Dahua IP Cameras Hijacked via P2P Access and Auth Weaknesses

Tue, 27 Oct 2026 16:34:51 +0000

Engineer — Plan: Dahua cameras are widely deployed beyond Ukraine; disable P2P cloud-access features, audit devices for unauthorized accounts, and verify authentication is hardened against default or weak credentials — no KEV/PoC signals but CERT-UA confirms active exploitation.
SOC/IR — Learn: CERT-UA confirms active compromise of Dahua devices but the summary provides no IOCs, TTPs, or specific actor attribution to build detections from; monitor for a follow-on advisory with indicators before investing hunt time.
Leader — Skip

Camera-Hijacking on CuraSec