Merchants of Doh! Cameras, DVRs, NAS Fall Down on Security

Multiple widespread security flaws were disclosed in hundreds to thousands of IP cameras, DVRs/NVRs and Western Digital My Cloud NAS devices—including backdoor accounts, default passwords, web server credential leaks, command injection, buffer overflows and CSRF—allowing attackers to gain remote control or access without authentication; vendors have issued patches or advisories while researchers report large numbers of affected devices and evidence of active abuse.