Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Between June 17 and July 22, 2026, hackers compromised over 14,500 Dahua IP cameras, primarily in Ukraine and Russia, in a campaign dubbed CameraSwarm. The attackers exploited vulnerabilities, brute-forced logins, and utilized offline recovery codes from camera serial numbers. Hunt.io discovered the...
A human attacker exploited CVE-2026-39987, a pre-authentication remote code execution vulnerability in Marimo notebooks, achieving a rapid transition from an open WebSocket to SSH access in just eight seconds. The attacker utilized a hand-rolled Python toolkit, bypassing detection mechanisms designe...
A Russian-speaking operator has been identified using a custom Docker project named camview to exploit and stream IP cameras in Ukraine. The tool, built with FastAPI, wraps the open-source Ingram scanner and employs a 3,811-entry dictionary to brute-force camera credentials over HTTP and RTSP. The o...
