Threatpost Attack Stories 2021 (TAS21)

This dataset was created by gathering "attack stories" related to IoT devices from the cybersecurity news site Threatpost. Because there aren't many databases of IoT vulnerabilities, we used Threatpost as an index to recent vulnerabilities, which we then researched using a variety of sources, like academic papers, blog posts, code repositories, CVE entries, government and vendor advisories, product release notes, and whitepapers. Specifically, we looked at articles between January 2020 and June 2021 that were categorized as IoT and/or Vulnerabilities and sorted out which ones were related to vulnerabilities on IoT devices. The data includes such attributes as devices affected, location of the vulnerability within the device, disclosure timeline dates, CVEs, and CWEs. The purpose of the dataset is to provide a basis for understanding recent IoT vulnerabilities and their causes.