[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fffv_C0jFCQCmC6hLvgONYqFCRn5sQOBNRKbykuVdb5Q":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":17,"status":18,"created_at":19,"published_at":20,"article":21,"tags":25,"podcasts":38,"controls":39},"df4b4e43-bcb3-4fd9-a003-5ffb20eda160","chinese-smart-home-devices-hide-surveillance-infrastructure-through-shell-companies","5cdd9598-47b4-45b1-a801-f92d1c641661","Chinese Smart Home Devices Hide Surveillance Infrastructure Through Shell Companies","Security researchers exposed how cheap Chinese smart home cameras and doorbells sold under rotating brand names conceal a complex shadow supply chain involving shell companies and government-subsidized components. These devices contain hardcoded root passwords, inadequate security patching, and secretly route video data through China despite marketing claims of local processing. The shell company networks are designed to evade regulatory oversight using tactics similar to malware distribution campaigns. This demonstrates how nation-state actors can weaponize consumer IoT supply chains for surveillance while maintaining plausible deniability through corporate obfuscation.","**Immediate actions:**\n- Audit existing smart home devices for suspicious brand names and verify data routing destinations\n- Block or isolate identified Chinese smart home devices from sensitive network segments\n- Replace affected devices with products from verified manufacturers with transparent supply chains\n\n**Supply chain security:**\n- Establish vendor vetting procedures that trace component origins and manufacturing relationships\n- Require supply chain transparency documentation before approving IoT device purchases\n- Implement network monitoring to detect unexpected data exfiltration from smart home devices\n\n**Long-term governance:**\n- Develop organizational policies restricting IoT devices from untrusted or opaque supply chains\n- Create incident response procedures for compromised smart home and surveillance equipment\n- Establish regular security assessments for all connected devices in corporate and home office environments",[12,13,14,15,16],"CIS Control 2 (Inventory Management)","CIS Control 12 (Network Infrastructure Management)","NIST SP 800-161 (Supply Chain Risk Management)","NIST Cybersecurity Framework SC.1 (Supply Chain)","ISO 27036 (Supplier Relationships Security)",{},"published","2026-04-23T02:09:33.533454+00:00","2026-04-23T02:09:32.814+00:00",{"id":7,"url":22,"slug":23,"title":24},"https:\u002F\u002Fs1.ai\u002FLC25-RC","labscon25-replay-are-your-chinese-cameras-spying-for-you-or-on-you-89f783","LABScon25 Replay | Are Your Chinese Cameras Spying For You Or On You?",[26,32],{"id":27,"name":28,"slug":29,"description":30,"color":31},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",{"id":33,"name":34,"slug":35,"description":36,"color":37},"f0c2a0af-58aa-4128-87c9-6acd30f2dc48","Supply Chain","supply-chain","Third-party risk, compromised dependencies","#8b5cf6",[],[40,44,48],{"slug":41,"name":42,"problem":43},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",{"slug":45,"name":46,"problem":47},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",{"slug":49,"name":50,"problem":51},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection."]