Smartwatches

Adrian Sanabria and Jon Bundy host the first episode of the Wireless Threat Series podcast, sponsored by Bastille Networks, focusing on smartwatch security risks. They discuss two main categories of threats: consumer risks involving personal data privacy and cloud storage vulnerabilities, and business risks where smartwatches could bypass security policies in no-phone zones. The hosts explore various smartwatch capabilities including WiFi, Bluetooth, cellular, NFC, cameras, and microphones that create potential attack vectors. They examine real-world examples like fitness tracker data leaks through Strava, malicious firmware in children's watches with wiretapping capabilities, and DIY devices that can perform WiFi deauthentication attacks. Key recommendations include evaluating vendor reputation, understanding personal risk tolerance, and updating enterprise security policies to treat smartwatches similarly to phones when they have comparable capabilities. The discussion concludes with threat scores, rating personal risk higher due to PII exposure and business risk as moderate but manageable.