Several toys that were tested have been found lacking authentication measures, opening them up to an array of insidious attacks.
Source: Threadpost