Scans for Hikvision Intelligent Security API, (Sun, Jul 19th)
Summary
The SANS Internet Storm Center is observing internet-wide scans targeting the Intelligent Security API of Hikvision cameras. This follows a long history of reported vulnerabilities in Hikvision products, which are frequently targeted by automated scans.
IFF Assessment
The article highlights ongoing scanning activity against Hikvision devices, indicating they remain attractive targets for attackers due to past vulnerabilities, posing a risk to defenders.
Defender Context
Defenders should be aware that Hikvision devices continue to be scanned and potentially exploited, especially if they are running older firmware or have unpatched vulnerabilities. Regular vulnerability scanning and prompt patching of network-connected devices like security cameras are crucial to mitigate risks.