[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-213":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-213","SP 800-213","SP 800-213: IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements",20,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST guidance that helps organisations define cybersecurity requirements for IoT devices they plan to buy or deploy. It explains how to consider IoT devices in risk management and links to a catalogue of device capabilities and supporting non-technical expectations of manufacturers.\n\n**In practice.** Applying it well means identifying how a device will be used and what risks it introduces, then specifying requirements such as identification, secure configuration, software update capability, data protection and logging, plus manufacturer support like vulnerability disclosure. Requirements are included in procurement. Evidence includes device risk assessments, procurement specifications and an inventory of deployed IoT devices.\n\n**Common gaps.** Common gaps are IoT devices bought outside IT governance, no inventory and devices that cannot be updated.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpublications\u002Fsp800","Find it among NIST SP 800 publications","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"hard-coded-credentials-in-eseecloud-ip-cameras-leave-users-exposed","Hard-Coded Credentials in EseeCloud IP Cameras Leave Users Exposed","2026-10-15T18:21:38.566+00:00",{"slug":23,"title":24,"published_at":25},"self-replicating-ai-models-pose-emerging-botnet-threat-to-iot-devices","Self-Replicating AI Models Pose Emerging Botnet Threat to IoT Devices","2026-10-13T22:21:14.479+00:00",{"slug":27,"title":28,"published_at":29},"ai-powered-self-propagating-iot-botnets-a-rapidly-emerging-threat","AI-Powered Self-Propagating IoT Botnets: A Rapidly Emerging Threat","2026-10-13T20:21:17.938+00:00",{"slug":31,"title":32,"published_at":33},"swann-security-cameras-expose-live-feeds-due-to-missing-authentication","Swann Security Cameras Expose Live Feeds Due to Missing Authentication","2026-10-13T16:22:01.797+00:00",{"slug":35,"title":36,"published_at":37},"ai-self-replication-on-iot-devices-a-looming-worm-threat","AI Self-Replication on IoT Devices: A Looming Worm Threat","2026-10-13T14:21:07.191+00:00",{"slug":39,"title":40,"published_at":41},"four-year-old-gpu-flaw-enables-fire-tv-cube-rooting","Four-Year-Old GPU Flaw Enables Fire TV Cube Rooting","2026-10-13T12:22:37.618+00:00",{"slug":43,"title":44,"published_at":45},"lg-webos-pre-auth-root-flaw-highlights-iot-device-risks-on-local-networks","LG webOS Pre-Auth Root Flaw Highlights IoT Device Risks on Local Networks","2026-10-13T12:21:15.988+00:00",{"slug":47,"title":48,"published_at":49},"clingstun-hijacks-unpatched-iot-devices-as-stealthy-proxy-nodes","ClingSTUN Hijacks Unpatched IoT Devices as Stealthy Proxy Nodes","2026-10-05T22:20:21.628+00:00",{"slug":51,"title":52,"published_at":53},"clingstun-backdoor-exploits-24-iot-flaws-to-hijack-devices","ClingSTUN Backdoor Exploits 24 IoT Flaws to Hijack Devices","2026-10-05T16:20:21+00:00",{"slug":55,"title":56,"published_at":57},"critical-flaws-in-eufy-smart-cameras-expose-users-to-remote-code-execution","Critical Flaws in Eufy Smart Cameras Expose Users to Remote Code Execution","2026-09-24T21:22:00.489+00:00",{"slug":59,"title":60,"published_at":61},"critical-vulnerabilities-in-botslab-dashcams-left-unpatched-by-vendor","Critical Vulnerabilities in Botslab Dashcams Left Unpatched by Vendor","2026-09-24T21:21:44.881+00:00",{"slug":63,"title":64,"published_at":65},"bluetooth-sdk-flaw-leaves-skullcandy-earbuds-open-to-silent-hijacking","Bluetooth SDK Flaw Leaves Skullcandy Earbuds Open to Silent Hijacking","2026-09-09T22:21:48.212+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",15,{"slug":73,"name":74,"problem":75,"stories":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",14,{"slug":78,"name":79,"problem":80,"stories":81},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",8,{"slug":83,"name":84,"problem":85,"stories":86},"patch-management","Automated patch management","Known holes get closed in days, not months.",6,{"slug":88,"name":89,"problem":90,"stories":91},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",4,{"slug":93,"name":94,"problem":95,"stories":96},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",3,[98,104,108,112,118,124,128,132],{"family":99,"item":100,"code":101,"title":102,"together":103},"cis","12","Control 12","Network Infrastructure Management",16,{"family":99,"item":105,"code":106,"title":107,"together":71},"7","Control 7","Continuous Vulnerability Management",{"family":99,"item":109,"code":110,"title":111,"together":76},"1","Control 1","Inventory and Control of Enterprise Assets",{"family":113,"item":114,"code":115,"title":116,"together":117},"nist-800-53","si-2","SI-2","Flaw Remediation",12,{"family":119,"item":120,"code":121,"title":122,"together":123},"gdpr","32","Article 32","Security of processing",10,{"family":99,"item":125,"code":126,"title":127,"together":123},"4","Control 4","Secure Configuration of Enterprise Assets and Software",{"family":99,"item":129,"code":130,"title":131,"together":86},"13","Control 13","Network Monitoring and Defense",{"family":113,"item":133,"code":134,"title":135,"together":136},"sc-7","SC-7","Boundary Protection",5]