Explore embedded systems security in this 47-minute conference talk from GrrCON 2017. Delve into the world of Internet of Things (IoT) vulnerabilities, examining real-world examples from various industries including automotive, agriculture, and smart buildings. Learn about typical corporate penetration testing, firmware analysis, and the challenges of securing complex ecosystems. Discover the importance of coordinated disclosure, addressing knowledge gaps in cybersecurity, and implementing best practices for securing smart devices. Gain insights on partnering with stakeholders, managing false positives, and navigating the complexities of software decay and lifecycle management in embedded systems.