String lights are flexible strands of bulbs or LEDs used for casual decorative lighting. In security work, the term matters because modern string lights are sometimes part of a connected environment: they may run through USB power, smart plugs, mobile apps, or home automation hubs. That makes them more than decoration; they can be a small but real IoT asset with its own firmware, network access, and supply-chain risk.
Attackers may target or abuse connected lighting to find weak credentials, expose insecure controllers, or pivot from an unmanaged device into a broader network. Defenders treat smart lighting like other endpoint hardware: inventory it, isolate it on a separate network, update firmware, and disable remote features that are not needed. Even simple string lights can matter when they create a hidden path into a system.