Critical TCP/IP security flaw in a widely used software library affects hundreds of millions of IoT devices connected to the internet, including products from HP, Intel and many others.
Designed to create more stringent contractor screening and government use requirements, the IoT Cybersecurity Improvement Act of 2019 has now cleared its first hurdle in the House of Representatives.
IoT devices that record copious details of the daily lives of users raise natural privacy concerns. A history-clearing factory reset on the Echo Dot does not appear to clear that data.
Supply chain vulnerability in the ThroughTek "Kalay" network, a cloud-based communications platform used by an estimated 83 million IoT devices, could allow for remote compromise and control.