Plan
active
Dahua IP Cameras Hijacked via P2P Access and Auth Weaknesses
- Engineer — Plan: Dahua cameras are widely deployed beyond Ukraine; disable P2P cloud-access features, audit devices for unauthorized accounts, and verify authentication is hardened against default or weak credentials — no KEV/PoC signals but CERT-UA confirms active exploitation.
- SOC/IR — Learn: CERT-UA confirms active compromise of Dahua devices but the summary provides no IOCs, TTPs, or specific actor attribution to build detections from; monitor for a follow-on advisory with indicators before investing hunt time.
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.