Matthew Garret and James Bottomley have two blog posts out on IoT security.
I have nearly given up on IoT security, there is so much new IoT vulnerabilities in the news each day. 😦
http://mjg59.dreamwidth.org/45098.html
http://blog.hansenpartnership.com/home-automation-coping-with-insecurity-in-the-iot/