The National Cyber Directorate issued an urgent warning to homeowners with security cameras and business owners to immediately change their camera access passwords on Friday morning.
"The enemy may use home cameras for espionage and detecting vulnerabilities," the Directorate’s official statement cautioned. The alert emphasized that cameras that are improperly configured could present significant security risks, potentially exploited by Iran and its allies for real-time intelligence gathering.
According to the Directorate, a common issue lies in poorly secured camera installations, even when carried out by professionals. Often, for convenience, the camera’s IP address is exposed to the network, while the username and password remain set to default values.
As a result, simply identifying a camera’s IP address, searching for the manufacturer online, and in some cases, gaining access, could compromise the camera without any additional protection.
The security risks associated with such lapses are clear. Unsecured cameras could serve as valuable intelligence assets for hostile actors, frequently without the owners’ knowledge.
While this constitutes a breach of privacy under normal circumstances, in times of conflict or national emergency, it presents a severe threat to national security.
Steps to secure your camera
The first step is to change the password. Replace the default password with a strong, unique one. This can be done in the user interface of the camera's management app.
The second step is to enable two-factor authentication. If the camera’s management interface supports it, add an additional layer of security by requiring a second code alongside your password.
Third, enable software updates. Ensure automatic security updates are configured through the camera’s management interface.
Finally, set up activity alerts. Configure activity logs and set up alerts for abnormal actions, such as user logins, setting changes, or attempts to tamper with the camera.
For those who encounter technical difficulties, it is advisable to seek professional assistance. The Directorate also stresses that if any suspicious activity or intrusion is detected, individuals can contact the National Cyber System's 24/7 emergency hotline at 119.