CYBERSECURITY RISKS IN CONNECTED DEVICES: A REVIEW OF VULNERABILITIES, THREATS, AND PROTECTIVE STRATEGIES

Abstract

Connected devices, ranging from smartphones and wearables to industrial sensors, medical equipment, and connected vehicles, have become integral to modern personal, commercial, and industrial life. This growing reliance on Internet of Things (IoT) technology has expanded the digital attack surface available to malicious actors, introducing cybersecurity risks that extend well beyond traditional computers and networks. This paper reviews the major categories of cybersecurity risk facing connected devices, including weak or default credentials, outdated firmware, insecure communication, poor configuration, and inadequate device management, and examines the principal forms of cyberattack these weaknesses enable, including credential-based attacks, malware, botnets, distributed denial-of-service attacks, man-in-the-middle attacks, spoofing, and physical tampering. The review further considers the privacy, financial, and physical-safety consequences of connected-device compromise, the practical challenges organizations and individual users face in securing heterogeneous device environments, and the layered technical and organizational measures, including strong authentication, encryption, network segmentation, device inventory management, and continuous monitoring, that can reduce these risks. Drawing on foundational IoT literature and established cybersecurity guidance from standards bodies, the review concludes that securing connected devices is a shared responsibility among manufacturers, organizations, and users, and that no single control is sufficient on its own. As connected technology continues to expand, layered, continuously updated security practices will remain essential to protecting individuals, organizations, and critical services.