Why Unmanaged IoT Devices Create Hidden Security Gaps
Why did the seven-month dwell time inside that hospital surprise nobody on my team? A smart HVAC controller in a third-floor conference room sat on a US healthcare network for seven months. IT security had never inventoried it. The SOC had never seen its traffic. Within 72 hours of initial compromise, the attacker had pivoted to corporate systems and reached patient records. The final bill, as compiled in public breach reporting, lands at $12.4 million.