Published by NETGEAR and Bitdefender, a new report assessing the use and popularity of IoT devices in the home and their vulnerability to cyber-attacks found that smart TVs were most at risk, carrying a 31% chance.
This was followed by routers at 24% and IP cameras at 12% as being the most vulnerable to cyber-attacks in the home.
The 2024 IoT Security Landscape Report is based on threat intelligence from 3.8 million smart homes globally.
The report also found that home networks see on average more than ten attacks against smart devices every day, which is a rise of 20% from last year.
The survey found that the average household has 21 connected devices, 31% of which fall into the category of ‘other’ which means they range from smart switches and lightbulbs to treadmills and aquariums. Mobile phones and tablets account for 28%, and streaming devices such as TVs or Android-based set-top boxes make up 27% of the total. The remaining 12% are computers and laptops, which were once the most prevalent devices in the home.
From 2023’s report, Smart TVs were again at most risk, scoring 34%. While scoring 3% less this year, it still came out as most vulnerable. According to the report, it is “likely due to the fact that they are widely present in each home in greater numbers. Vulnerabilities in TVs are quite common, largely because of their extended lifespan and the tendency for manufacturers to discontinue support while the devices are still in use.”
The report continues: “Consequently, newly identified vulnerabilities often remain unaddressed (known as ‘n-days’) until the device is no longer in service.”
Aside from smart TVs, routers scored as being the second most vulnerable to attack. As a vital element in delivering internet connectivity to homes, routers are exposed to a wide range of security threats. Without suitable protection in place, attackers can hijack routers to gain control of all the smart devices connected within the home.
While the arrival of routers that support the new Wi-Fi 7 standard will significantly boost security, the report also predicts that we can expect to see a rise in regulatory efforts to improve IoT security standards and guidelines.
The new Wi-Fi 7 standard has helped to drive the use of an enhanced authentication mechanism which for consumers means advanced exploit prevention and AI heuristic techniques to detect and block unknown threats.
NETGEAR's Orbi 973, built to rigorous security standards with an automatic shield of security for Wi-Fi and connected devices
Another alarming result from the report showed that digital video recorders (DVRs) (7%) and smart plugs (6%) “exhibit substantial vulnerability counts relative to their respective device populations,” according to the report. Smart plugs are very popular in homes as an easy and affordable way to control devices around the home. However, the report highlights huge security weaknesses in the devices.
Similarly, and maybe more concerning, DVR vulnerabilities suggest concern around the security of video surveillance systems which are commonly found in both homes and commercial settings. The report states: “These findings emphasize the need for manufacturers to prioritise security in the design and production of such devices, as they play integral roles in modern connected environments.”
The research has found that the rise in the number of IoT devices and the use of sophisticated features, such as those commonly seen in smart TVs and DVRs which connect to the internet, has increased their potential attack surface. This makes these types of devices more vulnerable compared to simpler devices like set-top boxes.
The data highlights the complexity of cybersecurity threats facing various device types but finds that denial of service (DOS) attacks appear to be the most common type, particularly for smart TVs, smart plugs, DVRs and routers.
The next most prevalent attack type is categorised as overflow and gaining privilege following DOS. This occurs when attackers are able to gain unauthorised access to device resources.
“Smart devices have revolutionised our homes, delivering outstanding levels of automation and entertainment, but as with all connected technology, there is always the threat of a cyber-attack,” explained Gary Newson, EMEA sales director at NETGEAR. “What this year’s IoT Security Landscape Report makes clear is that while some of our devices are more vulnerable that others, the connected home as a whole needs protection, and that starts with the router. Upgrading to a Wi-Fi 7 router now is an important first step in raising the barrier against attacks so we can enjoy the full functionality of our smart devices without worry.”
Main image: Max Acronym / Shutterstock