In the Internet of Things, attackers try to find the weakest links wherever possible. We, the security testers, should also look at the whole system. Unfortunately, assessments often stop at the device itself, excluding backend cloud services and applications.

Open source tools can be used in IoT security assessment to verify the attack surface, security controls, and other security-related features.

Key Takeaways from Cyber Security Nordic 2024 conference

Cybersecurity should be breadth-first

Cyber Resilience Act obligations for IoT manufacturers, importers, and distributors