Connected health devices increasingly blend hardware, mobile software and cloud APIs, expanding the attack surface in ways many manufacturers underestimate. Smart weighing machines illustrate how weak device identity, flawed association logic and insecure backend design can turn low-risk consumer hardware into large-scale compromise vectors.

By examining common manufacturing practices, reused OEM platforms and exposed debug interfaces, this session explores how attackers pivot from local device access to cloud-level control.

In this session, led by Eugene Lim, lead cybersecurity engineer at Open Government Products, you will learn:

• Why static identifiers fail at scale;
• How flawed authentication and association logic enable unauthorized pairing;
• Chaining hardware, mobile and API weaknesses to achieve mass device takeover.