Walk around your office and count the things plugged into the network that aren't computers. The conference room TV. The security cameras. The printers. The door access panel. The NAS in the closet. The smart plug someone bought on Amazon.
Every one of those is a small computer with its own operating system — and most of them haven't had an update since the day they were installed.
What the 2026 IoT Report Found
A Bitdefender and NETGEAR report published in late October 2026 looked at vulnerabilities in connected devices found through public internet scans. The biggest offenders:
The most important finding wasn't about any one device. It was that nearly all of the exposures involved known vulnerabilities that already had patches available. The fix existed. Nobody applied it.
Why Attackers Bother
A way in
A compromised camera or TV on the same network as your laptops is a foothold. From there, attackers move to the machines that matter.
Eavesdropping
Smart TVs and conference room systems have microphones and cameras. In a boardroom, that's a problem.
Free infrastructure
Hijacked devices get used as proxies to relay other attackers' traffic — through your internet connection, under your IP address.
Your files
A NAS is often where backups and shared folders live. If it's exposed and unpatched, so is your data.
Five Fixes That Cover Most of It
Put IoT on its own network
A separate VLAN or Wi-Fi network for TVs, cameras, printers and smart devices, with firewall rules that keep them away from your workstations and servers. This is the single biggest win.
Know what's connected
Run a network scan and list every device. Most offices find at least one thing nobody remembers installing.
Update the firmware
Check each device for updates and turn on automatic updates where they exist. Add IoT gear to the same patch schedule as your firewall.
Change default passwords and close remote access
No device should still have its factory login. Turn off cloud or remote access features you don't use, and never forward ports to a camera or NAS.
Buy business-grade, and retire what's unsupported
Consumer gadgets often stop getting updates after a year or two. If the manufacturer has stopped patching it, it comes off the network.
Could the conference room TV reach your accounting PC right now? If you're not sure, your network probably isn't segmented.
Free Network Device Audit
We'll scan your office network, list every connected device, flag the ones that are unpatched or exposed, and show you how to segment IoT away from your business systems.
DM us "AUDIT" on LinkedIn or schedule a free consultation · (646) 791-2137