Skip to main content

Smart home devices are causing more security risks for businesses


Smart home devices aren’t just for the home. Businesses are inviting more and more internet-connected devices into their offices and buildings as well. While the technology may simplify some tasks, security experts warn that the Internet of Things is also opening companies up to more security threats.

Cybersecurity firm Trend Micro recently released a new report that shows how smart home devices can expose companies in unexpected ways and create new points of entries for attackers. According to the firm, there are three primary categories of automation systems that are used by companies: Local stand-alone servers, cloud-based servers, and virtual assistant-based servers. All three present unique challenges to secure, lest you leave yourself open to a potential attack.

Related Videos

To track the threat, Trend Micro researchers set up 100 connected devices in two sites to see how security lapses develop. What they found were the more devices and actions that are added to a network, the more complex the system becomes and the more prone to errors it is. With the introduction of smart home devices like smart speakers and other voice-controlled appliances, the threats become even more challenging to account for. An attacker could theoretically clone a person’s voice and issue commands, add a “phantom device” to fool smart locks and other security systems and even inject a bug that could shut off internet-connected alarms.

An attacker could find unsecured devices within a work environment by using Shodan, a search engine that shows exposed internet-connected appliances. By finding one device that lacks proper security, an attacker could target it and gain wider access to a business’s network. Something as simple as a smart speaker with a weak password could result in a hacker gaining access to sensitive information.

“IoT devices, their uses and the environments in which they are used have all gotten more complex very quickly, but security is still not built into these devices,” Greg Young, vice president of cybersecurity for Trend Micro, said in a statement. “Today, personal and corporate data may cross many routers, an IoT control, various IoT protocols and more all within a day’s work. This creates an ideal situation for criminals — why attack a robust enterprise when the remote worker’s smart home is exceptionally vulnerable.”

For businesses bringing smart home devices into the workplace, Trend Micro recommends taking the following steps to assure the internet-connected product won’t expose any sensitive information: Enable password protection and pick a safe and unique password, change any default settings, don’t use any unverified third-party apps, keep firmware up to date, enable encryption when possible, and make regular backups.

Editors' Recommendations

Sonos One vs. Google Nest Audio: which is the best smart speaker?
The Google Nest Audio speaker on a table.

The Sonos One and Google Nest Audio are two of the best smart speakers of 2023. Both can pump out impressive sound, respond to a wide variety of voice commands, and easily sync up with the rest of your smart home. But with the Sonos One costing more than $200 and the Google Nest Audio clocking in at just $100, you might be wondering if the Sonos One is truly worth your money -- or if you’d be better off saving $100 and opting for the cheaper Google product.

Before picking up either smart speaker, here’s a closer look at the Sonos One and Google Nest Audio.
Pricing and availability

Read more
Arlo extends end-of-life support for legacy cameras and doorbells
Arlo Pro 4 Spotlight Camera casing

It looks like households equipped with older, legacy Arlo products won’t have to rush out and buy new gear after all, as the company has changed course on its end-of-life policy that was revealed last month. Previously, several aging cameras and video doorbells in the Arlo lineup were expected to lose access to seven-day cloud storage, notifications, and future updates -- but after reaching out to its community, the company has decided to extend coverage instead of roll it back.

As products age, it’s standard practice for companies to stop supporting them. The time and resources needed to manage outdated products aren’t insignificant, and newer products that are pegged as their replacement quickly become the new focus. However, there was a bit of backlash when Arlo announced its original plans, as a handful of the devices scheduled to be sunset had been released just over five years ago.

Read more
What is Arlo Secure, and is it worth it?
The Arlo Pro 4 home security camera installed outdoors.

Arlo makes some of the best smart home products on the market. From robust video doorbells to premium security cameras, a model from Arlo is all but guaranteed to fit your needs. Products in the lineup tend to be a bit expensive and -- like most other smart home cameras -- lock many features behind a monthly subscription called Arlo Secure.

Curious to learn more about Arlo Secure before signing up? Or maybe you’re wondering if you need it at all, as your Arlo devices will function perfectly fine without becoming a member. Whatever the case, here’s a closer look at Arlo Secure and if it's worth signing up for.
What is Arlo Secure?

Read more