Over 90% of data transactions on IoT devices are unencrypted
May 22, 2019 / Lucian Constantin
A new report that looked at millions of connections from IoT devices present on enterprise networks found that over 40% of them do not encrypt their traffic. This means a large number of such devices are exposed to man-in-the-middle (MitM) attacks where hackers in a position to intercept traffic can steal or manipulate their data. The new report released today by network security firm Zscaler is based on telemetry data collected from the company's cloud. It covers over 56 million IoT device transactions from 1,051 enterprise networks over the course of a month. From the data, Zscaler identified 270 different IoT profiles from 153 device manufacturers. The devices included IP cameras, smart watches, smart printers, smart TVs, set-top boxes, digital home assistants, IP phones, medical devices, digital video recorders, media players, data collection terminals, digital signage media players, smart glasses, industry control devices, networking devices, 3D printers and even smart cars.