3 More Hackable Toys NOT to Buy Your Kids This Holiday Season

3 More Hackable Toys NOT to Buy Your Kids This Holiday Season

The clock is ticking on gift-buying this holiday season, but that’s no excuse not to do some research before you buy connected toys.

  • By Jessica Davis
  • Dec 06, 2017

The clock is ticking on gift-buying this holiday season, but that’s no excuse not to do some research before you buy connected toys. The wave of new WiFi and Bluetooth-enabled gadgets for kids means more possibilities that a toy with looser security standards could be hacked, leaving you and your child vulnerable.

We previously covered three hackable toys as investigated by Mashable. Since then, groups like Which?, a U.K.-based consumer products safety testing firm, and the U.S. Public Interest Research Group have issued their own lists of unsafe toys for 2017. Here are three of their worst offenders:

My Friend Cayla

Cayla is a smart, interactive doll that can chat with children. Her Bluetooth capability works with her app and blocks pre-loaded “bad” words and subjects, but some consumers are concerned that she may violate the Children’s Online Privacy Protection Act. Cayla was classified by the German Federal Network as an “illegal espionage apparatus” and was banned in the country after concerns that access to the doll was unsecured and she could be used to “illegally spy” on children. It’s possible to connect to Cayla even without her app installed because smartphones identify her as a hands-free headset.

Furby Connect

The latest update to Furby connects to the Furby Connect World App to provide more physical and digital ways to interact. It also has LCD-screen animated eyes and can say more than 1,000 phrases. Unfortunately, researchers found that anyone within range of its Bluetooth can connect to the toy when it’s switched on without physically interacting with it due to a lack of security features when pairing with the device. You can also connect to the Furby with a laptop, and some researchers were able to upload and play a custom audio file through the toy, which means anyone with the know-how could upload inappropriate material to play for a child.

I-Que Intelligent Robot

i-Que is an interactive robot who can talk, tell jokes and quiz children. It uses Bluetooth to pair with its app, but smartphones can identify it as a hands-free headset without even installing the app. Anyone within Bluetooth range of the toy can pair with it and use a text field in the app to make the toy say whatever they want in the robot’s own voice. Which? demonstrates a worst-case scenario of someone taking advantage of this vulnerability in the video below.

In a consumer notice about internet-connected toys released in July, the FBI suggested parents take the following steps before purchasing a “smart” toy:

  1. Research any known security issues with the toy.
  2. Only connect smart toys to trusted and secured Wi-Fi.
  3. Look into the toy’s internet and device connection security measures.
  4. Use authentication when pairing the device with Bluetooth, such as a pin or password.
  5. Stay up to date with any manufacturer security update or patches.
  6. Investigate where the user data is stored, with the company, a third party source or both.

About the Author

Jessica Davis is the Associate Content Editor for 1105 Media.

Featured

  • Maximizing Your Security Budget This Year

    7 Ways You Can Secure a High-Traffic Commercial Security Gate  

    Your commercial security gate is one of your most powerful tools to keep thieves off your property. Without a security gate, your commercial perimeter security plan is all for nothing. Read Now

  • Surveillance Cameras Provide Peace of Mind for New Florida Homeowners

    Managing a large estate is never easy. Tack on 2 acres of property and keeping track of the comings and goings of family and visitors becomes nearly impossible. Needless to say, the new owner of a $10 million spec home in Florida was eager for a simple way to monitor and manage his 15,000-square-foot residence, 2,800-square-foot clubhouse and expansive outdoor areas. Read Now

  • Survey: 72% of CISOs Are Concerned Generative AI Solutions Could Result In Security Breach

    Metomic recently released its “2024 CISO Survey: Insights from the Security Leaders Keeping Critical Business Data Safe.” Metomic surveyed more than 400 Chief Information Security Officers (CISOs) from the U.S. and UK to gain deeper insights on the state of data security. The report includes survey findings on various cybersecurity issues, including security leaders’ top priorities and challenges, SaaS app usage across their organization, and biggest concerns with implementing generative AI solutions. Read Now

  • New Research Shows a Continuing Increase in Ransomware Victims

    GuidePoint Security recently announced the release of GuidePoint Research and Intelligence Team’s (GRIT) Q1 2024 Ransomware Report. In addition to revealing a nearly 20% year-over-year increase in the number of ransomware victims, the GRIT Q1 2024 Ransomware Report observes major shifts in the behavioral patterns of ransomware groups following law enforcement activity – including the continued targeting of previously “off-limits” organizations and industries, such as emergency hospitals. Read Now

Most   Popular

Featured Cybersecurity

Webinars

New Products

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols. 3

  • Luma x20

    Luma x20

    Snap One has announced its popular Luma x20 family of surveillance products now offers even greater security and privacy for home and business owners across the globe by giving them full control over integrators’ system access to view live and recorded video. According to Snap One Product Manager Derek Webb, the new “customer handoff” feature provides enhanced user control after initial installation, allowing the owners to have total privacy while also making it easy to reinstate integrator access when maintenance or assistance is required. This new feature is now available to all Luma x20 users globally. “The Luma x20 family of surveillance solutions provides excellent image and audio capture, and with the new customer handoff feature, it now offers absolute privacy for camera feeds and recordings,” Webb said. “With notifications and integrator access controlled through the powerful OvrC remote system management platform, it’s easy for integrators to give their clients full control of their footage and then to get temporary access from the client for any troubleshooting needs.” 3

  • A8V MIND

    A8V MIND

    Hexagon’s Geosystems presents a portable version of its Accur8vision detection system. A rugged all-in-one solution, the A8V MIND (Mobile Intrusion Detection) is designed to provide flexible protection of critical outdoor infrastructure and objects. Hexagon’s Accur8vision is a volumetric detection system that employs LiDAR technology to safeguard entire areas. Whenever it detects movement in a specified zone, it automatically differentiates a threat from a nonthreat, and immediately notifies security staff if necessary. Person detection is carried out within a radius of 80 meters from this device. Connected remotely via a portable computer device, it enables remote surveillance and does not depend on security staff patrolling the area. 3