Organizations are at much greater risk of cyberattacks due to the expansion of IoT (Internet of Things) devices into their networks, according to new research from Palo Alto Networks’ threat intelligence group, Unit 42. The research, which examined the threats and vulnerabilities affecting current IoT device supply chain ecosystems, was published during National Cybersecurity Awareness Month, which this year focuses on the role that individual users play in strengthening the security of IoT devices.
As Infosecurity reports, the researchers first pointed to a recent survey, the findings of which showed that 89% of organizations have seen an increase in the number of IoT devices on their network in the last year, which significantly expands the attack surface . The researchers also emphasized that organizations should consider vulnerabilities in the supply chain of IoT devices, where vulnerable third-party software is installed or is part of certain components, such as an application or firmware .
A common mistake organizations made was to integrate third-party components and hardware without listing the components that were added to the device, the research found. This makes it difficult to determine how many products from the same vendor are affected when a vulnerability in one of those components.
Additionally, the researchers noted that it is difficult for users to know which components are running on any given IoT device, each of which has its own inherent security properties that depend on other components with their own security properties. This means that an entire device can be compromised if just one of these components is vulnerable. They also noted that users who manage networks with IoT devices often do not know how many of them are connected to a corporate network. This makes it difficult to monitor potentially vulnerable devices, while also increasing the chances of cyberattacks succeeding.
Researchers Anna Chung and Asher Davila pointed out that it is crucial to maintain a list of devices connected to the network to identify devices and the vendors or manufacturers of those devices that use a vulnerable component so that the administrator can fix, monitor, or disconnect them if necessary. They also added that having full visibility into the devices connected to the network and notifying organizations when a device exhibits vulnerabilities is crucial to defending their infrastructure from potential cyberattacks.
