Smartwatch security still not up to scratch

Android Wear smartwatch

Smartwatch manufacturers have been accused of choosing convenience over security after a damning report laid bare the current situation.

Trend Micro and First Base Technologies tested all six of the "big brand smartwatches" on the market and found that overall physical device protection on all devices was poor, with no authentication via passwords or other means turned on by default.

"Across all of the smartwatches that were tested, it is clear that manufacturers have opted for convenience at the expense of security," Bharat Mistry, Cyber Security Consultant at Trend Micro commented. "On the surface, a lack of authentication features can make devices appear easier to operate, but the risk of having personal and corporate data compromised is much too big of an issue to forget about."

The Motorola 360, LG G Watch, Sony Smartwatch, Samsung Gear Live, Asus Zen Watch, Pebble and Apple Watch are among those that were tested and the latter was the only one that had a timeout function.

The Apple Watch also had the largest amount of sensitive data stored locally on the device, however, it is also the only one that has a complete wipe option following a number of failed login attempts.

User authentication not good enough

Google's Android Wear OS, meanwhile, got a poor write up when it came to its trusted devices feature as it could allow anyone with a smartphone and smartwatch to have unrestricted access to both.

It's not the only time that a study has been scathing of smartwatch security. A separate report from HP's Fortify division looked at 10 different wearables and again reported big frailties when it comes to user authentication and various other security issues.

Latest in Security
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple routers hit by new critical severity remote command injection vulnerability, with no fix in sight
Code Skull
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Latest in News
DeepSeek
Deepseek’s new AI is smarter, faster, cheaper, and a real rival to OpenAI's models
Open AI
OpenAI unveiled image generation for 4o – here's everything you need to know about the ChatGPT upgrade
Apple WWDC 2025 announced
Apple just announced WWDC 2025 starts on June 9, and we'll all be watching the opening event
Hornet swings their weapon in mid air
Hollow Knight: Silksong gets new Steam metadata changes, convincing everyone and their mother that the game is finally releasing this year
OpenAI logo
OpenAI just launched a free ChatGPT bible that will help you master the AI chatbot and Sora
An aerial view of an Instavolt Superhub for charging electric vehicles
Forget gas stations – EV charging Superhubs are using solar power to solve the most annoying thing about electric motoring