Devices designed for the Internet-of-Things (IoT) have a history of issues when it comes to cyber security – which is why the UK Government has the Product Security and Telecommunications Infrastructure Act (PSTI) under consideration.
However when buying IoT equipment, for installation in your home or office, you would expect Amazon to get it right. It is not as though Amazon is short of profits to invest in cyber security research and development of products it sells. It seems though that they took shortcuts:
FTC accuses Amazon of nightmare IoT security fails • The Register
Much of the problem lies with Amazon’s subsidiary Ring and it’s security products. In particular not enforcing security on customer’s videos gathered by cameras in the home and allowing employees and contractors to view them. They also failed implement basic cyber security protections for clients which enabled threat actors to take control of their home security systems.
If this is about home security, why are you mentioning here on a business blog?
Many of our clients work from home or have hybrid arrangements for their employees – any of whom could have an Amazon Ring security system installed.
Have you checked if that applies to you and your team?
Clive Catton MSc (Cyber Security) – by-line and other articles
