IoT devices and network-connected appliances often aren’t designed with robust security in mind.

CISA issued this year's first binding operational directive (BOD) ordering federal civilian agencies to secure misconfigured or Internet-exposed networking equipment within 14 days of discovery.