I wanted to share a cautionary story with you about the importance of researching IoT device vendors before installing their products in your home or business.
Recently, there was an incident involving NEXX https://getnexx.com/, a US-based company that sells garage door openers, alarm panels, and smart plug controls.
Researchers discovered vulnerabilities in the NEXX devices and contacted the company to report them. However, NEXX dismissed the researchers and ignored their attempts to communicate. Even when the situation was escalated to US CISA, NEXX continued to ignore all contacts. As a result, US CISA was forced to publish advisories regarding the vulnerabilities https://www.cisa.gov/news-events/ics-advisories/icsa-23-094-01, which could have serious implications for users of NEXX products. https://medium.com/@samsabetan/the-uninvited-guest-idors-garage-doors-and-stolen-secrets-e4b49e02dad...
This situation highlights the importance of researching IoT device vendors before making a purchase. By doing so, you can gain a better understanding of how the vendor approaches cybersecurity and ensure that their products meet your standards.
While it may be tempting to choose a cheaper device, investing a few extra dollars in a more secure product can ultimately save you from the headaches and potential risks associated with a vulnerable device.
Please be cautious when selecting IoT devices for your network and make sure to do your due diligence to ensure their security.
