Third Party Software Updates: June 2018
Roku TV & Sonos IoT devices, which are widely used in businesses that handle sensitive consumer data, such as credit card number and health records, are vulnerable to DNS hacking. These two IoT devices are frequently installed within fast casual dining, medical and dentist businesses.
These devices can be exploited thanks to two common IoT issues; IoT devices do not require authentication for connections received on a local network and because HTTP is more prevalent to control embedded devices.
These vulnerabilities could enable anyone to “virtually map” your network, which has much wider consequences such as DoS (Denial of Service) to your most critical infrastructure, disrupting your end user experience or potentially planning much more sophisticated cyber warfare.
Just imagine what could happen if a hacker could learn the OS host name & IP information for all your servers.
Both Roku and Sonos are actively working to resolve these issues, but updates will be necessary to secure your devices.
Start a trial with Syxsense and see if these devices are in your network.