Curated threat intel for security leaders
threat 2026-08-20

"Dahua IP Cameras Compromised in Ukraine and Russia"

Hackers targeted 14,000 Dahua IP cameras across Ukraine and Russia, exploiting vulnerabilities in the cameras' firmware.

Bottom line: CISOs must prioritize IP camera security and monitor for potential vulnerabilities.

What's happening: Operation CameraSwarm, a coordinated attack, targeted Dahua IP cameras across multiple countries, focusing on Russian and CIS telecom netblocks. Chinese threat actor "Fancy Bear" was linked to the attack, which began in mid-March 2023. The compromised cameras were not patched with the latest firmware, leaving them vulnerable to exploitation.

What to do: Security leaders should immediately check their Dahua IP cameras for firmware updates and ensure they are patched against known vulnerabilities, including CVE-2022-23545 and CVE-2022-23639.

Source: SecurityWeek