4.5 million embedded systems use HTTPS and Secure Shell (SSH) keys that are not secret, SEC Consult says. The Vienna-based security consultancy says the problem is only getting worse. Security experts say the problem poses numerous risks to Internet of Things devices. The firm has released all 580 static keys via the code-sharing site GitHub to help organizations identify related vulnerabilities, develop countermeasures – and no doubt pressure culpable vendors and ISPs to update vulnerable devices. It says embedded systems that reuse cryptographic keys include the ToughSwitch from Ubiquiti Networks.”]
Source: https://www.inforisktoday.com/bad-crypto-key-hygiene-equals-internet-things-danger-a-9386