CERT-UA warns that cloud-connected cameras can be at risk without being directly reachable online, and urges owners to disable unneeded remote access and update device software.
Ukraine’s Computer Emergency Response Team (CERT-UA) has warned that attackers accessed video feeds, changed settings and created unauthorized accounts on Dahua surveillance cameras and digital video recorders. The agency says devices with cloud-based remote viewing enabled can be at risk even when they are not directly accessible from the internet.
The alert was issued last week and detailed by The Hacker News on October 27. Known Dahua login flaws identified in the warning had also appeared in two earlier camera-compromise campaigns documented by Hunt.io.
The alert identifies Easy4IP as the main initial access route. This peer-to-peer (P2P) platform lets owners view Dahua cameras and recorders remotely through a smartphone app or browser, using a device’s serial number or QR code to connect.
CERT-UA says the serial numbers follow predictable patterns. Attackers can guess large numbers of identifiers and check whether devices are connected to the cloud without triggering limits on repeated attempts or lockouts. Keeping a serial number private is therefore not enough to make a device secure.
Finding a device and getting past its login checks are separate steps. The alert says attackers gain access through weak or already-known passwords, or flaws in outdated firmware—the software built into a device. CVE-2021-33044 and CVE-2021-33045 allow attackers to bypass normal login checks.
CERT-UA has not disclosed the targets, attack dates, number of affected devices or perpetrators. The two earlier Hunt.io campaigns provide context for the methods, not a device count or attribution for this alert.
The W27 keeps the Galaxy Z Fold 8 Ultra’s core hardware, with dark-red or dark-blue finishes, golden accents and 16GB of working memory in both storage versions.
2 min
The agency identifies unknown accounts and unauthorized settings changes as signs of compromise. It also points to audit logs—records of device activity—showing authentication through the manufacturer’s native protocol from a local address as a sign of P2P access.
To reduce the risk, CERT-UA recommends three changes:
The satellite operator expects access to more than twice OneWeb’s current bandwidth in return for spending in 2027–2034, with initial IRIS² services expected from 2030.
3 min
The black, gold and green edition follows September’s sold-out preorders. Nintendo’s replenished launch-day stock also quickly sold out.
1 min
