The unforeseen risks of exposed IP cameras

The report highlights a cybersecurity advisory from Dutch intelligence that Russian state actors are systematically exploiting internet-connected IP cameras—many civilian-owned—to surveil NATO and Ukrainian military movements. It cites Censys data indicating tens of thousands of exposed cameras, describes common attack vectors (default credentials, UPnP, exposed firmware vulnerabilities and vendor relays), and advises practical mitigations such as discovery, disabling internet streams/UPnP, changing defaults, patching, network segmentation, and VPN access; the vendor runZero is promoted as a discovery and visibility solution.