IP cameras sold on the market are displayed at the Korea Consumer Agency’s Seoul-Gangwon branch in Seoul’s Songpa district on Dec. 12. NewsisHacking threats powered by artificial intelligence are spreading to Internet of Things devices. Concerns are growing that home cameras, or IP cameras, as well as IPTV set-top boxes and Wi-Fi routers, could become channels for privacy leaks. Yet South Korea’s IoT security framework remains in its infancy, critics say.The Korea Internet & Security Agency (KISA) and the Korea Consumer Agency jointly inspected the security of 10 IP camera models and urged manufacturers of products found to have vulnerabilities to make prompt improvements, according to security industry sources on the 15th. The inspection found vulnerabilities in three products — Roboview, Vstarcam and Finevu — where inadequate user authentication procedures could expose private information. Attackers could bypass authentication to download images and video stored on another person’s camera without permission, or forcibly activate and manipulate the camera, the inspection confirmed.Such vulnerabilities are not limited to home cameras. IPTV set-top boxes and Wi-Fi routers installed in homes can also become targets of cyberattacks, because hackers can exploit security flaws in the devices to install malicious applications or steal personal information. A report released by Google Threat Intelligence Group on the 2nd found that malware had been embedded at the manufacturing stage in more than 1.3 million Android TV set-top boxes worldwide. Google has since blocked servers and domains linked to the malware that infected the set-top boxes. In South Korea, KT established security standards in July covering the purchase and deployment of service devices including set-top boxes, Wi-Fi equipment, modems and internet phones, and is strengthening its security framework.-Institutional support, however, remains inadequate. KISA data showed that only 31 IoT security certifications were issued this year through the 6th of this month. That marks a 47% decline from 59 a year earlier and a second straight annual drop from 106 in 2024. Because the domestic security certification system operates mainly on a voluntary basis, certified products are concentrated in a few categories such as wall pads and digital door locks. South Korea’s IoT market was worth about 30 trillion won ($20.4 billion) last year, but total certifications issued through this year number fewer than 600.That has prompted calls to overhaul the IoT security certification system. In a report published in July, the National Assembly Research Service proposed selectively mandating security certification for high-risk IoT devices that have a significant impact on public safety. For low-risk devices, it recommended introducing a simplified certification system that verifies manufacturers’ own test results, easing the burden on small and mid-sized manufacturers.Overseas, regulators are tightening security rules for IoT devices. The U.S. Federal Communications Commission has effectively banned imports and sales of new models of consumer network routers manufactured abroad, citing national security concerns. Under the Cyber Resilience Act, the European Union has required manufacturers to report major vulnerabilities and security incidents since September this year, and from December next year will fully apply mandatory security requirements to products sold in the bloc. Britain has enforced the Product Security and Telecommunications Infrastructure Act since 2024, banning default passwords and requiring manufacturers to disclose how long they will provide security updates.
Click Here For The Original Source.
——————————————————–
