Cybersecurity Foundations (Grades 6–8) · lesson 37 of 48 · 8 min
Your Home Network: More Devices, More Risk
The average home now has 10–15 internet-connected devices — laptops, phones, smart TVs, game consoles, security cameras, smart speakers, and more. Each one is a potential entry point for attackers. If any device on your network is compromised, an attacker may be able to reach all the others.
Home networks are frequently targeted because they are far less well-defended than corporate networks. Most home routers ship with default settings that are insecure out of the box — and most users never change them.
By the end of this lesson you will be able to identify the most common home network vulnerabilities, configure a router securely, explain network segmentation using a guest network, and protect yourself on public Wi-Fi.
The Mirai botnet — your router as a weapon
In 2016, the Mirai botnet infected 600,000 home routers and IoT devices by exploiting default credentials (admin/admin, admin/password). These devices were then used to launch the largest DDoS attack in history, taking down Twitter, Netflix, and Reddit. The infected devices’ owners had no idea their home routers were being used as weapons. Changing default passwords and updating firmware would have prevented most infections.
Your Home Network Is an Attack Surface
Your home Wi-Fi network connects every device in your house — laptops, phones, smart TVs, game consoles, security cameras, and smart speakers. If an attacker gains access to your network, they can potentially reach all of those devices, intercept your traffic, and use your connection for malicious activity.
Home networks are frequently targeted because they are less well-defended than corporate networks. Most home routers ship with default settings that are insecure out of the box.
Securing Your Router
Guest Networks and Network Segmentation
A guest network is a separate Wi-Fi network on the same router that is isolated from your main network. Devices on the guest network can reach the internet but cannot communicate with devices on your main network.
This is useful for two purposes: giving visitors internet access without exposing your devices, and isolating smart home devices (which often have poor security) from your computers and phones.
IoT isolation
Smart TVs, cameras, and thermostats are frequently compromised because manufacturers prioritise features over security. By putting them on a guest network, even if one is hacked, the attacker cannot reach your laptop or phone from it.
Public Wi-Fi Risks
Public Wi-Fi networks — in coffee shops, airports, schools, and libraries — are convenient but risky. Because they are open or shared, other users on the same network can potentially intercept your traffic.
VPN basics
A VPN (Virtual Private Network) encrypts all traffic between your device and the VPN server, making it unreadable to anyone on the local network. On public Wi-Fi, a reputable VPN significantly reduces your exposure. Choose a VPN with a clear no-logs policy from a reputable provider — free VPNs often sell your data.
Knowledge Check
Home Network Safety
Why should you disable WPS on your router?
- WPS slows down your internet connection
- WPS has known vulnerabilities that allow attackers to bypass your Wi-Fi password
- WPS prevents guest networks from working
- WPS is only needed for older devices
Answer: WPS has known vulnerabilities that allow attackers to bypass your Wi-Fi password
WPS (Wi-Fi Protected Setup) was designed for easy device pairing but has a flaw that allows brute-force attacks to recover the Wi-Fi password in hours.
What is the main benefit of putting smart home devices on a guest network?
- It makes them faster
- It isolates them so a compromised device cannot reach your computers and phones
- It gives them a stronger Wi-Fi signal
- It prevents them from needing firmware updates
Answer: It isolates them so a compromised device cannot reach your computers and phones
Network segmentation via a guest network means a hacked smart TV or camera cannot communicate with your main devices.
What is an evil twin attack?
- A malware that copies itself
- A fake Wi-Fi hotspot with the same name as a legitimate one
- Two attackers working together
- A phishing email that looks identical to a real one
Answer: A fake Wi-Fi hotspot with the same name as a legitimate one
An evil twin is a rogue access point that mimics a legitimate network. Connecting to it routes all your traffic through the attacker.
WEP is a secure Wi-Fi encryption standard suitable for home networks.
- True
- False
Answer: False
WEP (Wired Equivalent Privacy) was broken decades ago and can be cracked in minutes. Always use WPA2 or WPA3.
A _____ encrypts all traffic between your device and a server, protecting you on public Wi-Fi.
Answer: VPN
A Virtual Private Network creates an encrypted tunnel for your traffic. On public Wi-Fi, this prevents other users and attackers from reading your data.
Real-World Case Studies
Case 1: The Casino Fish Tank Hack
In 2017, attackers breached a casino’s network through an internet-connected fish tank thermometer. The smart thermometer had been installed to monitor water temperature and was connected to the casino’s main network. Attackers used it as an entry point, then pivoted to the casino’s high-roller database and exfiltrated 10GB of data. The lesson: every internet-connected device is a potential entry point. Network segmentation — putting IoT devices on a separate network — would have contained the breach to the fish tank and prevented access to the casino’s main systems.
Case 2: Evil Twin Attacks at Airports and Coffee Shops
In 2024, Australian Federal Police charged a man with running evil twin Wi-Fi attacks on domestic flights and airports. He set up fake Wi-Fi hotspots with names like “Free Airport Wi-Fi” that captured login credentials from passengers who connected. Victims had their email and social media credentials stolen. The lesson: never connect to public Wi-Fi without a VPN. If you must use public Wi-Fi, avoid logging into sensitive accounts. Verify the network name with staff before connecting.
Previous lesson: Device security checklist
Back to Cybersecurity Foundations (Grades 6–8)
Next lesson: Incident reporting basics