[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuVUPuxDtrQ8s2JoSdtZvpx2ZnAKYhmNu-GnjNpBROHs":3},{"article":4,"iocs":52,"watch_terms":53,"solutions":54,"lesson":114},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"477db946-7029-4eaf-8850-15405e310dd2","Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works","hackers-got-inside-a-flock-camera-its-data-shows-how-the-system-really-works-513c0b","A hacker collective pulled down a Flock camera and dumped its data. The files included thousands of videos and logs showing that the device captured 1.6 million images of 50,000 vehicles in 21 days.","A hacker collective named stegan0gram successfully compromised a Flock Safety camera, extracting its data including millions of vehicle images and logs. They were able to copy the device's storage and recover an encryption key, providing an unprecedented look into the system's operations, which detect both vehicles and people. The group aims to publish details on their methods to encourage others to replicate their actions.","Hackers accessed Flock camera data, revealing system operations and capturing millions of vehicle images.","https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fhackers-flock-camera-data-shows-how-system-works\u002F","https:\u002F\u002Fmedia.wired.com\u002Fphotos\u002F6aa9a85e5f699411f4e1b648\u002Fmaster\u002Fpass\u002FSecurity_HackersGotInsideaFlockCamera-ezgif.com-video-to-gif-converter.gif","2026-09-16T10:30:00+00:00","2026-09-16T12:00:11.955738+00:00",8,[17,20,23,26],{"name":18,"type":19},"Flock Safety","vendor",{"name":21,"type":22},"stegan0gram","threat_actor",{"name":24,"type":25},"Flock camera","product",{"name":27,"type":28},"Android","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":29,"icon":31,"name":32,"slug":33},null,"Breaches","breaches",[35,40,42,47],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":41},{"id":29,"icon":31,"name":32,"slug":33},{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":48},{"id":49,"icon":31,"name":50,"slug":51},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,24],{"controls":55,"vendors":113},[56,84],{"slug":57,"name":58,"problem":59,"products":60},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[61,68,76],{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":63,"url":66,"description":67},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"slug":85,"name":86,"problem":87,"products":88},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",[89,97,105],{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"thales","Thales","\u002Fvendor-logos\u002Fthales.png","luna-hsm","Thales Luna HSM","https:\u002F\u002Fcpl.thalesgroup.com\u002Fencryption\u002Fhardware-security-modules","Hardware security modules for protecting cryptographic keys.",{"vendor_slug":106,"vendor_name":107,"vendor_logo":108,"product_slug":109,"product_name":110,"url":111,"description":112},"utimaco","Utimaco","\u002Fvendor-logos\u002Futimaco.png","utimaco-hsm","Utimaco General Purpose HSM","https:\u002F\u002Futimaco.com\u002Fdata-protection\u002Fgp-hsm","Hardware security modules for key generation, storage and cryptographic operations.",[],{"slug":115,"title":116,"body":117,"framework_refs":118,"framework_notes":130},"physical-camera-compromise-exposes-millions-of-license-plate-images-and-encryption-keys","Physical Camera Compromise Exposes Millions of License Plate Images and Encryption Keys","Hackers physically accessed a Flock Safety surveillance camera and extracted its onboard storage, recovering an encryption key and millions of vehicle and pedestrian images — data that was never intended to be accessible at the device level. The root cause lies in poor device hardening: encryption keys stored alongside the data they protect offer no real security, and physical access to the device yielded full access to sensitive records. This matters because surveillance infrastructure operates at the intersection of physical and cyber security, and a compromise of one camera can expose the operational logic and data of an entire network. The incident also reveals that these systems collect far more data than publicly disclosed, raising serious privacy and civil liberties concerns.",[119,120,121,122,123,124,125,126,127,128,129],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 3: Data Protection","CIS Control 12: Network Infrastructure Management","NIST SP 800-82: Guide to Industrial Control Systems (ICS) Security","NIST CSF PR.DS-1: Data-at-rest protection","NIST CSF PR.AC-3: Remote access management","NIST SP 800-53 SC-28: Protection of Information at Rest","NIST SP 800-53 PE-3: Physical Access Control","GDPR Article 25: Data Protection by Design and by Default","GDPR Article 32: Security of Processing","ETSI EN 303 645: Cybersecurity for Consumer IoT Devices",{}]