Is your $40 doorbell camera a security asset or a shadow network node? In this @labscon_io 2025...
Researchers expose shadow supply chain bypassing FCC certification for insecure doorbell cameras.
At LabsCon 2025, security researchers Marc Rogers and Silas Cutler revealed a supply chain scheme that circumvents FCC certification processes to distribute deeply insecure doorbell cameras to consumers. The presentation highlights how manufacturers game regulatory oversight, resulting in $40 devices with significant security flaws being deployed on home networks, effectively creating uncontrolled shadow network nodes.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Budget doorbell cameras ($40 price point)?
Get an email when a new story names Budget doorbell cameras ($40 price point), usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonSecurity researchers exposed how manufacturers exploit regulatory loopholes to distribute $40 doorbell cameras with serious security flaws that bypass FCC certification. These devices become uncontrolled shadow network nodes on home networks, creating entry points for attackers. The incident demonstrates how weak supply chain security and inadequate device vetting can turn convenience products into cybersecurity liabilities. Organizations and consumers must recognize that cheap IoT devices often sacrifice security for cost, potentially compromising entire network infrastructures.
What helps against this
How we list vendors- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Device management (MDM and UEM)
Every company laptop and phone is known, encrypted, locked down and up to date.
- Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.