Skip to content
Over 14,000 Dahua Cameras Compromised in Ukraine and Russia

Over 14,000 Dahua Cameras Compromised in Ukraine and Russia

First seen 21 Aug 2026, 16:48 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •August 22, 2026 at 16:19 UTC
  • •More than 14,000 Dahua cameras were compromised, primarily in Ukraine and Russia.
  • •The attack exploited vulnerabilities from 2021 and used shared SDK credentials.
  • •89% of the affected cameras did not require a password, highlighting severe security flaws.

Between June 17 and July 22, 2026, a threat actor exploited vulnerabilities in over 14,000 Dahua cameras, primarily in Ukraine and Russia. The attack utilized flaws from 2021 and shared SDK credentials, with 89% of the compromised devices lacking passwords. This incident highlights significant security weaknesses in the deployment of these cameras, impacting critical surveillance systems in the region. The exposure of a directory containing sensitive information facilitated the attack, underscoring the need for enhanced security measures. The incident lasted for five weeks, raising alarms about the potential for further exploitation of similar vulnerabilities in the future.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 50d ago How this analysis works

Timeline

2026-06-17
Attack on Dahua cameras began
A threat actor started exploiting vulnerabilities in Dahua cameras, affecting thousands of devices.
Ciberseguridadlatam
2026-07-22
Attack on Dahua cameras ended
The exploitation of over 14,000 Dahua cameras concluded after five weeks of control by the threat actor.
Ciberseguridadlatam
2026-08-21
Incident reported
Ciberseguridadlatam published details about the compromised Dahua cameras, revealing the extent of the attack.
Ciberseguridadlatam

More articles in this cluster (2)

Extracted Entities (4)

1 / 3