Hackers exploit 5-year-old unpatched flaw in TBK DVR devices
Hackers are actively exploiting an unpatched 2018 authentication bypass vulnerability in exposed TBK DVR (digital video recording) devices. [...]
Video is a format for reporting and explaining cyberattacks, vulnerabilities, security research, and defensive practices.
Search across headline titles and summaries.
Background for this topic.
Video is digitally encoded moving images, often accompanied by audio, subtitles, metadata, or live-streaming data. In security contexts, the tag commonly covers video files and delivery systems, including conferencing, surveillance, media platforms, cameras, encoders, storage, and playback software.
Security concerns include unauthorized viewing or disclosure of recordings, interception of inadequately protected streams, and tampering that changes the evidentiary or operational value of footage. Video systems should apply access controls, encryption in transit and at rest, secure authentication, retention limits, and audit logs. Internet-connected cameras, encoders, and players also require timely vulnerability management because compromise can expose footage or provide access to connected networks. Privacy obligations may apply when recordings identify people or capture sensitive locations; incident response should therefore address access revocation, preservation of relevant footage and logs, and notification requirements where applicable.
Hackers are actively exploiting an unpatched 2018 authentication bypass vulnerability in exposed TBK DVR (digital video recording) devices. [...]
The ALPHV ransomware operation, aka BlackCat, has published screenshots of internal emails and video conferences stolen from Western Digital, indicating they likely had continued access to the company's systems even as the company responded to the breach. [...]