PTZOptics NDI and SDI Cameras Attack

FortiGuard Labs observed active exploitation attempts against PTZOptics cameras (firmware before 6.3.40), tied to CVE-2024-8956 (weak authentication exposing usernames and MD5 password hashes) and CVE-2024-8957 (insufficient input sanitization in the ntp_addr field allowing remote code execution). Telemetry indicates attacks affecting roughly 4,000 devices, mainly in the United States, Japan, and South Korea; FortiGuard recommends downloading vendor firmware updates to mitigate the issues.