Unencrypted protocol traffic (plaintext MQTT, HTTP) - Replay attacks on device commands - Man-in-the-middle on wireless protocols - Protocol fuzzing for crash/exploit discovery - Radio frequency jamming and injection