CYBERSECURITYTRACKER
Permanent story citation

Abandoned IoT apps keep sending sensitive data to broken servers

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7722

As cited

Copy frozen at (site build).

vulnerabilities

Abandoned IoT apps keep sending sensitive data to broken servers

Researchers analyzed 61,500 abandoned Android IoT companion apps and found that nearly 75 percent contained software dependencies linked to documented vulnerabilities. Millions of users continue running these unmaintained applications for smart home devices like plugs, cameras, and thermostats that no longer receive updates.

Why it matters: Organizations and consumers running legacy IoT apps face active exploitation risk from known vulnerabilities in unpatched dependencies; security teams should audit and deprecate abandoned companion apps in their environments.

VendorsGoogle
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary