The U.S. Department of Justice (DoJ) announced the disruption of two hacking platforms, QScan and QTRouter, operated by the Chinese state-sponsored group…
QScan is a tool used by QTFY to scan and automatically infect IoT devices worldwide, adding them to the QTRouter network for…
Dahua IP cameras are network surveillance devices that were targeted in Operation CameraSwarm. They are affected by CVE-2021-33044 and CVE-2021-33045, which allow…
CVE-2021-33044 is an authentication-bypass vulnerability in Dahua IP cameras and related products. Attackers can bypass device identity authentication by constructing malicious data…
CVE-2021-33045 is an authentication-bypass vulnerability in Dahua IP cameras. It involves a loopback login request using the 127.0.0.1 address. The flaw allows…
Dahua Technology is a leading provider of video surveillance products and services. The company was the target of Operation CameraSwarm, which exploited…
Quectel is a leading manufacturer of cellular modules used in IoT devices. Several of its modules were found vulnerable to the SIM…
Autel is a manufacturer of EV chargers. A commercial Autel charger was used in the research to demonstrate code execution via a…
The Zbtlink AX3000 is a router model that was analyzed by VulnCheck and found to contain the ENDLESSDOORS backdoor. It runs a…
Zhejiang Fengwo IoT Technology Co., Ltd. is a mainland China company founded in 2019, attributed by Bitsight to the Fuyao ad fraud…