CISA published ICS advisories on 24 September for Eufy Omni C20 and Omni X10 Pro robot vacuums and for Botslab G980H dashcams, adding two more consumer devices to a catalogue that has been dominated by Siemens industrial products this month — CISA issued nine ICS advisories in the two days to 22 September, seven of them Siemens. The pattern is the analytical point: consumer smart devices share cloud, mobile-app and firmware supply chains with the enterprise estate, are rarely covered by asset inventory, and are increasingly the entry point for residential-network footholds from which corporate remote access is reached. The advisories follow CISA's publication on 23 September of guidance on third-party ICS integrators, extending the same third-party access concern downmarket. Defenders should treat household and small-office IoT as in-scope for patching and network separation rather than as out of scope for lacking a corporate owner.

• Source article