IoT Devices Auto‑Login as Admin Open Lateral Paths in Critical Infrastructure
A recent SANS diary entry documented multiple incidents where Internet‑of‑Things (IoT) endpoints—such as smart sensors, cameras, and PLC gateways—were configured to authenticate automatically with built‑in administrative credentials. Because these devices were left on their factory defaults and allowed unrestricted network access, attackers who compromised any