It almost is not worth bothering to search for IoT security problems, there are so many it is hard to find new ones.
https://twitter.com/hdmoore/status/699822584595116032
[…] By default, the username is admin and the password is blank. […]
https://www.pentestpartners.com/blog/pwning-cctv-cameras/
https://krebsonsecurity.com/2016/02/this-is-why-people-fear-the-internet-of-things/