[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9kF2nfBdcY3qm7_BDX5_7aBna7rBJh1lVvzwrvif67I":3},{"article":4,"iocs":54,"watch_terms":55,"solutions":56,"lesson":146},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":33,"category":34,"article_tags":38},"5cdd9598-47b4-45b1-a801-f92d1c641661","LABScon25 Replay | Are Your Chinese Cameras Spying For You Or On You?","labscon25-replay-are-your-chinese-cameras-spying-for-you-or-on-you-89f783","Marc Rogers and Silas Cutler expose how cheap smart home devices conceal a shadow supply chain of shell companies, firmware flaws, and foreign data routing.","Marc Rogers and Silas Cutler presented research at LABScon 25 revealing how cheap Chinese smart home devices (video doorbells and security cameras) sold under rotating brand names like Eken and Tuck conceal a complex shadow supply chain involving shell companies and government-subsidized Allwinner semiconductors. Analysis uncovered hardcoded root passwords, inadequate security patches, and metadata\u002Fvideo routing through Hong Kong and China servers despite claims of local processing. The researchers traced networks of shell entities designed to evade regulatory oversight, describing patterns similar to malware distribution campaigns.","Researchers expose shadow supply chain of Chinese smart cameras with firmware flaws and foreign data routing.","https:\u002F\u002Fs1.ai\u002FLC25-RC","https:\u002F\u002Fwww.sentinelone.com\u002Fwp-content\u002Fuploads\u002F2026\u002F04\u002FLC25-Rogers-Cutler.jpg","2026-04-22T22:57:54+00:00","2026-04-22T23:00:15.524+00:00",8,[17,20,22,25,27,30],{"name":18,"type":19},"Marc Rogers","threat_actor",{"name":21,"type":19},"Silas Cutler",{"name":23,"type":24},"Eken video doorbell","product",{"name":26,"type":24},"Tuck video doorbell",{"name":28,"type":29},"Allwinner","vendor",{"name":31,"type":32},"IoT security cameras","technology","d6f63bb8-0801-486a-be7f-171400700454",{"id":33,"icon":35,"name":36,"slug":37},null,"IoT\u002FOT","iot-ot",[39,44,49],{"category":40},{"id":41,"icon":35,"name":42,"slug":43},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":45},{"id":46,"icon":35,"name":47,"slug":48},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":50},{"id":51,"icon":35,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[28,23,26],{"controls":57,"vendors":145},[58,87,116],{"slug":59,"name":60,"problem":61,"products":62},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":88,"name":89,"problem":90,"products":91},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",[92,100,108],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"outpost24","Outpost24","\u002Fvendor-logos\u002Foutpost24.png","outpost24-easm","Outpost24 EASM","https:\u002F\u002Foutpost24.com\u002Fproducts\u002Fexternal-attack-surface-management\u002F","Discovery and risk assessment of internet-facing assets.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":109,"vendor_name":110,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","attack-surface-intelligence","Attack Surface Intelligence","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fattack-surface-intelligence","External attack surface management that discovers internet-facing assets and prioritises their exposures.",{"slug":117,"name":118,"problem":119,"products":120},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[121,129,137],{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",{"vendor_slug":138,"vendor_name":139,"vendor_logo":140,"product_slug":141,"product_name":142,"url":143,"description":144},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",[],{"slug":147,"title":148,"body":149,"framework_refs":150,"framework_notes":156},"chinese-smart-home-devices-hide-surveillance-infrastructure-through-shell-companies","Chinese Smart Home Devices Hide Surveillance Infrastructure Through Shell Companies","Security researchers exposed how cheap Chinese smart home cameras and doorbells sold under rotating brand names conceal a complex shadow supply chain involving shell companies and government-subsidized components. These devices contain hardcoded root passwords, inadequate security patching, and secretly route video data through China despite marketing claims of local processing. The shell company networks are designed to evade regulatory oversight using tactics similar to malware distribution campaigns. This demonstrates how nation-state actors can weaponize consumer IoT supply chains for surveillance while maintaining plausible deniability through corporate obfuscation.",[151,152,153,154,155],"CIS Control 2 (Inventory Management)","CIS Control 12 (Network Infrastructure Management)","NIST SP 800-161 (Supply Chain Risk Management)","NIST Cybersecurity Framework SC.1 (Supply Chain)","ISO 27036 (Supplier Relationships Security)",{}]