Defenders in Lab Coats S2:E10 Research Notes

Why I created this

This was requested by some of the members in the CyberSpeak Labs discord group! I also believe a lot of parents, even those who are not tech savvy, could learn from this episode on IOT devices that are marketed for parents.

Turning Security Features on Baby Monitors

1. Use Strong Account Security

Why it matters: If someone guesses your password, they can watch your camera or steal your data.

What to do:

Use a unique, strong password that includes letters, numbers, and symbols.Turn on Two-Factor Authentication (2FA) to add an extra layer of security.Avoid sharing your account unless absolutely necessary. Do not reuse passwords across different websites or apps.

2. Turn On Video Encryption

Why it matters: Encryption keeps your video private while it is stored or traveling over the internet.

What to do:

Look for settings in your camera’s app or website such as End-to-End Encryption (E2EE)AES EncryptionSSL or TLS Encryption

Turn on any encryption features that are available.

3. Control Who Can See the Camera

Why it matters: The more people who can access your camera, the greater the risk.

What to do:

Only share access with trusted peopleUse viewer or guest roles instead of full access when possibleRemove old users or shared links regularlyAvoid sharing access links over text, email, or social media

4. Enable Notifications and Logs

Why it matters: Alerts and logs help you know if someone tries to access your camera.

What to do:

Turn on login alerts if the option is available. Enable access logs to keep track of who has viewed the camera and when. Check logs regularly to spot any suspicious activity

5. Put Your Camera on a Separate Wi-Fi Network (Optional but Helpful)

Why it matters: Separating devices makes it harder for hackers to move from one device to another.

What to do:

Use your router’s Guest Network for cameras. Ask a tech-savvy friend or family member to help set this up if needed. Avoid putting the camera on the same Wi-Fi as your phone, computer, or smart home devices

6. Keep the Camera Updated

Why it matters: Updates fix security issues and help keep your device safe.

What to do:

Turn on automatic updates if your camera supports itCheck for firmware or app updates once a month if needed

7. Turn Off Features You Don’t Use

Why it matters: Unused features can increase your risk.

What to do:

Turn off remote access if you only use the camera at home. Disable audio recording if it is not needed. Turn off cloud recording if you prefer to store video locally

8. Avoid Unsafe Cameras

Some budget cameras from unknown brands may not be secure and could put your privacy at risk.

Safer camera brands include:

Eufy Baby Monitor (no internet required, local video storage)Nanit Pro (cloud storage with strong encryption and secure access)CuboAi Plus (encrypted cloud storage and access logs)

Final Tips

If you are unsure about any settings, ask a trusted tech-savvy friend or family member for help. Keep the camera’s instruction manual and support contact information. Treat your camera like a digital window and make sure only you control who can see through it

Security Incidents Found in Research

• February 2025 – Reddit User Reports Hacker Speaking to Baby

  • A parent shared on Reddit that they heard a stranger's voice speaking to their baby through a WiFi-enabled monitor. The hacker had been accessing the device for days without the family's knowledge. parents.com+1nypost.com+1

• October 2023 – Australian Family Warns of Baby Monitor Hack

  • Rapper J-Milla and his partner, Poppy Radbone, reported that someone hacked into their baby monitor and spoke to their child. They are now warning other parents about the potential risks. nypost.com

• December 2018 – Texas Family Threatened via Baby Monitor

  • A Texas couple experienced a terrifying incident when a hacker accessed their Nest camera baby monitor, threatened to kidnap their child, and hurled obscenities at them. globalnews.ca+2cbsnews.com+2washingtonpost.com+2

• January 2019 – Illinois Couple's Nest Camera Hacked

  • An Illinois family reported that a hacker spoke to their baby through a Nest security camera and later directed obscenities at the parents. cbsnews.com+1thv11.com+1

• June 2018 – South Carolina Mom Notices Unusual Camera Movement

  • Jamie Summitt observed her baby monitor moving on its own, suspecting it had been hacked. The camera panned to areas where she breastfed her child, raising serious privacy concerns. npr.org

Security Recommended Baby Monitors

🧩 Cybersecurity Comparison Table: Baby Monitors (Best ➡ Worst)

Rank	Baby Monitor	Local Storage	End-to-End Encryption	2FA Support	Access Controls	Vendor Trust	Cloud Optional	Notes
✅ 1	Eufy Baby Monitor 2K / SpaceView	☑️ Yes (2K model) / FHSS	☑️ AES-128 (2K)	❌ No	☑️ App permissions	☑️ High (Anker)	☑️ Yes	Best local-only option, avoids cloud completely if desired
✅ 2	Nanit Pro	❌ No	☑️ AES-256 + TLS	☑️ Yes	☑️ Granular app controls	☑️ High (SOC 2 certified)	❌ No	Secure cloud, great for remote use
✅ 3	CuboAi Plus	❌ No	☑️ AES-256	☑️ Yes	☑️ Device sharing with roles	☑️ High (AWS hosted, Taiwan-based)	❌ No	Great alerts, strong cloud privacy
⚠️ 4	Owlet Cam 2	❌ No	☑️ TLS only	☑️ Yes	☑️ App-based access	⚠️ Moderate (past security concerns)	❌ No	Improved, but still has some privacy baggage
⚠️ 5	Arlo Baby	❌ No	☑️ AES-128	☑️ Yes	☑️ Some access control	⚠️ Moderate (Netgear, known issues)	❌ No	Feature-rich, but cloud required and support is declining
❌ 6	Nest Cam (Indoor)	❌ No	☑️ AES-128 + TLS	☑️ Yes (via Google account)	❌ No per-camera user roles	⚠️ Low-Moderate (privacy concerns)	❌ No	Secure-ish, but highly cloud-tied and not baby-specific
❌ 7	Ring Indoor Cam	❌ No	❌ Optional E2EE	☑️ Yes (via Amazon account)	❌ Basic only	❌ Low (law enforcement access history)	❌ No