A U.S. security expert says he has identified ways to remotely attack high-end surveillance cameras used by industrial plants, prisons, banks and the military, something that potentially would allow hackers to spy on facilities or gain access to sensitive computer networks.
Craig Heffner, a former software developer with the National Security Administration who now works for a private security firm, said he discovered the previously unreported bugs in digital video surveillance equipment from firms including Cisco Systems, D-Link Corp and TRENDnet.
“It’s a significant threat,” he said in an interview. “Somebody could potentially access a camera and view it. Or they could also use it as a pivot point, an initial foothold, to get into the network and start attacking internal systems.”
He plans to demonstrate techniques for exploiting these bugs at the Black Hat hacking conference, which starts July 31 in Las Vegas.
Heffner, who now works as a vulnerability researcher with a firm known as Tactical Network Solutions in Columbia, Maryland, said that he has discovered hundreds of thousands of surveillance cameras that can be accessed via the public Internet…
Cisco, D-Link and TRENDnet said they would take any appropriate action that might be needed to secure their equipment after the Black Hat presentation.
Isn’t that thoughtful?
I thought every geek watched PERSON OF INTEREST? You’d suppose since the hacking of security cameras has been a significant, recurrent portion of every episode of the series – that companies making their profits from security camera hardware might have checked the integrity of their systems by now.
Or not. They could just rely on the government to keep them safe.