Since the start of the coronavirus pandemic, sales of smart devices have increased by almost 49%. As working from home has become the norm, and looks set to continue at least part time for many workers across the UK, protections from malicious cyber attacks need to be boosted.
The government are looking to update regulations so that makers of smart devices including phones, speakers and doorbells will need to tell customers, at point of purchase, how long the product will be eligible to receive security updates.
Just one vulnerable device can put a user’s network at risk. In 2017, attackers infamously succeeded in stealing data from a North American casino via an internet-connected fish tank. In extreme cases hostile groups have taken advantage of poor security features to access people’s webcams.
To protect customers the regulation changes will be:
· Customers must be informed at the point of sale the duration of time for which a smart device will receive security software updates
· A ban on manufacturers using universal default passwords, such as ‘password’ or ‘admin’, that are often preset in a device’s factory settings and are easily guessable
· Manufacturers will be required to provide a public point of contact to make it simpler for anyone to report a vulnerability.
Digital Infrastructure Minister Matt Warman said ‘’Our phones and smart devices can be a gold mine for hackers looking to steal data, yet a great number still run older software with holes in their security systems.
‘’We are changing the law to ensure shoppers know how long products are supported with vital security updates before they buy and are making devices harder to break into by banning easily guessable default passwords.
‘’The reforms, backed by tech associations around the world, will torpedo the efforts of online criminals and boost our mission to build back safer from the pandemic.
‘’Security updates are a crucial tool for protecting people against cyber criminals trying to hack devices.’’
