30
60
Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua Cameras
One actor compromised over 14,000 Dahua cameras in Ukraine and Russia using brute-force, authentication bypass, and cloud relay serial-number abuse.
Hunt.io reconstructed Operation CameraSwarm from an exposed operator directory, revealing one actor compromised 14,000+ Dahua cameras between June 17 and July 22, 2026, mainly in Ukraine and Russia. The toolkit included a brute-force engine, a two-flaw 2021 authentication-bypass chain planting a persistent backdoor account on 1,923 cameras, and abuse of Dahua's cloud relay where 89.4% of probed serials returned open, unauthenticated channels. A SalatStealer Windows binary and Defender-disabling PowerShell script were staged on the same server but appear unrelated to the camera campaign.
55
ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More
60
30
Exploring malicious Windows drivers (Part 2): the I/O system, IRPs, stack locations, IOCTLs and more
55
60
30
30
55
60
30
60
57
30
60
BlackBerry partners with NXP Semiconductors to help companies prepare for post-quantum cyber attacks
55
42
Microsoft patches 80+ vulnerabilities, six flagged as "more likely" to be exploited
60
57
55
45
55
55
60
30
45
42
60
42
42
57
60
30
45
47
60
45
30
47