InfoSecBulletin Cybersecurity for mankind
CISA warned about two important vulnerabilities in Dahua IP cameras and related products. Though these vulnerabilities were discovered in 2021, CISA has now added them to its catalog “based on evidence of active exploitation.”
CISA stated that Dahua IP cameras and related products have authentication bypass vulnerabilities. Attackers can bypass device identity authentication by creating harmful data packets.
Delay patching leaves about 50,000 Fortinet firewalls to zero-day attack
Daily Security Update Dated: 21.01.2025
126 Linux kernel Vulns Allow Attackers Exploit 78 Linux Sub-Systems
CERT-UA alerts about “security audit” requests through AnyDesk
Oracle Critical Pre-Release update addressed 320 flaw
OWASP Reveils Top 10 Smart Contract Vulnerabilities for 2025
Multiple Azure DevOps Vulns Allow To Inject CRLF Queries & Rebind DNS
Intel holds 22 employees from one Bangladeshi University
VPN Surge 1500% in USA after TikTok Shut Down
MITRE Launches D3FEND 1.0; The Milestone for Cybersecurity Ontology
CISA gave federal agencies until September 11th to “apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.”
According to the manufacturer’s website, the updated software is currently accessible through various methods.
In November 2022, the US Federal Communications Commission banned authorizations for Chinese telecommunications and video surveillance equipment, saying that Huawei, ZTE, Hytera, Hikvision, and Dahua are “deemed to pose a threat to national security.”
Previously, the UK surveillance watchdog warned about Chinese cameras. CISA advises organizations to reduce the risk of cyberattacks by promptly addressing identified vulnerabilities. Cybernews found lots of unprotected cameras in the US that anyone could access, including some in real-time.
Dahua is a well known camera company. However the US government banned some of their products from being sold in the US.
