Mind the Gap: Managing Insecurity in Enterprise IoT
Cheryl Biswas explores the growing attack surface of unmanaged enterprise IoT devices, addressing shadow IT, patch lag, and asset visibility gaps.
Summary
The Expanding Attack Surface of Shadow IoT
Enterprise facilities are filled with smart TVs, HVAC controllers, security cameras, and connected coffee makers deployed without IT security knowledge or oversight.
The Inherent Insecurity of Single-Purpose Hardware
Cheryl Biswas examines the structural challenges of enterprise IoT—devices designed without update mechanisms, running outdated software stacks, and rarely patched.
Analyzing Real-World Enterprise IoT Compromises
Biswas reviews high-profile breaches where attackers used unmanaged peripheral hardware (like smart fish tanks and building sensors) as initial lateral pivot points.
A Pragmatic Blueprint for Enterprise IoT Governance
The author provides security teams with practical strategies for continuous asset discovery, automated network segmentation, and vendor risk management.
Related talks
Creator Stage·39 min
Greg Conti · Tom Cross
Explores the structural, offensive technical capabilities inherent in modern tech platforms and the risks posed when companies, insiders, or nation-states weaponize them.
Voting Village·58 min
Burbank · Susan Greenhalgh · Marks · Jefferson
Examines multi-state insider access schemes where voting machine software and system images were illicitly copied across Colorado, Georgia, Michigan, and Pennsylvania.
Creator Stage·14 min
Panelists discuss how AI advances, deepfakes, global conflicts, and personal CISO liability are rapidly reshaping modern cybersecurity threats.