Scans for Hikvision Intelligent Security API, (Sun, Jul 19th)

The report describes detection of new reconnaissance scans against Hikvision's OPEN Intelligent Security API (ISAPI), with scanners probing the /ISAPI/System/status endpoint to fingerprint devices and potentially brute-force credentials. It outlines authentication methods (Basic/Digest), optional AES encryption whose key derivation exposes weaknesses when Basic auth is used, and advises not to expose these cameras to the Internet.