Forescout has analyzed the current risk levels across IT, IoT, OT IoMT domains, identifying the most vulnerable devices. Its main conclusion is that risk and exposure management must assess and mitigate risk across all these categories, rather than treating them in silos.
Regarding IoT devices, the riskiest devices are, as in earlier years, Network Video Recorders (NVR), VoIP systems and IP cameras, have a long history of being targeted by both cybercriminal botnets and Advanced Persistent Threats (APTs).
Network Attached Storage devices (NAS), have been targeted like the ones before, but face an additional threat from ransomware actors, who exploit the valuable data they store and their weak security.
This year, Point of Sale devices are added to the list. PoS devices are targeted for sensitive data, like credit card numbers and payment data.
The Riskiest Connected Devices of 2025 can be downloaded at https://www.forescout.com/resources/riskiest-devices-2025-report/.
