromised router can allow criminals to monitor, redirect, or disrupt internet traffic.

Smart Home Devices

• Smart thermostats, lighting, locks, cameras, doorbells, and plugs

• Voice assistants such as Amazon Alexa or Google Home
  These devices often control physical systems in the home and can be accessed remotely.

Wearable Technology

• Fitness trackers and smartwatches that monitor activity, health data, and location.

Connected Vehicles

• Cars with internet-enabled navigation, entertainment, diagnostics, and remote access features.

Smart Appliances

• Fridges, ovens, washing machines, and other household appliances that connect to apps or cloud services for monitoring and control.

Industrial and Commercial IoT

• Sensors in manufacturing equipment, smart meters, environmental monitors, and building automation systems used to manage energy, safety, and operations.

Retail and Payment Technology

• Smart shelves, inventory trackers, self-service checkouts, and connected payment systems used to streamline retail operations.

Why IoT Devices Are Vulnerable

• Many IoT devices are built at low cost with limited computing power, so security is often minimal. Common weaknesses include:

  • Default Passwords: Many devices are sold with weak or widely known default passwords.
  • Lack of Updates: Security updates may be rare or non-existent.
  • Weak Encryption: Data may be sent without proper protection.
  • Limited User Control: Some devices do not allow you to change important security settings.
  • Always Connected: Devices that are constantly online are easier for attackers to find.

How to Protect Your Smart and IoT Devices

• Change default login details
• Replace the default username and password as soon as you set up a device.
• Use strong, unique passphrases for each device.
• Keep software up to date
• Regularly check for security updates provided by the manufacturer.
• Turn on automatic updates if the option is available.
• Separate your networks
• Place IoT devices on a different network from your main computers and phones.
• Guest networks or VLANs can be used to keep traffic separate.
• Turn off features you don’t need
• Disable functions such as remote access or voice control if you do not use them.
• Turn off Universal Plug and Play (UPnP) to reduce the risk of outside access.
• Watch device behaviour
• Look out for signs of compromise – such as unusual data usage or poor performance.
• Use network monitoring tools if you can.
• Use a firewall and antivirus protection
• Protect your home or business network with up-to-date antivirus software and a secure firewall.
• Make sure your router itself is also properly secured.
• Do your research before buying
• Choose products from trusted manufacturers with a good record of security support.
• Favour devices that receive regular updates and publish clear information about vulnerabilities.

Real-World Risks

Unsecured Smart and IoT devices are a tempting target for cyber criminals. Some of the risks include:

• Botnets and Zombie Devices: A compromised device can be taken over and used as part of a ‘botnet’ – a network of hijacked devices controlled by criminals. These can be used to launch large cyber-attacks, spread malicious software, or send spam emails – all without the owner realising.
• Spying through Cameras and Microphones: Hacked cameras, baby monitors, or voice assistants may allow intruders to watch and listen inside your home or workplace – turning private spaces into a security risk.
• Theft of Personal Data: IoT devices often collect sensitive information such as your routines, location, or health details. Criminals can steal this data for fraud, identity theft, or to target you further.
• Disruption of Services: Hackers may lock you out of your devices, disable alarms, or interfere with connected vehicles and appliances.
• A Gateway to Wider Attacks: Because IoT devices sit on the same network as laptops, phones, and business systems, one weak device can give criminals a route into everything else you own.