Threat Actors Intensify Targeting of IP Cameras Across the Middle East Amid Ongoing Conflict

**Executive summary:** Researchers observed a coordinated, state‑linked campaign from late February 2026 that scanned for and exploited known Hikvision and Dahua camera vulnerabilities to hijack IP cameras across Israel, Qatar, Bahrain, Kuwait, the UAE, Cyprus and Lebanon; analysts assess the activity supports Iranian operational surveillance for battle damage assessment and targeting rather than financial gain.