Nuuo is a leading vendor of "trusted video management" tools used in conjunction with CCTVs deployed in sensitive applications like surveillance of "transport, banking, government, and residential areas."
By using a new zero-day bug dubbed "Peekaboo" by its discoverers at the security research firm Tenable, attackers can access Nuuo systems, and view, alter, and delete stored video -- they can also steal logins, passwords and other sensitive data from the systems. "Hundreds of thousands" of video cameras are connected to vulnerable systems worldwide.
The vulnerability has not yet been patched. A tool from Tenable will let Nuuo system owners determine whether they are vulnerable. Nuuo tools are sold under more than 100 brands, often bundled with cameras under "white label" arrangements.
Peekaboo specifically impacts the NVRMini 2 NAS and network video recorder, which acts as a hub for connected surveillance products. When exploited, the product permitted access to the control management system (CMS) interface, which further exposes credentials of all connected video surveillance cameras connected to the storage system.
Speaking to ZDNet, Gavin Millard, VP of threat intelligence at Tenable, said that organizations all over the world use Nuuo software, including in shopping centers, hospitals, banks, and public areas.
However, therein lies the problem -- as the software is also white labeled to over 100 brands and 2,500 camera product lines.
Hackers hijack surveillance camera footage with 'Peekaboo' zero-day vulnerability [Charlie Osborne/Zdnet]
Shardcore (previously) writes, "I took Godley & Creme's seminal 1985 video and sent it through a StyleGAN network."
Jon Cog writes, "For Christmas, mathematician Donald Knuth shared some great geeky fun. He revealed how for the last 57 years, he's been incorporating the digits of pi into the exercises of his computer programming books -- a whopping 1,700 times. And before long his annual 'Christmas Tree' lecture 'had turned into a kind of […]
Robbo sez, "As is my wont, I post on social media at this time of year John Lennon & Yoko Ono's Happy Xmas (War Is Over) official YouTube video. It is an anthem for peace and the end of war. This year it has been labelled as "inappropriate content" and requires viewers to sign in […]
You don’t need to be a climate scientist in order to know that the Earth is in serious trouble, but the good news is that you also don’t need to necessarily make any drastic changes to your lifestyle in order to do your part to help. This nOcean Wearable Reusable Silicone Straw will help you […]
When it comes to conquering that resolution list and hitting all of your goals in 2020, nothing is more important than getting a great night’s sleep every night so you can wake up feeling refreshed and extra productive. The CarbonIce: 7-in-1 Bacteria Protection & Cooling Pillow will help you do just that, and right now […]
It’s no secret that business leaders and project managers require a certain set of skills in order to outpace the competition and increase the overall efficiency of their company or team. The Lean Six Sigma Expert Training Bundle will take your managerial skills to the next level through training that will help you earn some […]