Watch this video on YouTube
What common vulnerability might an attacker exploit in an IoT device that uses default credentials?