Black & White Path

Aug 20, 2026 · Information Security

Dahua Cameras Compromised: 14,500 Devices Hijacked via Three Critical Vulnerabilities

In a 35‑day campaign dubbed CameraSwarm, attackers breached over 14,500 Dahua IP cameras using default‑exposed port 37777, exploiting CVE‑2021‑33044/45 with a persistent p2pwn backdoor, and leveraging a cloud SDK design flaw to gain unauthenticated remote access, especially targeting Ukraine and Russia.