🛡 IoT Security Digest - #5

Breaking News: US online retail shops have delisted major Chinese brands at the direction of the FCC. One of the reasons given for their removal was the apparent vulnerabilities present in these devices.

This leads to some uncomfortable questions. I love asking these questions! Maybe I just like to stir the pot…

Should US manufacturers be held to the same standard?

What kinds of vulnerabilities in an IoT device should require delisting or a product recall?

In The News

Major US online retailers remove listings for millions of prohibited Chinese electronics

The follow brands have been among those pulled from online stores:

• Huawei

• Hikvision

• ZTE

• Dahua

It just so happens that I’ve been messing around with a Dahua camera in my livestreams and went ahead and made a dedcated video you can watch below.

Tools of the Trade

Free Enterprise IoT Pentesting Masterclass

Over the past week I’ve dropped one video per day! The now complete 7 part video series details the end-to-end process of conducting an IoT pentest on enterprise/commercial grade devices. All for FREE. Check it out below:

Return Value

This Saturday, I attending BSidesNoVA for the first time! I was super impressed by this conference.

For starters, it was only $50! Seriously, what conference can you attend for that price nowadays? The talks were really cool, multiple CTFs, and a happy hour all included.

Happy Hacking 👋