Govt issues cybersecurity advisory on wearable device risks
The Cabinet Division has issued a cybersecurity advisory, cautioning against the security risks posed by wearable smart devices in sensitive environments.
The advisory warns that smartwatches and fitness trackers could unintentionally expose classified information, making them potential threats in high-security offices, meetings, and critical locations. Such devices could lead to data breaches, unauthorized tracking, and cyberattacks.
According to the Cabinet Division, past incidents highlight the vulnerabilities of wearable technology. In 2018, Fitbit user data unintentionally revealed the locations of secret facilities, raising concerns about tracking risks. Similarly, security flaws in the Apple Watch allowed third-party apps to bypass authentication measures, while a 2020 ransomware attack on Garmin led to data encryption, service disruptions, and multimillion-dollar losses.
To mitigate these risks, the advisory mandates that wearable devices undergo a formal security evaluation before being used in restricted areas. This assessment will focus on security architecture, encryption standards, and authentication mechanisms. Devices failing to meet security requirements will be prohibited until their vulnerabilities are resolved.
The guidelines further state that wearable devices should be strictly restricted in areas where classified discussions or operations take place. Approved devices must have non-essential features like GPS and Bluetooth disabled, undergo regular firmware updates, and be subject to restricted network access with encryption and segmentation. Multi-factor authentication (MFA) will also be mandatory for permitted devices.
The Cabinet Division has emphasized that non-compliance with these cybersecurity measures could result in serious security breaches. Organizations handling sensitive data are urged to enforce strict controls over wearable device usage to prevent unauthorized access and data leaks.
