Insecure Military ICS Infrastructure Threatens Security

Cyble Research & Intelligence Labs observed a threat actor publicly claiming access to military-grade thermal imaging cameras and associated SCADA assets in North Africa; investigators found hundreds of the same devices internet-exposed (≈607 TI cameras, 39 SCADA instances) with issues including default/hardcoded credentials, information disclosure, and unauthenticated RCE. The report highlights active reconnaissance/exploitation via Modbus and Metasploit, the risk of OT network penetration and physical-security consequences for military/LEA installations, and recommends segmentation, credential management, patching, and vendor supply-chain controls.