The Internet of Things (IoT) has emerged as reality with the advent of smart refrigerators, smart HVAC systems, smart TVs, and more. Security of these types of devices has not been evaluated until somewhat recently. Some manufactures do not have the necessary infrastructure to inform the public about security updates or to deliver them to devices. Adversaries attacking the weakest link could exploit a vulnerable IoT device, then move laterally within an organization’s network to conduct further attacks. For organizations that maintain large amounts of IoT devices on their network, there may not be a way to update a device that scales, creating a nightmare scenario.”]
Source: https://blog.talosintelligence.com/2016/02/trane-iot.html