A Las Vegas casino was hacked through its fish tank.
I’ll give you a moment with that.
The lobby aquarium had an internet-connected thermometer — so staff could monitor the water temperature remotely, presumably from the couch, as one does. Attackers found it, used it to pivot onto the network, located the High Roller database, and walked out with 10GB of data. Through. The. Fish. Tank.
Now here’s the part that should actually keep you up at night: that thermometer is basically your printer.
And your smart refrigerator. And your kid’s drone. And the Star Wars toy that connects to the internet for reasons nobody fully explained. And the microwave that plays Spotify, because apparently we decided ovens needed WiFi now.
Here’s the thing about those devices: they were not built by security engineers. They were built by people trying to win over a mom who wants to listen to music while she bakes a cake, or a kid who wants to covertly monitor his sister’s phone conversations through the bedroom wall. Security was not the brief. Delight was the brief.
Now multiply that across millions of households. Every one a potential entry point. Every one a fish tank.
Add in the work laptop that came home Friday and parked itself on the same WiFi as the Roomba and the connected LEGO set, and your home IoT problem now has a direct bridge to your corporate environment.
The fish tank isn’t just in Vegas anymore.
