Ukraine

Security incidents tagged Ukraine. Newest first.

1 Ukraine incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

HighPartly patched
Dahua cameras and recorders hijacked through Easy4IP P2P cloud access, CERT-UA warns
Ukraine's CERT-UA warns that attackers are taking over Dahua IP cameras, NVRs and DVRs: they watch the video stream, change device settings and add their own accounts. The main way in is Dahua's P2P cloud access (Easy4IP), which reaches devices by serial number through the manufacturer's cloud, bypassing NAT and firewalls. Serial numbers follow a predictable pattern, so attackers appear to guess them in bulk, meaning any device with P2P turned on is at risk even if it is not exposed to the internet. Logins are then beaten with weak or default passwords or, on outdated firmware, the 2021 authentication bypasses CVE-2021-33044 and CVE-2021-33045. The methods match Hunt.io's Operation CameraSwarm, which compromised 14,530+ Dahua devices in Ukraine and Russia between June 17 and July 22, 2026 and left a backdoor account on 1,923 of them, though no link between the two has been shown. Turn off P2P/Cloud Access if you don't need it, keep cameras off the open internet, remove unknown accounts and update firmware.
Dahua IP cameras, NVRs and DVRs (Easy4IP P2P cloud access)Since Oct 26, 2026updated Oct 27, 2026, 07:32 UTC

Dahua cameras and recorders hijacked through Easy4IP P2P cloud access, CERT-UA warns
The Hacker News
@TheHackersNews
🚨 Dahua IP cameras compromised in Ukraine. CERT-UA confirms attackers gained access to video feeds, changed device settings, and created rogue accounts. The attacks exploit Easy4IP P2P access alongside weak passwords or authentication bypass flaws. Full details ↓ t.co/6iQsjw6avS
Oct 27, 2026view on x