Hackers target years-old surveillance camera security flaw

A half-a-decade old vulnerability in certain digital video recording (DVR) devices has suddenly become interesting for threat actors to exploit again after the number of observed attacks surges, researchers have warned. 

Cybersecurity researchers from Fortinet’s FortiGuard Labs have spotted an uptick in attacks targeting TBK DVRs using a publicly available proof-of-concept to exploit a vulnerability tracked as CVE-2018-9995. This is a vulnerability first discovered back in 2018, which allows remote attackers to bypass authentication and thus gain access to the target network.