Hunting Cameras in the Dark: Finding Internet Cameras Before Adversaries Do

This report describes increased malicious activity against internet-exposed IP cameras following the 2026 Iran conflict, documents vendor-specific CVEs and exploitation vectors, and demonstrates how researchers and attackers can use Censys queries to discover unauthenticated or vulnerable camera feeds; it also cites state-affiliated targeting (Iranian operators, alleged Israeli access, and GRU usage) to illustrate the operational intelligence value of exposed cameras.