Security News

Cybersecurity news aggregator

MEDIUM News SC Media

Thousands of live cameras stream with no authentication, exposing security risks

  • What: Thousands of live cameras stream without authentication
  • Impact: Exposes privacy risks and potential for unauthorized access
Read Full Article →

IoT Thousands of live cameras stream with no authentication, exposing security risks June 12, 2026 Share By SC Staff (Adobe Stock) As reported by Security Affairs, a significant number of internet-connected cameras are found to be streaming live video without any form of authentication, posing a serious privacy and security risk. The investigation by Mysterium VPN highlights that cheap, budget devices are the primary culprits, often lacking basic security measures. A recent analysis by Mysterium VPN revealed that over 21,000 live cameras are accessible online without any login credentials or security barriers. While major brands like Hikvision and Dahua have largely addressed this vulnerability by enforcing mandatory password setup, the issue persists predominantly with low-cost devices. These budget cameras, often utilizing protocols like RTSP, act as open conduits, broadcasting feeds to anyone who discovers their IP address. The report indicates that Japan and the United States have the highest number of such exposed feeds, largely due to residential broadband connections. This lack of security is not a result of hacking but rather a failure to implement basic security practices, such as setting unique passwords. The findings echo the vulnerabilities exploited by the Mirai botnet in 2016, which leveraged default credentials. Despite regulatory efforts to ban default passwords, millions of older devices remain vulnerable, potentially revealing sensitive information about individuals and their routines to strangers. Source: Security Affairs SC Staff Related IoT Researcher finds Bright Data iOS SDK turns smart TVs into web-scraping nodes SC Staff June 8, 2026 Bright Data, formerly Luminati, operates a large residential proxy network, with a portion sourced from an SDK embedded in free applications. IoT Dragos acquires Phosphorus to enhance industrial cybersecurity SC Staff June 1, 2026 The acquisition aims to integrate Phosphorus' platform, which identifies connected devices, assesses exposures, and automates remediation, into Dragos' offerings. IoT Thousands of Yarbo robotic lawnmowers exposed with identical default passwords SC Staff May 18, 2026 Security researcher Andreas Makris discovered that Yarbo robotic lawnmowers, which operate in over 30 countries and are equipped with cameras, GPS, and AI mapping, used the same default passwords. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe You can skip this ad in 5 seconds

Share this article