A vulnerability in a popular IoT lock key allowed researchers to break into hotel rooms. Researchers developed an exploit that allowed them to perform an array of malicious functions. The locks in question are dubbed mobile keys because of their reliance on mobile phones as opposed to card-based access such as those based on mag-strips and RFID. The product is still nascent and vendors are facing various challenges, including secure pairing issues, old hardware utilized in the locks, and apps being made by third parties.
Source: https://threatpost.com/hack-of-high-end-hotel-smart-locks-shows-iot-security-fail/147178/